28 results about "Elliptic Curve Digital Signature Algorithm" patented technology

The invention provides a financial information management method and system based on a block chain technology. The method comprises the following steps: receiving a financial transaction request initiated by a user, and performing hash operation on a data block to generate a hash value of the data block; based on the hash value and identity verification information of the user, generating an encrypted signature by using an improved elliptic curve digital signature algorithm, and binding the transaction time of the preliminary transaction proposal with the encrypted signature by using a timestamp service; broadcasting the data block corresponding to the preliminary transaction proposal and the encrypted signature to a plurality of nodes by using a distributed network so as to determine an effective financial transaction; and linking the data blocks corresponding to the effective financial transactions to a preset block chain according to a time sequence and a logic relationship based on a Merkle tree structure, and regularly checking the consistency and integrity of data on the chain. The financial information management method which is high in safety, cannot be tampered and is traceable can be provided, and the safety of financial transactions is improved.

A computer implemented method includes receiving data on which to perform elliptic curve digital signature algorithm (ECDSA) and mapping ECDSA computations from affine coordinates to projective coordinates. A complete addition formula is executed on the data with operations changing based on bits of a secret key by minimizing execution time and power consumption differences via a finite adder. Modular multiplications are executed via a finite multiplier module. At least one countermeasure selected from the group consisting of randomizing a base point, generating a secret key using a two random number seed random number generator, using a randomized secret key to generate a signature, and randomizing signature generation is executed.

Method and system for generating digital signature following one or more secure protocols based on a threshold additively homomorphic encryption (TAHE) over a broadcast channel, where a threshold of parties of a decentralized network produces digital signature by following a Universally Composable secure protocol configured to output Elliptic curve digital signature algorithm (ECDSA) signature or a Schnorr signature. At least one client may cooperate with the threshold of parties to generate digital signature, or threshold of parties may cooperate to generate digital signature without a client. Method may include additively homomorphic encryption (AHE) distributed key generation (DKG), ECDSA / Schnorr DKG, ECDSA / Schnorr presigning, providing ECDSA / Schnorr child keys, ECDSA / Schnorr signing, wallet transfer and / or network reconfiguration.

The invention discloses a digital copyright evidence storage method based on a block chain, electronic equipment and a readable storage medium. The digital copyright evidence storage method comprises the following steps: collecting original content and environmental data of a digital work, generating a content hash value through a hash algorithm, combining the content hash value with the environmental data to form a to-be-signed meta-information packet, generating a data signature by using an elliptic curve digital signature algorithm, forming a signature copyright abstract data packet, and performing hash again to obtain a structured abstract hash value; the method comprises the following steps: analyzing environmental data of a digital work to obtain a data confidence coefficient, constructing a Merkel tree in combination with a structured hash value, and obtaining a root node value and path index information; a block chain main chain stores root node and key element information, generates a block chain auxiliary chain mapping identifier through a work ID and type hash, and stores a structured copyright data signature packet, a path index and a confidence coefficient in an under-chain database.

The invention provides an enhanced lightweight authentication method and system for Internet of Vehicles, and the method comprises the steps: carrying out the distinguishing design of a message signature and verification mechanism according to the demands of differentiated authentication in a V2I (vehicle-to-road communication) scene and a V2V (vehicle-to-vehicle communication) scene, guaranteeing that the communication between a vehicle terminal and a road side unit is high in reliability, and carrying out the verification of the communication between the vehicle terminal and the road side unit; meanwhile, the flexibility and the safety of dynamic networking between the vehicles are ensured; in the certificate generation and updating process, a key evolution mechanism based on a hash chain and an XOR operation is adopted, so that the forward security and privacy protection capability are improved; efficient signature and verification are realized through an elliptic curve digital signature algorithm, and the calculation and communication overhead is reduced; the protocol supports rapid update and revocation of the certificate, and the anti-attack capability and flexibility of the system are enhanced. According to the method, the vehicle identity can be effectively prevented from being tracked, the communication security and user privacy in an Internet of Vehicles environment are guaranteed, and the security and practicability of an Internet of Vehicles system are remarkably improved.

There is disclosed a method of authenticating credential data signed on a blockchain-based validation and authentication platform, the method being based a computer readable medium storing machine-readable instructions which when executed by the processor cause the processor to generate an ECDSA (Elliptic Curve Digital Signature) algorithm-based digital signature using a private key from an issuer, and authenticate the signed credential data via the ECDSA algorithm directly using a corresponding public key. As another aspect, a system for validating / authenticating academic credentials and facilitating equivalency between different credentials is disclosed comprising a blockchain for storing signed credential data and for processing transactions, a database for storing non-transactional data, a cryptographic algorithm for signing the credential data and for subsequently verifying the generated digital signatures; and a military grade encryption algorithm for encrypting the data put on blockchain.

The present invention discloses a lightweight distributed security communication authentication method and system based on blockchain. The method completes the preliminary configuration and preprocessing through a security management center, generates the public parameters of the system and the information used in the signature authentication process by using the elliptic curve digital signature algorithm, and publishes the authentication information to the blockchain; the edge nodes perform the processing and operation of data locally to complete the authentication process of multiple subjects between the edge nodes and devices and between devices; after the multi-subject authentication process is completed, the negotiation of the shared key is realized through the transmission of three pieces of information. The present invention uses blockchain to realize the storage of key information, ensures the publicity and traceability of data, and reduces the centralization function of the security management center. In the multi-subject authentication process, the data is stored distributively, the distributed authentication between devices is realized, and the negotiation of the shared key is completed, providing security guarantee for the subsequent data transmission.

The application discloses a blockchain-based digital copyright evidence storage method, an electronic device and a readable storage medium. The digital copyright evidence storage method comprises the following steps: collecting original content and environment data of a digital work, generating a content hash value and environment data by a hash algorithm, combining the content hash value and the environment data into a to-be-signed meta-information package, generating a data signature by an elliptic curve digital signature algorithm, forming a signed copyright digest data package, and obtaining a structured digest hash value by hashing again; analyzing the environment data of the digital work to obtain a data confidence coefficient, constructing a Merkle tree in combination with the structured hash value, obtaining a root node value and path index information; storing the root node and key meta-information in a blockchain main chain, generating a blockchain auxiliary chain mapping identifier through a work ID and a type hash, and storing a structured copyright data signature package, path index and confidence coefficient in an off-chain database.

A framework for managing authorization for the execution of actions on a computing system is disclosed. For example, techniques for executing authorization of a user and / or a client for access to an infrastructure service provided by a cloud service provider (CSP) and / or for the execution of an action on the infrastructure service include receiving a request for an action to be performed by the infrastructure service and identifying one or more authorizers from which authorization for the action will be received, the techniques further including determining one or more operations to be performed by the cloud infrastructure service to complete the action, signing the one or more operations with an elliptic curve digital signature algorithm, storing the signed one or more operations, and initiating a query procedure for authorization of the action based at least in part on a response received from the one or more authorizers.

Methods and devices for generating an elliptic curve digital signature algorithm signature (r, w) are described. In one embodiment, a method includes: i) forming, by a node, a signing group with other nodes; ii) obtaining, by the node, based on a secure random number: a) a multiplicative inverse of the secure random number; and b) the first signature component, r, wherein the first signature component is determined based on the secure random number and an elliptic curve generator point; iii) determining, by the node, a partial signature based on a private secret share, the multiplicative inverse of the secure random number and the first signature component; iv) receiving, by the node, partial signatures from other nodes of the signing group; and v) generating, by the node, the second signature component, w, based on determined and received partial signatures.

A computer implemented method includes receiving data on which to perform elliptic curve digital signature algorithm (ECDSA) and mapping ECDSA computations from affine coordinates to projective coordinates. A complete addition formula is executed on the data with operations changing based on bits of a secret key by minimizing execution time and power consumption differences via a finite adder. Modular multiplications are executed via a finite multiplier module. At least one countermeasure selected from the group consisting of randomizing a base point, generating a secret key using a two random number seed random number generator, using a randomized secret key to generate a signature, and randomizing signature generation is executed.

The application relates to a multi-participant elliptic curve attack method and device and a storage medium, and relates to the technical field of cryptographic security verification. The application collects public keys of all participants, and obtains an elliptic curve base point of an elliptic curve digital signature algorithm; the public key of a first participant in the public keys of all participants is iteratively randomly selected with a coefficient, and a current coefficient public key Q1 and the base point G are used to calculate a point; after each random walk calculation of the point, collision detection is performed in a point sequence range calculated by the first participant; if collision occurs, a private key is obtained according to a collision result; starting from the public key of a second participant, collision detection is performed in a point sequence range calculated by the current participant and all previous participants; when collision occurs, a private key is obtained according to a collision result.

The present invention discloses a security-enhanced Internet of Vehicles (IoV) trust assessment method combined with transfer learning, which relates to the field of IoV security. The method comprises the following steps: constructing an IoV model for urban roads based on urban road conditions; designing an interactive authentication module based on the elliptic curve Diffie-Hellman protocol and the elliptic curve digital signature algorithm based on the IoV model for urban roads; introducing a true and false message identification method based on a three-factor trust model improved by a transfer learning method based on the interactive authentication module, designing a transfer learning model TranferMegaCRN in speed expectation sub-factor analysis to obtain the predicted speed of the message sender; designing a vehicle trust value calculation method based on the transfer learning model TranferMegaCRN using an improved Bayesian method and a density-based clustering screening algorithm, and constructing an IoV trust management model; and completing vehicle trust assessment based on the IoV trust management model.

Embodiments of the invention provide enhanced security solutions which are enforced through the use of cryptographic techniques. It is suited for, but not limited to, use with blockchain technologies such as the Bitcoin blockchain. Methods and devices for generating an elliptic curve digital signature algorithm signature (r, w) are described. In one embodiment, a method includes: i) forming, by a node, a signing group with other nodes; ii) obtaining, by the node, based on a secure random number: a) a multiplicative inverse of the secure random number; and b) the first signature component, r, wherein the first signature component is determined based on the secure random number and an elliptic curve generator point; iii) determining, by the node, a partial signature based on a private secret share, the multiplicative inverse of the secure random number and the first signature component; iv) receiving, by the node, partial signatures from other nodes of the signing group; and v) generating, by the node, the second signature component, w, based on determined and received partial signatures.

There is disclosed a method of authenticating credential data signed on a blockchain-based validation and authentication platform, the method being based a computer readable medium storing machine-readable instructions which when executed by the processor cause the processor to generate an ECDSA (Elliptic Curve Digital Signature) algorithm-based digital signature using a private key from an issuer, and authenticate the signed credential data via the ECDSA algorithm directly using a corresponding public key. As another aspect, a system for validating / authenticating academic credentials and facilitating equivalency between different credentials is disclosed comprising a blockchain for storing signed credential data and for processing transactions, a database for storing non-transactional data, a cryptographic algorithm for signing the credential data and for subsequently verifying the generated digital signatures; and a military grade encryption algorithm for encrypting the data put on blockchain.

The invention discloses a safety-enhanced Internet of Vehicles trust evaluation method in combination with transfer learning, and relates to the field of Internet of Vehicles safety, and the method comprises the steps: constructing an urban road Internet of Vehicles model based on the urban road condition; the method comprises the following steps: designing an interactive authentication module based on an elliptic curve Diffie-Hellman protocol and an elliptic curve digital signature algorithm on the basis of an urban road vehicle networking model; based on an interaction authentication module, introducing a true and false message identification method of a three-factor trust model improved based on a transfer learning method, and designing a transfer learning model TransMegaCRN in speed expectation sub-factor analysis to obtain the prediction speed of a message sender; based on a transfer learning model TransferMegaCRN, designing a vehicle trust value calculation method by using an improved Bayesian method and a density-based clustering screening algorithm, and constructing an Internet of Vehicles trust management model; and vehicle trust evaluation is completed based on the Internet of Vehicles trust management model.

Systems and methods for securing an Elliptic Curve Digital Signature Algorithm (ECDSA) nonce communicated between symmetric and asymmetric cryptographic co-processors in a heterogeneous system are discussed. In some embodiments, a processor may include: a symmetric portion configured to generate Boolean masked shares, wherein the Boolean masked shares constitute a nonce; and an asymmetric portion coupled to the symmetric portion, the asymmetric portion configured to produce an ECDSA signature based, at least in part, upon the nonce.

The present invention relates to the technical field of pump station safety environment, and in particular to a method and device for establishing a pump station safety control environment based on blockchain. The method includes: using the elliptic curve digital signature algorithm to sign the information of the pump station control operation form and the pump station operation monitoring data, and authenticating the identity of the nodes uploading the data; constructing a data block and securely storing the authenticated data; using an improved PBFT consensus algorithm to obtain a consistent consensus protocol for each node of the blockchain after secure storage, and recording the data block that has completed consensus verification in the blockchain; deploying a smart contract to automatically analyze the running data in the blockchain, detect abnormal data and faults and trigger an alarm. Through the distributed network architecture and digital signature algorithm of the blockchain, the security of the pump station operation data during transmission and storage can be ensured, and the risks of data leakage, tampering or loss can be avoided.

The embodiments of this application relate to the field of industrial data encryption processing technology, and disclose a supply chain data access control method that supports attribute revocation and update. This method is applied to an established supply chain data access control model, which consists of a data accesser, a data owner, an authentication and authorization center, an attribute authorization center, and a cloud service provider. Through global initialization, attribute key generation, data encryption, and data decryption, the data accesser can securely access the data provided by the data owner, achieving efficient and secure data access control. The supply chain data access control model supports complete revocation and update of user attributes. By applying elliptic curve digital signature algorithms, hash algorithms, and asynchronous update strategies, it effectively eliminates single-point performance bottlenecks and leakage problems, achieving efficient complete revocation and update of attributes.

Techniques are presented for using a processing resource to control access to a resource. Steps comprise generating an elliptic curve digital signature algorithm signature comprising a first signature component, r, and a second signature component, w, the generation step comprising: forming, by a node, a signing group with other nodes; obtaining, by the node, based on a secure random number: a) a multiplicative inverse of the secure random number; and b) the first signature component, r, wherein the first signature component is determined based on the secure random number and an elliptic curve generator point; determining, by the node, a partial signature; receiving partial signatures from other nodes of the signing group; generating the second component; and using the signature to control access to the and / or transfer of a resource over a computer-implemented network.

The invention relates to the technical field of information security protection, in particular to a file vector electronic seal generation method based on digital signature, and the method comprises the steps: obtaining a to-be-signed electronic contract, a user information sequence of the to-be-signed electronic contract, and a plurality of historical electronic contracts; obtaining a statement importance index of each statement according to the importance degree of each statement; according to the number and the discrete degree of the amount data in each paragraph, the number of the date data, the difference of the semantic similarity between each paragraph and the adjacent paragraph, and the average level of the sentence important indexes of all sentences in each paragraph, obtaining the sentence important index of each paragraph, and combining the difference between each paragraph and each paragraph in the historical electronic contract to obtain the sentence important index of each paragraph. Obtaining an encryption key weight of each paragraph; and obtaining a k value of an elliptic curve digital signature algorithm according to the encryption key weights of all paragraphs in the electronic contract to be signed and the user information sequence. According to the method and the device, the k value strongly bound with the content of the to-be-signed electronic contract is acquired, so that the safety of the vector electronic seal is improved.

The invention relates to a multi-participant elliptic curve attack method and device and a storage medium, and relates to the technical field of encryption security verification. The method comprises the following steps: collecting public keys of all participants, and obtaining an elliptic curve base point of an elliptic curve digital signature algorithm; for the public key of the first participant in the public keys of all the participants, iteratively and randomly selecting a coefficient # imgabs0 #, calculating a point # imgabs2 # by using a public key Q1 of a current coefficient # imgabs1 # and a base point G, performing collision detection in a point sequence range calculated by the first participant after each random walk calculation point, and if collision occurs, solving a discrete logarithm according to a collision result to obtain a private key; starting from the public key of the second participant, when collision detection is carried out, collision detection is carried out in a point sequence range calculated by the current participant and all previous participants; during collision, the discrete logarithm is solved according to a collision result to obtain a private key.

The invention discloses a power data privacy protection sharing method and system and electronic equipment, and relates to the technical field of power system security. The method is applied to a verification node in a block chain network, a target model and a first public key are obtained, the target model is a trained local model uploaded to the block chain network by a client, and the local model is signed by the client by using a first private key after being encrypted by using a symmetric key; the first public key and the first private key are generated by the client through an elliptic curve digital signature algorithm; after verifying the integrity of the local model based on the first public key, determining to-be-selected models based on a preset condition, and forming a to-be-selected model group; and based on a second private key, performing group signature on the to-be-selected model group, and uploading the to-be-selected model group to an aggregation node in the block chain network for aggregation to obtain a global model, the second private key being generated by the verification node through an elliptic curve digital signature algorithm. Therefore, the data privacy security problem existing in the electric power data sharing calculation process is solved.

A computer implemented method includes receiving data on which to perform elliptic curve digital signature algorithm (ECDSA) and mapping ECDSA computations from affine coordinates to projective coordinates. A complete addition formula is executed on the data with operations changing based on bits of a secret key by minimizing execution time and power consumption differences via a finite adder. Modular multiplications are executed via a finite multiplier module. At least one countermeasure selected from the group consisting of randomizing a base point, generating a secret key using a two random number seed random number generator, using a randomized secret key to generate a signature, and randomizing signature generation is executed.

A full-threshold elliptic curve digital signature method based on an SPDZ protocol comprises the steps of generating a security quintuple in an offline stage and using the security quintuple to generate a signature in an online stage, in the invention, a security in the SPDZ protocol is combined with a multiplication, and the combination is introduced into a two-party elliptic curve digital signature algorithm (ECDSA); extra verification is completed by slightly sacrificing a part of time and communication of the online stage, the correctness of online secret multiplication can be detected, and the time and communication traffic required by unintended transmission of the offline stage can be greatly reduced by using a more efficient cryptographic tool in the offline stage by widening the security, so that the security of the online secret multiplication is improved. And the number of users can be further increased and expanded into full-threshold signature.

The present application relates to the field of information security protection technology, and specifically to a method for generating a vector electronic seal for a document based on a digital signature. The method comprises: obtaining an electronic contract to be signed and its user information sequence, as well as multiple historical electronic contracts; obtaining a sentence importance index for each sentence based on the importance of each sentence; obtaining a paragraph importance index for each paragraph based on the number and discreteness of the amount data in each paragraph, the number of date data, the difference in semantic similarity between each paragraph and adjacent paragraphs, and the average level of sentence importance indexes for all sentences in each paragraph, and obtaining an encryption key weight for each paragraph based on the difference between each paragraph and each paragraph in historical electronic contracts; obtaining a k value for an elliptic curve digital signature algorithm based on the encryption key weights and user information sequence of all paragraphs in the electronic contract to be signed. The present application improves the security of the vector electronic seal by obtaining a k value that is strongly bound to the content of the electronic contract to be signed.

The invention discloses a terminal communication network intrusion prevention system based on WAPI (Wireless Local Area Network Authentication and Privacy Infrastructure). The terminal communication network intrusion prevention system comprises six units, namely a double-domain heterogeneous key negotiation interaction unit and a multi-modal feature vector construction unit. The method comprises the following steps: establishing an asymmetric key negotiation channel by fusing a WAPI triple authentication mechanism and an elliptic curve Diffie-Hellman key exchange protocol, and realizing security key interaction and session key generation; the multi-modal feature vector construction unit comprehensively extracts network flow features from a time domain, a frequency domain and a protocol semantic domain, and accurately identifies intrusion behaviors in combination with a dynamic threshold mechanism of the intrusion feature comparison unit; the elliptic curve encryption authentication processing unit guarantees data packet integrity and identity authentication by using an elliptic curve digital signature algorithm; and the decision control unit integrates authentication and comparison results to generate instructions, and the execution response unit completes defense operations such as network connection blocking and current limiting according to the instructions, so that efficient and reliable intrusion prevention capability is provided for a terminal communication network.

The invention discloses a firmware protection method, a firmware protection device, a firmware protection system and an electronic medium, all-around efficient protection of industrial control system firmware is realized by taking an FPGA as a core execution body and applying an elliptic curve digital signature algorithm, the problems of easy bypassing, insufficient safety and the like in the prior art are effectively solved, the firmware safety is remarkably improved, and the safety of the industrial control system firmware is improved. The system has strong tamper-proofing, illegal access prevention and malicious software infection prevention capabilities, meanwhile, has excellent reliability, ensures stable operation of the system through a perfect protection, detection and recovery mechanism, has good expandability by virtue of the characteristics of the FPGA, can be adapted to industrial control scenes with various scales and complexity degrees, and has wide application prospects. The continuity, stability and safety of industrial production are powerfully guaranteed, and economic losses and safety risks caused by firmware safety problems are greatly reduced.