65 results about "Digital Signature Algorithm" patented technology

The invention discloses an anti-quantum security identity authentication method and system, a medium and equipment. The method comprises the following steps: S1, a client, a service server and a key distribution center perform key configuration by adopting a digital signature algorithm; s2, the client sends an authentication request to the authentication server, and receives an authentication response with a bill granted bill returned by the authentication server; s3, the client sends a bill request to the bill issuing server, and receives a bill response with the service bill returned by the bill issuing server; s4, the client generates a client key exchange public key by adopting a first key exchange algorithm and sends an access request, the service server calculates a shared key and a ciphertext after receiving the public key, generates an access response comprising the ciphertext and identity information encrypted by using the shared key, and returns the access response to the client; and S5, the client receives the access response and obtains the shared key, and performs encrypted communication with the service server by using the shared key. The method has forward safe quantum attack resistance and strong identity authentication.

The invention discloses a privacy protection and verifiable product carbon footprint evaluation method based on a block chain. The method mainly comprises the steps that a chain owner enterprise defines a purpose and a range; a chain owner enterprise requests carbon emission list data from an upstream raw material supplier according to a product material list (BOM), the raw material supplier performs homomorphic encryption on the carbon emission list data and then sends the data to a cloud computing platform of the chain owner enterprise, and identity verification is performed on a data source in combination with an RSA digital signature algorithm; the cloud platform completes carbon footprint calculation in a ciphertext state, and finally, a ciphertext result is returned to an upstream supplier; and the chain owner enterprise integrates the raw material supplier data through the cloud platform, completes final product carbon footprint calculation, verifies the validity of the calculation process based on a zero-knowledge proof technology, realizes automatic verification in combination with an intelligent contract, and finally explains and explains the whole process. According to the method, privacy protection of the carbon emission list data is realized, the evaluation process is verifiable, and the evaluation result is more accurate.

The present invention discloses a ring signcryption generation method, system and device based on the SM9 digital signature algorithm. The present invention utilizes the bilinearity, non-degeneracy and computability characteristics of bilinear mapping, and adopts the SM9 digital signature algorithm and a hash function to construct a ring signcryption scheme. By optimizing the SM9 digital signature algorithm, the present invention has lower computational overhead and communication overhead, is particularly suitable for communication environments with limited energy and bandwidth, and fills the gap of the SM9 digital signature algorithm in ring signcryption schemes.

The invention discloses a digital signature method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: randomly generating a polynomial coefficient and a seed share through employing a threshold digital signature algorithm based on an elliptic curve, and generating an initial private key share and an initial public key share through employing the polynomial coefficient; generating a shared seed between the current participant and the other participants based on the seed shares of the current participant and the other participants, and calling a pseudo-random number generator through the shared seed so as to generate a related random number; and deriving the initial private key share and the initial public key share by using the related random number so as to generate a new private key share and a new public key share, and finally performing blind processing on the new private key share so as to realize digital signature of the to-be-signed information. According to the application, distributed storage of the signature public and private key pairs can be realized while the problem that the transaction can be linked is solved, so that a possible single-point fault hidden danger is solved, and the safety of the wallet is improved.

The invention discloses an authentication encryption method based on a national cryptographic algorithm and application. A sender and a receiver negotiate to generate a shared key and a symmetric encryption mode parameter through a national cryptographic asymmetric algorithm based on identification information; a sender generates an abstract of data to be transmitted through a national cryptographic hash algorithm, and signs the abstract through a national cryptographic digital signature algorithm; the sender encrypts and transmits the data and the signature value by using a national secret symmetric encryption algorithm in combination with the shared key and the mode parameters, and destroys the shared key and the mode parameters after the encryption is completed; after the receiver receives the ciphertext, the plaintext data and the signature value are obtained through decryption by using the shared key and the mode parameter through a national secret symmetric encryption algorithm, and the shared key and the mode parameter are destroyed after decryption is completed; and the receiver generates an abstract of the plaintext data through a national cryptographic hash algorithm, and verifies a signature value through a national cryptographic digital signature algorithm so as to confirm a data source and integrity. According to the invention, the problems of security and integrity of data in transmission and processing processes are solved.

The invention discloses a message encryption method and device based on an improved digital signature algorithm, and electronic equipment, and relates to the field of privacy computing or financial science and technology, and the method comprises the steps: carrying out the calculation through employing a hash function and a pre-generated random bit string, and obtaining a preprocessed message, the sum of chain length parameters of positions of all chains in the signature is equal to a natural number parameter, constructing a Hash forest by using an FORS algorithm, generating a one-time signature for each tree, and combining two signatures by using an upper-layer key to obtain a WOTS + signature; and encrypting the financial transaction message and the preprocessed message based on the final signature result, and transmitting an encryption result and the final signature result to the target terminal for verification. According to the method and the device, the technical problems that the encryption speed is low and the encryption operation cannot be completed in time due to the complex algorithm when the financial transaction message is encrypted by adopting a post quantum cryptography encryption mode in the related technology are solved.

The invention provides a vehicle-mounted network identity authentication method, device and equipment and a storage medium, and the method comprises the steps: initializing a trusted center, registering a road side unit and vehicle information, and storing verification parameters of a successfully registered vehicle in a block chain network; when the vehicle enters a range managed by a certain road side unit, generating a vehicle pseudonym, receiving the vehicle pseudonym through the road side unit, and performing preliminary authentication on the identity of the vehicle based on the vehicle verification parameters stored in the block chain network; when the vehicle subjected to preliminary authentication needs to transmit a message, generating a temporary key pair added with inverse operation by using an optimized digital signature algorithm, generating a vehicle message signature based on the temporary key pair, and sending the vehicle message signature to a corresponding road side unit; continuously receiving vehicle message signatures through a road side unit, performing signature authentication on the vehicle message signatures by using a single-time or batch processing mode, and allowing message transmission after the signature authentication succeeds; and malicious vehicles are detected through the road side unit and registration of the malicious vehicles is cancelled.

Systems and methods for distributed key generation is provided. In some embodiments, a public key and a private key are generated using elliptical curve cryptography (ECC) at a group of trusted parties. In some cases, an elliptical curve digital signature algorithm may be employed. Each party also generates a commitment and a blinding factor. The blinding factor may be a randomized polynomial integer. The parties use the commitments from the other parties to validate the public keys before receipt and combining the public keys into a group / aggregate public key. Content encryption keys (CEK) are then encrypted at each of the trusted parties using these aggregate public keys to generate wrapped content encryption keys (WCEK). Private keys are sharded and a sharded private key is generated at each party using the pieces of shards received by the trusted party. Subsequently, criteria may be received that allows for the release of these sharded private keys back to a trusted environment / enclave.

The invention relates to the technical field of block chains, in particular to a lightweight block chain encryption method based on hybrid encryption, and the method comprises the following steps: S1, carrying out the encryption of transaction data in a block chain through employing a lightweight symmetric encryption algorithm, and generating encrypted transaction data; s2, using an asymmetric encryption algorithm and an anti-quantum encryption algorithm to cooperatively encrypt a key of the lightweight symmetric encryption algorithm in the S1 to generate an encrypted key; s3, carrying out signature processing on the encrypted transaction data and the encryption key by adopting a lightweight digital signature algorithm to generate signature information; and S4, setting access authority for the encrypted transaction data by adopting an attribute-based encryption algorithm. According to the invention, the transaction data is encrypted by adopting the lightweight symmetric encryption algorithm, so that the problem that the application is limited in the resource limited scene such as lightweight equipment due to the fact that most of the traditional block chain encryption methods adopt a single encryption mechanism is solved.

The invention discloses a high-precision positioning construction method based on BIM and building assembly type nodes, and relates to the technical field of building information management, and the method comprises the steps: S1, collecting original coordinate data through a node positioning device, calculating a hash value, obtaining a unique data fingerprint, generating a timestamp record according to the unique data fingerprint in combination with a current system clock, and storing the timestamp record in a database; s2, broadcasting the bound data block to a distributed node by adopting a block chain network to obtain a block index after consensus confirmation, and if the block index is matched with the original coordinate data, adding a private key signature for the data block through a digital signature algorithm to obtain a signature data packet; according to the high-precision positioning construction method based on the BIM and the building fabricated node, the problems of positioning data tampering and loose binding are solved, the reliability and safety of data tracing are remarkably improved, and the method is suitable for a high-precision positioning scene.

The invention discloses a digital certificate updating method and electronic equipment, and relates to the technical field of information security. The method comprises the following steps: determining at least one revoked operation certificate from an operation certificate set; wherein the revoked operation certificate is an operation certificate corresponding to a broken digital signature algorithm; the operation certificate set comprises at least two operation certificates; different operation certificates correspond to different digital signature algorithms; determining a user certificate containing the revoked operation certificate; wherein the user certificate comprises at least two pieces of operation certificate information; the user certificate is a digital certificate currently used by a target user; and updating the user certificate according to the operation certificate set to obtain a new user certificate. According to the technical scheme, the credible updating of the digital certificate can be realized.

The application discloses a blockchain-based ticket settlement verification method and system, relates to the technical field of financial transaction safety, and comprises the following steps: S1, receiving a cross-border order submitted by a buyer, verifying the order integrity and the authenticity of the buyer's identity by using a digital signature algorithm, analyzing and extracting the buyer's information, the HS code of the commodity, the payment amount and the currency, and completing the consistency comparison of the ticket basis information in combination with the corresponding tax payment price interval of the HS code; S2, calling an off-chain risk control engine to carry out multi-dimensional compliance verification in parallel, generating a comprehensive risk score and dividing a risk level; after the verification, a preset aggregation template is matched based on the risk level, a unique feature identifier of the order is generated by using a hash algorithm; the risk level is adaptively matched with batch aggregation parameters and on-chain priority, and differentiated dynamic scheduling of off-chain batch evidence is realized. The application realizes full-dimensional pre-checking to avoid false transaction risks, and builds a risk level adaptive adjustment mechanism to balance business processing efficiency and risk control safety.

The application relates to the technical field of computers, in particular to a secure starting method, an electronic device, a medium, secure starting software and a chip. The method can first calculate label data corresponding to a to-be-authenticated object set (for example, a device image set) and obtain repair data by using a private key stored in the electronic device, then obtain authentication data by a first algorithm (for example, a reversible calculation algorithm) based on the label data and the repair data, wherein the calculation amount of the first algorithm is less than that of a digital signature algorithm. Then, whether the device image in the to-be-authenticated object set is trusted is determined by comparing the authentication data with a trusted root stored in the electronic device. In this way, the secure starting method provided in the embodiments of the application does not need to consume a large amount of computing resources or memory resources when comparing the authentication data with the trusted root, and can realize lightweight secure starting, so that the secure starting can be realized on an electronic device with limited resources.

The invention relates to the technical field of information security, privacy protection and data aggregation, in particular to a ciphertext data aggregation method for crowd sensing, which comprises a user node, an aggregation server and a credible center which cooperate to realize data privacy protection and efficient aggregation, data is encrypted after being collected, and the encrypted data is stored in the credible center. Transmission and aggregation processes are both carried out in a ciphertext form, only a trusted center can decrypt to obtain a plaintext aggregation result, a digital signature technology is combined, data source traceability and integrity verifiability are realized, dynamic adding and exiting of a user node are supported, and through a secret key management and list updating mechanism of the trusted center, the reliability of the user node is improved. The lightweight homomorphic encryption algorithm and the digital signature algorithm are combined, calculation and communication overhead is reduced, mobile equipment with limited resources is adapted, the method can be applied to a large-scale crowd sensing scene, and the overall security of the system is further improved through a hierarchical verification mechanism and layer-by-layer check.

The present application relates to the technical field of vehicles, and discloses a software updating method and device for a vehicle controller, a digital signature system, and a computer program product. The method comprises: acquiring an identifier of a target controller, an identifier of a target digital signature algorithm, and a digest of a software update package of target software; on the basis of the identifier of the target controller and the identifier of the target digital signature algorithm, searching a first database for a private key in a first key pair, wherein the first database is used for storing private keys in key pairs applied for different controllers and different digital signature algorithms; and generating a first signature file on the basis of the digest of the software update package of the target software and the private key in the first key pair. By performing unified online management on key pairs, private keys in key pairs can be queried online when signature files are generated. Compared with offline management and private key query, the present application improves the efficiency of searching for key pairs, thereby improving the efficiency of generating signature files.

Embodiments of this disclosure provide, but are not limited to, solutions for protecting, sharing, verifying, and / or generating data resources such as documents. In exemplary embodiments, a data resource is represented, expressed, or defined as a plurality of hashed constituent segments. Using the segment hashes as leaves, a Merkle tree is generated representing the complete original version of the data resource. An edited version of the data resource can be shared, omitting one or more segments that the data administrator wishes to keep secret or does not wish to share in its original form. To verify the authenticity and / or completeness of the edited data resource, a validator is provided with sufficient data (e.g., the hash of each of the non-shared segments) to verify the presence of non-shared segments in the tree representing the complete original version, and an authorized signature that signed the root. In some embodiments, the data resource is a code library, and the segments are parts of computer code that perform specific subtasks. Shared code segments, when executed on a processor, may be selected to combine to perform larger tasks.

The present invention discloses a state detection method and system for countering stateful algorithm replacement attacks. The method includes: when the input file is a source code file of symmetric encryption and digital signature algorithms, using a regular expression matching method for intermediate state detection; when the input file is an executable file generated by symmetric encryption and digital signature algorithms, constructing a sandbox virtual environment for the program's operation, completely isolating sensitive APIs using redirection technology in the sandbox virtual environment, recording all system write-related APIs called through a log file, and detecting whether there are calls to sensitive APIs in the log file; the system includes a source code state detection module and an executable file state detection module. The present invention can successfully detect whether there are stateful algorithm replacement attacks in open-source cryptographic algorithm libraries (such as OpenSSL) and post-quantum algorithms such as Dilithium, Falcon, and SPHINCS+.

The invention discloses an identity authentication method and device, a server, a storage medium and a product, and the method comprises the steps: determining the head information of a JWT as an identity authentication token and the identity information of a user in response to a login request from a client; determining load information of the JWT based on the identity information; determining a to-be-sent message based on the header information and the load information; determining signature information based on the to-be-sent message and an SM9 digital signature algorithm; and generating a JWT based on the header information, the load information and the signature information, and sending the JWT to the client. After a user logs in by using a client, the SM9 algorithm is used as a signature algorithm of the JWT, and the information in the head and the load of the JWT is signed, so that the security of the JWT is greatly improved based on the algorithm characteristics of the SM9. In this way, the JWT scheme can resist attacks such as bypassing of the one algorithm, sensitive information leakage, algorithm confusion and key exhaustion.

The invention discloses a signature verification performance improvement method, device and equipment for an Edwardholtz curve digital signature algorithm, and belongs to the technical field of data encryption. The method comprises the following steps: judging a size relationship between a first modulo result and a second half section of a signature value and a first preset value, and when the first modulo result and the second half section of the signature value are both equal to the first preset value, taking a first intermediate result obtained by calculation by using a preset initial intermediate result as an intermediate value; when any one of the first modulo result and the rear half section of the signature value is not equal to the first preset value, further judging whether the values of the first modulo result and the rear half section of the signature value on the preset digit are the same as a second preset value or not, and obtaining a second judgment relationship; according to the second judgment relation, using the initial intermediate result, and using any one of the inverse coordinates of the public key coordinates, the base point coordinates and the newly constructed coordinates to calculate an intermediate value; and comparing the intermediate value with the first half section of the signature value to obtain a verification result of the signature value.

The invention provides a method and device for hiding secrets in a check digital signature and a medium. The method comprises the steps that a signer generates a key pair through a Fiat-Shamir key construction method; wherein the key pair comprises a public key and a private key; obtaining a to-be-signed message; generating a digital signature based on the private key and the to-be-signed message by using a constant convolution sampling method; and transmitting the to-be-signed message, the digital signature and the public key to a verification party, and performing verification by the verification party. According to the novel method for hiding the secret in the lattice digital signature, deep research is carried out on the digital signature algorithm based on the lattice cryptographic algorithm, the limitation on modulus in the prior art is avoided, the signature length is reduced, the parameter selection flexibility is improved, and a signature algorithm with a shorter bandwidth can be designed.

The present invention belongs to the field of identity authentication technology and discloses a spatial impedance obfuscation protection method for an SM2 digital signature algorithm. The method comprises: step 1 key generation, step 2 obfuscation, step 3 signature, and step 4 signature verification. The above steps use four algorithms, including: a key generation algorithm, an obfuscation algorithm, a signature algorithm, and a signature verification algorithm. Based on the spatial impedance obfuscation method, the present invention obfuscates the original signature algorithm using a private key into a signature algorithm using a lookup table, and has the following characteristics: (1) high security: the private key information is hidden in the lookup table, thereby effectively reducing the risk of private key exposure due to side channel attacks, and has provable white box security and reliable black box security; (2) strong compatibility: the signature generated by the obfuscated signature algorithm can be verified by the SM2 standard signature verification algorithm. The embodiment shows that the present method has high performance and economical energy consumption.

For security mechanisms for non-3GPP access, the present disclosure relates to authentication for non-3GPP access using digital signatures. In an embodiment, a user equipment (UE) is configured to store at least a primary certificate having a primary digital signature algorithm and a secondary certificate having a secondary digital signature algorithm. When accessing a core network via a gateway through a non-3GPP access, the UE is configured to use the primary certificate to perform authentication with the gateway by computing a first digital signature with the primary digital signature algorithm, receive revocation information from the core network revoking the primary certificate, and use the secondary certificate to perform authentication with the gateway by computing a second digital signature with the secondary digital signature algorithm.

This application discloses a method, apparatus, and device for improving the verification performance of an Edwards curve digital signature algorithm, belonging to the field of data encryption technology. It includes: determining the relationship between a first modulo result and the latter half of the signature value and a first preset value; when both the first modulo result and the latter half of the signature value are equal to the first preset value, using a first intermediate result calculated using a preset initial intermediate result as an intermediate value; when either the first modulo result or the latter half of the signature value is not equal to the first preset value, further determining whether the values ​​of the first modulo result and the latter half of the signature value at predetermined positions are the same as a second preset value, and obtaining a second judgment relationship; based on the second judgment relationship, calculating the intermediate value using the initial intermediate result, and using any one of the inverse coordinates of the public key coordinates, the base point coordinates, and the newly constructed coordinates; and obtaining the verification result of the signature value by comparing the intermediate value with the first half of the signature value.

A computer-implemented method of authenticating audible speech in a digital video file including: obtaining an electronic transcript of the audible speech from an audio track of the digital video file; using a digital signature algorithm to generate a digital signature based on the electronic transcript and a private key; and inserting the digital signature in a video track of the digital video file. Also provided is a computer-implemented method of authenticating audible speech in a copy of a digital video file including: receiving a copy of the digital video file containing unverified audible speech, obtaining an electronic transcript, extracting the digital signature, verifying the digital signature and, if the digital signature is successfully verified, determining that audible speech in the copy of the video file is authentic. The electronic transcript is a transcript of the unverified audible speech obtained from the audio track of the copy of the digital video file, and the digital signature is extracted from the video track of the copy of the digital video file and is verified using the digital signature algorithm, the second electronic transcript and a public key.

This invention discloses a conditionally traceable ring signature method, system, electronic device, and storage medium. The method includes: setting system parameters; generating keys for the user and the anonymous revocation authority based on the digital signature algorithm and system parameters; generating a ring signature based on the keys; verifying the ring signature, outputting a first predetermined result if the verification passes, and outputting a second predetermined result if the verification fails; linking the ring signatures, and determining whether to add the ring signature to a signature list based on the ring signature link; if the ring signature appears in the signature list, and the anonymous revocation authority wants to recover the signing public key using its private key, it substitutes the private key of the anonymous revocation authority into a pre-mixed set of public keys to trace the public key of the actual signer; the ring signature algorithm of this invention incorporates a signature list function, enabling the anonymous revocation authority to revoke the anonymity of ring signatures in the signature list only, thereby reducing the authority of the anonymous revocation authority and achieving partial traceability of the ring signature.

The invention belongs to the technical field of artificial intelligence, and relates to a log processing method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining log data generated based on a consultation request of a user; performing format arrangement on the log data to obtain first log data; performing key generation processing on the user identification data to obtain an encryption key; generating a target encryption block size of the target symmetric encryption algorithm based on the data scale of the first log data; based on the encryption key and the size of the target encryption block, encrypting the first log data by using a specified encryption mode of a target symmetric encryption algorithm to obtain second log data; performing digital signature on the second log data based on a target digital signature algorithm to obtain a target digital signature; and storing the second log data and the target digital signature. In addition, the second log data may be stored in the block chain. The log processing method and device can be applied to log processing scenes in the financial field, and the safety and accuracy of log processing are effectively improved.

The invention relates to a method for security marking a passport manufactured using production equipment from components bearing identification data, said components including a booklet of numbered pages inserted in a cover, characterized in that it comprises the steps of: Acquiring identification data from at least some of the passport components or from at least some of the production equipment; Generating a two-dimensional code from the component or equipment identifiers; Generating a digital signature using the two-dimensional code with a digital signature algorithm; Printing the digital signature of the two-dimensional code onto at least one passport component. Abstract Figure: Figure 2

The present invention discloses a time detection method and system for stateless algorithm substitution attacks. The method includes: Step 1, calling symmetric encryption and digital signature algorithms in open-source libraries such as the OpenSSL library, and sampling their encryption or signature times under different security strengths; Step 2, performing 0,1 conversion after grouping the sampled data to obtain a 0,1 sequence as the sequence to be detected in the next step; Step 3, using the NIST SP800-22 specification to detect the converted data to determine whether the algorithm to be detected is subject to an algorithm substitution attack. The system includes: an execution time sampling module; a data type conversion module; and a substitution attack detection module. The present invention can successfully detect whether there are stateless algorithm substitution attacks in open-source cryptographic algorithm libraries (such as OpenSSL) and post-quantum algorithms such as Dilithium, Falcon, and SPHINCS+.

The application relates to an identity authentication method and system. In the method, a claiming party determines an asymmetric digital signature algorithm and a post-quantum digital signature algorithm, generates algorithm identifiers corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, acquires a time-varying parameter, generates signature data according to the time-varying parameter and an identifier of a verifying party, signs the signature data by using the asymmetric digital signature algorithm to obtain a first signature, signs the signature data by using the post-quantum digital signature algorithm to obtain a second signature, generates an identity authentication string according to the algorithm identifiers, the signature data, the first signature and the second signature, and sends the identity authentication string to the verifying party to instruct the verifying party to perform identity authentication according to the identity authentication string. The method introduces the post-quantum digital signature algorithm capable of resisting quantum computing on the basis of traditional asymmetric password identity authentication, improves the security of communication parties in the identity authentication process, and can resist quantum threats to a certain extent.

The present application relates to the technical field of image detection, in particular to a driving safety intelligent detection system and method based on artificial intelligence, comprising the following steps: S100: collecting vehicle information and corresponding vehicle trajectory information of illegal driving, collecting vehicle information and collecting image data of a certain time period obtained by a wide-angle camera, forming an image data set; S200: using a digital signature algorithm to encrypt and store the collected data; S300: analyzing the change rule of each image feature point at different times from each image in the image data set, and judging whether the state of each image feature point is static or dynamic; S400: matching the dynamic feature data with the historical trajectory set, and further analyzing the risk degree of the current state of the concerned vehicle; S500: reminding when the risk degree of the concerned vehicle exceeds the threshold value; the present application reduces illegal driving and detects the safety status of people during driving in a timely manner.