12 results about "Elliptic curve cryptographic" patented technology

Disclosed in the present invention is a zero-knowledge-proof-oriented CPU-GPU data processing and transmission optimization system, which is used for executing multi-scalar multiplication operations on the basis of elliptic curve cryptography, so as to generate zero-knowledge proofs. The system comprises a CPU and a GPU, wherein a data transmission channel is provided between the CPU and the GPU; the CPU is used for acquiring and storing point sets and scalar sets that are involved in multi-scalar multiplication operations, and using a set parallelized data transmission mechanism to communicate with the GPU; and the GPU executes multi-scalar multiplication computation on the basis of the point sets and the scalar sets, and returns a computation result to the CPU. By means of the coordinated effect of a plurality of technical features, the present invention significantly improves the speed and efficiency of zero-knowledge proof generation and optimizes resource utilization efficiency.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The invention discloses an electric power decision-making method, system and device based on data privacy protection and a medium, and belongs to the field of electric power systems.The method comprises the steps that for each device, an initial decision-making model is trained based on historical electric power data stored in an encrypted state, and a decision-making model and model parameters are obtained; differential privacy protection is carried out on the model parameters to obtain model noise adding parameters, the model noise adding parameters are transmitted to a server based on a hybrid encryption technology of elliptic curve cryptography to obtain target model parameters, and the target model parameters are obtained after the server carries out federal aggregation on the model noise adding parameters; and updating the model according to the target model parameter to obtain a target decision model, obtaining the real-time power data and inputting the real-time power data into the target decision model to obtain a decision scheme, so that effective balance between privacy protection and decision performance can be realized.

The application provides a privacy query method and device for a wireless body area network, and relates to the technical field of encrypted communication, and the method comprises the following steps: a trusted authorization center obtains and discloses public parameters by using elliptic curve cryptography; a server arranges a historical word list set according to corresponding key hash values of historical keywords, and completes user registration according to identity information and the trusted authorization center; a target hash value of a target keyword is obtained, and a blinding factor, an encryption parameter, a blinding point and an anonymous signature are generated according to a generated temporary false identity, identity information, a system registration public key and the public parameters, and a data query request is sent to the server; a second random number and the target keyword are used to decrypt a privacy data set fed back by the server, and a privacy query result is obtained, wherein, after the anonymous signature is verified successfully, the server queries the historical word list set according to the target hash value, and obtains a privacy data set according to a query result, thereby effectively improving the privacy query security.

This invention relates to a commercial cryptographic signature method resistant to side-channel attacks, comprising the following steps: Step 1: Network configuration initialization: Key generation and transaction signing in the system both occur within a designated network; Step 2: Private key conversion and public key generation: Incoming data is converted to an integer using the private key sk and a private key sk object is constructed. The corresponding public key is derived based on elliptic curve cryptography rules; Step 3: Public key and address generation: A hash operation is performed on the public key to generate a public key hash value. Combined with the address format generated by the version, a locking script is constructed based on the public key hash; Step 4: Noise injection operation: A delayed random noise is added during the commercial signature process. By injecting random noise into the signature algorithm, side-channel information is disrupted, preventing attackers from inferring the user's secret data based on the time information leaked during the transaction process, thus improving the system's ability to resist side-channel attacks.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents.

An adaptive, hybrid, and resource-efficient crypto system for optimized IoT security and performance, consisting of: a variety of IoT devices; The IoT gateway is communicatively connected to the multitude of IoT devices; a trust assessment module configured to calculate trust scores for each IoT device in real time based on anomaly detection results, historical security events, energy consumption patterns, and network activity patterns; a modified Advanced Encryption Standard (M-AES) encryption module configured to perform encryption operations using an XOR triplet diffusion mechanism consisting of four XOR operations that combine different bytes of state data to achieve diffusion; an Elliptic Curve Cryptography (ECC) module configured to perform Elliptic Curve Diffie-Hellman key exchange operations for secure key generation; A Reinforcement Learning Security Agent (RLSA) module configured to: monitor a multidimensional state space encompassing the power level, network load, trust level, and key age of IoT devices; select actions from an action space that includes maintaining current encryption keys, initiating key rotation, and changing encryption strength; optimize security configurations using the Q-Learning algorithm with a reward function that balances security benefits and energy consumption; a key management module configured to perform dynamic key rotation based on trust values ​​and energy thresholds determined by the reinforcement learning security agent; and a communication interface configured to enable encrypted data transmission between IoT devices and the IoT gateway using the hybrid cryptographic operations M-AES and ECC.

This invention provides a two-way authentication method and system based on the ECC algorithm. Belonging to the field of network security technology, this method involves initial authentication between the client and server based on a message authentication code to ensure the integrity of transmitted certificates and random numbers. Subsequently, both parties independently generate identical session keys using each other's certificate information and their own private keys, based on elliptic curve cryptography. Mutual authentication is completed by comparing key consistency, and finally, authentication success messages are exchanged. This scheme effectively prevents man-in-the-middle attacks and data tampering, enhancing identity authenticity and communication security. Simultaneously, it utilizes the ECC algorithm to achieve high-strength protection with short keys, reducing computational overhead and improving authentication efficiency.

This invention proposes a drone swarm authentication method based on zero-knowledge proof, belonging to the field of drone swarm secure communication technology. Its technical solution includes the following steps: S1, system initialization; S2, secondary drone registration before takeoff; S3, bidirectional authentication and key negotiation between secondary drones during flight; S4, dynamic networking of secondary drones. This invention combines zero-knowledge proof and elliptic curve cryptography to achieve drone swarm identity authentication. Through a two-stage design of pre-registration and online authentication, it significantly reduces the computational and communication overhead of in-flight authentication while ensuring drone identity privacy and communication security. It effectively resists typical threats such as man-in-the-middle attacks, impersonation attacks, replay attacks, and message tampering, avoiding single points of failure and communication bottlenecks caused by the central node.

The application discloses a kind of group key agreement methods of synchronization in digital twin network, based on elliptic curve cryptography, self-authentication key, sibling intractable function family, it is proposed that group key agreement scheme of synchronization in digital twin network, first, control center completes the initialization of system, generates system parameter, and deploys digital twin generation key;Then multiple digital twins carry out synchronous group key agreement and group key generation, finally, multiple digital twins utilize group key and carry out safe data transmission.In addition, digital twin can choose to dynamically leave or join group key agreement.The application guarantees the synchronism, confidentiality, authentication of multiple digital twin communication, satisfies the indistinguishability of chosen plaintext attack under the random oracle model, achieves higher security while having higher efficiency.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

The invention provides a lightweight batch switching authentication method and device for the Internet of Vehicles, and the method comprises the steps: generating public and private keys and public parameters through the elliptic curve cryptography and the Chinese remainder theorem; the vehicle and the road side unit complete off-line registration at the trust mechanism and the key generation center to obtain a pseudonym and a key pair; when the vehicle initiates an authentication application to the roadside unit, the two parties execute mutual authentication and negotiate a session key; when the vehicle needs to switch the roadside unit, a switching application is sent, and the current roadside unit generates a switching voucher and returns the switching voucher to the vehicle; the vehicle generates authentication information based on the switching voucher, and the authentication information is forwarded to the target roadside unit by the current roadside unit; the target road side unit performs batch verification on the authentication information of the multiple vehicles, and if malicious vehicles are found, the trusted mechanism can perform retrospective revocation; and after entering the target road side unit, the vehicle initiates an access application, completes switching authentication and negotiates a new session key. According to the invention, the efficiency and safety of authentication and switching of the Internet of Vehicles can be improved.