41 results about "Elliptic curve cryptography" patented technology

The invention discloses a key sharing and security detection scheme based on an intelligent electric meter, and aims to solve the problems that an untrusted electric meter in an intelligent power grid is difficult to identify effectively, the detection scale is uncontrollable and the communication security is insufficient. According to the scheme, the elliptic curve cryptography, the threshold secret sharing mechanism and the physical unclonable function are combined, and hardware-level binding of the unique identity of the equipment and the secret key is achieved in the registration stage. Through a threshold password mechanism, a plurality of intelligent electric meters cooperatively participate in key reconstruction and encryption communication, and the intelligent electric meters can still work normally when part of the electric meters fail or are broken through. The center node can actively identify a fault or a malicious ammeter and dynamically adjust a communication strategy according to the integrity and correctness of the feedback information. Meanwhile, the scheme supports dynamic identity updating and integrity verification, and effectively resists modeling attacks, Sybil attacks, replay attacks and DoS / DDoS attacks. According to the invention, secure identity authentication, reliable key distribution and efficient anomaly detection are realized, and the security of smart grid terminal communication is improved.

The invention discloses an intelligent marketing terminal power data communication security protection method and system, and belongs to the field of power data security, and the method comprises the steps: collecting electromagnetic noise spectrum data through a built-in environment electromagnetic sensing module of a terminal, extracting electromagnetic characteristic factors, and constructing a correlation model of the electromagnetic characteristic factors and the complexity of an elliptic curve cryptosystem; building a terminal twinborn mirror image, predicting a communication instruction sequence and calculating a deviation coefficient in combination with a long-short-term memory neural network; classifying and screening the power data collected by the terminal, desensitizing privacy data, and then fusing the privacy data into the hash fragment of the unique identifier of the terminal equipment to generate a desensitized power data packet containing the terminal identity identifier; a data abstract is generated according to encryption parameters determined by the association model, the access authority is verified, a data acquisition timestamp is converted into a binary coding sequence, the data abstract is embedded, and an encrypted data packet with a time sequence traceability watermark is generated and uploaded to the block chain for evidence storage; according to the invention, full-process security management and control of power data are realized, and the communication security and the data credibility are improved.

The present invention relates to the field of smart city networks, specifically to systems and methods for enhancing security, scalability, and data integrity. More particularly, the invention focuses on a decentralized system for authentication and data management in Internet of Things (IoT) ecosystems within a smart city context. The system addresses critical challenges in conventional centralized architectures, such as single points of failure, scalability bottlenecks, and vulnerabilities to malicious attacks. By integrating a multi-layered approach that combines elliptic curve cryptography for secure node registration, a trust analysis model for real-time behavioral and data trustworthiness assessment, and a blockchain network for decentralized, immutable transaction verification, this system provides a robust and resilient solution. The system ensures secure communication between IoT nodes and fog servers, validates data integrity, and maintains a transparent and tamper-proof ledger of activities, thereby facilitating reliable and efficient operation of various smart city services.

The invention provides a medical college online learning system based on big data analysis, and relates to the technical field of data processing, and the system comprises a knowledge graph construction module which is used for carrying out the preprocessing and multi-dimensional feature extraction of original learning data uploaded in a medical college online learning environment, and generating a dynamically updated medical knowledge graph; the vector conversion module is used for encrypting and decomposing the entity attribute identifier in the medical knowledge graph by utilizing elliptic curve cryptography to generate a multi-dimensional feature vector with three-dimensional space coordinates; and the data extraction module is used for constructing a data distribution model based on the space coordinates of the multi-dimensional feature vectors and extracting local density concentration characteristic values and boundary dispersion characteristic values of the data distribution model. According to the method, the accuracy, the safety and the efficiency of online learning of medical colleges are comprehensively improved by dynamically constructing the medical knowledge graph, encrypting the feature vectors, accurately evaluating the entity association degree and combining meta-learning to generate a differentiated learning path.

The invention belongs to the field of unmanned aerial vehicle auxiliary MIMO system physical layer authentication, and discloses a bidirectional privacy protection unmanned aerial vehicle auxiliary MIMO system physical layer authentication method, which comprises the following steps: step 1, considering a frame consisting of a pilot frequency and a data symbol, and establishing a carrier frequency offset statistical model representing the identity of an unmanned aerial vehicle; step 2, establishing a CFO session key negotiation algorithm based on the carrier frequency offset statistical model and the elliptic curve cryptography; 3, designing an unmanned aerial vehicle identity bidirectional authentication framework to complete identity authentication based on a carrier frequency offset statistical model and a CFO session key negotiation algorithm; and 4, based on the carrier-free frequency offset statistical model, performing authentication performance analysis, and quantifying the authentication effect. Compared with the prior art, the method has the advantages that the robustness and the accuracy of attacking identity-based impersonation attacks are better.

The present disclosure provides a network registration method, device and related equipment, which relates to the technical field of communication. The method comprises: sending a network registration request to a home network, wherein the network registration request carries a user hidden identification code, the user hidden identification code includes a protection scheme identifier, a home network public key identifier and a protection scheme output, the protection scheme output includes an elliptic curve cryptography public key of the user, a post-quantum ciphertext, a user identification code ciphertext and a message authentication code; receiving the network registration response returned by the home network. Through the above technical means, the problem that the quantum algorithm affects the user network registration in the prior art, resulting in that the security of the user network registration cannot be guaranteed, is solved.

This application discloses a method, apparatus, electronic device, and medium for collaborative key exchange. In this application, upon receiving a peer random number public key from a peer key device, the peer random number public key and a first random number public key are sent to a second communicating party. The first random number public key is calculated by the first communicating party using an elliptic curve cryptography algorithm. The second communicating party calculates its own random number public key based on the peer random number public key, the first random number public key, and a second sub-private key, and then sends its own random number public key and intermediate parameters to the first communicating party. The first communicating party calculates a shared key based on its own random number public key, intermediate parameters, and the first sub-private key, and then sends its own random number public key to the peer key device.

This application relates to a fault-tolerant data security aggregation method, apparatus, and computer device. The method includes: an aggregator generating and broadcasting public system parameters based on a high-performance elliptic curve cryptography system; collecting public keys from each participant to generate a global public key set and broadcasting it; each participant negotiating a shared session key with the other participants based on their own private key and the global public key set; generating mask data with global XOR cancellation properties through a pseudo-random function XOR operation; filling the original data into the corresponding anonymous sequence number array positions, filling the rest with zeros, and XORing it with the mask to generate an encrypted vector, which is then uploaded; the aggregator XORing all encrypted vectors bit-by-bit to cancel the mask and restore the plaintext set; if some participants time out and disconnect, the aggregator broadcasts a disconnection list, collects the mask recovery shares of online participants to generate a residual mask, and cancels it to restore the plaintext set of online participants. This method can improve data aggregation efficiency and system robustness.

A processor with an elliptic curve cryptography algorithm and a processing method thereof, including a register storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptography algorithm instruction of an instruction set architecture, the processor obtains a plaintext input from a first memory space, performs an elliptic curve cryptography algorithm encryption operation on the plaintext input using the public key obtained through the register, encrypts the plaintext input into a ciphertext output, and writes the ciphertext output to a second memory space.

The embodiment of the invention provides a data processing method and device, a processor, computer equipment, a medium and a program, and the processor comprises a decoder which responds to a microcode of an elliptic curve cryptographic algorithm and decodes a plurality of instructions, and at least one part of the instructions are basic instructions; the logical operation unit comprises a basic instruction operation subunit used for operating the basic instruction; wherein part or all of the basic instruction is a modular operation instruction obtained by taking a prime number p as a modulus. According to the embodiment of the invention, the complexity and deployment cost of hardware operation can be remarkably reduced.

The application discloses a prime number field elliptic curve password co-processor, which comprises a register module, a NAF encoding module, an operation module and a controller module; wherein the operation module comprises a modular multiplier unit, a modular squarer unit, a first modular adder unit and a second modular adder unit; the modular multiplier unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular multiplication operation; the modular squarer unit is connected with the first modular adder unit and the second modular adder unit and constitutes a three-stage pipeline structure to perform modular squaring operation; the modular multiplier unit and the modular squarer unit operate in parallel, which can accelerate the operation rate, realize higher performance, and achieve the best trade-off between area and performance, and is very suitable for high-speed encryption and decryption application. The application can be widely applied to the technical field of information security.

Various embodiments relate to a data processing system comprising instructions embodied in a non-transitory computer readable medium, the instructions for an elliptic curve cryptography authentication method based on an elliptic curve in a processor, the instructions, comprising: generating, by a verifier, a random challenge r; multiplying, by the verifier, the random challenge r by a basepoint G to produce R; sending an x coordinate of R to a prover; receiving an x-coordinate of a first point P1 and a second point P2 from the prover, wherein P1 is based on a random share q1 of the private key q of the prover and R, and wherein P2 is based on a random share q2 of the private key q and R; where q=q1−q2; finding a point P1′ on the elliptic curve having an x-coordinate of the first point P1; finding a point P2′ on the elliptic curve having an x-coordinate of the second point P2; and authenticating the prover when an x-coordinate of one of (P1′+P2′) and (P1′−P2′) matches an x-coordinate of r·Q, wherein Q is a public key of the prover.

The invention discloses an x86-64 platform-oriented full-pipeline universal Montgomery modular multiplication operation method, which comprises the following steps of: realizing universal Montgomery modular multiplication operation and modular square operation of a 256-bit elliptic curve cryptographic algorithm by utilizing a BMI2 instruction set and an ADX instruction set and combining a pipeline and a multi-emission mechanism of an x86-64 platform through allocating registers and adjusting calculation steps; wherein the general Montgomery modular multiplication operation comprises multiplication operation, the general Montgomery modular square operation comprises square operation, and both the two operations comprise general Montgomery modular reduction operation; the calculation steps of multiplication and square operation are adjusted, so that two addition chains in the operation are executed in parallel; and adjusting the calculation step of the Montgomery module reduction operation, extending the previous round of additive operation of the cycle calculation step in the operation to the next round, and executing the previous round of additive operation and the next round of multiplication operation in parallel. According to the method, the universal Montgomery modular multiplication operation of the x86-64 platform can be realized, and the operation performance is optimized.

The present disclosure relates to an elliptic curve cryptography-based search method, device, equipment and storage medium; in the present scheme, after the cloud server receives the search trapdoor sent by a second user, the matching encrypted target document information is found, the auxiliary key corresponding to the second user in the authorized user list is used to pre-decrypt the encrypted target document information, the second user uses the user key to decrypt the target document identifier, and the cloud server returns the corresponding target encrypted document to the second user; the second user decrypts the clear text document; it can be seen that the present scheme does not involve bilinear pair operation when searching, and the search efficiency is improved; in the present scheme, the private key is divided into two parts of keys, which are used by the cloud server and the second user respectively, the decryption permission of each user can be flexibly controlled, when the user is revoked, only the corresponding information needs to be deleted from the authorized user list, the revocation cost is small, and other users are not affected, nor is the existing ciphertext data affected.

The application discloses a binary field elliptic curve cryptography coprocessor, which comprises a data register module, a first modular multiplier module, a second modular multiplier module, a squarer module, an adder module and a controller module; wherein the first modular multiplier module is designed as a two-stage pipeline structure, and the second modular multiplier module is designed as a four-stage pipeline structure, so that the operation frequency of the system can be effectively improved; thus, the high frequency and small area can be maintained while the high performance is kept, and the optimal tradeoff between the area and the performance is realized. The binary field elliptic curve cryptography coprocessor is suitable for the application of lightweight password encryption and decryption in the Internet of Things and has good practicability. The application can be widely applied in the field of information security technology.

The present application belongs to the field of information security protection, and particularly relates to a tamper-proof privacy security ranging positioning method and system. The present application first uses an elliptic curve cryptography algorithm to enable each anchor point participating in positioning to securely obtain its own signature information and hash aggregation encrypted key from a positioning server. The anchor point splices the signature and ranging information, encrypts the same using a hash aggregation algorithm, and then sends the same to a user. The user aggregates and decrypts to obtain the aggregated signature information and ranging information of all anchor points, compares the aggregated signature information with the aggregated signature received from the positioning server, and if the two are consistent, the user constructs a ranging positioning calculation matrix using the aggregated ranging information, completes self-position estimation, and if the two are inconsistent, the present positioning is abandoned. The present application effectively prevents tampering of positioning data during positioning, and simultaneously realizes protection of positioning related information of the anchor points and the user participating in positioning.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.

Provided is an apparatus for a low CNOT count quantum point doubling circuit targeting to minimize resource consumption during quantum cryptanalysis, particularly in elliptic curve cryptography (ECC). The apparatus, according to an embodiment of this present invention, is designed to reduce the overall depth of cryptographic analysis by implementing an efficient point-doubling mechanism.

This invention discloses a fully pipelined general Montgomery modular multiplication method for the x86-64 platform. Utilizing the BMI2 and ADX instruction sets, combined with the pipelined and multi-issue mechanisms of the x86-64 platform, and through register allocation and adjustment of computation steps, it implements general Montgomery modular multiplication and modular squaring operations for 256-bit elliptic curve cryptography algorithms. Specifically, the general Montgomery modular multiplication operation includes multiplication, and the general Montgomery modular squaring operation includes squaring; both operations also include general Montgomery modular reduction. The computation steps for multiplication and squaring are adjusted to allow the two addition chains in the operation to execute in parallel. The computation steps for Montgomery modular reduction are also adjusted to extend the previous round of addition in the loop calculation step to the next round, and execute it in parallel with the next round of multiplication. This invention enables general Montgomery modular multiplication on the x86-64 platform, optimizing computational performance.

A processor with elliptic curve cryptography algorithm and a processing method thereof, wherein a first register stores a hash value pointer and a second register stores a private key pointer. In response to a first elliptic curve cryptography instruction of an instruction set architecture, the processor obtains a hash value of data to be signed through the first register, obtains a private key through the second register, performs a signature operation of the elliptic curve cryptography algorithm on the hash value by using the private key to generate a signature, and writes the signature into a second memory space.

A processor with elliptic curve cryptography algorithm and a processing method thereof, wherein a first register stores a hash value pointer, a second register stores a public key pointer, a third register stores a signature pointer, and a fourth register stores a verification result. In response to a first elliptic curve cryptography instruction of an instruction set architecture, the processor obtains a hash value of data to be verified through the first register, obtains a public key of a signer through the second register, and obtains a signature through the third register. The processor performs a signature verification operation of the elliptic curve cryptography algorithm on the hash value with the public key and the signature to generate the verification result for storage.

The present invention discloses a cross-domain authentication method for the Internet of Vehicles (IoV) based on blockchain and certificateless ECC. The method comprises the following steps: a trusted authority generates and publishes global parameters for certificateless elliptic curve cryptography and deploys a blockchain network; all roadside units and vehicles sequentially initiate registration requests to the trusted authority; legitimate roadside units receive pseudonyms and legitimate vehicles receive keys returned by the trusted authority; registered vehicles and the roadside units perform mutual authentication and key negotiation; the vehicle sends a signed authentication request packet to the roadside unit; the roadside unit verifies the freshness of the request and the validity of the signature through a blockchain smart contract, and then returns the data packet to the vehicle via a secure channel for verification; and the vehicle is reauthenticated when its position changes. The present invention adopts a certificateless elliptic curve cryptography system, eliminating the traditional certificate transmission and verification overhead and reducing communication latency.

The application relates to the technical field of elliptic curve cryptography, and more particularly to an operation method and system for elliptic curve multi-scalar multiplication based on a smooth number barrel. The method is based on the LFG method, a smooth number is introduced to optimize the barrel construction, the barrel is divided into a smooth number part and a non-smooth number part without increasing the barrel size, the calculation efficiency of the smooth number part is improved, and thus the overall calculation efficiency is improved. The time cost of the doubling point operation in the elliptic curve operation is much smaller than that of the point addition operation; the original LFG method requires 2 times of elliptic curve addition for each barrel element, and after optimization, only 1 time of addition and 1 time of doubling point operation are required, so that the calculation cost is reduced.

The invention provides an industrial Internet of Things equipment encryption communication method and system, and relates to the technical field of data transmission, and the method comprises the steps: obtaining to-be-transmitted industrial image data; performing block processing on the industrial image data to obtain a plurality of image blocks; extracting representative pixels in each image block, and sorting the representative pixels according to block numbers to form an important pixel set; performing compression processing on the important pixel set to form an important data stream; calculating difference values between other non-representative pixels and representative pixels in each image block, and merging the difference values according to block numbers to form a block-level non-representative pixel difference relation set; coding the block-level non-representative pixel difference relation set to form a non-important data stream; establishing session negotiation based on elliptic curve cryptography, and deriving hierarchical encryption parameters; performing differential encryption processing on the important data stream and the non-important data stream to obtain a layered encryption message; and packaging and sending the layered encrypted message through the industrial Internet of Things.

The invention relates to the technical field of network security and cryptography, and discloses an intelligent power grid terminal group security communication method and device based on certificateless public key cryptography, comprising three stages of system initialization and registration, key negotiation and communication, and fault self-healing. A key generation center constructs certificateless public key cryptosystem parameters of elliptic curve cryptography, a security gateway carries out offline registration, an intelligent terminal carries out broadcast registration and is arbitrated and taken over by an intra-group gateway, and encryption communication of a management-gateway layer, a gateway terminal layer and a group broadcast layer is realized by adopting a layered key negotiation architecture. A gateway fault self-healing mechanism of heartbeat detection and arbitration takeover is designed, and meanwhile, a device for realizing the method is matched. Certificate management and key escrow risks are eliminated, the lightweight operation requirement of the terminal is adapted, terminal dynamic registration and gateway fault self-recovery are realized, the broadcast communication efficiency is improved, high communication security, high availability and high efficiency are considered, and the method is suitable for a large-scale smart grid terminal group security communication scene.

A kind of coprocessor and operation system for implementing elliptic curve cryptography algorithm, the coprocessor includes instruction memory and multiple microcode type coprocessor cores, instruction memory is used to store instruction flow written according to preset instruction set, and the instruction set is the set of instructions that microcode type coprocessor core can identify and execute;Multiple microcode type coprocessor cores are used to obtain instruction flow, and the mathematical operation required by elliptic curve cryptography algorithm is executed in parallel according to the instruction in instruction flow.This application can be written according to the algorithm needs instruction flow, improve the algorithm flexibility;Multiple microcode type coprocessor cores parallel operation, improve the algorithm performance.

The invention provides a smart home remote security authentication method, which belongs to the technical field of information security, and comprises a setting stage and an authentication stage, the setting stage provides a basic key and identity information for the authentication stage, and the authentication stage completes identity verification and key negotiation based on the basic key and the identity information; the setting stage comprises the steps of registering intelligent equipment to a home gateway and registering a user, completing basic identity information input and initial key generation, and establishing a trust basis for subsequent authentication; in the authentication stage, based on the secret key and the identity information generated in the setting stage, identity authentication among the user, the SP, the home gateway and the intelligent equipment is completed through multiple rounds of message interaction and an oblivious transmission OT technology, and a final communication secret key K is negotiated. According to the lightweight identity authentication mechanism based on the elliptic curve and casual transmission, the high efficiency of elliptic curve cryptography and the privacy protection characteristic of casual transmission can be combined, and different requirements of the smart home system for safety and lightweight are met.

The application discloses a key cooperative exchange method and device, electronic equipment and medium. In the application, after receiving a peer random number public key sent by a peer key device, the peer random number public key and a first random number public key are sent to a second communication party, the first random number public key being calculated by a first communication party based on an elliptic curve cryptography algorithm; after the second communication party calculates a local random number public key based on the peer random number public key, the first random number public key and a second sub-private key, the local random number public key and an intermediate parameter are sent to the first communication party; and the first communication party calculates a shared key based on the local random number public key, the intermediate parameter and a first sub-private key, and sends the local random number public key to the peer key device.

The invention discloses an Internet of Vehicles condition privacy data sharing method based on a block chain. The method comprises the steps that an authorization center generates system parameters and deploys a smart contract; obtaining a pseudo identity and a secret key based on the attribute set during vehicle registration; the data owner uploads the encrypted data and generates an index to the block chain; a data requester queries the index and sends a signature request; the smart contract verifies that the requester attribute meets the strategy and then returns encrypted data; the requester decrypts and verifies the data integrity, and initiates tracing if an exception is found; and the authorization center traces the identity of the malicious vehicle based on the audit log and executes management operation. According to the method, lightweight elliptic curve cryptography and symmetric encryption are combined, bilinear pairing is abandoned, unification of fine-grained access control, conditional privacy protection and efficient data sharing is achieved, and the problems that in the prior art, calculation overhead is large, privacy protection and access control are difficult to consider at the same time are solved.