30 results about "Elliptic curve cryptography" patented technology

The present invention relates to the field of smart city networks, specifically to systems and methods for enhancing security, scalability, and data integrity. More particularly, the invention focuses on a decentralized system for authentication and data management in Internet of Things (IoT) ecosystems within a smart city context. The system addresses critical challenges in conventional centralized architectures, such as single points of failure, scalability bottlenecks, and vulnerabilities to malicious attacks. By integrating a multi-layered approach that combines elliptic curve cryptography for secure node registration, a trust analysis model for real-time behavioral and data trustworthiness assessment, and a blockchain network for decentralized, immutable transaction verification, this system provides a robust and resilient solution. The system ensures secure communication between IoT nodes and fog servers, validates data integrity, and maintains a transparent and tamper-proof ledger of activities, thereby facilitating reliable and efficient operation of various smart city services.

The present disclosure provides a network registration method, device and related equipment, which relates to the technical field of communication. The method comprises: sending a network registration request to a home network, wherein the network registration request carries a user hidden identification code, the user hidden identification code includes a protection scheme identifier, a home network public key identifier and a protection scheme output, the protection scheme output includes an elliptic curve cryptography public key of the user, a post-quantum ciphertext, a user identification code ciphertext and a message authentication code; receiving the network registration response returned by the home network. Through the above technical means, the problem that the quantum algorithm affects the user network registration in the prior art, resulting in that the security of the user network registration cannot be guaranteed, is solved.

This application discloses a method, apparatus, electronic device, and medium for collaborative key exchange. In this application, upon receiving a peer random number public key from a peer key device, the peer random number public key and a first random number public key are sent to a second communicating party. The first random number public key is calculated by the first communicating party using an elliptic curve cryptography algorithm. The second communicating party calculates its own random number public key based on the peer random number public key, the first random number public key, and a second sub-private key, and then sends its own random number public key and intermediate parameters to the first communicating party. The first communicating party calculates a shared key based on its own random number public key, intermediate parameters, and the first sub-private key, and then sends its own random number public key to the peer key device.

This application relates to a fault-tolerant data security aggregation method, apparatus, and computer device. The method includes: an aggregator generating and broadcasting public system parameters based on a high-performance elliptic curve cryptography system; collecting public keys from each participant to generate a global public key set and broadcasting it; each participant negotiating a shared session key with the other participants based on their own private key and the global public key set; generating mask data with global XOR cancellation properties through a pseudo-random function XOR operation; filling the original data into the corresponding anonymous sequence number array positions, filling the rest with zeros, and XORing it with the mask to generate an encrypted vector, which is then uploaded; the aggregator XORing all encrypted vectors bit-by-bit to cancel the mask and restore the plaintext set; if some participants time out and disconnect, the aggregator broadcasts a disconnection list, collects the mask recovery shares of online participants to generate a residual mask, and cancels it to restore the plaintext set of online participants. This method can improve data aggregation efficiency and system robustness.

A processor with an elliptic curve cryptography algorithm and a processing method thereof, including a register storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptography algorithm instruction of an instruction set architecture, the processor obtains a plaintext input from a first memory space, performs an elliptic curve cryptography algorithm encryption operation on the plaintext input using the public key obtained through the register, encrypts the plaintext input into a ciphertext output, and writes the ciphertext output to a second memory space.

The embodiment of the invention provides a data processing method and device, a processor, computer equipment, a medium and a program, and the processor comprises a decoder which responds to a microcode of an elliptic curve cryptographic algorithm and decodes a plurality of instructions, and at least one part of the instructions are basic instructions; the logical operation unit comprises a basic instruction operation subunit used for operating the basic instruction; wherein part or all of the basic instruction is a modular operation instruction obtained by taking a prime number p as a modulus. According to the embodiment of the invention, the complexity and deployment cost of hardware operation can be remarkably reduced.

The application discloses a prime number field elliptic curve password co-processor, which comprises a register module, a NAF encoding module, an operation module and a controller module; wherein the operation module comprises a modular multiplier unit, a modular squarer unit, a first modular adder unit and a second modular adder unit; the modular multiplier unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular multiplication operation; the modular squarer unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular squaring operation; the modular multiplier unit and the modular squarer unit operate in parallel, which can accelerate the operation rate, realize higher performance, and achieve the best trade-off between area and performance, and is very suitable for high-speed encryption and decryption application. The application can be widely applied to the technical field of information security.

The invention discloses an x86-64 platform-oriented full-pipeline universal Montgomery modular multiplication operation method, which comprises the following steps of: realizing universal Montgomery modular multiplication operation and modular square operation of a 256-bit elliptic curve cryptographic algorithm by utilizing a BMI2 instruction set and an ADX instruction set and combining a pipeline and a multi-emission mechanism of an x86-64 platform through allocating registers and adjusting calculation steps; wherein the general Montgomery modular multiplication operation comprises multiplication operation, the general Montgomery modular square operation comprises square operation, and both the two operations comprise general Montgomery modular reduction operation; the calculation steps of multiplication and square operation are adjusted, so that two addition chains in the operation are executed in parallel; and adjusting the calculation step of the Montgomery module reduction operation, extending the previous round of additive operation of the cycle calculation step in the operation to the next round, and executing the previous round of additive operation and the next round of multiplication operation in parallel. According to the method, the universal Montgomery modular multiplication operation of the x86-64 platform can be realized, and the operation performance is optimized.

The present application belongs to the field of information security protection, and particularly relates to a tamper-proof privacy security ranging positioning method and system. The present application first uses an elliptic curve cryptography algorithm to enable each anchor point participating in positioning to securely obtain its own signature information and hash aggregation encrypted key from a positioning server. The anchor point splices the signature and ranging information, encrypts the same using a hash aggregation algorithm, and then sends the same to a user. The user aggregates and decrypts to obtain the aggregated signature information and ranging information of all anchor points, compares the aggregated signature information with the aggregated signature received from the positioning server, and if the two are consistent, the user constructs a ranging positioning calculation matrix using the aggregated ranging information, completes self-position estimation, and if the two are inconsistent, the present positioning is abandoned. The present application effectively prevents tampering of positioning data during positioning, and simultaneously realizes protection of positioning related information of the anchor points and the user participating in positioning.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

This invention discloses a fully pipelined general Montgomery modular multiplication method for the x86-64 platform. Utilizing the BMI2 and ADX instruction sets, combined with the pipelined and multi-issue mechanisms of the x86-64 platform, and through register allocation and adjustment of computation steps, it implements general Montgomery modular multiplication and modular squaring operations for 256-bit elliptic curve cryptography algorithms. Specifically, the general Montgomery modular multiplication operation includes multiplication, and the general Montgomery modular squaring operation includes squaring; both operations also include general Montgomery modular reduction. The computation steps for multiplication and squaring are adjusted to allow the two addition chains in the operation to execute in parallel. The computation steps for Montgomery modular reduction are also adjusted to extend the previous round of addition in the loop calculation step to the next round, and execute it in parallel with the next round of multiplication. This invention enables general Montgomery modular multiplication on the x86-64 platform, optimizing computational performance.

A processor with elliptic curve cryptography algorithm and a processing method thereof, wherein a first register stores a hash value pointer, a second register stores a public key pointer, a third register stores a signature pointer, and a fourth register stores a verification result. In response to a first elliptic curve cryptography instruction of an instruction set architecture, the processor obtains a hash value of data to be verified through the first register, obtains a public key of a signer through the second register, and obtains a signature through the third register. The processor performs a signature verification operation of the elliptic curve cryptography algorithm on the hash value with the public key and the signature to generate the verification result for storage.

The application relates to the technical field of elliptic curve cryptography, and more particularly to an operation method and system for elliptic curve multi-scalar multiplication based on a smooth number barrel. The method is based on the LFG method, a smooth number is introduced to optimize the barrel construction, the barrel is divided into a smooth number part and a non-smooth number part without increasing the barrel size, the calculation efficiency of the smooth number part is improved, and thus the overall calculation efficiency is improved. The time cost of the doubling point operation in the elliptic curve operation is much smaller than that of the point addition operation; the original LFG method requires 2 times of elliptic curve addition for each barrel element, and after optimization, only 1 time of addition and 1 time of doubling point operation are required, so that the calculation cost is reduced.

The invention provides an industrial Internet of Things equipment encryption communication method and system, and relates to the technical field of data transmission, and the method comprises the steps: obtaining to-be-transmitted industrial image data; performing block processing on the industrial image data to obtain a plurality of image blocks; extracting representative pixels in each image block, and sorting the representative pixels according to block numbers to form an important pixel set; performing compression processing on the important pixel set to form an important data stream; calculating difference values between other non-representative pixels and representative pixels in each image block, and merging the difference values according to block numbers to form a block-level non-representative pixel difference relation set; coding the block-level non-representative pixel difference relation set to form a non-important data stream; establishing session negotiation based on elliptic curve cryptography, and deriving hierarchical encryption parameters; performing differential encryption processing on the important data stream and the non-important data stream to obtain a layered encryption message; and packaging and sending the layered encrypted message through the industrial Internet of Things.

The invention relates to the technical field of network security and cryptography, and discloses an intelligent power grid terminal group security communication method and device based on certificateless public key cryptography, comprising three stages of system initialization and registration, key negotiation and communication, and fault self-healing. A key generation center constructs certificateless public key cryptosystem parameters of elliptic curve cryptography, a security gateway carries out offline registration, an intelligent terminal carries out broadcast registration and is arbitrated and taken over by an intra-group gateway, and encryption communication of a management-gateway layer, a gateway terminal layer and a group broadcast layer is realized by adopting a layered key negotiation architecture. A gateway fault self-healing mechanism of heartbeat detection and arbitration takeover is designed, and meanwhile, a device for realizing the method is matched. Certificate management and key escrow risks are eliminated, the lightweight operation requirement of the terminal is adapted, terminal dynamic registration and gateway fault self-recovery are realized, the broadcast communication efficiency is improved, high communication security, high availability and high efficiency are considered, and the method is suitable for a large-scale smart grid terminal group security communication scene.

A kind of coprocessor and operation system for implementing elliptic curve cryptography algorithm, the coprocessor includes instruction memory and multiple microcode type coprocessor cores, instruction memory is used to store instruction flow written according to preset instruction set, and the instruction set is the set of instructions that microcode type coprocessor core can identify and execute;Multiple microcode type coprocessor cores are used to obtain instruction flow, and the mathematical operation required by elliptic curve cryptography algorithm is executed in parallel according to the instruction in instruction flow.This application can be written according to the algorithm needs instruction flow, improve the algorithm flexibility;Multiple microcode type coprocessor cores parallel operation, improve the algorithm performance.

The invention provides a smart home remote security authentication method, which belongs to the technical field of information security, and comprises a setting stage and an authentication stage, the setting stage provides a basic key and identity information for the authentication stage, and the authentication stage completes identity verification and key negotiation based on the basic key and the identity information; the setting stage comprises the steps of registering intelligent equipment to a home gateway and registering a user, completing basic identity information input and initial key generation, and establishing a trust basis for subsequent authentication; in the authentication stage, based on the secret key and the identity information generated in the setting stage, identity authentication among the user, the SP, the home gateway and the intelligent equipment is completed through multiple rounds of message interaction and an oblivious transmission OT technology, and a final communication secret key K is negotiated. According to the lightweight identity authentication mechanism based on the elliptic curve and casual transmission, the high efficiency of elliptic curve cryptography and the privacy protection characteristic of casual transmission can be combined, and different requirements of the smart home system for safety and lightweight are met.

The application discloses a key cooperative exchange method and device, electronic equipment and medium. In the application, after receiving a peer random number public key sent by a peer key device, the peer random number public key and a first random number public key are sent to a second communication party, the first random number public key being calculated by a first communication party based on an elliptic curve cryptography algorithm; after the second communication party calculates a local random number public key based on the peer random number public key, the first random number public key and a second sub-private key, the local random number public key and an intermediate parameter are sent to the first communication party; and the first communication party calculates a shared key based on the local random number public key, the intermediate parameter and a first sub-private key, and sends the local random number public key to the peer key device.

The invention discloses an Internet of Vehicles condition privacy data sharing method based on a block chain. The method comprises the steps that an authorization center generates system parameters and deploys a smart contract; obtaining a pseudo identity and a secret key based on the attribute set during vehicle registration; the data owner uploads the encrypted data and generates an index to the block chain; a data requester queries the index and sends a signature request; the smart contract verifies that the requester attribute meets the strategy and then returns encrypted data; the requester decrypts and verifies the data integrity, and initiates tracing if an exception is found; and the authorization center traces the identity of the malicious vehicle based on the audit log and executes management operation. According to the method, lightweight elliptic curve cryptography and symmetric encryption are combined, bilinear pairing is abandoned, unification of fine-grained access control, conditional privacy protection and efficient data sharing is achieved, and the problems that in the prior art, calculation overhead is large, privacy protection and access control are difficult to consider at the same time are solved.

The application discloses a smart marketing terminal power data communication security protection method and system, and belongs to the field of power data security, which comprises the following steps: collecting electromagnetic noise spectrum data through a terminal built-in environment electromagnetic sensing module, extracting electromagnetic characteristic factors and constructing an associated model of the electromagnetic characteristic factors and the complexity of elliptic curve cryptography; then building a terminal twin image, combining a long short-term memory neural network to predict a communication instruction sequence and calculate a deviation coefficient; classifying and screening the power data collected by the terminal, integrating the desensitized privacy data into a hash segment of the unique identification of the terminal device, and generating a desensitized power data packet containing the terminal identity identification; generating a data digest according to the encryption parameters determined by the associated model and verifying the access authority, converting the data collection timestamp into a binary coding sequence and embedding the data digest, generating an encrypted data packet with time sequence traceability watermark, and uploading the block chain for notarization; the application realizes the whole-process safety control of power data, and improves the communication security and data credibility.

The invention relates to the field of electrical digital data processing, in particular to an elliptic curve batch scalar multiplication acceleration method based on optimized Jacobian coordinate transformation, which comprises the following steps: generating a scalar set K to be processed and an elliptic curve point set P; performing batch scalar multiplication on K and P by using a Jacobian coordinate system; z coordinates of all points in the calculation result set are extracted, a Z coordinate set is constructed, and a multiplication tree is constructed according to the Z coordinate set; performing modular inverse operation on the root node value of the multiplication tree to obtain a modular inverse element of the root node, and constructing an inverse element tree from top to bottom based on the modular inverse element of the root node; performing batch conversion on the Jacobian coordinates based on leaf node values in the inverse element tree, and converting a calculation result set from the Jacobian coordinates to affine coordinates; according to the method, n times of modular inverse operation is optimized into one time of modular inverse operation and 3n-3 times of modular multiplication operation, so that the overall elliptic curve batch scalar multiplication efficiency is remarkably improved, and the calculation overhead of an elliptic curve cryptographic scheme is reduced.

The application discloses an aircraft anonymous authentication method based on pseudonym aggregation index, and the method constructs a hierarchical collaborative architecture of a trusted authority center, a regional management agency, a low-altitude base station and an unmanned aircraft, completes system initialization, strong authentication and key negotiation based on an elliptic curve cryptography system, generates an aircraft pseudonym by the regional management agency, and generates a unique index through aggregation operation, and the index is chained together with a certificate, and the trusted authority center stores the mapping relationship between the index and the real identity. The aircraft initiates an anonymous authentication request through additive homomorphic encryption, and the index level fast authentication is completed by a calculation node after verification by the base station; in a malicious scene, the ciphertext pseudonym is aggregated, and the real identity is traced back by controlled decryption of the trusted authority center, and the whole life cycle management of the certificate is realized, forming a 'one-time strong authentication and multiple fast authentication' mode. The method reduces authentication complexity and time delay, improves high-concurrency processing capacity, and realizes privacy protection and security supervision.

A system and method for cryptographic decryption using deterministic collapse resonance based on the Total Wave Modified Schrödinger Equation (TWMSE). An encrypted problem state is encoded as a system wavefunction, while candidate solutions are represented as observer wavefunctions. A collapse field with tunable parameters ensures destructive interference cancels incorrect candidates and constructive resonance deterministically selects the correct solution. Unlike brute-force search or probabilistic quantum measurement, the method achieves decryption in a single engineered collapse. Hardware embodiments include optical photonic systems, neuromorphic processors, and resonant field architectures. Applications extend to RSA, Diffie-Hellman, elliptic curve cryptography, lattice-based post-quantum protocols, blockchain, and secure messaging frameworks. Proof-of-concept demonstrations on small instances, including factorization of $N=15$, illustrate feasibility at toy scale. Scaling to larger cryptosystems is envisioned through adaptive parameter control, resonance calibration, and experimental implementation.

This application discloses a decryption method, electronic device, storage medium, and program product based on bilinear pairing operations, belonging to the field of elliptic curve cryptography. The method includes: transforming a first user key using random numbers to obtain a transformed second user key; performing a bilinear pairing operation on the information to be decrypted based on the second user key to obtain a bilinear pairing mapping result of the information to be decrypted; and decrypting the information to be decrypted based on the bilinear pairing mapping result to obtain the plaintext information corresponding to the information to be decrypted.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

The invention discloses a federal continuous learning secure communication method oriented to edge storage limitation, which only retains samples with higher value for model training and limits the capacity of a buffer area through a local buffer area updating mechanism driven by sample contribution evaluation, thereby reducing the calculation and storage overhead of a client in a continuous learning process, and improving the communication efficiency. The training efficiency and stability in a resource-constrained environment are improved; in addition, in combination with a dynamic evaluation mechanism of client marginal contribution and sample value, cross-client and cross-sample coordinated evaluation is realized, the generalization ability of a global model is improved, and the problem of model forgetting in a continuous learning scene is effectively relieved; a bidirectional secure communication mechanism based on an elliptic curve cryptosystem is also introduced, and secure transmission of model parameters and prototype sets in a communication channel is effectively protected in combination with a key derivation function and a symmetric encryption algorithm.

The invention discloses a decryption method based on bilinear pairing operation, electronic equipment, a storage medium and a program product, and belongs to the technical field of elliptic curve cryptography. The method comprises the following steps: converting a first user key through a random number to obtain a converted second user key; based on the second user key, performing bilinear pairing operation on to-be-decrypted information to obtain a bilinear pairing mapping result of the to-be-decrypted information; and based on the bilinear pair mapping result, decrypting the to-be-decrypted information to obtain plaintext information corresponding to the to-be-decrypted information.

The application discloses a kind of lunar space on-board autonomous identity authentication method and system, it is related to space information network security technical field.The method only needs ground management node to participate in registration stage, and authentication stage is completed by on-board node autonomously;User spacecraft and on-board node are interacted by the message carrying digital certificate, time stamp and challenge parameter, and certificate legality verification, radio frequency fingerprint-based physical identity authentication, two-way cryptographic response verification are completed in turn, then session key is generated by negotiation and key verification is completed, and encrypted communication is established after verification passing.The application realizes on-board autonomous two-way double authentication, without ground real-time control, reduces lunar link time delay and on-board resource consumption, combines radio frequency fingerprint physical verification and elliptic curve cryptography mechanism, improves anti-forgery, anti-replay attack ability, adapts to high security, high real-time demand of lunar space user spacecraft random access.

This invention discloses a 5G communication module and communication method. The 5G communication module includes: an initialization module, used to perform hardware self-test based on a preset threshold and establish an initial network connection using multi-band scanning, generating a network connection state containing signal quality parameters and network topology information; a communication channel establishment module, used to establish a secure encrypted communication channel with a cloud server based on the network connection state using an elliptic curve cryptography algorithm, generating a communication channel with encryption trust indicators; a data transmission module, used to perform bidirectional data transmission between the terminal device and the cloud server based on a priority strategy using the communication channel, generating data transmission results containing throughput and latency indicators; and a communication management module, used to dynamically adjust communication parameters and switch operating modes according to energy efficiency ratio thresholds based on the data transmission results, ensuring continuous optimization of communication performance.