7 results about "Encrypted key exchange" patented technology

Examples of the disclosure provide for a scatter network device. In some examples, the scatter network device includes a non-transitory memory, at least one processor, and a key exchange application stored in the non-transitory memory. When executed by the at least one processor, the key exchange application generates a key exchange request encrypted according to a public encryption key of a first network endpoint, wherein the encrypted key exchange request is indistinguishable from uniform random noise, and transmits the key exchange request to the first network endpoint via a first communication band, wherein the scatter network device transmits authenticated messages via a second communication band.

A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment.

Use of a neutrino detector as a trusted node in a cryptographic key exchange procedure between a first communication endpoint and a second communication endpoint, wherein the neutrino detector: - receives a first cryptographic key from the first communication endpoint via a first neutrino-based communication channel, - receives a second cryptographic key from the second communication endpoint via a second neutrino-based communication channel, - stores the two cryptographic keys in a key memory, - receives a random number (RND) generated at the first communication endpoint via a public communication channel, which is encrypted using the first cryptographic key.- the random number (RND) is decrypted using the stored first cryptographic key and - the decrypted random number (RND) is encrypted using the second cryptographic key stored in the key memory and sent via a public communication channel to the second communication endpoint to enable the second communication endpoint to reconstruct the random number (RND) using the second cryptographic key known to it, so that the first and second communication endpoints have a common random number (RND) as a cryptographic key for the symmetric encryption of user data.

Techniques relating to cryptographic key exchange operations are disclosed. In some embodiments, a computing device includes a cryptographic circuit coupled to a secure memory to which the computing device's processor has no access. Program instructions executed on the computing device can request a key exchange to establish a shared secret with another device. The cryptographic circuit is configured to perform the key exchange, including deriving the shared secret using private key material held in the secure memory.In some embodiments, the key exchange includes verifying a key authorization data structure issued by a key authorization instance, comprising a first public key of a first participant authorization instance and a second public key of a second participant authorization instance. Upon successful verification, the exchange uses a public key pair attested by the first participant authorization instance as belonging to a member of the first device group.

A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment.

The invention discloses a security encryption system for data subpackaging and packaging, which comprises the following steps of: dividing a big data stream into a plurality of data slices according to a specific rule, and dynamically adjusting the sizes of the slices according to network bandwidth, transmission time delay and storage limitation; different encryption keys are adopted for each slice, generation, distribution and synchronization of the keys are carried out through a dynamic key management mechanism, and it is ensured that data are not accessed or tampered by unauthorized data in the transmission process; the key management is based on a public key infrastructure or a symmetric encryption key exchange protocol; the receiving end reorganizes the slices to restore original data, detects the integrity of the slices in the process and assembles the slices according to a correct sequence; in order to ensure data integrity and error correction, a redundancy check and error correction technology is adopted; according to the scheme, end-to-end encryption protection is provided, and privacy and integrity of data are guaranteed; according to the security encryption system for data subpackaging and packaging, the security and reliability of data transmission are improved through slicing, encryption, dynamic key management and a data packaging mechanism.

This application provides a security authentication method and apparatus applied to Wi-Fi. An access point AP negotiates, based on a password, a pairwise master key PMK with a first device based on a twin base password encrypted key exchange TBPEKE protocol, where the password is a shared key between the AP and the first device; and the AP performs a 4-way handshake with the first device based on the PMK. Therefore, in embodiments of this application, a PMK with a high entropy value can be generated by performing a TBPEKE procedure, so that the security authentication method provided in embodiments of this application can help resist an offline dictionary attack.