10 results about "Digital Signature Algorithm" patented technology

The application relates to the technical field of computers, in particular to a secure starting method, an electronic device, a medium, secure starting software and a chip. The method can first calculate label data corresponding to a to-be-authenticated object set (for example, a device image set) and obtain repair data by using a private key stored in the electronic device, then obtain authentication data by a first algorithm (for example, a reversible calculation algorithm) based on the label data and the repair data, wherein the calculation amount of the first algorithm is less than that of a digital signature algorithm. Then, whether the device image in the to-be-authenticated object set is trusted is determined by comparing the authentication data with a trusted root stored in the electronic device. In this way, the secure starting method provided in the embodiments of the application does not need to consume a large amount of computing resources or memory resources when comparing the authentication data with the trusted root, and can realize lightweight secure starting, so that the secure starting can be realized on an electronic device with limited resources.

For security mechanisms for non-3GPP access, the present disclosure relates to authentication for non-3GPP access using digital signatures. In an embodiment, a user equipment (UE) is configured to store at least a primary certificate having a primary digital signature algorithm and a secondary certificate having a secondary digital signature algorithm. When accessing a core network via a gateway through a non-3GPP access, the UE is configured to use the primary certificate to perform authentication with the gateway by computing a first digital signature with the primary digital signature algorithm, receive revocation information from the core network revoking the primary certificate, and use the secondary certificate to perform authentication with the gateway by computing a second digital signature with the secondary digital signature algorithm.

The invention relates to a method for security marking a passport manufactured using production equipment from components bearing identification data, said components including a booklet of numbered pages inserted in a cover, characterized in that it comprises the steps of: Acquiring identification data from at least some of the passport components or from at least some of the production equipment; Generating a two-dimensional code from the component or equipment identifiers; Generating a digital signature using the two-dimensional code with a digital signature algorithm; Printing the digital signature of the two-dimensional code onto at least one passport component. Abstract Figure: Figure 2

The present application relates to an identity authentication method and system. The method comprises: a claimant determining an asymmetric digital signature algorithm and a post-quantum digital signature algorithm; generating an algorithm identifier corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; acquiring a time-varying parameter, and generating signature data on the basis of the time-varying parameter and an identifier of a verifier; using the asymmetric digital signature algorithm to perform signing on the signature data, so as to obtain a first signature; using the post-quantum digital signature algorithm to perform signing on the signature data, so as to obtain a second signature; on the basis of the algorithm identifier, the signature data, the first signature and the second signature, generating an identity authentication string; and sending the identity authentication string to the verifier, so as to instruct the verifier to perform identity authentication on the basis of the authentication string. On the basis of conventional asymmetric cryptographic identity authentication, the method introduces a post-quantum digital signature algorithm capable of resisting quantum computation, thereby enhancing the security of two communicating parties during identity authentication and being able to resist quantum threats to a certain extent.

This invention relates to the field of quantum-resistant computing and cryptography, and discloses a hardware-accelerated parallel implementation method and system for quantum-resistant digital signature algorithms. The method includes: mapping a private key matrix to the conductance states of a resistive-switched non-volatile memory array; converting the message to be signed into an input vector and loading it into a row-driven circuit; performing matrix-vector multiplication in situ using the memory array, with the operational current obtained by a column-sensing circuit; performing analog-to-digital conversion, post-processing, and rejection sampling judgment on the current, and outputting the signature result. The system includes a central control module, a resistive-switched memory computing core array, a row-driven circuit module, a column-sensing and conversion module, and a post-processing operator cluster. By adopting the above technical solution, this invention can achieve high-performance, low-power, and low-latency parallel processing of quantum-resistant digital signatures, improving throughput and enhancing deployment feasibility in edge and mobile devices.

The described techniques address issues associated with current post-quantum cryptography (PQC) algorithms by providing a more efficient means of key expansion. Architectures are provided for both an accelerator and an expander, which may be implemented in accordance with any suitable type of cryptographic algorithm that utilizes key expansion, such as PQC algorithms, a key encapsulation mechanism (KEM) algorithm, a Digital Signature Algorithm (DSA), etc. The accelerator architecture enables portions of the expanded key to be generated only when required by a processing block, allowing for the reuse of memory, which allows for a reduction in memory size and thus a smaller footprint (i.e. physical size) compared to conventional architectures. The expander architecture reduces the required interactions and data transfers between the processing block and the key expansion block, thereby reducing the load on the processing block and system components, such as shared buses and bridges.

The present disclosure relates to authentication for non-3GPP access using digital signatures. In an embodiment, a user equipment (UE) is configured to store a plurality of certificates having different digital signature algorithms, and when accessing a core network through a gateway via non-third generation partnership project (non-3GPP) access, use a first certificate of the certificates to perform authentication with the gateway by computing a first digital signature using a first digital signature algorithm of the digital signature algorithms associated with the first certificate of the certificates, receive revocation information to revoke the first certificate of the certificates in response to a security event regarding the first digital signature algorithm of the digital signature algorithms, and use a second certificate of the certificates to perform authentication with the gateway by computing a second digital signature using a second digital signature algorithm of the digital signature algorithms associated with the second certificate of the certificates in response to the revocation information.

The application discloses a method for upgrading signed firmware, an electronic device and a storage medium, wherein public key parameter information and a digital signature algorithm type are saved to a secure storage by a trusted operating system, a message digest corresponding to the public key parameter information is calculated by the trusted operating system, the message digest is encrypted, and the encrypted message digest is written into a command line parameter, and the signed firmware to be upgraded is verified based on the public key parameter information and the digital signature algorithm type in the secure storage and the encrypted message digest in the command line parameter, and the upgrading is performed only when the verification is successful, so that the security of the public key information is improved, and the encrypted message digest in the command line parameter is used as a communication credential between the trusted operating system, thereby effectively improving the security of the signed firmware upgrading.

This invention discloses an ultra-high-speed post-quantum cryptographic secure communication method for on-orbit intelligent agents, belonging to the field of communication technology. The method includes: generating an encryption key pair based on a post-quantum cryptographic algorithm and a signature key pair based on a quantum-resistant digital signature algorithm for each on-orbit intelligent agent node; recording the two public key information in a blockchain ledger through consensus; obtaining the receiver's public key information from the blockchain ledger, generating a session seed using a post-quantum key encapsulation method and encapsulating it into ciphertext, digitally signing the ciphertext-containing information using a quantum-resistant signature private key, and then sending it; upon receiving the information, the receiver verifies the signature, confirms the identity's legitimacy, and decrypts to obtain the session seed; based on the session seed, both communicating parties generate a one-time session key and transmit business data with symmetric encryption; after communication ends, a communication audit log is generated based on the transmitted information. This invention improves the security of on-orbit intelligent agent communication using the above method.