29 results about "Elliptic curve cryptographic" patented technology

The invention discloses a data tamper-proofing method, system and device based on blockchain evidence storage, and a storage medium, relates to the field of data processing, and is used for solving the problems that multi-source heterogeneous data lacks a unified processing scheme and evidence storage verification is incomplete in existing property management. The method specifically comprises the following steps: multi-modal feature processing: extracting text and image data features respectively, and generating a unified feature vector by combining cross-modal attention mechanism weighted fusion; generating a hash value and a block chain evidence, generating the hash value by adopting an SHA-256 function, and generating a dynamic two-dimensional code in an association manner; and user verification: after scanning the two-dimensional code, locally reproducing feature processing and Hash calculation, and comparing a Hash value on a chain through an elliptic curve cryptography technology to complete verification. According to the method, full-process credible evidence storage of the property data is realized, the data tamper-proofing capability and verification convenience are improved, and property scene data management requirements are met.

The invention discloses a multi-scalar multiplication acceleration method based on resource estimation and a pre-calculation strategy, and provides a systematic solution for the problems of insufficient resource estimation, pre-calculation factor stiffness and low sorting efficiency of a Pippenger algorithm in zero-knowledge proof. A multi-resolution point multiplication table is dynamically generated through a hierarchical displacement pre-calculation strategy, and global memory access delay is remarkably reduced by combining memory layout optimization and asynchronous flow task scheduling of window inner barrel continuous storage. A dynamic resource adaptation mechanism is designed, thread block topology, grid division and sorting algorithm selection are adjusted in real time based on GPU hardware features, and load balancing and cache utilization rate maximization are achieved. Iterative reduction and double temporary bucket strategies are introduced, and data scale is compressed and boundary processing is optimized through multi-round reduction. In the large-scale MSM operation in the block chain and privacy computing field, the computing efficiency and the resource utilization rate can be remarkably improved, and the method is suitable for an elliptic curve cryptography acceleration task.

Disclosed in the present invention is a zero-knowledge-proof-oriented CPU-GPU data processing and transmission optimization system, which is used for executing multi-scalar multiplication operations on the basis of elliptic curve cryptography, so as to generate zero-knowledge proofs. The system comprises a CPU and a GPU, wherein a data transmission channel is provided between the CPU and the GPU; the CPU is used for acquiring and storing point sets and scalar sets that are involved in multi-scalar multiplication operations, and using a set parallelized data transmission mechanism to communicate with the GPU; and the GPU executes multi-scalar multiplication computation on the basis of the point sets and the scalar sets, and returns a computation result to the CPU. By means of the coordinated effect of a plurality of technical features, the present invention significantly improves the speed and efficiency of zero-knowledge proof generation and optimizes resource utilization efficiency.

The invention relates to the technical field of electric energy meter digital data processing, discloses a multi-sensor tamper-proof detection and evidence solidification method for an intelligent electric energy meter, and aims to solve the problems that in the prior art, the false alarm rate is high, tamper behavior recognition is inaccurate, and evidence is prone to being damaged. The method comprises the following steps: fusing four types of sensing data of magnetic field intensity, mechanical vibration, temperature and humidity and shell micro-displacement, and constructing a multi-dimensional collaborative sensing system by adopting Kalman filtering and particle filtering; in combination with a hidden Markov model and time sequence feature extraction, judging a tampering event level by using an isolated forest algorithm; a digital signature snapshot based on elliptic curve cryptography is generated for the key event, chained evidence storage is realized through a Merkel tree structure, and bidirectional verification with a cloud distributed account book is carried out; according to the technical scheme, the accuracy and robustness of tamper-proofing detection are remarkably improved, and evidence integrity, non-repudiation and system credibility are ensured.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The invention discloses an electric power decision-making method, system and device based on data privacy protection and a medium, and belongs to the field of electric power systems.The method comprises the steps that for each device, an initial decision-making model is trained based on historical electric power data stored in an encrypted state, and a decision-making model and model parameters are obtained; differential privacy protection is carried out on the model parameters to obtain model noise adding parameters, the model noise adding parameters are transmitted to a server based on a hybrid encryption technology of elliptic curve cryptography to obtain target model parameters, and the target model parameters are obtained after the server carries out federal aggregation on the model noise adding parameters; and updating the model according to the target model parameter to obtain a target decision model, obtaining the real-time power data and inputting the real-time power data into the target decision model to obtain a decision scheme, so that effective balance between privacy protection and decision performance can be realized.

This disclosure describes an obfuscation process for obfuscating cryptographic parameters of cryptographic operations, such as calculations used in elliptic curve cryptography and elliptic curve point multiplication. This obfuscation process can be used to obfuscate device characteristics that might otherwise reveal information about the cryptographic parameters, the cryptographic operations, or cryptographic operations more generally, such as information sometimes gleaned from side-channel and lattice attacks.

Elliptic Curve Cryptographic Data Processing Unit

The application provides a privacy query method and device for a wireless body area network, and relates to the technical field of encrypted communication, and the method comprises the following steps: a trusted authorization center obtains and discloses public parameters by using elliptic curve cryptography; a server arranges a historical word list set according to corresponding key hash values of historical keywords, and completes user registration according to identity information and the trusted authorization center; a target hash value of a target keyword is obtained, and a blinding factor, an encryption parameter, a blinding point and an anonymous signature are generated according to a generated temporary false identity, identity information, a system registration public key and the public parameters, and a data query request is sent to the server; a second random number and the target keyword are used to decrypt a privacy data set fed back by the server, and a privacy query result is obtained, wherein, after the anonymous signature is verified successfully, the server queries the historical word list set according to the target hash value, and obtains a privacy data set according to a query result, thereby effectively improving the privacy query security.

This invention relates to a commercial cryptographic signature method resistant to side-channel attacks, comprising the following steps: Step 1: Network configuration initialization: Key generation and transaction signing in the system both occur within a designated network; Step 2: Private key conversion and public key generation: Incoming data is converted to an integer using the private key sk and a private key sk object is constructed. The corresponding public key is derived based on elliptic curve cryptography rules; Step 3: Public key and address generation: A hash operation is performed on the public key to generate a public key hash value. Combined with the address format generated by the version, a locking script is constructed based on the public key hash; Step 4: Noise injection operation: A delayed random noise is added during the commercial signature process. By injecting random noise into the signature algorithm, side-channel information is disrupted, preventing attackers from inferring the user's secret data based on the time information leaked during the transaction process, thus improving the system's ability to resist side-channel attacks.

The invention discloses a secure communication method for a V2V in a vehicle ad hoc network, and relates to the technical field of communication security, and the method comprises the steps: S1, building an association mapping relation between a physical feature and a digital identity; s2, authenticating the association mapping relation between the physical characteristics and the digital identities; s3, acquiring neighbor nodes of the node passing the authentication through a UWB broadcast mechanism, and establishing a routing table; s4, the receiver node scores the candidate declaration frames of all the nodes, selects a V2V network master control node, and constructs an autonomous cluster network based on the master control node; s5, generating a time reference of the internal nodes of the ad hoc network system during the networking period based on the master control node, and dividing time slots and channel resources in the ad hoc network; and S6, performing data encryption and secure communication based on elliptic curve cryptography and equipment ID authentication. According to the application, three core requirements of real-time performance, stability and safety can be met at the same time in a high-dynamic V2V scene.

The embodiment of the present application provides a data processing method, apparatus, processor, computer equipment, medium and program, wherein the method includes: obtaining data to be processed; determining input data for a modular product operation of an elliptic curve cryptographic algorithm, wherein the input data includes multiple input multipliers; determining the accumulation of multiple product terms corresponding to the multiplication of the binary representations of the multiple input multipliers; using a correction factor of an intermediate domain and a prime number of a prime number domain, in the gradual accumulation process of the accumulation of multiple product terms, correcting the accumulated result of each step to obtain multiple corrected results, and the last corrected result corresponds to the result of the modular product operation of the intermediate domain; wherein the correction factor is used to map the operation to the intermediate domain to eliminate the division operation; mapping the last corrected result back to the prime number domain to obtain the result of the modular product operation in the prime number domain, and determining the data processing result based on the result of the operation. The embodiment of the present application can improve the data processing performance of the elliptic curve cryptographic algorithm.

The invention relates to the technical field of Internet of Things, in particular to a power Internet of Things key management and secure communication method and device and a medium, and the method mainly comprises the steps: generating a public key matrix and a private key matrix which are the same in size in a key management center based on an elliptic curve cryptographic algorithm SM2, elements with the same row and column positions in the public key matrix and the private key matrix are a group of corresponding public keys and private keys; connecting the key management center and the power Internet of Things terminal equipment, and distributing an ID for the equipment; in the power Internet of Things terminal equipment, generating an equipment private key of the power Internet of Things terminal equipment according to the ID of the power Internet of Things equipment and the private key matrix; and writing the public key matrix into the power Internet of Things terminal equipment. According to the application, the communication security of massive terminals of the power Internet of Things can be improved, and meanwhile, the network load and delay and the construction and maintenance cost during communication are reduced.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents.

The invention relates to the technical field of encryption, in particular to a data encryption method and system applied to intellectual property transactions, and the method comprises the following steps: generating a public key and a private key through an elliptic curve password; generating a shared key based on a private key of the user and a public key of the transaction opposite side; and encrypting the intellectual property transaction content and the additional information based on the shared key, and obtaining a data value required by encryption by querying a pre-calculated and stored numerical table in the encryption process. According to the method, the improved AES-GCM algorithm model is designed, the AES algorithm in the AES-GCM model is optimized through the pre-calculation table look-up method, and the finite field GF (2128) multiplication in the model is optimized through the pre-calculation table look-up method and parallel calculation, so that the calculation efficiency of the model is improved, and the safety, reality and reliability of transaction data are ensured.

An adaptive, hybrid, and resource-efficient crypto system for optimized IoT security and performance, consisting of: a variety of IoT devices; The IoT gateway is communicatively connected to the multitude of IoT devices; a trust assessment module configured to calculate trust scores for each IoT device in real time based on anomaly detection results, historical security events, energy consumption patterns, and network activity patterns; a modified Advanced Encryption Standard (M-AES) encryption module configured to perform encryption operations using an XOR triplet diffusion mechanism consisting of four XOR operations that combine different bytes of state data to achieve diffusion; an Elliptic Curve Cryptography (ECC) module configured to perform Elliptic Curve Diffie-Hellman key exchange operations for secure key generation; A Reinforcement Learning Security Agent (RLSA) module configured to: monitor a multidimensional state space encompassing the power level, network load, trust level, and key age of IoT devices; select actions from an action space that includes maintaining current encryption keys, initiating key rotation, and changing encryption strength; optimize security configurations using the Q-Learning algorithm with a reward function that balances security benefits and energy consumption; a key management module configured to perform dynamic key rotation based on trust values ​​and energy thresholds determined by the reinforcement learning security agent; and a communication interface configured to enable encrypted data transmission between IoT devices and the IoT gateway using the hybrid cryptographic operations M-AES and ECC.

To provide a secure element, a method for generating a key, and a program that are capable of preventing malfunctions in key generation using elliptic-curve cryptography.SOLUTION: A secure element includes: a storage unit for storing key-generation support information indicating information supported as information used for key generation using elliptic-curve cryptography; and a control unit for confirming, before the key generation, whether key-generation information acquired as information to be used for the key generation is supported information, on the basis of the key-generation support information.SELECTED DRAWING: Figure 1

The invention relates to the technical field of vehicle key identity authentication, in particular to a lightweight remote vehicle key identity authentication and key updating mechanism, which comprises the following steps: after receiving a user trigger signal, a remote vehicle key generates a one-time authentication request containing a unique identity identifier of the remote vehicle key and a first random number; the remote vehicle key sends the authentication request to a target vehicle through a wireless communication interface; after receiving the authentication request, the vehicle verifies whether the identity identifier exists in an authorization list; after receiving the authentication request, the vehicle verifies whether the identity identifier exists in an authorization list; by using the elliptic curve cryptography, the mechanism provides high-strength security guarantee, the elliptic curve cryptography has high security due to the fact that the elliptic curve cryptography is based on the elliptic curve discrete logarithm problem, meanwhile, the needed secret key length is short, and various security threats including man-in-the-middle attack can be effectively resisted.

This invention provides a two-way authentication method and system based on the ECC algorithm. Belonging to the field of network security technology, this method involves initial authentication between the client and server based on a message authentication code to ensure the integrity of transmitted certificates and random numbers. Subsequently, both parties independently generate identical session keys using each other's certificate information and their own private keys, based on elliptic curve cryptography. Mutual authentication is completed by comparing key consistency, and finally, authentication success messages are exchanged. This scheme effectively prevents man-in-the-middle attacks and data tampering, enhancing identity authenticity and communication security. Simultaneously, it utilizes the ECC algorithm to achieve high-strength protection with short keys, reducing computational overhead and improving authentication efficiency.

Masked scalar blinding circuits for a side channel analysis (SCA) attack countermeasure are provided. A circuit can include logic gates configured to receive a private key and generate a first private key value and a second private key value that sum to the private key, a first multiplier configured to generate a first product based on a first random number and a multiplicative group order, a second multiplier configured to generate a second product based on a second random number and the multiplicative order group, and circuitry configured to generate a result and a carry out, based on the first private key value, second private key value, the first product, and the second product.

This invention proposes a drone swarm authentication method based on zero-knowledge proof, belonging to the field of drone swarm secure communication technology. Its technical solution includes the following steps: S1, system initialization; S2, secondary drone registration before takeoff; S3, bidirectional authentication and key negotiation between secondary drones during flight; S4, dynamic networking of secondary drones. This invention combines zero-knowledge proof and elliptic curve cryptography to achieve drone swarm identity authentication. Through a two-stage design of pre-registration and online authentication, it significantly reduces the computational and communication overhead of in-flight authentication while ensuring drone identity privacy and communication security. It effectively resists typical threats such as man-in-the-middle attacks, impersonation attacks, replay attacks, and message tampering, avoiding single points of failure and communication bottlenecks caused by the central node.

The application discloses a kind of group key agreement methods of synchronization in digital twin network, based on elliptic curve cryptography, self-authentication key, sibling intractable function family, it is proposed that group key agreement scheme of synchronization in digital twin network, first, control center completes the initialization of system, generates system parameter, and deploys digital twin generation key;Then multiple digital twins carry out synchronous group key agreement and group key generation, finally, multiple digital twins utilize group key and carry out safe data transmission.In addition, digital twin can choose to dynamically leave or join group key agreement.The application guarantees the synchronism, confidentiality, authentication of multiple digital twin communication, satisfies the indistinguishability of chosen plaintext attack under the random oracle model, achieves higher security while having higher efficiency.

The invention relates to the technical field of identity information security storage, discloses a customer CRM maintenance management system based on digital identity information security storage, and solves the problem of low key management and cross-system cooperation efficiency in the prior art. A secret key for identity authentication is generated by means of quantum secret key distribution equipment, and an authentication result is generated through operation according to a quantum-enhanced identity authentication algorithm formula in combination with user biological feature recognition information, equipment hardware fingerprint information and input identity information; meanwhile, the distributed key management module provides support for overall data security based on the architecture concept of the block chain technology, quantum cryptography and identity authentication are deeply fused in the quantum enhanced identity authentication module, the man-in-the-middle attack risk in the quantum computing era is resisted, and the security of the whole data is improved. And a dynamic key negotiation mechanism based on combination of elliptic curve cryptography and a quantum key distribution technology is established in the cross-system interaction module.

The application discloses a CPU-GPU data processing and transmission optimization system for zero-knowledge proof, which is used for performing multi-scalar multiplication operation based on elliptic curve cryptography to realize generation of zero-knowledge proof, and comprises a CPU and a GPU, wherein a data transmission channel is arranged between the CPU and the GPU, the CPU is used for acquiring and storing a point set and a scalar set related to the multi-scalar multiplication operation, and performing communication with the GPU by using a set parallelization data transmission mechanism, the GPU performs calculation of multi-scalar multiplication based on the point set and the scalar set, and returns the calculation result to the CPU. Through the synergistic effect of multiple technical points, the speed and efficiency of the generation of zero-knowledge proof are significantly improved, and the resource use efficiency is optimized.

The invention provides a network access registration method and device and related equipment, and relates to the technical field of communication. The method comprises the steps that a network access registration request is sent to a home network, the network access registration request carries a user hidden identification code, and the user hidden identification code comprises a protection scheme identifier, a home network public key identifier and protection scheme output; the protection scheme output comprises an elliptic curve cryptographic algorithm public key of the user, a post-quantum ciphertext, a user identification code ciphertext and a message authentication code; and receiving a network access registration response returned by the home network. Through the technical means, the problem that the user network access registration safety cannot be guaranteed due to the fact that the quantum algorithm affects the user network access registration in the prior art is solved.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

The invention provides a lightweight batch switching authentication method and device for the Internet of Vehicles, and the method comprises the steps: generating public and private keys and public parameters through the elliptic curve cryptography and the Chinese remainder theorem; the vehicle and the road side unit complete off-line registration at the trust mechanism and the key generation center to obtain a pseudonym and a key pair; when the vehicle initiates an authentication application to the roadside unit, the two parties execute mutual authentication and negotiate a session key; when the vehicle needs to switch the roadside unit, a switching application is sent, and the current roadside unit generates a switching voucher and returns the switching voucher to the vehicle; the vehicle generates authentication information based on the switching voucher, and the authentication information is forwarded to the target roadside unit by the current roadside unit; the target road side unit performs batch verification on the authentication information of the multiple vehicles, and if malicious vehicles are found, the trusted mechanism can perform retrospective revocation; and after entering the target road side unit, the vehicle initiates an access application, completes switching authentication and negotiates a new session key. According to the invention, the efficiency and safety of authentication and switching of the Internet of Vehicles can be improved.

The invention discloses a 5G communication module and a communication method, and the module comprises an initialization module which is used for executing hardware self-inspection based on a preset threshold value, building initial network connection through multi-band scanning, and generating a network connection state containing a signal quality parameter and network topology information; the communication channel establishment module is used for establishing a security encryption communication channel with a cloud server by adopting an elliptic curve cryptographic algorithm based on the network connection state, and generating a communication channel with an encryption credibility index; the data transmission module is used for executing bidirectional data transmission based on a priority strategy between the terminal equipment and the cloud server based on the communication channel, and generating a data transmission result containing throughput and a time delay index; and the communication management module is used for dynamically adjusting communication parameters and switching working modes according to an energy efficiency ratio threshold value based on the data transmission result. And continuous optimization of communication performance is ensured.

The invention discloses a temporary identity-based non-infrastructure secure communication method and system, and the method comprises the steps: enabling a device to locally and periodically generate a temporary elliptic curve cryptographic key pair, deriving a temporary identifier which does not contain any persistent identity information, guaranteeing the communication anonymity from the source, and effectively overcoming the limitation of dependence on a preset social chain; the core security mechanism lies in the temporary and short life cycle of session keys: all keys are only stored in an equipment memory and are automatically destroyed after communication is finished or overtime, and perfect forward secrecy is realized in combination with periodic updating of temporary key pairs, so that decryption cannot be performed even if the keys are leaked in the future for a long time and historical sessions cannot be performed; a one-time random number verification mechanism is introduced in the key negotiation stage, and replay attacks are effectively resisted; the method does not depend on fixed infrastructures such as a base station and the Internet, a point-to-point or mesh network is constructed through a wireless module of equipment, and a communication link can still be kept available in an extreme environment that the infrastructures are paralyzed.