413 results about "Encryption decryption" patented technology

Techniques are described for a hierarchical caching mechanism enabling efficient cross-region replications. In some embodiments, replication-related information (e.g., key-value pairs) is stored in a particular layout in a binary tree (B-tree) of a file system for replication processing. A hierarchy of caches storing a first type of information (e.g., crypto keys associated with iNodes) may be arranged to match the particular layout in the B-tree to enable efficient parallel processing of a second type of information (e.g., files, file data, or symbolic links), where the replication-related information in the B-tree is partitioned into multiple key ranges for parallel processing. In some embodiments, the caches in different hierarchies may be shared by different parallel-processing key ranges and replication jobs in a file system.

A method of providing clear text representing encrypted data to an entity that does not support an encryption / decryption protocol used to encrypt / decrypt the data is disclosed. A call to an encryption / decryption function implemented in a worker node is detected, wherein the call is to trigger encryption or decryption of a packet. In response to detecting the call, a clear text payload of the packet is captured from an entry point or an exit point of the encryption / decryption function. A modified packet is then created based on the captured clear text payload, including synthesizing a plurality of headers for the modified packet and appending the plurality of headers to the clear text payload. The modified packet is then sent to a processing entity that is external to the worker node.

A first playback device is configured to obtain audio content from a cloud-based media service, the audio content encrypted according to a first encryption scheme. The first playback device is configured to communicate with a cloud-based license service to obtain information for decrypting the audio content and use the obtained information to decrypt the audio content. The first playback device is also configured to re-encrypt the decrypted audio content in accordance with a second encryption scheme and transmit the re-encrypted audio content to at least a second playback device that is grouped with the first playback device for synchronous audio playback. The first playback device is also configured to play back the audio content in synchrony with playback of the audio content by the second playback device.

This disclosure above describes a method, a device, and a system for encrypting / decrypting physical channels in a wireless communication network. Among various embodiments are: pre-allocating a key, dynamically granting a key, encrypting the physical channel based on key in various levels, dividing the spectrum into two categories, or dividing a network into an initial access network and a private network. In one embodiment, a method for physical channel encryption is disclosed. Performed by a UE, the method may include obtaining a first key for decrypting a first physical channel, the first physical channel being encrypted; and decrypting the first physical channel based on the first key to obtain a signal or data transmitted by a first network element, the signal or the data being carried in the first physical channel.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

Systems and methods for secure peer-to-peer communications are described. Devices registered into trusted network may be capable of establishing a shared data encryption key (DEK). In embodiments, each device may be configured to obtain a share of a data encryption key (DEKi) that can be stored locally. The shares may be shares in an M of N Secret Sharing Scheme. This may involve a network that includes an integer, N, devices, and in which M devices may share a secret (i.e. the DEK) during communications, M being an integer less than or equal to N. To obtain the entire DEK during encryption / decryption, a requesting device may send requests to M of N devices for their shares of the DEK. Once M shares are obtained, they may be used generate the DEK for encrypting / decrypting data between the devices.

The invention discloses a novel encryption-decryption scheme, and aims to detect and defend linear spoofing attacks on a cyber-physical system (CPS). With the wide application of CPS in key infrastructures such as industrial automation, smart power grids and automobile systems, it is particularly important to ensure the safety and integrity of CPS. Linear spoofing attacks are malicious behaviors, normal operation of the linear spoofing attacks is interfered by controlling input or output of a system, and a traditional security mechanism is often difficult to effectively cope with the type of attacks. According to the invention, an encryption algorithm is designed to protect data transmission of the CPS, and the encryption algorithm is combined to recover original data and identify potential attack signs at the same time. According to the scheme, the combination of the cryptography technology and the signal processing method is utilized, the data stream can be monitored in real time, and the possible linear attack is identified by analyzing the change of the data before and after encryption. In addition, according to the scheme, calculation efficiency and implementation feasibility are considered, and it is ensured that necessary safety guarantee is provided on the premise that system performance is not affected. Experimental results show that the proposed encryption-decryption scheme can effectively detect linear spoofing attacks in the cyber-physical system, and has relatively low false alarm rate and missing report rate. In addition, the scheme shows good adaptability and robustness in practical application, and provides a new thought and technical support for the security protection of the CPS in the future.

The invention is directed toward systems, methods and computer program products that enable end to end user authentication along with encryption to mitigate the risks posed by untrusted or unsecure intermediary entities. The invention (i) enables full end to end encryption of sensitive data that has been input by a user on a terminal device at one end, and the intended or authorized recipient at the other end, (ii) ensures that data entered by the user on the terminal device is not readable by any intermediary entity including a partner application or other software application implemented within the terminal device, and (iii) eliminates the risk of successful local attacks on the terminal device to unauthorizedly access user data, or to unauthorizedly obtain access to encryption / decryption keys that can be used to unauthorizedly access encrypted user data.

A computer-implemented method, according to one embodiment, includes: receiving encrypted data at a storage controller, and providing the encrypted data to a secure software container. The secure software container is configured to decrypt the encrypted data, calculate hash values using the decrypted data, and compress the decrypted data. The secure software container is also configured to re-encrypt the decrypted data. The computer-implemented method also includes receiving a new copy of the encrypted data from the secure software container. The new copy of the encrypted data may be compressed, include hash values calculated at the secure software container, or compressed as well as including hash values. The new copy of the encrypted data received may thereby be stored in memory.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The invention discloses a WAPI, CCMP and GCMP encryption and decryption coexisting parallel processing system and method for a wireless local area network. The system comprises a transmitter and a receiver. The transmitter is used for reading a plaintext data frame to be encrypted from an application layer, and the plaintext data frame to be encrypted comprises a first MAC frame header, a first security header and a first frame body; reading plaintext data from the first frame body to enable the MAC layer to carry out encryption processing through an encryption module, send encrypted information to a physical layer and then transmit the encrypted information through an air interface; the receiver is used for receiving a to-be-decrypted ciphertext data frame from the air interface, and the to-be-decrypted ciphertext data frame comprises a second MAC frame header, a second security header and a second frame body; reading the ciphertext data and the integrity check MIC ciphertext value from the second frame body, so that the MAC layer sends decryption information to the application layer after carrying out decryption processing through a decryption module; the encryption module encrypts plaintext data; and the decryption module decrypts the ciphertext data. Therefore, the hardware circuit scale is remarkably reduced, and the space occupancy rate is remarkably reduced.

According to the safety coprocessor hybrid encryption method based on the SM2 / 3 / 4 domestic cryptographic algorithm, a novel hybrid encryption system based on the SM2 / 3 / 4 and considering encryption safety, efficiency and key management convenience is constructed on the basis of the characteristics of the SM2 algorithm, the SM3 algorithm and the SM4 algorithm, and the encryption / decryption and signature / verification process is achieved. And aiming at the efficiency problem of a domestic SM algorithm, an encryption / decryption and signature / verification scheme is designed and realized through pure software analysis and software and hardware (SW / HW) collaboration, so that optimal division of software and hardware is realized, and the algorithm efficiency is greatly improved.

The invention is suitable for the field of communication technology improvement, and provides an encryption communication method and system used between EtherCAT slave station nodes, an OTP / nonvolatile storage, an encryption scrambling unit and a decryption descrambling unit are integrated in an EtherCAT slave station chip of a coupler and an I / O module, and encryption / decryption of an EtherCAT message is achieved on the hardware level; xOR operation or an AES algorithm is adopted for encryption, and a secret key is stored in an unmodifiable storage unit; and meanwhile, a parallel architecture of an encrypted network and a standard network is constructed, so that the standard interaction between the slave station node and the master station is not influenced by encrypted communication. The system solves the contradiction of poor real-time performance of a private protocol and easy plaintext communication plagiarism in the prior art, realizes the effects of no real-time performance loss, strong communication exclusiveness and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under industrial 4.0.

The present invention discloses a shared encryption and decryption method and device, and relates to the field of network security technology, wherein the shared encryption method comprises: receiving a data encryption request sent by a first system; obtaining a first ZMK ciphertext and a ZPK ciphertext from the first system, encrypting the first ZMK ciphertext with the LMK of a shared encryption machine cluster, and then encrypting it with the first SPK of a first encryption machine associated with the first system; decrypting the first ZMK ciphertext with the first SPK to obtain a second ZMK ciphertext; sending the ZPK ciphertext, the second ZMK ciphertext and data to be encrypted to the shared encryption machine cluster, the shared encryption machine cluster encrypts the data to be encrypted, and obtains an encrypted data ciphertext; receiving the encrypted data ciphertext provided by the shared encryption machine cluster; and sending the encrypted data ciphertext to a second key server associated with the second system. The present invention can ensure the security between various systems when shared encryption is implemented.

A reproducible random number generation method can be executed in a calculator system with a security area, and comprises the following steps of: generating security data required for performing security operation in a security isolation area or a security chip from the inside or importing the security data from the outside; the security isolation area or the security chip sets encryption / decryption configuration and derivative function configuration according to the security operation, and encrypts the security data through a reproducible random number encryptor to obtain an encrypted data packet; exporting the encrypted data packet to the external storage of the security isolation region or the security chip; and when the security operation needs to be carried out, the corresponding encrypted data packet is imported into the security isolation region or the security chip, the security data is decrypted by a reproducible random number decryptor to obtain the security data, and then the security operation is carried out.

The invention relates to the technical field of chaotic cryptography, image encryption and information security, in particular to a multi-image encryption algorithm based on a hyper-chaotic system and computer-generated holography, which comprises the following steps: S1, generating a pseudo-random sequence for encryption by using the hyper-chaotic system; s2, preprocessing the original image based on computer-generated holography; s3, combining the generated pseudo-random sequence with the preprocessed image to realize image encryption; s4, through decryption operation corresponding to the encryption process, the original image is restored after the correct secret key is input; and S5, the decryption operation comprises inverse transformation and reconstruction operation on the encrypted image. The algorithm comprises an image preprocessing module, a hyperchaotic system module, a compressed sensing coding module, a computer-generated holographic encryption module, a decryption module and a post-processing module, the security of sensitive image data in the transmission and storage process can be ensured, and efficient and reliable guarantee is provided for sensitive image encryption in various fields.

The invention relates to the technical field of image processing, and discloses an image processing method and device based on secret key updating, a medium and a chip system.The method comprises the steps that first digest values corresponding to an Nth frame image and an (N-1) th frame image are obtained, image block information is extracted from the Nth frame image, and the N frame images are coded; performing key updating and initialization vector IV updating processing by using the first digest value and the image block information to obtain a first key and a first IV value; inputting the first key and the first IV value into a stream encryption algorithm system for processing to generate a key sequence; and encrypting the encoded Nth frame of image by using the key sequence to obtain an encrypted stream and outputting the encrypted stream. The method not only realizes encryption and decryption of the video image, but also ensures the security of the image data.

The invention discloses a data encryption method, a data decryption method and related equipment, and relates to the technical field of artificial intelligence. In the encryption method of the scheme, after to-be-encrypted original plaintext data is determined, encryption environment perception data is firstly obtained; the original plaintext data and the encryption environment perception data are input into an encryption strategy generation model by calling an encryption agent, and the encryption strategy generation model outputs an encryption algorithm selection result, key information and a key distribution path matched with the current original plaintext data and the encryption environment; and finally, encrypting the original plaintext data by using the encryption strategy to obtain ciphertext data. Based on the scheme, the dynamic determination of the encryption algorithm, the key information and the key distribution path can be realized, and by combining with the corresponding decryption scheme, the scheme can adapt to the data encryption and decryption requirements under different scenes and different situations.

The invention discloses an unmanned aerial vehicle identity authentication and key negotiation system and method. The system comprises a trusted registration mechanism, an unmanned aerial vehicle, a cloud server and a mobile terminal, in a system initialization stage, a trusted registration mechanism publicly releases a single hash function and a symmetric encryption / decryption algorithm; in a mobile terminal registration stage, a trusted registration mechanism verifies a registration request of a user; in the unmanned aerial vehicle registration stage, the unmanned aerial vehicle sends its identity ID to the trusted registration mechanism to request registration, and the trusted registration mechanism distributes a unique challenge and random number to the unmanned aerial vehicle after receiving the identity ID; in the user login stage, a user ID, a password and biological characteristics are input into the mobile terminal, and the mobile terminal verifies the user identity through pre-stored parameters; in the identity authentication and key negotiation stage, mutual authentication is carried out among the mobile terminal, the cloud server and the unmanned aerial vehicle, and a session key for future encrypted communication is negotiated.

Systems and methods for providing multiple key encryption may generate a private key encryption key (KEK) and a corresponding public KEK in a trusted execution environment (TEE); provide the public KEK to a key generator; generate, by the key generator, a data encryption key (DEK) and encrypt the DEK with the public KEK; obtain, by a key processor, an ephemeral public key and the encrypted DEK, and send the ephemeral public key and the encrypted DEK to the TEE; decrypt, by the TEE, the encrypted DEK using the private KEK, and re-encrypt the decrypted DEK with the ephemeral public key; obtain, by the key processor, the re-encrypted DEK from the TEE and pass the re-encrypted DEK to a signing service; decrypt, by the signing service, the re-encrypted DEK using a corresponding ephemeral private key; and encrypt, by the signing service, data using the DEK.

Systems and methods for associating sessions of encrypted identifiers are provided. A collection of data packets received during one or more sessions within a time period may be retrieved. Each packet in the collection may be associated with a unique identifier of a respective session. An epoch time may be calculated for each of the retrieved data packets based on the determined skew and respective timestamp information of the data packet. It may be identified as to whether each of the calculated epoch times matches a previously calculated epoch time for a packet associated with a previous session or a session that has previously been associated with a selected session. The timestamp information may be associated with a browser identifier and subject to encryption / decryption by an identifier server or authorized parties.

Provided are a key generation method based on lattice key extension and a packet encryption and decryption method using the generated key. The key generation method based on lattice key expansion comprises the following steps: determining basic parameters for key generation; generating an initial key with a specified length; generating a plurality of bit strings based on the initial key and encryption-related information; and expanding the plurality of bit strings by using a randomly generated lattice basis matrix to obtain a generated key, the generated key being a plurality of round keys with predetermined lengths. Therefore, the secret key is generated by using the random lattice basis matrix based on the lattice problem framework, and the block encryption and decryption are carried out, so that the high-performance secret key generation can be realized, and the encryption and decryption process is simple in calculation and is decoupled from the secret key generation process.

The invention relates to the technical field of image encryption, and discloses an image encryption and decryption system, method and device and a medium. The system comprises a secret key module used for transmitting initial information to an algorithm module; the initial information comprises key information and an initial vector; the initial vector represents an auxiliary parameter in encryption; the algorithm module is used for detecting the to-be-processed image data and converting the initial information into a target key stream with a corresponding length based on the data length of the to-be-processed image data; and the data processing module is used for encrypting / decrypting the to-be-processed image data according to the target key stream to obtain an encrypted / decrypted image. According to the invention, the security of image data transmission can be improved.

The invention relates to a terminal identity authentication method based on an identity label password, which comprises the following steps: step 1, during identity registration, collecting user voice through a mobile terminal to establish an identity vector voiceprint model, extracting features, adding an identity label to generate a user ID, and generating a corresponding identity password system; and 2, during authentication, judging the legality of a user according to voice recognition, and encrypting and decrypting data based on an identity password and a symmetric encryption algorithm AES to realize terminal identity authentication so as to resist common attacks in the mobile internet. According to the invention, the capability of identifying illegal users and the capability of resisting network hostile attacks are greatly improved.

The present invention provides an HSM and a controller. The HSM includes an HSM bus matrix and, connected to the HSM bus matrix, a plurality of HSM master modules, an HSM external bus port, an HSM SRAM and a plurality of HSM slave modules. The HSM master modules include an HSM CPU core and an HSM DMA. The HSM slave modules include at least one encryption / decryption engine module. The HSM of the present invention complies with the Evita standard, and through storing sensitive information in the HSM SRAM or the like, provides secure execution and storage. Not only data isolation between the HSM and an external host, and hence protection of sensitive information, can be provided, the use of the HSM DMA allows the HSM CPU core to be offloaded from heavy data movement, thereby enhancing operating efficiency of the HSM CPU core.

The invention relates to the technical field of user privacy data encryption and decryption, and discloses a user privacy data encryption and decryption system which comprises a user privacy data encryption and decryption system body. The user privacy data encryption and decryption system body comprises a data sovereignty layer, a strategy engine, a key management layer, a dynamic encryption layer, an intelligent decryption layer and a security audit and traceability layer. According to the user privacy data encryption and decryption system and method, user data privacy is guaranteed through cooperation of all the layers and the whole process from data authority management to encryption and decryption, data is prevented from being accessed and used without authorization, all the layers are clear in division of labor, the data sovereignty layer determines data attribution and access authority, the strategy engine formulates an access strategy, and the user privacy data encryption and decryption efficiency is improved. The key management layer is responsible for key full-life-cycle management, the dynamic encryption layer implements encryption operation, the intelligent decryption layer processes decryption requests, and the architecture enables each function module of the system to perform own functions and is convenient to develop, maintain and manage.

The embodiment of the invention discloses a 5G session message encryption method, a 5G session message decryption method, a sending end, a receiving end and a transmission system, which are used for improving the security of a 5G session message. The scheme comprises the following steps: acquiring a to-be-sent 5G session message, a receiving end public key of the 5G session message and a session key of the 5G session message; performing encryption on the 5G session message by using the session key; encrypting the session key by using the receiving end public key; generating a message digest of the 5G session message, and encrypting the message digest by using a sending end private key to obtain a digital signature; and packaging the encrypted 5G session message, the encrypted session key and the digital signature into an encrypted message, wherein the encrypted message is sent to a receiving end of the 5G session message through a 5G session message platform.

The invention discloses a security guarantee-oriented encryption and decryption strategy-driven memristor neural network multi-index state estimation method. The method comprises the following steps of: 1, establishing a memristor neural network dynamic model with H infinity performance constraint and hybrid attack; 2, performing state estimation on the memristor neural network dynamic model under the driving of an encryption and decryption strategy; 3, calculating an error covariance matrix upper bound and an H infinity performance constraint condition of the memristor neural network; and 4, solving a value of an estimator gain matrix, and realizing memristor neural network state estimation with hybrid network attacks. The method solves the problem that the existing state estimation method cannot process the multi-index state estimation of the memristive neural network with H infinity performance constraint and variance constraint under the driving of encryption and decryption strategies at the same time, so that the estimation accuracy is low, and under the condition that information exists under the encryption and decryption strategies and information at other moments cannot be received, the estimation accuracy is low. And the accuracy of the estimation performance is low.

The invention relates to an underground UWB positioning system hybrid encryption method based on a dynamic key, and belongs to the technical field of UWB positioning, and the method comprises the following steps: a positioning terminal randomly generates an RSA key pair before network access, and sends an RSA public key to a positioning base station through broadcasting a network access application frame; after receiving the RSA public key, the base station randomly generates an AES secret key exclusive to the terminal, performs RSA encryption on the AES secret key by using the RSA public key provided by the terminal to form an encrypted AES secret key, and then embeds the encrypted AES secret key into a network access response frame and returns the network access response frame to the terminal; the terminal decrypts the encrypted field in the network access response frame by using a self RSA private key to obtain an original AES key; bidirectional time-of-flight ranging TW-TOF is carried out, and all data are subjected to end-to-end protection through an AES encryption and decryption mechanism.