40 results about "Elliptic curve cryptographic" patented technology

The invention discloses a data tamper-proofing method, system and device based on blockchain evidence storage, and a storage medium, relates to the field of data processing, and is used for solving the problems that multi-source heterogeneous data lacks a unified processing scheme and evidence storage verification is incomplete in existing property management. The method specifically comprises the following steps: multi-modal feature processing: extracting text and image data features respectively, and generating a unified feature vector by combining cross-modal attention mechanism weighted fusion; generating a hash value and a block chain evidence, generating the hash value by adopting an SHA-256 function, and generating a dynamic two-dimensional code in an association manner; and user verification: after scanning the two-dimensional code, locally reproducing feature processing and Hash calculation, and comparing a Hash value on a chain through an elliptic curve cryptography technology to complete verification. According to the method, full-process credible evidence storage of the property data is realized, the data tamper-proofing capability and verification convenience are improved, and property scene data management requirements are met.

In elliptic curve cryptography, a public key (KpubEd) is generated (6, 60) from a private key (Kpriv) by performing, on a first elliptic curve of the twisted Edwards type, a scalar multiplication (s.GEd) of multiplying a first base point (GEd) on the first elliptic curve by a scalar (s) derived from the private key. And performing (603) a scalar multiplication (s.GM) of a second base point (GM) corresponding to the first base point on a second elliptic curve of Montgomery type equivalent to the first elliptic curve by isomorphic double rational equivalence, and converting (604) the resulting point into the scalar multiplication on the first elliptic curve by homologous mapping, by performing (603) a scalar multiplication (s.GM) of a second base point on the second elliptic curve multiplied by an adjusting scalar on the second elliptic curve. Signature generation and verification utilize similar principles. The method is applied to authentication.

The invention discloses a multi-scalar multiplication acceleration method based on resource estimation and a pre-calculation strategy, and provides a systematic solution for the problems of insufficient resource estimation, pre-calculation factor stiffness and low sorting efficiency of a Pippenger algorithm in zero-knowledge proof. A multi-resolution point multiplication table is dynamically generated through a hierarchical displacement pre-calculation strategy, and global memory access delay is remarkably reduced by combining memory layout optimization and asynchronous flow task scheduling of window inner barrel continuous storage. A dynamic resource adaptation mechanism is designed, thread block topology, grid division and sorting algorithm selection are adjusted in real time based on GPU hardware features, and load balancing and cache utilization rate maximization are achieved. Iterative reduction and double temporary bucket strategies are introduced, and data scale is compressed and boundary processing is optimized through multi-round reduction. In the large-scale MSM operation in the block chain and privacy computing field, the computing efficiency and the resource utilization rate can be remarkably improved, and the method is suitable for an elliptic curve cryptography acceleration task.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

Disclosed in the present invention is a zero-knowledge-proof-oriented CPU-GPU data processing and transmission optimization system, which is used for executing multi-scalar multiplication operations on the basis of elliptic curve cryptography, so as to generate zero-knowledge proofs. The system comprises a CPU and a GPU, wherein a data transmission channel is provided between the CPU and the GPU; the CPU is used for acquiring and storing point sets and scalar sets that are involved in multi-scalar multiplication operations, and using a set parallelized data transmission mechanism to communicate with the GPU; and the GPU executes multi-scalar multiplication computation on the basis of the point sets and the scalar sets, and returns a computation result to the CPU. By means of the coordinated effect of a plurality of technical features, the present invention significantly improves the speed and efficiency of zero-knowledge proof generation and optimizes resource utilization efficiency.

According to the lightweight Internet of Vehicles identity authentication protocol based on the block chain, the block chain is innovatively built on an urban bus to form a bus end block chain to better adapt to the high-speed movement characteristic of the Internet of Vehicles aiming at the problem that the communication and authentication efficiency of a traditional road side unit is low when the vehicle moves at a high speed. According to the protocol, efficient storage of identity messages, real-time revocation of illegal vehicle identities and dynamic updating of group keys are realized through elliptic curve encryption, a hash function, a regular 30-cellular automaton and a block chain technology. In the authentication process, the vehicle forms a temporary pseudonym by using a hash function and an elliptic curve password and sends an authentication message, and the urban bus reads the information through the block chain to complete authentication, so that the security and unforgeability of the pseudonym are ensured, the authentication efficiency is improved, and the calculation and communication overhead is reduced. In addition, according to the protocol, a group key generation and updating mechanism is designed based on a rule 30-cellular automaton, and the safety and flexibility of the system are further enhanced. The method can effectively solve the problems of single-point failure, data tampering risk, low communication efficiency, inconvenient group key updating and the like of a traditional centralized authentication protocol, and is suitable for a safe interaction scene between the urban bus and the common user vehicle.

The invention provides a lightweight elliptic curve cryptographic reconfigurable processor. The reconfigurable computing unit array comprises a shared data area and a reconfigurable instruction memory, the shared data area is used for an upper layer system to write initial data, global configuration parameters, two sets of moduli, two sets of pre-computing parameters Mu and to-be-computed data, the initial data comprises elliptic curve configuration parameters and a group of noise data, and the global configuration parameters comprise reconfigurable data of the computing unit array; the reconfigurable instruction memory is used for an upper-layer system to write reconfigurable instructions, and the reconfigurable instructions comprise an initialization instruction, an operation instruction and a jump instruction. The method can cope with application scenes such as high security, low power consumption, rapid switching and reconstruction of the ECC algorithm, can be flexibly applied to the fields of national password security, network security teaching and commercial password, and has a wide application prospect.

The invention relates to the technical field of electric energy meter digital data processing, discloses a multi-sensor tamper-proof detection and evidence solidification method for an intelligent electric energy meter, and aims to solve the problems that in the prior art, the false alarm rate is high, tamper behavior recognition is inaccurate, and evidence is prone to being damaged. The method comprises the following steps: fusing four types of sensing data of magnetic field intensity, mechanical vibration, temperature and humidity and shell micro-displacement, and constructing a multi-dimensional collaborative sensing system by adopting Kalman filtering and particle filtering; in combination with a hidden Markov model and time sequence feature extraction, judging a tampering event level by using an isolated forest algorithm; a digital signature snapshot based on elliptic curve cryptography is generated for the key event, chained evidence storage is realized through a Merkel tree structure, and bidirectional verification with a cloud distributed account book is carried out; according to the technical scheme, the accuracy and robustness of tamper-proofing detection are remarkably improved, and evidence integrity, non-repudiation and system credibility are ensured.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

A prover chip uses a key multiplier value generated by a proof-of-work function from a challenge value, a random number, and elliptic curve cryptography (ECC) techniques to generate a one-time (or ephemeral) use private key. Similarly, a verifier chip uses the key multiplier value generated by an equivalent proof-of-work function, a public key received from the prover, and ECC techniques to derive a one-time use public key that corresponds to the ephemeral private key generated by the prover chip. The prover chip uses the ephemeral private key to sign the second challenge value and send this signed second challenge value to the verifier chip. The verifier verifies the value it receives using the one-time use public key and if the signature on the second challenge value is valid, authenticates the prover chip to a system.

The invention discloses an electric power decision-making method, system and device based on data privacy protection and a medium, and belongs to the field of electric power systems.The method comprises the steps that for each device, an initial decision-making model is trained based on historical electric power data stored in an encrypted state, and a decision-making model and model parameters are obtained; differential privacy protection is carried out on the model parameters to obtain model noise adding parameters, the model noise adding parameters are transmitted to a server based on a hybrid encryption technology of elliptic curve cryptography to obtain target model parameters, and the target model parameters are obtained after the server carries out federal aggregation on the model noise adding parameters; and updating the model according to the target model parameter to obtain a target decision model, obtaining the real-time power data and inputting the real-time power data into the target decision model to obtain a decision scheme, so that effective balance between privacy protection and decision performance can be realized.

This disclosure describes an obfuscation process for obfuscating cryptographic parameters of cryptographic operations, such as calculations used in elliptic curve cryptography and elliptic curve point multiplication. This obfuscation process can be used to obfuscate device characteristics that might otherwise reveal information about the cryptographic parameters, the cryptographic operations, or cryptographic operations more generally, such as information sometimes gleaned from side-channel and lattice attacks.

Elliptic Curve Cryptographic Data Processing Unit

The application provides a privacy query method and device for a wireless body area network, and relates to the technical field of encrypted communication, and the method comprises the following steps: a trusted authorization center obtains and discloses public parameters by using elliptic curve cryptography; a server arranges a historical word list set according to corresponding key hash values of historical keywords, and completes user registration according to identity information and the trusted authorization center; a target hash value of a target keyword is obtained, and a blinding factor, an encryption parameter, a blinding point and an anonymous signature are generated according to a generated temporary false identity, identity information, a system registration public key and the public parameters, and a data query request is sent to the server; a second random number and the target keyword are used to decrypt a privacy data set fed back by the server, and a privacy query result is obtained, wherein, after the anonymous signature is verified successfully, the server queries the historical word list set according to the target hash value, and obtains a privacy data set according to a query result, thereby effectively improving the privacy query security.

This invention relates to a commercial cryptographic signature method resistant to side-channel attacks, comprising the following steps: Step 1: Network configuration initialization: Key generation and transaction signing in the system both occur within a designated network; Step 2: Private key conversion and public key generation: Incoming data is converted to an integer using the private key sk and a private key sk object is constructed. The corresponding public key is derived based on elliptic curve cryptography rules; Step 3: Public key and address generation: A hash operation is performed on the public key to generate a public key hash value. Combined with the address format generated by the version, a locking script is constructed based on the public key hash; Step 4: Noise injection operation: A delayed random noise is added during the commercial signature process. By injecting random noise into the signature algorithm, side-channel information is disrupted, preventing attackers from inferring the user's secret data based on the time information leaked during the transaction process, thus improving the system's ability to resist side-channel attacks.

The invention discloses a secure communication method for a V2V in a vehicle ad hoc network, and relates to the technical field of communication security, and the method comprises the steps: S1, building an association mapping relation between a physical feature and a digital identity; s2, authenticating the association mapping relation between the physical characteristics and the digital identities; s3, acquiring neighbor nodes of the node passing the authentication through a UWB broadcast mechanism, and establishing a routing table; s4, the receiver node scores the candidate declaration frames of all the nodes, selects a V2V network master control node, and constructs an autonomous cluster network based on the master control node; s5, generating a time reference of the internal nodes of the ad hoc network system during the networking period based on the master control node, and dividing time slots and channel resources in the ad hoc network; and S6, performing data encryption and secure communication based on elliptic curve cryptography and equipment ID authentication. According to the application, three core requirements of real-time performance, stability and safety can be met at the same time in a high-dynamic V2V scene.

The embodiment of the present application provides a data processing method, apparatus, processor, computer equipment, medium and program, wherein the method includes: obtaining data to be processed; determining input data for a modular product operation of an elliptic curve cryptographic algorithm, wherein the input data includes multiple input multipliers; determining the accumulation of multiple product terms corresponding to the multiplication of the binary representations of the multiple input multipliers; using a correction factor of an intermediate domain and a prime number of a prime number domain, in the gradual accumulation process of the accumulation of multiple product terms, correcting the accumulated result of each step to obtain multiple corrected results, and the last corrected result corresponds to the result of the modular product operation of the intermediate domain; wherein the correction factor is used to map the operation to the intermediate domain to eliminate the division operation; mapping the last corrected result back to the prime number domain to obtain the result of the modular product operation in the prime number domain, and determining the data processing result based on the result of the operation. The embodiment of the present application can improve the data processing performance of the elliptic curve cryptographic algorithm.

The invention relates to the technical field of Internet of Things, in particular to a power Internet of Things key management and secure communication method and device and a medium, and the method mainly comprises the steps: generating a public key matrix and a private key matrix which are the same in size in a key management center based on an elliptic curve cryptographic algorithm SM2, elements with the same row and column positions in the public key matrix and the private key matrix are a group of corresponding public keys and private keys; connecting the key management center and the power Internet of Things terminal equipment, and distributing an ID for the equipment; in the power Internet of Things terminal equipment, generating an equipment private key of the power Internet of Things terminal equipment according to the ID of the power Internet of Things equipment and the private key matrix; and writing the public key matrix into the power Internet of Things terminal equipment. According to the application, the communication security of massive terminals of the power Internet of Things can be improved, and meanwhile, the network load and delay and the construction and maintenance cost during communication are reduced.

A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. The processor has a first register, storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptographic instruction of an instruction set architecture, the processor reads a plaintext input from a first storage space within a system memory, performing an encryption procedure using the elliptic curve cryptographic algorithm on the plaintext input based on the public key obtained by referring to the first register to encrypt the plaintext input and to generate a ciphertext output, and programming the ciphertext output into a second storage space within the system memory.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents.

Generally discussed herein are devices, systems, and methods for secure elliptic curve cryptography (ECC) operation. A circuit can include a multiplier coupled to receive a radix of a group order and a radix of a random number and generate a product based on the group order and the random number, a first adder coupled to receive the product and contents of an accumulator and generate a sum based on the product and the contents, the accumulator coupled to receive the sum, and a second adder coupled to operate in parallel with the multiplier and the first adder, the second adder coupled to receive a radix of a secret key and a radix of the contents and generate a portion of a randomized secret key based on the secret key and the contents

The invention relates to the technical field of encryption, in particular to a data encryption method and system applied to intellectual property transactions, and the method comprises the following steps: generating a public key and a private key through an elliptic curve password; generating a shared key based on a private key of the user and a public key of the transaction opposite side; and encrypting the intellectual property transaction content and the additional information based on the shared key, and obtaining a data value required by encryption by querying a pre-calculated and stored numerical table in the encryption process. According to the method, the improved AES-GCM algorithm model is designed, the AES algorithm in the AES-GCM model is optimized through the pre-calculation table look-up method, and the finite field GF (2128) multiplication in the model is optimized through the pre-calculation table look-up method and parallel calculation, so that the calculation efficiency of the model is improved, and the safety, reality and reliability of transaction data are ensured.

Provided is a method for securing against side channel attacks. An elliptic curve cryptographic process comprises a multiple points multiplication operation using predetermined scalar values, Pi being points of an elliptic curve over a finite field defined by parameters (F, E, G, N) together with the point addition law where F is a field over which is defined the curve, E is an equation of the curve, G is a base point in E over F and N is the order of the base point G. The method comprises generating (S1) a masking value iRand, multiplicatively masking (S2) each predetermined scalar value di with said generated masking value iRand to obtain masked scalars di′, computing (S3) a masked multiple points multiplication operation result, and obtaining (S4) said multiple points multiplication operation result R by unmasking said masked multiple points multiplication operation result R′.

An adaptive, hybrid, and resource-efficient crypto system for optimized IoT security and performance, consisting of: a variety of IoT devices; The IoT gateway is communicatively connected to the multitude of IoT devices; a trust assessment module configured to calculate trust scores for each IoT device in real time based on anomaly detection results, historical security events, energy consumption patterns, and network activity patterns; a modified Advanced Encryption Standard (M-AES) encryption module configured to perform encryption operations using an XOR triplet diffusion mechanism consisting of four XOR operations that combine different bytes of state data to achieve diffusion; an Elliptic Curve Cryptography (ECC) module configured to perform Elliptic Curve Diffie-Hellman key exchange operations for secure key generation; A Reinforcement Learning Security Agent (RLSA) module configured to: monitor a multidimensional state space encompassing the power level, network load, trust level, and key age of IoT devices; select actions from an action space that includes maintaining current encryption keys, initiating key rotation, and changing encryption strength; optimize security configurations using the Q-Learning algorithm with a reward function that balances security benefits and energy consumption; a key management module configured to perform dynamic key rotation based on trust values ​​and energy thresholds determined by the reinforcement learning security agent; and a communication interface configured to enable encrypted data transmission between IoT devices and the IoT gateway using the hybrid cryptographic operations M-AES and ECC.

To provide a secure element, a method for generating a key, and a program that are capable of preventing malfunctions in key generation using elliptic-curve cryptography.SOLUTION: A secure element includes: a storage unit for storing key-generation support information indicating information supported as information used for key generation using elliptic-curve cryptography; and a control unit for confirming, before the key generation, whether key-generation information acquired as information to be used for the key generation is supported information, on the basis of the key-generation support information.SELECTED DRAWING: Figure 1

The invention relates to the technical field of vehicle key identity authentication, in particular to a lightweight remote vehicle key identity authentication and key updating mechanism, which comprises the following steps: after receiving a user trigger signal, a remote vehicle key generates a one-time authentication request containing a unique identity identifier of the remote vehicle key and a first random number; the remote vehicle key sends the authentication request to a target vehicle through a wireless communication interface; after receiving the authentication request, the vehicle verifies whether the identity identifier exists in an authorization list; after receiving the authentication request, the vehicle verifies whether the identity identifier exists in an authorization list; by using the elliptic curve cryptography, the mechanism provides high-strength security guarantee, the elliptic curve cryptography has high security due to the fact that the elliptic curve cryptography is based on the elliptic curve discrete logarithm problem, meanwhile, the needed secret key length is short, and various security threats including man-in-the-middle attack can be effectively resisted.

This invention provides a two-way authentication method and system based on the ECC algorithm. Belonging to the field of network security technology, this method involves initial authentication between the client and server based on a message authentication code to ensure the integrity of transmitted certificates and random numbers. Subsequently, both parties independently generate identical session keys using each other's certificate information and their own private keys, based on elliptic curve cryptography. Mutual authentication is completed by comparing key consistency, and finally, authentication success messages are exchanged. This scheme effectively prevents man-in-the-middle attacks and data tampering, enhancing identity authenticity and communication security. Simultaneously, it utilizes the ECC algorithm to achieve high-strength protection with short keys, reducing computational overhead and improving authentication efficiency.

Masked scalar blinding circuits for a side channel analysis (SCA) attack countermeasure are provided. A circuit can include logic gates configured to receive a private key and generate a first private key value and a second private key value that sum to the private key, a first multiplier configured to generate a first product based on a first random number and a multiplicative group order, a second multiplier configured to generate a second product based on a second random number and the multiplicative order group, and circuitry configured to generate a result and a carry out, based on the first private key value, second private key value, the first product, and the second product.

This invention proposes a drone swarm authentication method based on zero-knowledge proof, belonging to the field of drone swarm secure communication technology. Its technical solution includes the following steps: S1, system initialization; S2, secondary drone registration before takeoff; S3, bidirectional authentication and key negotiation between secondary drones during flight; S4, dynamic networking of secondary drones. This invention combines zero-knowledge proof and elliptic curve cryptography to achieve drone swarm identity authentication. Through a two-stage design of pre-registration and online authentication, it significantly reduces the computational and communication overhead of in-flight authentication while ensuring drone identity privacy and communication security. It effectively resists typical threats such as man-in-the-middle attacks, impersonation attacks, replay attacks, and message tampering, avoiding single points of failure and communication bottlenecks caused by the central node.

The application discloses a kind of group key agreement methods of synchronization in digital twin network, based on elliptic curve cryptography, self-authentication key, sibling intractable function family, it is proposed that group key agreement scheme of synchronization in digital twin network, first, control center completes the initialization of system, generates system parameter, and deploys digital twin generation key;Then multiple digital twins carry out synchronous group key agreement and group key generation, finally, multiple digital twins utilize group key and carry out safe data transmission.In addition, digital twin can choose to dynamically leave or join group key agreement.The application guarantees the synchronism, confidentiality, authentication of multiple digital twin communication, satisfies the indistinguishability of chosen plaintext attack under the random oracle model, achieves higher security while having higher efficiency.