509 results about "Data decryption" patented technology

To share encrypted data more securely. After a pair of an identification token 131 and key disclosure permission information 134 transmitted from a first client terminal 102 is verified by a verification unit 106, a key registration unit 107 registers a record 122 including the key 133 and the key disclosure permission information 134 in a database 121 of a key sharing server 101 and transmits key identification information 135 for identifying the record to the first client terminal 102. The first client terminal 102 transmits data 139 including encrypted data 138 obtained by encrypting transmission data by using a cipher key 136 for data encryption after first processing output by a cipher key first processing unit 109, a cipher key 137 for data decryption after first processing output by the cipher key first processing unit 109, and the key identification information 135 obtained from the key registration unit 107, to a second client terminal 103. The second client terminal 103 makes an inquiry to a key disclosure unit 110 by using the key identification information 135 acquired from the received data 139 and an identification token 132 of the terminal itself. The key disclosure unit 110 acquires the pair of key 133 and key disclosure permission information 134 corresponding to the key identification information 135, from the database 121, and notifies, when the identification token 132 is included in a key disclosure permissible range indicated by the key disclosure permission information 134, the second client terminal of the key 133. The second client terminal 103 uses the notified key 133 to generate a cipher key 140 for data decryption after second processing on the basis of the cipher key 137 for data decryption after first processing acquired from the data 139 and uses the cipher key 140 for data decryption after second processing to execute decryption on the encrypted data 138 in the data 139.

The invention relates to the technical field of block chains, in particular to a supply chain data security sharing method based on a block chain. The method comprises the following steps: firstly, defining user roles and corresponding permissions in a supply chain system to generate an access control list; and then, collecting historical behavior data, access records and current system states of the requesting users, and adjusting roles and permissions of the users in real time by using predefined rules and a machine learning model. And then, based on the hybrid access control strategy, matching an access request of a user, generating an access decision, then generating an access operation instruction, executing an operation of data decryption or data encryption maintenance, and after the operation is completed, carrying out integrity check and consistency verification. And finally, collecting all record data generated in the access control process to optimize an updating mechanism of the access control list and realize continuous improvement and optimization. According to the invention, through dynamic adjustment of the access authority, the flexibility and efficiency of access control of the supply chain system are improved.

The invention provides a data access control method and device based on a block chain and improved CP-ABE, and belongs to the technical field of block chains. The method comprises the following steps: an authority generates key parameters including a system public key and a master key, and uploads the master key to a block chain; the user sends an attribute set and an identity label of the user to an authority, the identity label of the user is hidden, an attribute private key, a search private key, a conversion key and a recovery key are generated for the user, the conversion key is sent to the cloud server, and the attribute private key, the search private key and the recovery key are sent to the user, and the user comprises a data owner and a data visitor; the data owner carries out offline encryption, online encryption and index encryption on the file in sequence, and index information is linked; the data accessor performs data access; and the data accessor decrypts the data. According to the method, the problems in data storage and access control are effectively solved, the integrity of user data is protected, and the calculation burden of a data access user is reduced.

The invention discloses a data interaction method between industrial control systems of a DCS (Distributed Control System). The method comprises the following steps of 1, data acquisition and preprocessing, 2, data identification and classification, 3, data encryption and compression, 4, data transmission scheduling, and 5, data decryption and restoration. A self-adaptive data interaction frequency adjusting module arranged in each industrial control subsystem can automatically adjust the data interaction frequency according to the actual operation state of each control link in the subsystem, so that the data interaction frequency is tightly matched with the production requirement, the conditions of data congestion or incapability of meeting the real-time requirement and the like are avoided, and the production efficiency is improved. Compared with a traditional mode of fixed data interaction frequency, the method can better adapt to complex and changeable industrial production working conditions, and the flexibility and robustness of the whole industrial control system are improved.

Systems and methods are disclosed herein for a user to use a mobile device with a camera and a terminal device with a camera to manage and use passwords via QR (Quick Response) codes. The terminal device may generate and display a QR code for a user account or data. The user running a password manager app on the mobile device may scan the QR code of the user account or the QR code of the data to generate, store, and retrieve a password, and to display a QR code for the password. The terminal device may scan the QR code of the password to receive and use the password in sign-up, sign-in, data encryption, and data decryption procedures.

The invention provides a multi-party data collaborative exchange method, system and device, a medium and a product, and belongs to the technical field of data information processing, and the method comprises the steps: in a data exchange process, after identity authentication of participants of data exchange is passed in a trusted space, carrying out the dynamic verification of the access authority of the participants based on the real-time attributes of the participants; under the condition that the dynamic verification is passed, executing data exchange in the trusted space to obtain a data exchange result; sending the data exchange result to a data decryption party corresponding to the data user, so that the data decryption party decrypts the data exchange result; wherein the real-time attributes of the participants comprise real-time environment attributes, behavior attributes of the participants and static attributes of the participants. When the access permission is verified, transition from role-based access control to behavior-based access control is realized on the basis of dynamic combination of multi-dimensional attributes, and dynamic control on the access permission is realized on the aspect of finer granularity.

The invention discloses a hospital data integration and intelligent management system based on multi-source data, and particularly relates to the field of medical data management. Comprising a multi-source heterogeneous data acquisition layer, a self-adaptive data fusion engine, a privacy enhanced distributed storage layer, a multi-modal intelligent analysis center, a clinical decision enhancement module, a self-adaptive resource scheduling module and a full-process auditing and tracing module. Through cooperation of multi-modal model fusion, the clinical decision support accuracy is improved, the self-adaptive learning capability is achieved, the risk of data decryption leakage is avoided, 100% coverage of audit tracing and full-process operation of block chain evidence storage recording can be completed, the abnormal access detection rate is greatly improved, resource scheduling optimization is carried out, the equipment vacancy rate is reduced, and the method is suitable for large-scale popularization and application. A particle swarm optimization algorithm is combined with a digital twinborn technology, resource allocation is dynamically adjusted, scheduling is optimized through a genetic algorithm, invalid overtime is reduced, and the satisfaction degree of medical staff is improved.

The invention discloses a cross-chain data penetration type sandbox supervision method and system for ideal lattice attribute encryption on a block chain, and the method comprises the following steps: a third-party platform selects and builds a block chain, configures each node on an alliance chain, and forms a supervision sandbox; the third-party platform carries out sandbox initialization, namely, a public key and a main private key are generated according to an ideal lattice encryption algorithm; the data provider, the data user and the supervision mechanism register identities on the block chain; arranging cross-chain data to be shared by a data provider, and defining an access strategy of the cross-chain data; a data user initiates an access request to the data and submits the access request; after the data user obtains the access authorization, data decryption is carried out by utilizing the attribute private key and the decryption ciphertext of the data user; and the supervision mechanism monitors and checks the flow direction and access condition of the data in real time through the block chain in the supervision sandbox, and identifies an abnormal access mode through an integrated anomaly detection mechanism of the smart contract. According to the method, the privacy and the integrity of the cross-chain data are guaranteed.

The embodiment of the invention provides a cross-node data transmission method and a related device, which are applied to a relay node of a centerless network. Receiving a routing diffusion message sent by the adjacent node, authenticating the routing diffusion message according to node one-way authentication information in the routing diffusion message, and if an authentication result is that the routing diffusion message is sent by the adjacent node, establishing a corresponding relationship between the adjacent node and the challenge information; and a data message sent by the adjacent node is received subsequently, the data message is verified according to the challenge information corresponding to the node, if the data message is sent by the adjacent node, the data message is updated, a forwarding message is obtained, and the forwarding message is sent to the next hop node. In the process, two adjacent nodes do not need to be subjected to bidirectional authentication, the number of times of bidirectional authentication is reduced, the relay node forwarding the data message does not need to decrypt and encrypt the forwarded data, and energy consumption and transmission delay of the nodes are reduced.

The invention discloses an encrypted communication system and method based on cognitive multi-carrier spread spectrum, and belongs to the field of covert communication. The encryption communication system comprises a transmitting device and a receiving device. The transmitting device comprises a data encryption module, a constellation encryption modulation module, a multi-carrier spread spectrum module, a frequency hopping module and a cognitive power distribution module. The receiving device comprises a band-pass filtering module, a de-hopping frequency module, a de-spreading module, a constellation decryption demodulation module, a data decryption module and a coherent combination module. The data encryption module is divided into an interleaving coding unit and a double-rule reversible cellular automaton encryption unit. The cognitive power distribution module continuously scans a wireless electromagnetic environment and carries out real-time spectrum analysis to give power spectrum density results sensed under all frequency hopping frequency sets. According to the invention, continuous detection and dynamic response to the spatial frequency spectrum state can be realized, and the communication concealment, the anti-interference performance and the resource utilization efficiency in a complex electromagnetic environment are remarkably improved by utilizing the frequency spectrum hole.

This invention discloses a method and apparatus for protecting personal information security, belonging to the field of personal information security protection technology. The method includes: verifying the identity information of the information collector and determining whether the information collector has the necessary authorization based on the identity information; verifying the compliance of the collection request through a compliance check algorithm, and requesting authorization from the user after successful verification; encrypting the data in the data card using a data card encryption algorithm, and decrypting and connecting the data by an encryption center after the user authorizes access; monitoring the information collector's collection behavior in real time, and immediately issuing a warning to the user and terminating the collection behavior if abnormal collection behavior is detected; and regularly updating the compliance check algorithm and the data card encryption algorithm. This automatically identifies and verifies the legitimacy of the data collector, while strengthening the protection barrier for the user's data card, thereby improving the security and privacy of the user's personal information.

A hardware device (200) comprising an accelerator enclave (230) and a hardware security module (210), HSM, the HSM (210) including a first true random number generator, TRNG (211). The accelerator enclave (230) includes a second TRNG (231) and an accelerator (235). The HSM (210) is configured to: generate a first session key using the first TRNG (211); establish a first secure communication channel (CH1) with a cloud user using the first session key; receive an encrypted hardware configuration bitstream through the first secure communication channel (CH1); decrypt the hardware configuration bitstream; configure functional blocks in the at least one accelerator based on the hardware configuration bitstream. The accelerator enclave (230) is configured to: generate a second session key using the second TRNG (231); establish a second secure communication channel (CH2) with the cloud user using the second session key as encryption key; receive encrypted input data through the second secure communication channel (CH2); decrypt the encrypted input data; process the input data using the functional blocks.

The invention discloses a multi-level privacy protection data sharing method and system based on a block chain. The method comprises the following steps: S1, collecting and uploading original data; generating an encryption key by adopting a dynamic DNA coding sequence and combining an AES key expansion method, encrypting the collected data by utilizing the generated encryption key to obtain an encrypted file, and storing the encrypted file in a local storage library; s2, uploading the encrypted file in the step S1 to a distributed hash table of an IPFS distributed storage system through an SHA-256 hash function, and verifying and confirming a block by adopting a dynamic hybrid consensus mechanism; s3, accessing the block chain by the user through the smart contract, and executing space-time double-attenuation permission control; and S4, after the permission verification is passed, a decryption key is provided for the user, and the user performs data decryption by using an AES decryption algorithm and DNA reverse coding. According to the method, more accurate authority management can be provided, the security and compliance of data access are improved, and the method is suitable for management of large-scale data.

The present invention particularly relates to the technical field of data storage, and provides a data encryption method based on DNA encoding, a data decryption method based on DNA encoding, an intelligent terminal, and a medium. A solution comprises: encrypting acquired data to be encoded to obtain encrypted data to be encoded; on the basis of a pre-constructed DNA encoding table, performing DNA encoding on each byte of said encrypted data to obtain an initial base sequence, the DNA encoding table being constructed from four-base units and five-base units; and using a preset DNA sequence structure optimization rule to perform chaotic mapping adjustment and rearrangement on the initial base sequence to obtain an encrypted DNA sequence. According to the solution, the GC content in the encrypted DNA sequence can be kept in a balanced state, and the information density of the encrypted data is increased, such that the encryption effect is effectively improved, thereby reducing a storage space occupied by data to be encoded, improving the security and attack resistance of the data to be encoded, and thus guaranteeing the stability of the encrypted DNA sequence.

A mesh data decoding method, according to embodiments, may comprise the steps of: receiving a file including a bitstream including mesh data; decapsulating the file; and decoding the mesh data. A mesh data encoding method, according to embodiments, may comprise the steps of: encoding mesh data; encapsulating a file including a bitstream including the mesh data; and transmitting the file.

The invention discloses a data decryption method, an SSLVPN gateway, electronic equipment and a storage medium, and relates to the technical field of network security. The method is applied to an SSLVPN gateway, and comprises the following steps: receiving an SSLVPN protocol data frame from a client; wherein the SSLVPN protocol data frame carries hash values, serial numbers and acknowledgement numbers of encrypted data and plaintext data; searching whether first plaintext data corresponding to the hash value exists in a multi-level cache or not; wherein the multi-level cache is used for caching a plurality of hash values and plaintext data corresponding to the plurality of hash values respectively; if yes, acquiring the first plaintext data from the multi-level cache, and generating recombined second plaintext data according to the serial number, the confirmation number and the first plaintext data; and if not, performing decryption operation on the encrypted data to obtain the plaintext data, so as to reduce the number of repeated decryption operation times of the SSLVPN gateway.

The invention discloses a fine-grained access control system and method based on combination of CPK and attribute authority, a key generation management unit generates a public and private key pair corresponding to each attribute, and an attribute and strategy management unit defines a system attribute set and formulates an access control strategy. The user and authorization management unit distributes attribute information for a user and determines an access authority according to the attribute information, the data access and encryption unit combines a plurality of attribute public keys according to an access control strategy to form a combined public key, and the data decryption and verification unit verifies user authority attributes and combines private keys of corresponding attributes to form a combined private key; and the local resource and authority management unit stores and updates the attribute private key and authority information of the user side. Through matrix key generation, attribute public key combined encryption and private key combined decryption mechanisms, the problems of complex key management and low efficiency of a traditional ABE scheme are solved, dynamic attribute extension and a complex access strategy are supported, and the performance and expandability under large-scale user and attribute scenes are remarkably improved.

The invention relates to the technical field of communication security, and particularly discloses a communication terminal information acquisition method and system. The method comprises the following steps: acquiring an original data stream of a communication terminal, and generating a task queue through data source marking, dynamic load balancing and protocol packaging; performing desensitization, metadata annotation and lightweight encryption on the task data to form an encrypted data block; secure transmission is realized through transmission channel selection and quality monitoring; decrypting the received data to generate a time sequence database record; generating a rule update package based on invalid data detection and machine learning analysis; and finally, outputting a standardized data set through filtering and verification. According to the invention, efficient acquisition, secure transmission and intelligent processing of mass communication data are realized, and the real-time performance and accuracy of data processing and the load balancing capability of the system are effectively improved.

The invention relates to a data transmission method and device, computer equipment and a computer readable medium. The method comprises the following steps: generating a first private key and a first public key at a device end, and sending the first public key to a server and a client; encrypting the target transmission data at the device side based on the first public key, and sending the encrypted public key encrypted data to the server side; acquiring a symmetric key generated by the client based on the first public key, and performing secondary encryption on the public key encrypted data at the device end based on the symmetric key to obtain secondary encrypted data; and encrypting the symmetric key at the device side based on a second public key of the server side, and sending the encrypted symmetric key and the secondary encrypted data to the server side for data decryption. According to the method and the device, the data is encrypted and transmitted in a manner of combining public key encryption and dynamic symmetric key encryption, so that the data transmission security and the data transmission efficiency can be enhanced, and the technical problems of low data transmission security and low transmission efficiency existing in static encryption or single encryption are solved.

The present specification disclosure provides a method performed by a client in a communication system. More specifically, the present method comprises the steps of: receiving at least one synchronization signal from a server; receiving control information from the server; transmitting a homomorphic encryption secret key obtained by homomorphically encrypting a secret key used for data encryption and data decryption to the server; and transmitting encrypted data obtained by encrypting data on the basis of an encryption process repeated at least once, based on (i) the homomorphic encryption secret key and (ii) ROUND function, to the server. Each of the encryption process repeated at least once is performed on the basis of (i) a nonlinear layer for scrambling a part of the data encrypted in the corresponding encryption process and (ii) a linear layer for expanding a part of the scrambled data with regard to all the data. The nonlinear layer is randomly generated with regard to each of the encryption process repeated at least once.

The present application relates to a data encryption method and apparatus, a data decryption method and apparatus, and a storage medium. The data encryption method comprises: acquiring data to be transmitted of a data sending end, wherein the data sending end corresponds to a target platform; determining check data on the basis of the data to be transmitted and the target platform; determining a target encryption mode from a preset codebook on the basis of the data to be transmitted and the target platform; and on the basis of the target encryption mode and the check data, packing the data to be transmitted, so as to obtain target transmission data. In the present application, the check data can be determined on the basis of the data to be transmitted and the target platform corresponding to the data sending end, and the target encryption mode can be determined from the preset codebook on the basis of the data to be transmitted and the target platform, so that the encryption mode in an encryption process has certain randomness, the security of the target transmission data in a transmission process is improved, the data security is ensured, and the data reliability is improved by means of the check data.

The invention discloses a vehicle information safety protection system based on combination of a national cryptographic algorithm and a PUF (Physical Unclonable Function), which belongs to the field of vehicle information safety and encrypted communication, and comprises a response generation module used for generating a PUF response in a safety chip of a vehicle; the key derivation module is used for generating an encrypted master key through a key derivation function based on the PUF response, the vehicle owner identity and the random number nonce; the encryption and signature module is used for generating a ciphertext and carrying out digital signature on the ciphertext; the state monitoring module is used for monitoring the running state of the vehicle hardware; the key management module is used for triggering a failure operation of the encrypted master key when the state monitoring module detects that the hardware state is abnormal; and the decryption verification module is used for regenerating the PUF response and verifying the consistency of the generated key so as to execute data decryption. According to the method, hardware-level encryption protection of the vehicle data is realized through combination of the PUF and the national cryptographic algorithm, so that the safety of the vehicle owner data is protected in the whole life cycle of the vehicle.

The invention relates to the technical field of electric digital data processing, and discloses an intelligent campus network security protection system. A network data acquisition module of the system continuously monitors data transmission flow of a smart campus network environment to obtain an original data packet; the chaotic encryption engine encrypts an original data packet by using a key stream based on dynamic chaotic mapping, wherein the key stream is generated by multi-chaotic system switching and a random parameter distribution mechanism; the security protocol processing module converts the encrypted data packet into a format conforming to a network security protocol standard and transmits the encrypted data packet; the data decryption unit decrypts the received encrypted data packet; the security threat analysis module identifies and estimates potential network attack behaviors according to the decrypted plaintext data; and the protection strategy controller generates and executes a network security protection instruction according to the threat analysis result. The system can effectively protect the network security of the smart campus, resist various network attacks, and ensure the security of data transmission and storage.

The invention relates to the technical field of block chain identifier analysis, and discloses an industrial Internet of Things equipment trusted data interaction method and system based on block chain identifier analysis, and the method comprises the following steps: firstly generating a double-layer identifier of industrial equipment, taking a dynamic identifier in the double-layer identifier as a key seed, generating a public and private key pair, and storing the public and private key pair in a database; public key hash in the public and private key pair is stored in the alliance chain to obtain a digital identity card, identity verification is performed on a sender based on digital identity authentication, then the public key is used for encrypting data to be sent, a data interaction packet to be sent obtained through encryption is uploaded to the alliance chain, credibility verification is performed after uploading, and the data interaction packet to be sent is sent to the alliance chain. And finally, the receiving party carries out data decryption on the data interaction packet and sends data decryption feedback information to the sending party, and the identity authentication accuracy and the credible data verification accuracy based on the block chain identifier can be improved.

This invention introduces a suspended telecommunications system utilizing gas-lift hydrogen-filled balloons for global internet access and secure encrypted communication analysis. Utilizing this gas-lift technology, it deploys an airborne antenna platform stabilized by lightweight carbon fiber structures and secured by ground-based cables. The system integrates various antennas, including parabolic and Starlink dishes, dynamically adjusting for optimal signal reception from terrestrial and satellite sources. a high-frequency amplifier-dissipator and an AI-enhanced ground processing center facilitate the interception and decryption of encrypted communications, filtering potential security threats. The platform features motorized rotating plates, efficient power management, and GSM / Wi-Fi modules for enhanced connectivity. Constructed with composite materials for durability and minimal weight, it includes built-in lighting for visibility and emergency signaling. The system presents an innovative, cost-effective, and scalable solution for global telecommunication coverage and secure communication monitoring, addressing national and social security concerns while ensuring reliable access to digital information worldwide.

The invention discloses a data controlled sharing method and system based on attribute-based encryption, and the system is characterized in that a key generation center generates a system public key PK, a main private key MK and a user private key SK, a server gateway configures an access strategy, carries out the encryption processing of a data plaintext and the access strategy, generates a ciphertext, and uploads the ciphertext to a storage device for storage. Wherein the access strategy is converted into a mode that an LSSS matrix is embedded into a ciphertext; the one or more data controlled sharing gateways verify whether the attribute set of the data decryption party meets the access strategy according to the ciphertext and the user private key; if yes, the data plaintext is recovered and obtained by calculating the reconstruction coefficient of the LSSS matrix. According to the invention, the algorithm is simplified, and the system operation efficiency and stability are improved; the system does not need to adopt block chain storage, so that the system architecture design is simplified, the deployment is convenient, the cost is low, and the data security is high.

The invention belongs to the technical field of intersection of information network security and power communication, and discloses an asymmetric encryption-based internal and external network security interaction method, which is characterized by comprising the following steps of: 1, key generation and management; 2, a data encryption step; a third step of data transmission; and a fourth step of data decryption. The method has the main beneficial technical effects that the data transmission security is improved, the key management process is simplified, the data transmission efficiency and the transmission convenience are improved, the security isolation of the internal and external networks is realized, the system operation is simpler and more convenient, and the wide applicability is improved.

The invention relates to a desensitization method, system, equipment and medium for industrial data, and the method comprises the steps: building and dynamically maintaining an industrial field standard data variable rule table, and defining a desensitization strategy and a sensitivity level matched with specific industrial variables such as temperature, rotating speed and the like in physical meanings, time scenes and node levels of the specific industrial variables; the method comprises the following steps: adding a multi-dimensional identifier to original industrial data, establishing a six-dimensional binding relation model of data variable type-time dimension-node hierarchy-cluster role-sensitive level-rule entry, driving the data to execute a time-coordinated stepped desensitization process in four node hierarchies of a workshop, an enterprise, a park and a cluster, according to the method, refined access control and data decryption fusing time, space and role dimensions are realized according to the model and a full-link tracing log, and the problems that rules and industrial scenes are disjointed, dynamic time adjustment is lacked, cross-node collaboration is insufficient and authority control coarse granularity is caused in the prior art are effectively solved.

Embodiments of the present application provide a cross-node data transmission method and a related device, which are applied to a relay node of an ad hoc network. The method comprises : upon completion of neighbor discovery between a relay node and an adjacent node, receiving a routing diffusion message sent by the adjacent node, and authenticating the routing diffusion message on the basis of node one-way authentication information in the routing diffusion message; if the authentication result is that the routing diffusion message is sent by the adjacent node, establishing a correspondence between the adjacent node and challenge information; then receiving a data packet sent by the adjacent node, and verifying the data packet on the basis of the challenge information corresponding to the adjacent node; if the data packet is sent by the adjacent node, updating the data packet to obtain a forwarding packet; and sending the forwarding packet to the next hop node. In the process, two-way authentication does not need to be carried out between two adjacent nodes, so that the number of two-way authentications is reduced; and the relay node for forwarding a data packet does not need to decrypt and encrypt forwarded data, so that the energy consumption and transmission delay of nodes are reduced.

The invention relates to the technical field of Internet of Vehicles communication, and discloses an Internet of Vehicles data controlled sharing method and system. The method comprises a data uploading stage: a data owner encrypts a data plaintext into a ciphertext by using a quantum session key, and uploads the ciphertext to a cloud server; the quantum session key is composed of a quantum key generated by a data owner and a quantum key distributed by a cloud server; identity authentication is also carried out when the data owning party carries out data interaction with the cloud server. And an authorized access stage: the data uploader obtains public key information from the block chain based on the pseudonym information of the data access party, constructs an authorization message containing a service data ciphertext and broadcasts the authorization message to the data access party and the cloud server. And a data decryption stage: the data access party calculates a temporary authorization code according to the authorization message, and recovers the quantum session key by using the temporary authorization code so as to decrypt the service data ciphertext. According to the invention, rapid sharing of the Internet of Vehicles data among a plurality of receiving entities can be realized, and the privacy of the data is protected.