53 results about "Elliptic curve cryptographic" patented technology

The invention provides an encryption transmission method and system of a wireless information transmission communication base station, relates to the technical field, discloses the encryption transmission method of the wireless information transmission communication base station, and belongs to the technical field of wireless communication. The method comprises the following steps: receiving a communication signal and extracting identity authentication information and a signal characteristic parameter; performing identity authentication scoring based on a deep neural network, performing signal feature scoring through spectral analysis, and constructing a communication security assessment model; a key pair is generated by adopting an elliptic curve cryptographic algorithm, and data is encrypted after being subjected to confusion transformation and diffusion transformation; transmitting a key by using a quantum key distribution technology; and selecting an optimal transmission channel based on the operation state data of the communication base station, and performing data transmission by adopting interleaving coding and adaptive power control technologies. According to the invention, the security and transmission reliability of wireless communication are improved, and the anti-interference capability is enhanced.

The invention relates to the technical field of cloud host data security, in particular to a cloud host data access security processing method and system. According to the technical scheme, the method comprises the following steps of: key generation based on dynamic encryption and identity fusion: collecting multi-factor identity data of a user, extracting features, constructing and training a dynamic key generation model by utilizing a generative adversarial network, generating an encryption key through the model based on the real-time multi-factor identity data of the user, and an encryption channel based on elliptic curve cryptography is adopted to split the secret key and then distribute the secret key to the cloud host and the user side equipment. According to the invention, through key generation of dynamic encryption and identity fusion, key storage and management based on the block chain and key use behavior monitoring and anomaly detection based on artificial intelligence, the data access security of the cloud host is comprehensively improved, the risks of data leakage, tampering and abuse are effectively prevented, and the security of the cloud host is improved. And reliable protection and rapid abnormal response to the whole data access process are realized.

Systems and methods for distributed key generation is provided. In some embodiments, a public key and a private key are generated using elliptical curve cryptography (ECC) at a group of trusted parties. In some cases, an elliptical curve digital signature algorithm may be employed. Each party also generates a commitment and a blinding factor. The blinding factor may be a randomized polynomial integer. The parties use the commitments from the other parties to validate the public keys before receipt and combining the public keys into a group / aggregate public key. Content encryption keys (CEK) are then encrypted at each of the trusted parties using these aggregate public keys to generate wrapped content encryption keys (WCEK). Private keys are sharded and a sharded private key is generated at each party using the pieces of shards received by the trusted party. Subsequently, criteria may be received that allows for the release of these sharded private keys back to a trusted environment / enclave.

The invention discloses a data tamper-proofing method, system and device based on blockchain evidence storage, and a storage medium, relates to the field of data processing, and is used for solving the problems that multi-source heterogeneous data lacks a unified processing scheme and evidence storage verification is incomplete in existing property management. The method specifically comprises the following steps: multi-modal feature processing: extracting text and image data features respectively, and generating a unified feature vector by combining cross-modal attention mechanism weighted fusion; generating a hash value and a block chain evidence, generating the hash value by adopting an SHA-256 function, and generating a dynamic two-dimensional code in an association manner; and user verification: after scanning the two-dimensional code, locally reproducing feature processing and Hash calculation, and comparing a Hash value on a chain through an elliptic curve cryptography technology to complete verification. According to the method, full-process credible evidence storage of the property data is realized, the data tamper-proofing capability and verification convenience are improved, and property scene data management requirements are met.

The invention discloses a CPU-GPU (central processing unit-graphics processing unit) data processing and transmission optimization system for zero-knowledge proof, which is used for executing multi-scalar multiplication based on elliptic curve cryptography so as to realize the generation of zero-knowledge proof, and comprises a CPU and a GPU, a data transmission channel is arranged between the CPU and the GPU, and the data transmission channel is communicated with the GPU. The CPU is used for acquiring and storing a point set and a scalar set related to the multi-scalar multiplication and communicating with the GPU by utilizing a set parallel data transmission mechanism, and the GPU executes the multi-scalar multiplication calculation based on the point set and the scalar set and returns a calculation result to the CPU. Through the synergistic effect of a plurality of technical points, the speed and efficiency of zero-knowledge proof generation are remarkably improved, and the resource use efficiency is optimized.

In elliptic curve cryptography, a public key (KpubEd) is generated (6, 60) from a private key (Kpriv) by performing, on a first elliptic curve of the twisted Edwards type, a scalar multiplication (s.GEd) of multiplying a first base point (GEd) on the first elliptic curve by a scalar (s) derived from the private key. And performing (603) a scalar multiplication (s.GM) of a second base point (GM) corresponding to the first base point on a second elliptic curve of Montgomery type equivalent to the first elliptic curve by isomorphic double rational equivalence, and converting (604) the resulting point into the scalar multiplication on the first elliptic curve by homologous mapping, by performing (603) a scalar multiplication (s.GM) of a second base point on the second elliptic curve multiplied by an adjusting scalar on the second elliptic curve. Signature generation and verification utilize similar principles. The method is applied to authentication.

The invention discloses a multi-scalar multiplication acceleration method based on resource estimation and a pre-calculation strategy, and provides a systematic solution for the problems of insufficient resource estimation, pre-calculation factor stiffness and low sorting efficiency of a Pippenger algorithm in zero-knowledge proof. A multi-resolution point multiplication table is dynamically generated through a hierarchical displacement pre-calculation strategy, and global memory access delay is remarkably reduced by combining memory layout optimization and asynchronous flow task scheduling of window inner barrel continuous storage. A dynamic resource adaptation mechanism is designed, thread block topology, grid division and sorting algorithm selection are adjusted in real time based on GPU hardware features, and load balancing and cache utilization rate maximization are achieved. Iterative reduction and double temporary bucket strategies are introduced, and data scale is compressed and boundary processing is optimized through multi-round reduction. In the large-scale MSM operation in the block chain and privacy computing field, the computing efficiency and the resource utilization rate can be remarkably improved, and the method is suitable for an elliptic curve cryptography acceleration task.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

Disclosed in the present invention is a zero-knowledge-proof-oriented CPU-GPU data processing and transmission optimization system, which is used for executing multi-scalar multiplication operations on the basis of elliptic curve cryptography, so as to generate zero-knowledge proofs. The system comprises a CPU and a GPU, wherein a data transmission channel is provided between the CPU and the GPU; the CPU is used for acquiring and storing point sets and scalar sets that are involved in multi-scalar multiplication operations, and using a set parallelized data transmission mechanism to communicate with the GPU; and the GPU executes multi-scalar multiplication computation on the basis of the point sets and the scalar sets, and returns a computation result to the CPU. By means of the coordinated effect of a plurality of technical features, the present invention significantly improves the speed and efficiency of zero-knowledge proof generation and optimizes resource utilization efficiency.

According to the lightweight Internet of Vehicles identity authentication protocol based on the block chain, the block chain is innovatively built on an urban bus to form a bus end block chain to better adapt to the high-speed movement characteristic of the Internet of Vehicles aiming at the problem that the communication and authentication efficiency of a traditional road side unit is low when the vehicle moves at a high speed. According to the protocol, efficient storage of identity messages, real-time revocation of illegal vehicle identities and dynamic updating of group keys are realized through elliptic curve encryption, a hash function, a regular 30-cellular automaton and a block chain technology. In the authentication process, the vehicle forms a temporary pseudonym by using a hash function and an elliptic curve password and sends an authentication message, and the urban bus reads the information through the block chain to complete authentication, so that the security and unforgeability of the pseudonym are ensured, the authentication efficiency is improved, and the calculation and communication overhead is reduced. In addition, according to the protocol, a group key generation and updating mechanism is designed based on a rule 30-cellular automaton, and the safety and flexibility of the system are further enhanced. The method can effectively solve the problems of single-point failure, data tampering risk, low communication efficiency, inconvenient group key updating and the like of a traditional centralized authentication protocol, and is suitable for a safe interaction scene between the urban bus and the common user vehicle.

The invention provides a lightweight elliptic curve cryptographic reconfigurable processor. The reconfigurable computing unit array comprises a shared data area and a reconfigurable instruction memory, the shared data area is used for an upper layer system to write initial data, global configuration parameters, two sets of moduli, two sets of pre-computing parameters Mu and to-be-computed data, the initial data comprises elliptic curve configuration parameters and a group of noise data, and the global configuration parameters comprise reconfigurable data of the computing unit array; the reconfigurable instruction memory is used for an upper-layer system to write reconfigurable instructions, and the reconfigurable instructions comprise an initialization instruction, an operation instruction and a jump instruction. The method can cope with application scenes such as high security, low power consumption, rapid switching and reconstruction of the ECC algorithm, can be flexibly applied to the fields of national password security, network security teaching and commercial password, and has a wide application prospect.

The invention relates to the technical field of electric energy meter digital data processing, discloses a multi-sensor tamper-proof detection and evidence solidification method for an intelligent electric energy meter, and aims to solve the problems that in the prior art, the false alarm rate is high, tamper behavior recognition is inaccurate, and evidence is prone to being damaged. The method comprises the following steps: fusing four types of sensing data of magnetic field intensity, mechanical vibration, temperature and humidity and shell micro-displacement, and constructing a multi-dimensional collaborative sensing system by adopting Kalman filtering and particle filtering; in combination with a hidden Markov model and time sequence feature extraction, judging a tampering event level by using an isolated forest algorithm; a digital signature snapshot based on elliptic curve cryptography is generated for the key event, chained evidence storage is realized through a Merkel tree structure, and bidirectional verification with a cloud distributed account book is carried out; according to the technical scheme, the accuracy and robustness of tamper-proofing detection are remarkably improved, and evidence integrity, non-repudiation and system credibility are ensured.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

A prover chip uses a key multiplier value generated by a proof-of-work function from a challenge value, a random number, and elliptic curve cryptography (ECC) techniques to generate a one-time (or ephemeral) use private key. Similarly, a verifier chip uses the key multiplier value generated by an equivalent proof-of-work function, a public key received from the prover, and ECC techniques to derive a one-time use public key that corresponds to the ephemeral private key generated by the prover chip. The prover chip uses the ephemeral private key to sign the second challenge value and send this signed second challenge value to the verifier chip. The verifier verifies the value it receives using the one-time use public key and if the signature on the second challenge value is valid, authenticates the prover chip to a system.

The invention provides a green power data multi-source heterogeneous convergence and tamper-proof accounting authentication method and system, and relates to the technical field of power, and the method comprises the steps: obtaining green power related data from a plurality of data sources, carrying out the standardization processing of the data, generating a digital signature through employing an elliptic curve cryptographic algorithm, and constructing a tamper-proof storage network based on a block chain technology. And performing data cleaning and anomaly detection by adopting a deep learning model, establishing a power balance model to calculate the actual green power consumption amount, generating an accounting report, and uploading the accounting report to a block chain network for evidence storage. According to the method, safe and credible convergence and accounting authentication of the green power data are realized, and the efficiency and reliability of green power management are improved.

The invention discloses an electric power decision-making method, system and device based on data privacy protection and a medium, and belongs to the field of electric power systems.The method comprises the steps that for each device, an initial decision-making model is trained based on historical electric power data stored in an encrypted state, and a decision-making model and model parameters are obtained; differential privacy protection is carried out on the model parameters to obtain model noise adding parameters, the model noise adding parameters are transmitted to a server based on a hybrid encryption technology of elliptic curve cryptography to obtain target model parameters, and the target model parameters are obtained after the server carries out federal aggregation on the model noise adding parameters; and updating the model according to the target model parameter to obtain a target decision model, obtaining the real-time power data and inputting the real-time power data into the target decision model to obtain a decision scheme, so that effective balance between privacy protection and decision performance can be realized.

This disclosure describes an obfuscation process for obfuscating cryptographic parameters of cryptographic operations, such as calculations used in elliptic curve cryptography and elliptic curve point multiplication. This obfuscation process can be used to obfuscate device characteristics that might otherwise reveal information about the cryptographic parameters, the cryptographic operations, or cryptographic operations more generally, such as information sometimes gleaned from side-channel and lattice attacks.

Elliptic Curve Cryptographic Data Processing Unit

The application provides a privacy query method and device for a wireless body area network, and relates to the technical field of encrypted communication, and the method comprises the following steps: a trusted authorization center obtains and discloses public parameters by using elliptic curve cryptography; a server arranges a historical word list set according to corresponding key hash values of historical keywords, and completes user registration according to identity information and the trusted authorization center; a target hash value of a target keyword is obtained, and a blinding factor, an encryption parameter, a blinding point and an anonymous signature are generated according to a generated temporary false identity, identity information, a system registration public key and the public parameters, and a data query request is sent to the server; a second random number and the target keyword are used to decrypt a privacy data set fed back by the server, and a privacy query result is obtained, wherein, after the anonymous signature is verified successfully, the server queries the historical word list set according to the target hash value, and obtains a privacy data set according to a query result, thereby effectively improving the privacy query security.

This invention relates to a commercial cryptographic signature method resistant to side-channel attacks, comprising the following steps: Step 1: Network configuration initialization: Key generation and transaction signing in the system both occur within a designated network; Step 2: Private key conversion and public key generation: Incoming data is converted to an integer using the private key sk and a private key sk object is constructed. The corresponding public key is derived based on elliptic curve cryptography rules; Step 3: Public key and address generation: A hash operation is performed on the public key to generate a public key hash value. Combined with the address format generated by the version, a locking script is constructed based on the public key hash; Step 4: Noise injection operation: A delayed random noise is added during the commercial signature process. By injecting random noise into the signature algorithm, side-channel information is disrupted, preventing attackers from inferring the user's secret data based on the time information leaked during the transaction process, thus improving the system's ability to resist side-channel attacks.

Masked scalar blinding circuits for a side channel analysis (SCA) attack countermeasure are provided. A circuit can include logic gates configured to receive a private key and generate a first private key value and a second private key value that sum to the private key, a first multiplier configured to generate a first product based on a first random number and a multiplicative group order, a second multiplier configured to generate a second product based on a second random number and the multiplicative order group, and circuitry configured to generate a result and a carry out, based on the first private key value, second private key value, the first product, and the second product.

The invention discloses a secure communication method for a V2V in a vehicle ad hoc network, and relates to the technical field of communication security, and the method comprises the steps: S1, building an association mapping relation between a physical feature and a digital identity; s2, authenticating the association mapping relation between the physical characteristics and the digital identities; s3, acquiring neighbor nodes of the node passing the authentication through a UWB broadcast mechanism, and establishing a routing table; s4, the receiver node scores the candidate declaration frames of all the nodes, selects a V2V network master control node, and constructs an autonomous cluster network based on the master control node; s5, generating a time reference of the internal nodes of the ad hoc network system during the networking period based on the master control node, and dividing time slots and channel resources in the ad hoc network; and S6, performing data encryption and secure communication based on elliptic curve cryptography and equipment ID authentication. According to the application, three core requirements of real-time performance, stability and safety can be met at the same time in a high-dynamic V2V scene.

The embodiment of the present application provides a data processing method, apparatus, processor, computer equipment, medium and program, wherein the method includes: obtaining data to be processed; determining input data for a modular product operation of an elliptic curve cryptographic algorithm, wherein the input data includes multiple input multipliers; determining the accumulation of multiple product terms corresponding to the multiplication of the binary representations of the multiple input multipliers; using a correction factor of an intermediate domain and a prime number of a prime number domain, in the gradual accumulation process of the accumulation of multiple product terms, correcting the accumulated result of each step to obtain multiple corrected results, and the last corrected result corresponds to the result of the modular product operation of the intermediate domain; wherein the correction factor is used to map the operation to the intermediate domain to eliminate the division operation; mapping the last corrected result back to the prime number domain to obtain the result of the modular product operation in the prime number domain, and determining the data processing result based on the result of the operation. The embodiment of the present application can improve the data processing performance of the elliptic curve cryptographic algorithm.

The invention relates to the technical field of Internet of Things, in particular to a power Internet of Things key management and secure communication method and device and a medium, and the method mainly comprises the steps: generating a public key matrix and a private key matrix which are the same in size in a key management center based on an elliptic curve cryptographic algorithm SM2, elements with the same row and column positions in the public key matrix and the private key matrix are a group of corresponding public keys and private keys; connecting the key management center and the power Internet of Things terminal equipment, and distributing an ID for the equipment; in the power Internet of Things terminal equipment, generating an equipment private key of the power Internet of Things terminal equipment according to the ID of the power Internet of Things equipment and the private key matrix; and writing the public key matrix into the power Internet of Things terminal equipment. According to the application, the communication security of massive terminals of the power Internet of Things can be improved, and meanwhile, the network load and delay and the construction and maintenance cost during communication are reduced.

A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. The processor has a first register, storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptographic instruction of an instruction set architecture, the processor reads a plaintext input from a first storage space within a system memory, performing an encryption procedure using the elliptic curve cryptographic algorithm on the plaintext input based on the public key obtained by referring to the first register to encrypt the plaintext input and to generate a ciphertext output, and programming the ciphertext output into a second storage space within the system memory.

The embodiment of the invention provides a digital signature method and device, a storage medium and electronic equipment, and the method comprises the steps: carrying out the discretization of a to-be-signed target message, and obtaining N sub-messages, N being an integer greater than 1; processing each sub-message through the initialized parameter set to obtain a Hamming weight of each sub-message; and signing each sub-message by using the Hamming weight to obtain N signature results of the N sub-messages, and determining the N signature results as a target signature result of the target message. According to the invention, the method solves a problem that the signature of an elliptic curve cryptographic algorithm in the prior art consumes much time.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents

The invention discloses a high-speed operation processing method and device for an elliptic curve cryptographic algorithm, and belongs to the field of elliptic curve cryptographic computation.The high-speed operation processing method comprises the steps that a first coordinate point and a second coordinate point of a to-be-computed elliptic curve in a Chudnovsky projective coordinate system are obtained; judging whether point multiplication operation of the to-be-calculated elliptic curve has point addition operation after point multiplication or not, and converting the point addition operation after point multiplication into optimized point addition operation under the condition that the point multiplication operation after point multiplication exists; the optimized point addition operation is operation carried out based on a point addition operation formula in a Chudnovsky projective coordinate system; and performing optimization point addition operation based on the first coordinate point and the second coordinate point. According to the method, the Chudnovsky projective coordinate system is introduced, and the point addition operation formula is specially simplified based on the Chudnovsky projective coordinate system, so that the point addition operation formula under the projective coordinate system can be simplified, temporary variables in the process are reduced, and the calculation efficiency is improved.

The invention relates to the technical field of encryption, in particular to a data encryption method and system applied to intellectual property transactions, and the method comprises the following steps: generating a public key and a private key through an elliptic curve password; generating a shared key based on a private key of the user and a public key of the transaction opposite side; and encrypting the intellectual property transaction content and the additional information based on the shared key, and obtaining a data value required by encryption by querying a pre-calculated and stored numerical table in the encryption process. According to the method, the improved AES-GCM algorithm model is designed, the AES algorithm in the AES-GCM model is optimized through the pre-calculation table look-up method, and the finite field GF (2128) multiplication in the model is optimized through the pre-calculation table look-up method and parallel calculation, so that the calculation efficiency of the model is improved, and the safety, reality and reliability of transaction data are ensured.