217 results about "Encryption decryption" patented technology

Techniques are described for a hierarchical caching mechanism enabling efficient cross-region replications. In some embodiments, replication-related information (e.g., key-value pairs) is stored in a particular layout in a binary tree (B-tree) of a file system for replication processing. A hierarchy of caches storing a first type of information (e.g., crypto keys associated with iNodes) may be arranged to match the particular layout in the B-tree to enable efficient parallel processing of a second type of information (e.g., files, file data, or symbolic links), where the replication-related information in the B-tree is partitioned into multiple key ranges for parallel processing. In some embodiments, the caches in different hierarchies may be shared by different parallel-processing key ranges and replication jobs in a file system.

This disclosure above describes a method, a device, and a system for encrypting / decrypting physical channels in a wireless communication network. Among various embodiments are: pre-allocating a key, dynamically granting a key, encrypting the physical channel based on key in various levels, dividing the spectrum into two categories, or dividing a network into an initial access network and a private network. In one embodiment, a method for physical channel encryption is disclosed. Performed by a UE, the method may include obtaining a first key for decrypting a first physical channel, the first physical channel being encrypted; and decrypting the first physical channel based on the first key to obtain a signal or data transmitted by a first network element, the signal or the data being carried in the first physical channel.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

According to the safety coprocessor hybrid encryption method based on the SM2 / 3 / 4 domestic cryptographic algorithm, a novel hybrid encryption system based on the SM2 / 3 / 4 and considering encryption safety, efficiency and key management convenience is constructed on the basis of the characteristics of the SM2 algorithm, the SM3 algorithm and the SM4 algorithm, and the encryption / decryption and signature / verification process is achieved. And aiming at the efficiency problem of a domestic SM algorithm, an encryption / decryption and signature / verification scheme is designed and realized through pure software analysis and software and hardware (SW / HW) collaboration, so that optimal division of software and hardware is realized, and the algorithm efficiency is greatly improved.

The invention is suitable for the field of communication technology improvement, and provides an encryption communication method and system used between EtherCAT slave station nodes, an OTP / nonvolatile storage, an encryption scrambling unit and a decryption descrambling unit are integrated in an EtherCAT slave station chip of a coupler and an I / O module, and encryption / decryption of an EtherCAT message is achieved on the hardware level; xOR operation or an AES algorithm is adopted for encryption, and a secret key is stored in an unmodifiable storage unit; and meanwhile, a parallel architecture of an encrypted network and a standard network is constructed, so that the standard interaction between the slave station node and the master station is not influenced by encrypted communication. The system solves the contradiction of poor real-time performance of a private protocol and easy plaintext communication plagiarism in the prior art, realizes the effects of no real-time performance loss, strong communication exclusiveness and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under industrial 4.0.

The invention discloses a data encryption method, a data decryption method and related equipment, and relates to the technical field of artificial intelligence. In the encryption method of the scheme, after to-be-encrypted original plaintext data is determined, encryption environment perception data is firstly obtained; the original plaintext data and the encryption environment perception data are input into an encryption strategy generation model by calling an encryption agent, and the encryption strategy generation model outputs an encryption algorithm selection result, key information and a key distribution path matched with the current original plaintext data and the encryption environment; and finally, encrypting the original plaintext data by using the encryption strategy to obtain ciphertext data. Based on the scheme, the dynamic determination of the encryption algorithm, the key information and the key distribution path can be realized, and by combining with the corresponding decryption scheme, the scheme can adapt to the data encryption and decryption requirements under different scenes and different situations.

Systems and methods for providing multiple key encryption may generate a private key encryption key (KEK) and a corresponding public KEK in a trusted execution environment (TEE); provide the public KEK to a key generator; generate, by the key generator, a data encryption key (DEK) and encrypt the DEK with the public KEK; obtain, by a key processor, an ephemeral public key and the encrypted DEK, and send the ephemeral public key and the encrypted DEK to the TEE; decrypt, by the TEE, the encrypted DEK using the private KEK, and re-encrypt the decrypted DEK with the ephemeral public key; obtain, by the key processor, the re-encrypted DEK from the TEE and pass the re-encrypted DEK to a signing service; decrypt, by the signing service, the re-encrypted DEK using a corresponding ephemeral private key; and encrypt, by the signing service, data using the DEK.

The invention relates to the technical field of user privacy data encryption and decryption, and discloses a user privacy data encryption and decryption system which comprises a user privacy data encryption and decryption system body. The user privacy data encryption and decryption system body comprises a data sovereignty layer, a strategy engine, a key management layer, a dynamic encryption layer, an intelligent decryption layer and a security audit and traceability layer. According to the user privacy data encryption and decryption system and method, user data privacy is guaranteed through cooperation of all the layers and the whole process from data authority management to encryption and decryption, data is prevented from being accessed and used without authorization, all the layers are clear in division of labor, the data sovereignty layer determines data attribution and access authority, the strategy engine formulates an access strategy, and the user privacy data encryption and decryption efficiency is improved. The key management layer is responsible for key full-life-cycle management, the dynamic encryption layer implements encryption operation, the intelligent decryption layer processes decryption requests, and the architecture enables each function module of the system to perform own functions and is convenient to develop, maintain and manage.

The embodiment of the invention discloses a 5G session message encryption method, a 5G session message decryption method, a sending end, a receiving end and a transmission system, which are used for improving the security of a 5G session message. The scheme comprises the following steps: acquiring a to-be-sent 5G session message, a receiving end public key of the 5G session message and a session key of the 5G session message; performing encryption on the 5G session message by using the session key; encrypting the session key by using the receiving end public key; generating a message digest of the 5G session message, and encrypting the message digest by using a sending end private key to obtain a digital signature; and packaging the encrypted 5G session message, the encrypted session key and the digital signature into an encrypted message, wherein the encrypted message is sent to a receiving end of the 5G session message through a 5G session message platform.

The invention relates to an underground UWB positioning system hybrid encryption method based on a dynamic key, and belongs to the technical field of UWB positioning, and the method comprises the following steps: a positioning terminal randomly generates an RSA key pair before network access, and sends an RSA public key to a positioning base station through broadcasting a network access application frame; after receiving the RSA public key, the base station randomly generates an AES secret key exclusive to the terminal, performs RSA encryption on the AES secret key by using the RSA public key provided by the terminal to form an encrypted AES secret key, and then embeds the encrypted AES secret key into a network access response frame and returns the network access response frame to the terminal; the terminal decrypts the encrypted field in the network access response frame by using a self RSA private key to obtain an original AES key; bidirectional time-of-flight ranging TW-TOF is carried out, and all data are subjected to end-to-end protection through an AES encryption and decryption mechanism.

The invention relates to the technical field of data encryption, and discloses a data encryption device, a memory encryption and decryption system and a chip. A password root output end; the key generation circuit is used for generating an n-bit first key and an n-bit second key; the data encryption logic circuit comprises a four-round encryption module, a four-round encryption unit in the four-round encryption module comprises an n-bit interleaver, four columns of 64-bit round function components correspondingly arranged on the two sides of the interleaver and two sub-circuits for encrypting residual data and residual keys, and the four-round encryption unit is connected with an address input end, a password root output end and a key generation circuit. And the four-round encryption module is used for performing alignment processing on the memory access address, performing interleaving encryption processing based on the four-round encryption module according to the n-bit alignment address obtained by the alignment processing, the first key and the second key, and generating an n-bit password root, so that the encryption device encrypts the write data according to the password root, and the decryption device decrypts the read data according to the password root.

The disclosure relates to systems, methods and computer readable media for enabling distributed secure remote access from a device via a wide area network (WAN), to a designated physical site covered by local area network (LAN). Specifically, the disclosure relates to a computerized systems, methods and computer-readable media using hardware-based, virtual private network pairs having preshared encryption / decryption keys, operable to transmit data over WAN from a physical computing device to an exclusively designated site in a physical area covered by a LAN.

The invention provides a memory encryption and decryption module and method, a chip, a program product and a readable storage medium. The memory encryption and decryption module comprises a memory array; a ciphertext array; the row control unit is used for gate and read-write control of rows; the first column of control units are used for gating the corresponding bit lines and shifting the bit lines when secret key data are generated; the second column control unit is used for controlling column gating and read-write of the ciphertext array; the storage control unit and the encryption and decryption control unit are used for providing row and column control signals; and a data input / output unit. The key is generated through the storage unit array and the peripheral amplifier circuit, encryption and decryption are carried out through XOR calculation in the key calculation process, localized encryption and decryption are achieved in the storage unit array, and the problems that in the prior art, an encryption and decryption module is large in area, high in energy consumption, large in delay and the like are effectively solved; and the efficiency and the flexibility of localized encryption, decryption and storage of the memory data of the existing edge end equipment are effectively improved.

Various embodiments of the present disclosure provide for a method and apparatuses that perform spatial encoding in a multipath environment such that transmissions on different beams are separately encrypted with complex codes such that when the transmissions on the different beams are received at the receiver, the separate encryptions are cancelled out. The transmissions can also have time delay, gain, and phase modifications made to the transmissions such that the automatic self-decryption is performed within a predefined distance of where the receiver is determined to be. In this way, encryption / decryption keys do not have to be sent to the receiver, and unauthorized devices that intercept the beams at a location other than the receiver location will not be able to decrypt the communication.

The invention belongs to the technical field of data security, and particularly relates to an efficient data circulation system based on a data capsule and a trusted controlled execution environment. The invention aims to cooperatively construct an efficient data element safe circulation architecture based on software and hardware technologies such as attribute-based encryption, a distributed account book and a credible controlled execution environment depending on a data capsule, and innovatively realize management and control of a full life cycle of data; the data capsule is used as a core component, ciphertext packaging and strategy packaging modes are adopted, and a strategy covers five dimensions of an access main body, access time, a use position, access content and a use mode; the production component completes data encryption and capsule generation in a trusted controlled execution environment, and the consumption component can access data only when conditions are met through double-layer attribute encryption and decryption, identity verification and strategy check; besides, the system architecture has wide universality and is suitable for various data circulation scenes, and a safe and efficient circulation mode of data elements is provided.

The invention relates to thermal migration for confidential computing environments. The system and method are directed to migration operations associated with a confidential computing environment, such as thermal migration operations. In response to a request to migrate data, the security hypervisor may establish a secure communication channel to the network interface controller to communicate one or more keys for accessing the securely stored data. The security hypervisor may generate a descriptor associated with the memory location of the data and then communicate the descriptor to the network interface controller. Thus, encryption / decryption operations may be offloaded to the network interface controller, which may use the descriptor and the key to migrate data from the source location to the destination location.

The utility model provides a relay device with stable and safe data communication. The relay device comprises a housing, a power supply module, a UWB communication module, an encryption module, a magnetic latching relay and a main control chip. The main control chip is connected with the UWB communication module, the encryption module and the magnetic latching relay, can configure the UWB communication module, establishes a communication link with the main control chip, and supports a carrier-free communication characteristic; before and after data are sent and received, data communication can be encrypted and decrypted through the encryption module; the on / off of the relay device can be controlled through the state of the magnetic latching relay. The relay equipment with stable and safe data communication combines efficient power supply conversion, an advanced UWB communication technology, strong safety measures, a reliable magnetic latching relay and a high-performance main control unit, forms a comprehensive solution, and is particularly suitable for wireless control application scenes requiring high stability, safety and low power consumption.

Objective: To provide a communication protection system and the like in which the confidentiality and integrity of communication data can hardly be compromised Means for achieving the objective: A communication protection system (100) comprising a receiving unit (101), a transmission destination determination unit (102), an identification unit (103), a determination unit (104), an encryption / decryption unit (encryption unit) (107), and a data transmission unit (108). The receiving unit (101) receives communication data. The transmission destination determination unit (102) determines a transmission destination for the communication data. The identification unit (103) identifies an affiliation of the transmission source of the communication data and that of a transmission destination of the communication data. The determination unit (104) determines whether the communication data should be encrypted based on the identified affiliation of the transmission source and the transmission destination.The encryption / decryption unit (107) outputs the encrypted communication data if the determination unit (104) has determined to encrypt the communication data. The data transmission unit (108) transmits the communication data to the transmission destination.

This invention relates to an image-based configuration file embedding and recovery system for industrial vision software. The system includes a configuration data processing module, an encryption / decryption module, an image embedding module, an image output module, an image acquisition and recognition module, a configuration recovery module, a scene restoration module, and a data verification module. The core innovation lies in using images as the storage and transmission medium for configuration files. Through a composite embedding method of "customized QR code + LSB steganography," standardized and encrypted configuration data is embedded into the carrier image to generate an embedded image. This invention features high robustness, high security, and ease of operation, and can adapt to complex industrial environments, significantly improving the deployment and maintenance efficiency of industrial vision systems.

This article provides an electronic voucher collection method, device, equipment and storage medium, which relates to the field of financial technology, wherein the method includes: receiving an electronic voucher collection request with encrypted information sent by a user terminal, wherein the encrypted information is pre-encrypted and generated by a server terminal and sent to the user terminal; decrypting the electronic voucher collection request to obtain the encrypted information and electronic voucher collection requirement information; judging whether the user terminal can successfully collect the electronic voucher based on the encrypted information and the electronic voucher collection requirement information; if the user terminal can successfully collect the electronic voucher, the electronic voucher collection information is fed back to the user terminal. This article provides an electronic voucher collection method, wherein the server terminal verifies the legitimacy of the electronic voucher collection request through the encrypted information in the collection request sent by the user terminal; and the user terminal does not need to perform encryption and decryption operations, thereby ensuring the security of electronic voucher collection while improving the verification efficiency during the electronic voucher collection process.

Data is processed by cryptographic operations selected from encryption, decryption, hashing, and public key exchange (PKI). Data elements are processed as n-state data elements with n an integer at least greater than 3 based on an n-state reversible n-state inverter. The n-state reversible inverter is a self-propagating n-state inverter generating different other n-state reversible inverters. The n-state reversible inverter is derived from a sequence of n n-state data elements with at least a first n-state data element occurring at least twice in different positions in the sequence and a second n-state data element not occurring. The n-state reversible inverter is created from the sequence of n-state data elements. A sequence of n n-state elements is created from a set of k n-state elements with k smaller than n. The k n-state elements are provided by a public key exchange method.

The invention discloses a medical image encryption method based on a trap door network and a diffusion model, and relates to the technical field of image encryption. The method comprises the following steps: encrypting a focus image scanned by medical equipment of a patient by using a session key through key negotiation between the patient and a doctor, and sending the encrypted image to an image filing and communication server; and when the doctor needs to look up the lesion image, decrypting the ciphertext image through the previously established session key, and recovering the corresponding original lesion image. The image encryption / decryption network of the invention is composed of a Diffusion model and a trap door network. The trap door network enhances the security of the medical image encryption method, and the forward generation and sampling process based on the Diffusion model ensures the security of the encrypted image and the high-quality reconstruction effect of the decrypted image.

The present disclosure relates to a data encryption and decryption method, system, device, medium and program product, comprising: an encryption and decryption function container receiving an encryption / decryption request sent by an application execution container, wherein the encryption and decryption function container and the application execution container are pre-deployed on a node, the encryption / decryption request comprises data to be encrypted / decrypted, the application execution container comprises an application program, and the encryption and decryption function container comprises a plurality of encryption and decryption algorithms; the data to be encrypted / decrypted is encrypted / decrypted based on a target encryption / decryption algorithm and a preset key, wherein the target encryption / decryption algorithm is selected from the plurality of encryption and decryption algorithms by the encryption and decryption function container according to a pre-configured environment variable; and the encrypted / decrypted data is returned to the application execution container. The present application can shield the implementation differences between different encryption and decryption languages, and isolate the key, encryption and decryption algorithm from the application program code, thereby improving the security of the encrypted / decrypted data.

The present application provides an AES encryption and decryption device and method. The AES encryption and decryption device comprises a key expansion module configured to perform key expansion based on an encryption seed key to generate round keys required for a current round of encryption by rounds; an encryption module configured to receive the round keys of the current round from the key expansion module and perform the current round of encryption based on the round keys until a plurality of rounds of encryption required are completed to generate encrypted information; a reverse key expansion module configured to perform reverse key expansion based on a decryption seed key to generate round keys required for a current round of decryption by rounds; and a decryption module configured to receive the round keys of the current round from the reverse key expansion module and perform the current round of decryption based on the round keys until a plurality of rounds of decryption required are completed to generate plaintext information. Based on the AES encryption and decryption device and the corresponding encryption and decryption process, the storage space for storing the round keys can be saved while effectively implementing the AES encryption and decryption.

The invention relates to the technical field of electronic equipment protection, in particular to a quantum key encrypted 5G communication module and an encryption method thereof.The quantum key encrypted 5G communication module comprises a quantum key generation unit, a 5G communication unit, a data encryption and decryption unit, an instruction verification unit and a main control unit, and the quantum key generation unit is used for generating and outputting a quantum key; the quantum key generation unit is used for generating a quantum key, the 5G communication unit is used for achieving data transmission of a control instruction, a patient electronic medical record and a medical image in a remote medical scene, the data encryption and decryption unit is connected with the quantum key generation unit and the 5G communication unit and used for calling the quantum key to encrypt or decrypt transmission data, and the instruction verification unit is connected with the 5G communication unit. The data is effectively prevented from being illegally intercepted, tampered or leaked in the transmission process, the potential safety hazard of a traditional encryption technology in a medical high-sensitivity data transmission scene is thoroughly solved, and a level of safety guarantee is provided for remote medical data privacy protection.

A computer-implemented method for an encryption for secure communication between devices during quantum annealing or QUBO-based routines, which are executed on a quantum device with configurations determined or supported by at least one classical computing device, wherein the encryption and decryption of data are managed by the classical computing device, the method characterized by within a QUBO based routine that includes set of pre-trained weak learners that provide output for test values and weight adjustment process for these weak learners and after the discretized to model it as a QUBO; using different encoding depths for different weights with the assigning the weights randomly according to the correlation in between the weak learners with the registration of this encoding information; shuffling the order of the variables randomly with the registering this order information; converting the QUBO matrix, which is stored in at least one storage medium and generating a string which includes two different number whose length matches the solution space dimensionality and registering the strings with spin flipping these numbers; decryption of the data which is received from at least one quantum device with encrypted by classical computing device before the transfer procedure with using encoding information, order information, spin flipped result, combination order information or suitable combination of them according to the encryption.

A method actuates a device to perform hardware interfacing (S1314 and S1323) for retrieving hardware and / or OS DI (device identification) information embedded or installed thereon, so as to provide cybersecurity protection (S1326) to the device itself (S1320) and / or to an external control system (S1311) or Internet system to be accessed (S309), for establishing unique DI intercommunication (S1315 and S1324) with the external control system (S1311), for replacing the conventional antivirus software, for providing OS piracy protection (S1109) to an OS maker, for functioning as a unique private key (S1317) in encrypting / decrypting outgoing commands (S1328) and / or feedback signals (S1319).

Provided is an information disclosure method for disclosing transaction information in an information disclosure system that includes a transmission terminal and a verification terminal, wherein the information disclosure method includes: an encrypted VC generation step in which the transmission terminal generates an encrypted item, from a transaction VC which includes items (hereinafter referred to as transaction items) related to one or more pieces of transaction information, by using an encryption key of an attribute-based encryption for each transaction item to encrypt the transaction item and a conditional expression input by a sender with respect to said transaction item, and generates an encrypted VC which includes one or more encrypted items; and an encrypted VC decryption step in which the verification terminal generates a decrypted VC by using a decryption key of the attribute-based encryption to decrypt each encrypted item included in the encrypted VC. In the encrypted VC decryption step, if attribute information included in the decryption key for each encrypted item satisfies the conditional expression included in the relevant encrypted item, a transaction item corresponding to the encrypted item is acquired, and a decrypted VC which includes the acquired transaction item is generated.

The application discloses a two-contact bidirectional communication encryption and decryption architecture and a communication method, and belongs to the technical field of anti-fake function encryption and decryption chips. The two-contact bidirectional communication encryption and decryption architecture comprises a two-contact power supply detection unit, a microcontroller unit, an encryption and decryption ALU unit and an encryption and decryption storage unit. The two-contact power supply detection unit is provided with a signal input end, a voltage input end, a voltage output end and a grounding end. The signal input end is connected with the voltage input end. When external signals and power are received by the two-contact bidirectional communication encryption and decryption architecture, the polarity of the two-contact voltage input end and the grounding end is automatically judged, and the voltage input end is connected with the voltage output end. When the voltage of the voltage output end reaches the working voltage range, the voltage output end is connected with the microcontroller unit, the encryption and decryption ALU unit and the encryption and decryption storage unit, so that the encryption and decryption function of the chip is realized.

To provide an encryption communication system capable of notifying a user of a storage amount of encryption keys.SOLUTION: An encryption communication system includes an application execution environment, an encryption / decryption execution environment, and a key exchange node. The encryption / decryption execution environment encrypts transmission data and decrypts encrypted reception data while consuming the encryption key. The key exchange node generates an encryption key and shares the encryption key with a communication partner. The key exchange node controls whether or not to generate a cryptographic key based on the stored amount of cryptographic keys. The application execution environment includes a stored key amount notification function unit and a band control function unit. The stored key amount notification function unit notifies the stored amount of cryptographic keys. The band control function part receives the notification and automatically executes control of a communication band different for each communication content on the basis of the priority set for each communication content. The band control function unit automatically changes the control content of the communication band according to the notification content without a user's operation.SELECTED DRAWING: Figure 9