367 results about "Data decryption" patented technology

The invention relates to the technical field of block chains, in particular to a supply chain data security sharing method based on a block chain. The method comprises the following steps: firstly, defining user roles and corresponding permissions in a supply chain system to generate an access control list; and then, collecting historical behavior data, access records and current system states of the requesting users, and adjusting roles and permissions of the users in real time by using predefined rules and a machine learning model. And then, based on the hybrid access control strategy, matching an access request of a user, generating an access decision, then generating an access operation instruction, executing an operation of data decryption or data encryption maintenance, and after the operation is completed, carrying out integrity check and consistency verification. And finally, collecting all record data generated in the access control process to optimize an updating mechanism of the access control list and realize continuous improvement and optimization. According to the invention, through dynamic adjustment of the access authority, the flexibility and efficiency of access control of the supply chain system are improved.

Systems and methods are disclosed herein for a user to use a mobile device with a camera and a terminal device with a camera to manage and use passwords via QR (Quick Response) codes. The terminal device may generate and display a QR code for a user account or data. The user running a password manager app on the mobile device may scan the QR code of the user account or the QR code of the data to generate, store, and retrieve a password, and to display a QR code for the password. The terminal device may scan the QR code of the password to receive and use the password in sign-up, sign-in, data encryption, and data decryption procedures.

The invention provides a multi-party data collaborative exchange method, system and device, a medium and a product, and belongs to the technical field of data information processing, and the method comprises the steps: in a data exchange process, after identity authentication of participants of data exchange is passed in a trusted space, carrying out the dynamic verification of the access authority of the participants based on the real-time attributes of the participants; under the condition that the dynamic verification is passed, executing data exchange in the trusted space to obtain a data exchange result; sending the data exchange result to a data decryption party corresponding to the data user, so that the data decryption party decrypts the data exchange result; wherein the real-time attributes of the participants comprise real-time environment attributes, behavior attributes of the participants and static attributes of the participants. When the access permission is verified, transition from role-based access control to behavior-based access control is realized on the basis of dynamic combination of multi-dimensional attributes, and dynamic control on the access permission is realized on the aspect of finer granularity.

The invention discloses a hospital data integration and intelligent management system based on multi-source data, and particularly relates to the field of medical data management. Comprising a multi-source heterogeneous data acquisition layer, a self-adaptive data fusion engine, a privacy enhanced distributed storage layer, a multi-modal intelligent analysis center, a clinical decision enhancement module, a self-adaptive resource scheduling module and a full-process auditing and tracing module. Through cooperation of multi-modal model fusion, the clinical decision support accuracy is improved, the self-adaptive learning capability is achieved, the risk of data decryption leakage is avoided, 100% coverage of audit tracing and full-process operation of block chain evidence storage recording can be completed, the abnormal access detection rate is greatly improved, resource scheduling optimization is carried out, the equipment vacancy rate is reduced, and the method is suitable for large-scale popularization and application. A particle swarm optimization algorithm is combined with a digital twinborn technology, resource allocation is dynamically adjusted, scheduling is optimized through a genetic algorithm, invalid overtime is reduced, and the satisfaction degree of medical staff is improved.

The invention discloses an encrypted communication system and method based on cognitive multi-carrier spread spectrum, and belongs to the field of covert communication. The encryption communication system comprises a transmitting device and a receiving device. The transmitting device comprises a data encryption module, a constellation encryption modulation module, a multi-carrier spread spectrum module, a frequency hopping module and a cognitive power distribution module. The receiving device comprises a band-pass filtering module, a de-hopping frequency module, a de-spreading module, a constellation decryption demodulation module, a data decryption module and a coherent combination module. The data encryption module is divided into an interleaving coding unit and a double-rule reversible cellular automaton encryption unit. The cognitive power distribution module continuously scans a wireless electromagnetic environment and carries out real-time spectrum analysis to give power spectrum density results sensed under all frequency hopping frequency sets. According to the invention, continuous detection and dynamic response to the spatial frequency spectrum state can be realized, and the communication concealment, the anti-interference performance and the resource utilization efficiency in a complex electromagnetic environment are remarkably improved by utilizing the frequency spectrum hole.

The invention discloses a multi-level privacy protection data sharing method and system based on a block chain. The method comprises the following steps: S1, collecting and uploading original data; generating an encryption key by adopting a dynamic DNA coding sequence and combining an AES key expansion method, encrypting the collected data by utilizing the generated encryption key to obtain an encrypted file, and storing the encrypted file in a local storage library; s2, uploading the encrypted file in the step S1 to a distributed hash table of an IPFS distributed storage system through an SHA-256 hash function, and verifying and confirming a block by adopting a dynamic hybrid consensus mechanism; s3, accessing the block chain by the user through the smart contract, and executing space-time double-attenuation permission control; and S4, after the permission verification is passed, a decryption key is provided for the user, and the user performs data decryption by using an AES decryption algorithm and DNA reverse coding. According to the method, more accurate authority management can be provided, the security and compliance of data access are improved, and the method is suitable for management of large-scale data.

The present invention particularly relates to the technical field of data storage, and provides a data encryption method based on DNA encoding, a data decryption method based on DNA encoding, an intelligent terminal, and a medium. A solution comprises: encrypting acquired data to be encoded to obtain encrypted data to be encoded; on the basis of a pre-constructed DNA encoding table, performing DNA encoding on each byte of said encrypted data to obtain an initial base sequence, the DNA encoding table being constructed from four-base units and five-base units; and using a preset DNA sequence structure optimization rule to perform chaotic mapping adjustment and rearrangement on the initial base sequence to obtain an encrypted DNA sequence. According to the solution, the GC content in the encrypted DNA sequence can be kept in a balanced state, and the information density of the encrypted data is increased, such that the encryption effect is effectively improved, thereby reducing a storage space occupied by data to be encoded, improving the security and attack resistance of the data to be encoded, and thus guaranteeing the stability of the encrypted DNA sequence.

A mesh data decoding method, according to embodiments, may comprise the steps of: receiving a file including a bitstream including mesh data; decapsulating the file; and decoding the mesh data. A mesh data encoding method, according to embodiments, may comprise the steps of: encoding mesh data; encapsulating a file including a bitstream including the mesh data; and transmitting the file.

The invention discloses a data decryption method, an SSLVPN gateway, electronic equipment and a storage medium, and relates to the technical field of network security. The method is applied to an SSLVPN gateway, and comprises the following steps: receiving an SSLVPN protocol data frame from a client; wherein the SSLVPN protocol data frame carries hash values, serial numbers and acknowledgement numbers of encrypted data and plaintext data; searching whether first plaintext data corresponding to the hash value exists in a multi-level cache or not; wherein the multi-level cache is used for caching a plurality of hash values and plaintext data corresponding to the plurality of hash values respectively; if yes, acquiring the first plaintext data from the multi-level cache, and generating recombined second plaintext data according to the serial number, the confirmation number and the first plaintext data; and if not, performing decryption operation on the encrypted data to obtain the plaintext data, so as to reduce the number of repeated decryption operation times of the SSLVPN gateway.

The invention discloses a fine-grained access control system and method based on combination of CPK and attribute authority, a key generation management unit generates a public and private key pair corresponding to each attribute, and an attribute and strategy management unit defines a system attribute set and formulates an access control strategy. The user and authorization management unit distributes attribute information for a user and determines an access authority according to the attribute information, the data access and encryption unit combines a plurality of attribute public keys according to an access control strategy to form a combined public key, and the data decryption and verification unit verifies user authority attributes and combines private keys of corresponding attributes to form a combined private key; and the local resource and authority management unit stores and updates the attribute private key and authority information of the user side. Through matrix key generation, attribute public key combined encryption and private key combined decryption mechanisms, the problems of complex key management and low efficiency of a traditional ABE scheme are solved, dynamic attribute extension and a complex access strategy are supported, and the performance and expandability under large-scale user and attribute scenes are remarkably improved.

The invention relates to the technical field of communication security, and particularly discloses a communication terminal information acquisition method and system. The method comprises the following steps: acquiring an original data stream of a communication terminal, and generating a task queue through data source marking, dynamic load balancing and protocol packaging; performing desensitization, metadata annotation and lightweight encryption on the task data to form an encrypted data block; secure transmission is realized through transmission channel selection and quality monitoring; decrypting the received data to generate a time sequence database record; generating a rule update package based on invalid data detection and machine learning analysis; and finally, outputting a standardized data set through filtering and verification. According to the invention, efficient acquisition, secure transmission and intelligent processing of mass communication data are realized, and the real-time performance and accuracy of data processing and the load balancing capability of the system are effectively improved.

The invention relates to a data transmission method and device, computer equipment and a computer readable medium. The method comprises the following steps: generating a first private key and a first public key at a device end, and sending the first public key to a server and a client; encrypting the target transmission data at the device side based on the first public key, and sending the encrypted public key encrypted data to the server side; acquiring a symmetric key generated by the client based on the first public key, and performing secondary encryption on the public key encrypted data at the device end based on the symmetric key to obtain secondary encrypted data; and encrypting the symmetric key at the device side based on a second public key of the server side, and sending the encrypted symmetric key and the secondary encrypted data to the server side for data decryption. According to the method and the device, the data is encrypted and transmitted in a manner of combining public key encryption and dynamic symmetric key encryption, so that the data transmission security and the data transmission efficiency can be enhanced, and the technical problems of low data transmission security and low transmission efficiency existing in static encryption or single encryption are solved.

The present application relates to a data encryption method and apparatus, a data decryption method and apparatus, and a storage medium. The data encryption method comprises: acquiring data to be transmitted of a data sending end, wherein the data sending end corresponds to a target platform; determining check data on the basis of the data to be transmitted and the target platform; determining a target encryption mode from a preset codebook on the basis of the data to be transmitted and the target platform; and on the basis of the target encryption mode and the check data, packing the data to be transmitted, so as to obtain target transmission data. In the present application, the check data can be determined on the basis of the data to be transmitted and the target platform corresponding to the data sending end, and the target encryption mode can be determined from the preset codebook on the basis of the data to be transmitted and the target platform, so that the encryption mode in an encryption process has certain randomness, the security of the target transmission data in a transmission process is improved, the data security is ensured, and the data reliability is improved by means of the check data.

The invention discloses a vehicle information safety protection system based on combination of a national cryptographic algorithm and a PUF (Physical Unclonable Function), which belongs to the field of vehicle information safety and encrypted communication, and comprises a response generation module used for generating a PUF response in a safety chip of a vehicle; the key derivation module is used for generating an encrypted master key through a key derivation function based on the PUF response, the vehicle owner identity and the random number nonce; the encryption and signature module is used for generating a ciphertext and carrying out digital signature on the ciphertext; the state monitoring module is used for monitoring the running state of the vehicle hardware; the key management module is used for triggering a failure operation of the encrypted master key when the state monitoring module detects that the hardware state is abnormal; and the decryption verification module is used for regenerating the PUF response and verifying the consistency of the generated key so as to execute data decryption. According to the method, hardware-level encryption protection of the vehicle data is realized through combination of the PUF and the national cryptographic algorithm, so that the safety of the vehicle owner data is protected in the whole life cycle of the vehicle.

The invention relates to the technical field of electric digital data processing, and discloses an intelligent campus network security protection system. A network data acquisition module of the system continuously monitors data transmission flow of a smart campus network environment to obtain an original data packet; the chaotic encryption engine encrypts an original data packet by using a key stream based on dynamic chaotic mapping, wherein the key stream is generated by multi-chaotic system switching and a random parameter distribution mechanism; the security protocol processing module converts the encrypted data packet into a format conforming to a network security protocol standard and transmits the encrypted data packet; the data decryption unit decrypts the received encrypted data packet; the security threat analysis module identifies and estimates potential network attack behaviors according to the decrypted plaintext data; and the protection strategy controller generates and executes a network security protection instruction according to the threat analysis result. The system can effectively protect the network security of the smart campus, resist various network attacks, and ensure the security of data transmission and storage.

The invention relates to the technical field of block chain identifier analysis, and discloses an industrial Internet of Things equipment trusted data interaction method and system based on block chain identifier analysis, and the method comprises the following steps: firstly generating a double-layer identifier of industrial equipment, taking a dynamic identifier in the double-layer identifier as a key seed, generating a public and private key pair, and storing the public and private key pair in a database; public key hash in the public and private key pair is stored in the alliance chain to obtain a digital identity card, identity verification is performed on a sender based on digital identity authentication, then the public key is used for encrypting data to be sent, a data interaction packet to be sent obtained through encryption is uploaded to the alliance chain, credibility verification is performed after uploading, and the data interaction packet to be sent is sent to the alliance chain. And finally, the receiving party carries out data decryption on the data interaction packet and sends data decryption feedback information to the sending party, and the identity authentication accuracy and the credible data verification accuracy based on the block chain identifier can be improved.

This invention introduces a suspended telecommunications system utilizing gas-lift hydrogen-filled balloons for global internet access and secure encrypted communication analysis. Utilizing this gas-lift technology, it deploys an airborne antenna platform stabilized by lightweight carbon fiber structures and secured by ground-based cables. The system integrates various antennas, including parabolic and Starlink dishes, dynamically adjusting for optimal signal reception from terrestrial and satellite sources. a high-frequency amplifier-dissipator and an AI-enhanced ground processing center facilitate the interception and decryption of encrypted communications, filtering potential security threats. The platform features motorized rotating plates, efficient power management, and GSM / Wi-Fi modules for enhanced connectivity. Constructed with composite materials for durability and minimal weight, it includes built-in lighting for visibility and emergency signaling. The system presents an innovative, cost-effective, and scalable solution for global telecommunication coverage and secure communication monitoring, addressing national and social security concerns while ensuring reliable access to digital information worldwide.

The invention discloses a data controlled sharing method and system based on attribute-based encryption, and the system is characterized in that a key generation center generates a system public key PK, a main private key MK and a user private key SK, a server gateway configures an access strategy, carries out the encryption processing of a data plaintext and the access strategy, generates a ciphertext, and uploads the ciphertext to a storage device for storage. Wherein the access strategy is converted into a mode that an LSSS matrix is embedded into a ciphertext; the one or more data controlled sharing gateways verify whether the attribute set of the data decryption party meets the access strategy according to the ciphertext and the user private key; if yes, the data plaintext is recovered and obtained by calculating the reconstruction coefficient of the LSSS matrix. According to the invention, the algorithm is simplified, and the system operation efficiency and stability are improved; the system does not need to adopt block chain storage, so that the system architecture design is simplified, the deployment is convenient, the cost is low, and the data security is high.

The invention belongs to the technical field of intersection of information network security and power communication, and discloses an asymmetric encryption-based internal and external network security interaction method, which is characterized by comprising the following steps of: 1, key generation and management; 2, a data encryption step; a third step of data transmission; and a fourth step of data decryption. The method has the main beneficial technical effects that the data transmission security is improved, the key management process is simplified, the data transmission efficiency and the transmission convenience are improved, the security isolation of the internal and external networks is realized, the system operation is simpler and more convenient, and the wide applicability is improved.

The invention relates to a desensitization method, system, equipment and medium for industrial data, and the method comprises the steps: building and dynamically maintaining an industrial field standard data variable rule table, and defining a desensitization strategy and a sensitivity level matched with specific industrial variables such as temperature, rotating speed and the like in physical meanings, time scenes and node levels of the specific industrial variables; the method comprises the following steps: adding a multi-dimensional identifier to original industrial data, establishing a six-dimensional binding relation model of data variable type-time dimension-node hierarchy-cluster role-sensitive level-rule entry, driving the data to execute a time-coordinated stepped desensitization process in four node hierarchies of a workshop, an enterprise, a park and a cluster, according to the method, refined access control and data decryption fusing time, space and role dimensions are realized according to the model and a full-link tracing log, and the problems that rules and industrial scenes are disjointed, dynamic time adjustment is lacked, cross-node collaboration is insufficient and authority control coarse granularity is caused in the prior art are effectively solved.

The invention discloses a data security sharing method based on a block chain, and belongs to the technical field of data sharing, and the method comprises the steps: storing shared data into the block chain, and carrying out the classification processing, so as to construct a hierarchical access tree model; performing data screening to obtain a target data set, and setting public safety parameters; a master key and a public key are generated through an authority center, and public key security parameters are calculated; encrypting each child node to obtain encrypted data; constructing a data access sharing model, and generating a user private key to calculate a user private key security parameter; and constructing a public contract in the block chain to output the encrypted data, and realizing data decryption based on the user private key security parameter to complete sharing. According to the method, classification processing is carried out on the data by utilizing an attribute encryption method, and encryption is carried out according to the data type, so that the security of the shared data is further improved; and a hierarchical access tree model is formed, so that a storage path is optimized, and the data sharing rate is improved.

The invention discloses an in-memory encryption method based on a cross-point array ferroelectric capacitor array, and belongs to the field of data security and computing security. According to the invention, a cross-point array ferroelectric capacitor FeCAP array is respectively adopted as a key array and a complementary key array, and array-level XOR operation is executed between a plaintext and a key by the generated operation through a diagonal data coding mode and a coupling signal subtraction circuit, so that high-parallel XOR encryption in a memory is realized. And data decryption can be symmetrically realized by applying the ciphertext to the input and using the same key array and the complementary key array. In combination with the artificial intelligence calculation accelerator based on the cross point array ferroelectric capacitor array, high-density, high-energy-efficiency and data security enhanced in-memory calculation application can be realized.

Various embodiments include methods for providing data to be protected in a secure execution environment. An example includes: executing an enclave code in the environment; generating a key pair using the code with a public key and a private key; sending the public key to an insecure execution environment outside the secure execution environment; sending the public key and sending first encrypted data to an obfuscated program code, wherein the obfuscated program code is part of the insecure execution environment; verifying the public key by means of the obfuscated program code and, depending on results of the verification, converting the first encrypted data into second encrypted data, wherein the second encrypted data are encrypted with the public key; sending the second encrypted data to the enclave in the secure execution environment; and decrypting the second encrypted data into the data to be protected.

A computer-implemented method (CIM), according to one approach, includes generating a primary cryptographic recovery key, and generating an alternate cryptographic recovery key, where the alternate cryptographic recovery key is generated and stored in a cryptographic Hardware Security Module (HSM). The method further includes storing an encrypted fallback key in metadata associated with a data set, where the encrypted fallback key is an operational key encrypted by the primary cryptographic recovery key, and storing a Recovery Key Verification Pattern (RKVP) in the metadata, where the RKVP is associated with the primary cryptographic recovery key and is stored for the primary cryptographic recovery key. In response to a determination that the operational key is unavailable, the encrypted fallback key is retrieved to perform a data decryption operation.

The invention provides a large-scale AI model-as-a-service-oriented security reasoning and protection method. The method comprises the following steps that S101, a user initiates an encryption request; s102, the server side carries out verification; s103, decrypting the input data; s104, AI model reasoning is carried out; s105, performing output encryption; and S106, the client decrypts and verifies. The security of the sensitive content can be protected.

The invention relates to the technical field of data encryption and decryption, in particular to a solid state disk data encryption and rapid decryption co-processing system which comprises a key management module, a task scheduling distribution module, a cache optimization module, an identity verification module and a controller monitoring module. According to the method, the unique random seed is generated by combining the user identity characteristic parameters and the SSD controller state, the key attribute is dynamically adjusted by periodically disturbing the data, the key complexity and safety are improved, cross matching is carried out according to the concurrent task priority and the data safety level in the task scheduling link, and the complexity and safety of the key are improved. The method comprises the following steps: distributing special channels and buffer resources, ensuring that a key task has a higher execution priority, performing cache optimization, dynamically dividing a multi-level cache region, realizing priority scheduling and processing of a high-frequency data block according to the access frequency of the data block, fusing authentication parameters and equipment and environment information in an identity authentication link, realizing multi-identity verification, and realizing high-efficiency and high-efficiency scheduling of the high-frequency data block according to the access frequency of the high-frequency data block. And the data decryption authority is strictly controlled.

The invention discloses a logistics transit field digital twin system data security protection method, which comprises the following steps: S1, sorting heterogeneous sensitive data in a logistics transit field digital twin to construct a data set, and preprocessing to obtain an original data set # imgabs0 #; s2, performing end-to-end data encryption on the original data set # imgabs1 #, and performing digital signature and key protection; and S3, constructing information exchange and storage between digital twin bodies in the block chain logistics transfer field, and carrying out zero-trust access and data decryption. According to the method, information exchange and storage between digital twin in a block chain logistics transfer field can be effectively realized, and encryption protection is carried out on data.

The invention relates to a trusted data encapsulation, decryption and transmission method and system based on an attribute password, and belongs to the technical field of information security. The trusted data encapsulation method comprises the following steps: randomly selecting an element R on an elliptic curve according to attribute password security parameters; generating a data encryption key based on the R, and encrypting the to-be-encrypted data to obtain ciphertext data; carrying out attribute encryption on the R based on an access control strategy and a system public key to generate a ciphertext strategy; and generating trusted data. The trusted data decryption method comprises the following steps: analyzing trusted data to obtain an access control strategy, a ciphertext strategy and ciphertext data; decrypting the ciphertext policy based on the access control policy and the attribute private key of the data user to obtain an element R '; a data encryption key is obtained based on the element R ', and ciphertext data is decrypted to obtain a data plaintext. Trusted data transmission comprises packaging and decryption, and the packaging system is used for generating and distributing trusted data. Efficient and safe sharing of data in the field of digital processing is achieved.

The invention relates to a distributed test data generation and sharing system based on privacy computing, and belongs to the technical field of big data, the system comprises a data generation module used for fragmenting acquired user data to a plurality of computing nodes for k-anonymization processing to obtain local data blocks output by each computing node; the privacy calculation module is used for extracting statistical characteristics of the local data blocks and generating an encrypted data packet based on the statistical characteristics; the data storage module is used for carrying out fragmentation storage on the encrypted data packet based on the data type of the encrypted data packet; the data sharing module is used for constructing an access strategy tree based on the encrypted data element information of the encrypted data packet; the access strategy tree is used for generating a decryption key containing the timestamp and the operation authority for the authorized user. According to the system provided by the invention, only the compliance access operation is allowed to trigger the data decryption process, data sharing is realized under the condition of ensuring that the user data is safe and not leaked, and the risk of data leakage in the data test is reduced.

The invention relates to a privacy protection method for alliance chain agricultural product supply chain traceability, and belongs to the technical field of information security. The method comprises the following steps: a registration stage: a supply chain entity participating in traceability registers by using own identity information, and a key management center generates a pseudonym by using the identity information and sends the pseudonym to the supply chain entity; an access structure defining stage: the supply chain entity sends an attribute set of the traceability information to a key management center, the key management center generates a private attribute key and a dynamic pseudonym for the supply chain entity, and the supply chain entity defines a decryption access structure according to the private attribute key; a data encryption stage: the supply chain entity encrypts data by using the private attribute key, and sends an encryption result and a dynamic pseudonym to a supervision department; in the data decryption stage, the supervision department decrypts and audits the received data, and the supply chain entity links the encrypted traceability information; and the supply chain entity with the traceability demand checks the traceability information of the agricultural products in the supply chain by decrypting the data on the chain.