47 results about "Elliptic curve cryptography" patented technology

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.

The invention discloses a key sharing and security detection scheme based on an intelligent electric meter, and aims to solve the problems that an untrusted electric meter in an intelligent power grid is difficult to identify effectively, the detection scale is uncontrollable and the communication security is insufficient. According to the scheme, the elliptic curve cryptography, the threshold secret sharing mechanism and the physical unclonable function are combined, and hardware-level binding of the unique identity of the equipment and the secret key is achieved in the registration stage. Through a threshold password mechanism, a plurality of intelligent electric meters cooperatively participate in key reconstruction and encryption communication, and the intelligent electric meters can still work normally when part of the electric meters fail or are broken through. The center node can actively identify a fault or a malicious ammeter and dynamically adjust a communication strategy according to the integrity and correctness of the feedback information. Meanwhile, the scheme supports dynamic identity updating and integrity verification, and effectively resists modeling attacks, Sybil attacks, replay attacks and DoS / DDoS attacks. According to the invention, secure identity authentication, reliable key distribution and efficient anomaly detection are realized, and the security of smart grid terminal communication is improved.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The invention discloses an intelligent marketing terminal power data communication security protection method and system, and belongs to the field of power data security, and the method comprises the steps: collecting electromagnetic noise spectrum data through a built-in environment electromagnetic sensing module of a terminal, extracting electromagnetic characteristic factors, and constructing a correlation model of the electromagnetic characteristic factors and the complexity of an elliptic curve cryptosystem; building a terminal twinborn mirror image, predicting a communication instruction sequence and calculating a deviation coefficient in combination with a long-short-term memory neural network; classifying and screening the power data collected by the terminal, desensitizing privacy data, and then fusing the privacy data into the hash fragment of the unique identifier of the terminal equipment to generate a desensitized power data packet containing the terminal identity identifier; a data abstract is generated according to encryption parameters determined by the association model, the access authority is verified, a data acquisition timestamp is converted into a binary coding sequence, the data abstract is embedded, and an encrypted data packet with a time sequence traceability watermark is generated and uploaded to the block chain for evidence storage; according to the invention, full-process security management and control of power data are realized, and the communication security and the data credibility are improved.

The present invention relates to the field of smart city networks, specifically to systems and methods for enhancing security, scalability, and data integrity. More particularly, the invention focuses on a decentralized system for authentication and data management in Internet of Things (IoT) ecosystems within a smart city context. The system addresses critical challenges in conventional centralized architectures, such as single points of failure, scalability bottlenecks, and vulnerabilities to malicious attacks. By integrating a multi-layered approach that combines elliptic curve cryptography for secure node registration, a trust analysis model for real-time behavioral and data trustworthiness assessment, and a blockchain network for decentralized, immutable transaction verification, this system provides a robust and resilient solution. The system ensures secure communication between IoT nodes and fog servers, validates data integrity, and maintains a transparent and tamper-proof ledger of activities, thereby facilitating reliable and efficient operation of various smart city services.

The invention provides a medical college online learning system based on big data analysis, and relates to the technical field of data processing, and the system comprises a knowledge graph construction module which is used for carrying out the preprocessing and multi-dimensional feature extraction of original learning data uploaded in a medical college online learning environment, and generating a dynamically updated medical knowledge graph; the vector conversion module is used for encrypting and decomposing the entity attribute identifier in the medical knowledge graph by utilizing elliptic curve cryptography to generate a multi-dimensional feature vector with three-dimensional space coordinates; and the data extraction module is used for constructing a data distribution model based on the space coordinates of the multi-dimensional feature vectors and extracting local density concentration characteristic values and boundary dispersion characteristic values of the data distribution model. According to the method, the accuracy, the safety and the efficiency of online learning of medical colleges are comprehensively improved by dynamically constructing the medical knowledge graph, encrypting the feature vectors, accurately evaluating the entity association degree and combining meta-learning to generate a differentiated learning path.

The invention belongs to the field of unmanned aerial vehicle auxiliary MIMO system physical layer authentication, and discloses a bidirectional privacy protection unmanned aerial vehicle auxiliary MIMO system physical layer authentication method, which comprises the following steps: step 1, considering a frame consisting of a pilot frequency and a data symbol, and establishing a carrier frequency offset statistical model representing the identity of an unmanned aerial vehicle; step 2, establishing a CFO session key negotiation algorithm based on the carrier frequency offset statistical model and the elliptic curve cryptography; 3, designing an unmanned aerial vehicle identity bidirectional authentication framework to complete identity authentication based on a carrier frequency offset statistical model and a CFO session key negotiation algorithm; and 4, based on the carrier-free frequency offset statistical model, performing authentication performance analysis, and quantifying the authentication effect. Compared with the prior art, the method has the advantages that the robustness and the accuracy of attacking identity-based impersonation attacks are better.

The invention discloses an Internet of Vehicles cross-domain authentication method based on a block chain and a certificateless ECC (Elliptic Curve Code), and the method comprises the following steps: a trusted mechanism generates and discloses global parameters of a certificateless elliptic curve password, and deploys a block chain network; all the road side units and the vehicles sequentially initiate registration requests to the trusted mechanism, legal road side units receive pseudonyms returned by the trusted mechanism, and legal vehicles receive secret keys returned by the trusted mechanism; mutual authentication and key negotiation are carried out between the registered vehicle and the road side unit, the vehicle sends a signed authentication request packet to the road side unit, the road side unit verifies the freshness of the request and verifies the validity of the signature through a block chain smart contract, and then a data packet is returned to the vehicle through a secure channel for verification; and when the position of the vehicle changes, the vehicle is re-authenticated. According to the method, a certificateless elliptic curve cryptosystem is adopted, so that the transmission and verification overhead of a traditional certificate is saved, and the communication time delay is reduced.

The present disclosure provides a network registration method, device and related equipment, which relates to the technical field of communication. The method comprises: sending a network registration request to a home network, wherein the network registration request carries a user hidden identification code, the user hidden identification code includes a protection scheme identifier, a home network public key identifier and a protection scheme output, the protection scheme output includes an elliptic curve cryptography public key of the user, a post-quantum ciphertext, a user identification code ciphertext and a message authentication code; receiving the network registration response returned by the home network. Through the above technical means, the problem that the quantum algorithm affects the user network registration in the prior art, resulting in that the security of the user network registration cannot be guaranteed, is solved.

The invention discloses an identity authentication method in a vehicle-mounted self-organizing network, which relates to the field of vehicle-mounted self-organizing networks, and comprises the following steps: a trusted center TA generates elliptic curve cryptography parameters, a master key and a public key, and defines a hash function and a symmetric encryption and decryption algorithm; the vehicle Vi and the roadside unit RSUi respectively register to the trusted center TA; after the vehicle Vi logs in and enters the communication range of the roadside unit RSUi, bidirectional authentication is carried out between the vehicle Vi and the trusted center TA and between the vehicle Vi and the roadside unit RSUi; the vehicle Vi broadcasts the message by using the temporary key, and receives the vehicle to carry out timeliness, identity validity and message integrity verification; the roadside unit RSUi detects malicious broadcast and submits related information to the trusted center TA, and the trusted center TA decrypts the related information and then obtains a real identity and implements tracking; according to the method, efficient security authentication, privacy protection and authorization tracking of malicious nodes are realized, and the security, privacy and real-time communication efficiency of the vehicle-mounted ad hoc network are improved.

This application discloses a method, apparatus, electronic device, and medium for collaborative key exchange. In this application, upon receiving a peer random number public key from a peer key device, the peer random number public key and a first random number public key are sent to a second communicating party. The first random number public key is calculated by the first communicating party using an elliptic curve cryptography algorithm. The second communicating party calculates its own random number public key based on the peer random number public key, the first random number public key, and a second sub-private key, and then sends its own random number public key and intermediate parameters to the first communicating party. The first communicating party calculates a shared key based on its own random number public key, intermediate parameters, and the first sub-private key, and then sends its own random number public key to the peer key device.

This application relates to a fault-tolerant data security aggregation method, apparatus, and computer device. The method includes: an aggregator generating and broadcasting public system parameters based on a high-performance elliptic curve cryptography system; collecting public keys from each participant to generate a global public key set and broadcasting it; each participant negotiating a shared session key with the other participants based on their own private key and the global public key set; generating mask data with global XOR cancellation properties through a pseudo-random function XOR operation; filling the original data into the corresponding anonymous sequence number array positions, filling the rest with zeros, and XORing it with the mask to generate an encrypted vector, which is then uploaded; the aggregator XORing all encrypted vectors bit-by-bit to cancel the mask and restore the plaintext set; if some participants time out and disconnect, the aggregator broadcasts a disconnection list, collects the mask recovery shares of online participants to generate a residual mask, and cancels it to restore the plaintext set of online participants. This method can improve data aggregation efficiency and system robustness.

A processor with an elliptic curve cryptography algorithm and a processing method thereof, including a register storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptography algorithm instruction of an instruction set architecture, the processor obtains a plaintext input from a first memory space, performs an elliptic curve cryptography algorithm encryption operation on the plaintext input using the public key obtained through the register, encrypts the plaintext input into a ciphertext output, and writes the ciphertext output to a second memory space.

The embodiment of the invention provides a data processing method and device, a processor, computer equipment, a medium and a program, and the processor comprises a decoder which responds to a microcode of an elliptic curve cryptographic algorithm and decodes a plurality of instructions, and at least one part of the instructions are basic instructions; the logical operation unit comprises a basic instruction operation subunit used for operating the basic instruction; wherein part or all of the basic instruction is a modular operation instruction obtained by taking a prime number p as a modulus. According to the embodiment of the invention, the complexity and deployment cost of hardware operation can be remarkably reduced.

The application discloses a prime number field elliptic curve password co-processor, which comprises a register module, a NAF encoding module, an operation module and a controller module; wherein the operation module comprises a modular multiplier unit, a modular squarer unit, a first modular adder unit and a second modular adder unit; the modular multiplier unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular multiplication operation; the modular squarer unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular squaring operation; the modular multiplier unit and the modular squarer unit operate in parallel, which can accelerate the operation rate, realize higher performance, and achieve the best trade-off between area and performance, and is very suitable for high-speed encryption and decryption application. The application can be widely applied to the technical field of information security.

Various embodiments relate to a data processing system comprising instructions embodied in a non-transitory computer readable medium, the instructions for an elliptic curve cryptography authentication method based on an elliptic curve in a processor, the instructions, comprising: generating, by a verifier, a random challenge r; multiplying, by the verifier, the random challenge r by a basepoint G to produce R; sending an x coordinate of R to a prover; receiving an x-coordinate of a first point P1 and a second point P2 from the prover, wherein P1 is based on a random share q1 of the private key q of the prover and R, and wherein P2 is based on a random share q2 of the private key q and R; where q=q1−q2; finding a point P1′ on the elliptic curve having an x-coordinate of the first point P1; finding a point P2′ on the elliptic curve having an x-coordinate of the second point P2; and authenticating the prover when an x-coordinate of one of (P1′+P2′) and (P1′−P2′) matches an x-coordinate of r·Q, wherein Q is a public key of the prover.

The invention discloses an x86-64 platform-oriented full-pipeline universal Montgomery modular multiplication operation method, which comprises the following steps of: realizing universal Montgomery modular multiplication operation and modular square operation of a 256-bit elliptic curve cryptographic algorithm by utilizing a BMI2 instruction set and an ADX instruction set and combining a pipeline and a multi-emission mechanism of an x86-64 platform through allocating registers and adjusting calculation steps; wherein the general Montgomery modular multiplication operation comprises multiplication operation, the general Montgomery modular square operation comprises square operation, and both the two operations comprise general Montgomery modular reduction operation; the calculation steps of multiplication and square operation are adjusted, so that two addition chains in the operation are executed in parallel; and adjusting the calculation step of the Montgomery module reduction operation, extending the previous round of additive operation of the cycle calculation step in the operation to the next round, and executing the previous round of additive operation and the next round of multiplication operation in parallel. According to the method, the universal Montgomery modular multiplication operation of the x86-64 platform can be realized, and the operation performance is optimized.

The present disclosure relates to an elliptic curve cryptography-based search method, device, equipment and storage medium; in the present scheme, after the cloud server receives the search trapdoor sent by a second user, the matching encrypted target document information is found, the auxiliary key corresponding to the second user in the authorized user list is used to pre-decrypt the encrypted target document information, the second user uses the user key to decrypt the target document identifier, and the cloud server returns the corresponding target encrypted document to the second user; the second user decrypts the clear text document; it can be seen that the present scheme does not involve bilinear pair operation when searching, and the search efficiency is improved; in the present scheme, the private key is divided into two parts of keys, which are used by the cloud server and the second user respectively, the decryption permission of each user can be flexibly controlled, when the user is revoked, only the corresponding information needs to be deleted from the authorized user list, the revocation cost is small, and other users are not affected, nor is the existing ciphertext data affected.

The application discloses a binary field elliptic curve cryptography coprocessor, which comprises a data register module, a first modular multiplier module, a second modular multiplier module, a squarer module, an adder module and a controller module; wherein the first modular multiplier module is designed as a two-stage pipeline structure, and the second modular multiplier module is designed as a four-stage pipeline structure, so that the operation frequency of the system can be effectively improved; thus, the high frequency and small area can be maintained while the high performance is kept, and the optimal tradeoff between the area and the performance is realized. The binary field elliptic curve cryptography coprocessor is suitable for the application of lightweight password encryption and decryption in the Internet of Things and has good practicability. The application can be widely applied in the field of information security technology.

The present application belongs to the field of information security protection, and particularly relates to a tamper-proof privacy security ranging positioning method and system. The present application first uses an elliptic curve cryptography algorithm to enable each anchor point participating in positioning to securely obtain its own signature information and hash aggregation encrypted key from a positioning server. The anchor point splices the signature and ranging information, encrypts the same using a hash aggregation algorithm, and then sends the same to a user. The user aggregates and decrypts to obtain the aggregated signature information and ranging information of all anchor points, compares the aggregated signature information with the aggregated signature received from the positioning server, and if the two are consistent, the user constructs a ranging positioning calculation matrix using the aggregated ranging information, completes self-position estimation, and if the two are inconsistent, the present positioning is abandoned. The present application effectively prevents tampering of positioning data during positioning, and simultaneously realizes protection of positioning related information of the anchor points and the user participating in positioning.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

A processor with an elliptic curve cryptography algorithm and its processing method, including a register for storing a private key pointer that points to a private key. In response to a single elliptic curve cryptography algorithm instruction of the instruction set architecture, the processor obtains a ciphertext input from a first memory space, performs an elliptic curve cryptography decryption operation on the ciphertext input using the private key obtained through the register, decrypts the ciphertext input into a plaintext output, and writes the plaintext output to a second memory space.

This invention discloses a fully pipelined general Montgomery modular multiplication method for the x86-64 platform. Utilizing the BMI2 and ADX instruction sets, combined with the pipelined and multi-issue mechanisms of the x86-64 platform, and through register allocation and adjustment of computation steps, it implements general Montgomery modular multiplication and modular squaring operations for 256-bit elliptic curve cryptography algorithms. Specifically, the general Montgomery modular multiplication operation includes multiplication, and the general Montgomery modular squaring operation includes squaring; both operations also include general Montgomery modular reduction. The computation steps for multiplication and squaring are adjusted to allow the two addition chains in the operation to execute in parallel. The computation steps for Montgomery modular reduction are also adjusted to extend the previous round of addition in the loop calculation step to the next round, and execute it in parallel with the next round of multiplication. This invention enables general Montgomery modular multiplication on the x86-64 platform, optimizing computational performance.

A processor with elliptic curve cryptography algorithm and a processing method thereof, wherein a first register stores a hash value pointer and a second register stores a private key pointer. In response to a first elliptic curve cryptography instruction of an instruction set architecture, the processor obtains a hash value of data to be signed through the first register, obtains a private key through the second register, performs a signature operation of the elliptic curve cryptography algorithm on the hash value by using the private key to generate a signature, and writes the signature into a second memory space.

A processor with elliptic curve cryptography algorithm and a processing method thereof, wherein a first register stores a hash value pointer, a second register stores a public key pointer, a third register stores a signature pointer, and a fourth register stores a verification result. In response to a first elliptic curve cryptography instruction of an instruction set architecture, the processor obtains a hash value of data to be verified through the first register, obtains a public key of a signer through the second register, and obtains a signature through the third register. The processor performs a signature verification operation of the elliptic curve cryptography algorithm on the hash value with the public key and the signature to generate the verification result for storage.

The present invention discloses a cross-domain authentication method for the Internet of Vehicles (IoV) based on blockchain and certificateless ECC. The method comprises the following steps: a trusted authority generates and publishes global parameters for certificateless elliptic curve cryptography and deploys a blockchain network; all roadside units and vehicles sequentially initiate registration requests to the trusted authority; legitimate roadside units receive pseudonyms and legitimate vehicles receive keys returned by the trusted authority; registered vehicles and the roadside units perform mutual authentication and key negotiation; the vehicle sends a signed authentication request packet to the roadside unit; the roadside unit verifies the freshness of the request and the validity of the signature through a blockchain smart contract, and then returns the data packet to the vehicle via a secure channel for verification; and the vehicle is reauthenticated when its position changes. The present invention adopts a certificateless elliptic curve cryptography system, eliminating the traditional certificate transmission and verification overhead and reducing communication latency.

The application relates to the technical field of elliptic curve cryptography, and more particularly to an operation method and system for elliptic curve multi-scalar multiplication based on a smooth number barrel. The method is based on the LFG method, a smooth number is introduced to optimize the barrel construction, the barrel is divided into a smooth number part and a non-smooth number part without increasing the barrel size, the calculation efficiency of the smooth number part is improved, and thus the overall calculation efficiency is improved. The time cost of the doubling point operation in the elliptic curve operation is much smaller than that of the point addition operation; the original LFG method requires 2 times of elliptic curve addition for each barrel element, and after optimization, only 1 time of addition and 1 time of doubling point operation are required, so that the calculation cost is reduced.

The invention provides an industrial Internet of Things equipment encryption communication method and system, and relates to the technical field of data transmission, and the method comprises the steps: obtaining to-be-transmitted industrial image data; performing block processing on the industrial image data to obtain a plurality of image blocks; extracting representative pixels in each image block, and sorting the representative pixels according to block numbers to form an important pixel set; performing compression processing on the important pixel set to form an important data stream; calculating difference values between other non-representative pixels and representative pixels in each image block, and merging the difference values according to block numbers to form a block-level non-representative pixel difference relation set; coding the block-level non-representative pixel difference relation set to form a non-important data stream; establishing session negotiation based on elliptic curve cryptography, and deriving hierarchical encryption parameters; performing differential encryption processing on the important data stream and the non-important data stream to obtain a layered encryption message; and packaging and sending the layered encrypted message through the industrial Internet of Things.