1029 results about "Data decryption" patented technology

Disclosed is a method and apparatus of securely providing data to a user's system. The data is encrypted so as to only be decryptable by a data decrypting key, the data decrypting key being encrypted using a first public key, and the encrypted data being accessible to the user's system, the method comprising the steps of: transferring the encrypted data decrypting key to a clearing house that possesses a first private key, which corresponds to the first public key; decrypting the data decrypting key using the first private key; re-encrypting the data decrypting key using a second public key; transferring the re-encrypted data decrypting key to the user's system, the user's system possessing a second private key, which corresponds to the second public key; and decrypting the re-encrypted data decrypting key using the second private key.

A model training method and apparatus based on shared data are disclosed. On the one hand, joint training can be carried out according to the data provided by multiple data providers, so as to obtaina more accurate and comprehensive data model; On the other hand, the operations (such as data decryption operation, local model parameter update operation, etc.) involved in the privacy data during model training are encapsulated in a trusted execution environment of the data provider. Data plaintext cannot be acquired outside the trusted execution environment.

The invention relates to a revocable key external package decryption method based on content attributes. For a trusted authority, 1, initialization is carried out, and system parameters are output; 2, a random number generation algorithm operates; 3, a collision-resistant Hash function is selected, and the Hash value is calculated; 4, a public key and a main key are calculated; 5, the random number is selected, and exponentiation calculation and multiplication are carried out; 6, the collision-resistant Hash function operates, the exponentiation operation is carried out, and a decryption key is obtained. For a data holder, 7, AES data encryption is carried out; 8, an access control matrix is generated; 9, a random number is selected, and an inner product is calculated; 10, multiplication, exponentiation and exclusive-or operation is operated, and ciphertexts are obtained. For a decryption operator, 11, a decryption request and a transformation key are sent. For a mobile storage serve provider, 12, CT2 is sent to an external package decryption agency. For the external package decryption agency, 13, the transformation key is utilized, and the transformation ciphertext is calculated. For the decryption operator, 14, a conversation key is obtained through calculation; 15, AES data decryption is carried out.

A halting key derivation function is provided. A setup process scrambles a user-supplied password and a random string in a loop. When the loop is halted by user input, the setup process may generate verification information and a cryptographic key. The key may be used to encrypt data. During a subsequent password verification and key recovery process, the verification information is retrieved, a user-supplied trial password obtained, and both are used together to recover the key using a loop computation. During the loop, the verification process repeatedly tests the results produced by the looping scrambling function against the verification information. In case of match, the trial password is correct and a cryptographic key matching the key produced by the setup process may be generated and used for data decryption. As long as there is no match, the loop may continue indefinitely until interrupted exogenously, such as by user input.

There is disclosed a system and method for file encryption and decryption. In an embodiment, a method of encrypting a file on backup media involves encrypting clear data using a data encryption key applied to a data encryption algorithm and outputting encrypted data; storing the encrypted data on the backup media; encrypting the data encryption key using a reference cryptographic key applied to a key encryption algorithm and outputting an encrypted data encryption key; and storing the encrypted data encryption key and reconstitution data in a header of the backup media. The encrypted data may be subsequently decrypted by identifying the reference cryptographic key using the reference cryptographic key name; applying the reference cryptographic key to a key decryption algorithm to decrypt the encrypted data encryption key; and applying the decrypted data encryption key to a data decryption algorithm to decrypt the encrypted data.

The invention relates to an Internet of Things data privacy protection method based on a block chain and the trusted hardware. The method comprises three stages of secret key management and data generation, data access control strategy definition and intelligent contract deployment and data access and intelligent contract execution, and Internet of Things data is encrypted by a hardware trusted entity IDA and uploaded to a cloud for storage; when there is an operation request, the trusted entity calls an access control authentication interface of the smart contract to carry out authority authentication; after the authority authentication passes, the trusted entity carries out security authentication on the operation execution server and sends the secret key to the data operation executionserver through a security channel; and the server downloads the data from the cloud, then decrypts the data and executes the operation, and writes the data use record into the block chain after the data analysis operation is completed. According to the scheme, the block chain is combined with the trusted entity, the data is effectively operated under the condition that the original data privacy isnot leaked, and the integrity and the safety of the data use records are guaranteed.

The invention discloses a cloud data security sharing method based on a block chain. The method comprises the steps that 1, a trusted certificate authorization center provides a unique global identityID and a digital certificate according to identity information submitted by a user or an attribute authorization center; the attribute authorization center assigns attribute public and private key pairs for each attribute and distributes attributes for legal users; 2, encrypting and uploading the user data; 3, downloading data by the user; and 4, data decryption: the attribute key set of the usermeets the access strategy of the data, and a decryption key can be obtained through an attribute-based decryption algorithm, so that the data to be accessed can be decrypted. The method has the advantages that the data sharing safety and the data sharing efficiency are improved in an untrusted environment, and the compliance of entity behaviors is supervised.

The invention relates to the technical field of cloud computing, in particular to a regular data backup and recovery method based on cloud storage. In the regular data backup and recovery method, a data compression module, a data decompression module, a data encryption module, a data decryption module, a message encapsulation module, a data uploading module and a data downloading module are involved; the method comprises the following steps of: performing operation such as encryption, compression, message processing, uploading, checking and the like on data during data backup; and performing operation such as downloading, message processing, checking, decompression, decryption and the like on the data during data recovery. By the method, the data backup and recovery speed of a cloud storage system can be increased, the data backup and recovery efficiency can be improved, and the data transmission security can be enhanced; and the method can be applied to data backup and recovery of the cloud storage system.

The invention discloses a data encryption method, a data encryption device, a data decryption method and a data decryption device. The method comprises the following steps: obtaining sensitive data, and judging that the data type of the sensitive data belongs to a character type or a numeric type; if the data type of the sensitive data belongs to the character type, extracting single original characters in the sensitive data, and converting the single original characters into encryption characters in an encryption character set so that the sensitive data are converted into encryption data; if the data type of the sensitive data belongs to the numeric type, converting later N original numbers in the sensitive data into N encryption numbers so that the sensitive data are converted into the encryption data. The data are encrypted by retaining the manner of original data, so that the required storage space of the encryption data in a data storage system is not changed, and the system overhead and communication overhead of a traditional encryption algorithm are reduced.

Embodiments described herein provide for system and methods to crowdsource the location of wireless devices and accessories that lack a connection to a wide area network. One embodiment provides for a data processing system configured to perform operations comprising loading a user interface on an electronic device, the user interface to enable the determination of a location of a wireless accessory that is associated with the electronic device, generating a set of public keys included within a signal broadcast by the wireless accessory, the signal broadcast during a first period, sending the set of public keys to a server with a request to return data that corresponds with a public key in the set of public keys, decrypting the location data using a private key associated with the public key, and processing the location data to determine a probable location for the wireless accessory.

A privacy preserving computation protocol for data analytics is described. The protocol includes a method for privacy-preserving computation of aggregated private data of a group of client devices wherein the method comprises: a server selecting at least t client devices from the group of client devices, each client device in the group: being identifiable by client index i; comprising an encryption function; being provided with key information including an encryption key e and a decryption key of a homomorphic threshold cryptosystem; generating or being provided with an random value r_i and having access to or being provided with the random values of the other client devices in the group; the server transmitting client information to each selected client device, the client information including client indices identifying the selected client devices, the client information signalling a client device that the server would like aggregate encrypted private data of each of the selected client devices; the server receiving randomized encrypted private data and an associated decryption share from each selected client device, the decryption shares being configured such that decryption key d can be reconstructed on the basis of t decryption shares; and, the server aggregating, preferably summing or adding, the received randomized encrypted private data of the selected client devices using the homomorphic properties of the cryptosystem and using the decryption shares for decrypting the aggregated randomized encrypted private data into cleartext.

A credibility network framework based on identities belongs to the technical field of information security, which comprises three layers and three entities, wherein the three layers are a physical transmission layer, a network layer and an application program layer; and the three entities are a network access sponsor, a network access controller and a safety tactics server. The credibility network framework adopts a vector quantity encryption authentication mechanism based on the identifies of accessors, and guarantees that the requirements of all network accessors are the encryption data streams bound with accessor entities, as long as access controllers use personal identify labels and identify information of access requesting labels to obtain accurate proof test value through decrypting requesting data, bidirectional equipotent identify authentication is realized, then authority and content are evaluated and detected by access control assemblies and safety monitoring assemblies so as to guarantee that all access requirements are safe, and unsafe access requirements are refused, thereby the credibility network framework is realized.

The invention relates to a hybrid encrypted network data security method and system. The method comprises the steps that an RSA secret key pair is generated by a client terminal, request data are encrypted by utilizing a private key and the private key is stored, and the encrypted request data together with a public key are transmitted to a server; a cryptograph formed by the server via utilizing the generated AES secret key to encrypt returning data and a cryptograph formed via utilizing the public key to encrypt the AES secret key are received; the returning data are data obtained by the server via utilizing the public key to decrypt and perform the encrypted request data; and the client terminal utilizes the stored private key to decrypt the received cryptograph formed by encrypting the AES secret key via the public key so as to obtain the AES secret key, and the received cryptograph formed by encrypting the returning data via the AES secret key is decrypted by the AES secret key so that the returning data are obtained. A hybrid encryption mode of symmetric encryption and asymmetric encryption is adopted so that secret key leakage or decryption can be prevented, and network transmission data encryption can be increased. The client terminal controls the asymmetric secret key so that the number of requests can be reduced and efficiency can be enhanced.

A computing system and encryption/decryption method realizes assurance of security and improvement of throughput in a remote system. For this purpose, encrypted data is written to a storage system, it is determined whether data in the storage system is ciphertext or plaintext, and encrypted data is read, decrypted and re-written in storage asyncronously with writing encrypted data to storage.

The invention discloses a point-to-point communication method based on near field communication (NFC) and a near field communication (NFC) device, wherein the communication method comprises the following steps: a sender sets a safety module; the safety module is applied to a logic link control protocol (LLCP) layer and uses a first key to encrypt a second key and sends the encrypted second key toa receiver to notify the receiver that the second key is used when data are transmitted; the first key is a common key of the receiver and the second key is used for encrypting the transmitted data inthe communication between the sender and the receiver, and the safety module uses a first key to encrypt the data and sends the encrypted data to the receiver. Symmetrical keys are adopted with higher data decryption speed, thereby ensuring point-to-point data transmitting safety and enhancing efficiency. The safety module is applied to the logic link control protocol (LLCP) layer and is not arranged on an application layer for encryption, thereby achieving higher encryption safety.

The invention provides a digital electronic detonator blasting system and a control method thereof; the digital electronic detonator blasting system comprises an initiator, one or a plurality of programming units, and one or a plurality of digital electronic detonators; the initiator, the programming units and the digital electronic detonators are connected in a double bus way. The control methodof the digital electronic detonator blasting system comprises the following steps: self-detection of the initiator, authentication of operating personnel of the initiator, blasting design, authentication of the initiator, obtaining license information o f the initiator, data decryption of initiation, validity authentication of time and position information, self-detection of the programming unit,authentication of operating personnel of the programming unit, blasting design task decomposition, detonator charging, detection of working state of the detonator, programming, system test, initiatingcommand authentication, synchronous test, initiating authorization verification, broadcasting initiating command and data backup.

The embodiment of the invention provides a data encryption method and a device thereof, a data decryption method and a device thereof, and a solid state disk, wherein the data encryption method comprises the steps of: receiving data to be encrypted and obtaining the position information of the data to be encrypted; receiving an encryption key decrypted by a controller and obtaining a session key used for encrypting the data to be encrypted according to the encryption key after decryption and the position information; and encrypting the data to be encrypted according to the session key. By carrying out predetermined operation on the KEY and the position information of data storage in the encryption process to generate the corresponding session key, the aim of using the corresponding session key to encrypt the data entering and going out of the address can be realized; as each data storage position corresponds to a unique session key, the attacker cannot reversely reckon the KEY even obtaining a certain session key through decryption, thus guaranteeing the confidentiality of data in SSD and improving the data safety.

The invention discloses a video data encryption system and method of net video monitoring, including: a video monitoring platform (101), which generates encryption keys and confidential keys and distributes them to a net camera (102) and a video monitor terminal (103), a net camera (102), which collects and compresses live videos and sends video data to the video monitor terminal (103) after encrypting according the encryption key acquired from the video monitoring platform (101), and the video monitor terminal (103), which establishes a video transmission link to the net camera (102), decrypts the received video data according to the decryption key distributed by the video monitoring platform (101) and displays the video information. The invention realizes the encryption and protection to video monitored data.

A method of and system for encrypting and decrypting data on a computer system is disclosed. In one embodiment, the system comprises an encrypting operating system (EOS), which is a modified UNIX operating system. The EOS is configured to use a symmetric encryption algorithm and an encryption key to encrypt data transferred from physical memory to secondary devices, such as disks, swap devices, network file systems, network buffers, pseudo file systems, or any other structures external to the physical memory and on which can data can be stored. The EOS further uses the symmetric encryption algorithm and the encryption key to decrypt data transferred from the secondary devices back to physical memory. In other embodiments, the EOS adds an extra layer of security by also encrypting the directory structure used to locate the encrypted data. In a further embodiment a user or process is authenticated and its credentials checked before a file can be accessed, using a key management facility that controls access to one or more keys for encrypting and decrypting data.

The invention provides a network online invoice making method. Based on internet and computer technology, the method provides comprehensive real-time management services for the links of purchase, making, use, inquiry, data application and the like of an invoice of a taxpayer. The method comprises the following steps of: realizing the authentication of a taxpayer identity by using a digital certificate; ensuring the transmission security of invoice data on the internet by using an HTTPS encryption protocol; establishing a security channel between a user and a backstage server; realizing bidirectional data security transmission by encryption technology; generating an invoice security code used for verifying the authenticity and the completeness of invoice face value information by invoice anti-counterfeiting technology. An online invoice making key is a medium for the digital certificate, a face value anti-counterfeiting algorithm and secure storage, and finishes data encryption, data decryption, digital signature, data verification and the like. Therefore, the problems of false invoice, writing false invoice, making an invoice excluding income, filling and making non-standard invoice, declaration data distortion and the like are solved fundamentally.