417 results about "Encryption decryption" patented technology

Techniques are described for a hierarchical caching mechanism enabling efficient cross-region replications. In some embodiments, replication-related information (e.g., key-value pairs) is stored in a particular layout in a binary tree (B-tree) of a file system for replication processing. A hierarchy of caches storing a first type of information (e.g., crypto keys associated with iNodes) may be arranged to match the particular layout in the B-tree to enable efficient parallel processing of a second type of information (e.g., files, file data, or symbolic links), where the replication-related information in the B-tree is partitioned into multiple key ranges for parallel processing. In some embodiments, the caches in different hierarchies may be shared by different parallel-processing key ranges and replication jobs in a file system.

A method of providing clear text representing encrypted data to an entity that does not support an encryption / decryption protocol used to encrypt / decrypt the data is disclosed. A call to an encryption / decryption function implemented in a worker node is detected, wherein the call is to trigger encryption or decryption of a packet. In response to detecting the call, a clear text payload of the packet is captured from an entry point or an exit point of the encryption / decryption function. A modified packet is then created based on the captured clear text payload, including synthesizing a plurality of headers for the modified packet and appending the plurality of headers to the clear text payload. The modified packet is then sent to a processing entity that is external to the worker node.

A first playback device is configured to obtain audio content from a cloud-based media service, the audio content encrypted according to a first encryption scheme. The first playback device is configured to communicate with a cloud-based license service to obtain information for decrypting the audio content and use the obtained information to decrypt the audio content. The first playback device is also configured to re-encrypt the decrypted audio content in accordance with a second encryption scheme and transmit the re-encrypted audio content to at least a second playback device that is grouped with the first playback device for synchronous audio playback. The first playback device is also configured to play back the audio content in synchrony with playback of the audio content by the second playback device.

The invention discloses a database security secrecy system based on storage encryption, and relates to the technical field of information security. The database encryption platform is in communication connection with a key management module, an encryption and decryption management module, a performance monitoring module, a load evaluation module, a distributed storage optimization module, an early warning analysis module and an audit log module. According to the system, the early warning analysis module is combined with burden evaluation and security vulnerability detection of encryption and decryption performance, the abnormal degree of encryption and decryption processes is comprehensively analyzed, the early warning level is set, potential abnormal conditions are analyzed, and early warning information is sent out, so that a system administrator can respond in time, and the system safety is improved. A preposed risk management strategy enables a system administrator to take corresponding countermeasures before the risk actually occurs, thereby effectively reducing the influence of security threats, and meanwhile, according to different early warning levels, the countermeasures can be flexibly adjusted, and reasonable allocation of resources is ensured.

This disclosure above describes a method, a device, and a system for encrypting / decrypting physical channels in a wireless communication network. Among various embodiments are: pre-allocating a key, dynamically granting a key, encrypting the physical channel based on key in various levels, dividing the spectrum into two categories, or dividing a network into an initial access network and a private network. In one embodiment, a method for physical channel encryption is disclosed. Performed by a UE, the method may include obtaining a first key for decrypting a first physical channel, the first physical channel being encrypted; and decrypting the first physical channel based on the first key to obtain a signal or data transmitted by a first network element, the signal or the data being carried in the first physical channel.

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

Systems and methods for secure peer-to-peer communications are described. Devices registered into trusted network may be capable of establishing a shared data encryption key (DEK). In embodiments, each device may be configured to obtain a share of a data encryption key (DEKi) that can be stored locally. The shares may be shares in an M of N Secret Sharing Scheme. This may involve a network that includes an integer, N, devices, and in which M devices may share a secret (i.e. the DEK) during communications, M being an integer less than or equal to N. To obtain the entire DEK during encryption / decryption, a requesting device may send requests to M of N devices for their shares of the DEK. Once M shares are obtained, they may be used generate the DEK for encrypting / decrypting data between the devices.

The invention discloses a novel encryption-decryption scheme, and aims to detect and defend linear spoofing attacks on a cyber-physical system (CPS). With the wide application of CPS in key infrastructures such as industrial automation, smart power grids and automobile systems, it is particularly important to ensure the safety and integrity of CPS. Linear spoofing attacks are malicious behaviors, normal operation of the linear spoofing attacks is interfered by controlling input or output of a system, and a traditional security mechanism is often difficult to effectively cope with the type of attacks. According to the invention, an encryption algorithm is designed to protect data transmission of the CPS, and the encryption algorithm is combined to recover original data and identify potential attack signs at the same time. According to the scheme, the combination of the cryptography technology and the signal processing method is utilized, the data stream can be monitored in real time, and the possible linear attack is identified by analyzing the change of the data before and after encryption. In addition, according to the scheme, calculation efficiency and implementation feasibility are considered, and it is ensured that necessary safety guarantee is provided on the premise that system performance is not affected. Experimental results show that the proposed encryption-decryption scheme can effectively detect linear spoofing attacks in the cyber-physical system, and has relatively low false alarm rate and missing report rate. In addition, the scheme shows good adaptability and robustness in practical application, and provides a new thought and technical support for the security protection of the CPS in the future.

The invention is directed toward systems, methods and computer program products that enable end to end user authentication along with encryption to mitigate the risks posed by untrusted or unsecure intermediary entities. The invention (i) enables full end to end encryption of sensitive data that has been input by a user on a terminal device at one end, and the intended or authorized recipient at the other end, (ii) ensures that data entered by the user on the terminal device is not readable by any intermediary entity including a partner application or other software application implemented within the terminal device, and (iii) eliminates the risk of successful local attacks on the terminal device to unauthorizedly access user data, or to unauthorizedly obtain access to encryption / decryption keys that can be used to unauthorizedly access encrypted user data.

A computer-implemented method, according to one embodiment, includes: receiving encrypted data at a storage controller, and providing the encrypted data to a secure software container. The secure software container is configured to decrypt the encrypted data, calculate hash values using the decrypted data, and compress the decrypted data. The secure software container is also configured to re-encrypt the decrypted data. The computer-implemented method also includes receiving a new copy of the encrypted data from the secure software container. The new copy of the encrypted data may be compressed, include hash values calculated at the secure software container, or compressed as well as including hash values. The new copy of the encrypted data received may thereby be stored in memory.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The invention discloses a WAPI, CCMP and GCMP encryption and decryption coexisting parallel processing system and method for a wireless local area network. The system comprises a transmitter and a receiver. The transmitter is used for reading a plaintext data frame to be encrypted from an application layer, and the plaintext data frame to be encrypted comprises a first MAC frame header, a first security header and a first frame body; reading plaintext data from the first frame body to enable the MAC layer to carry out encryption processing through an encryption module, send encrypted information to a physical layer and then transmit the encrypted information through an air interface; the receiver is used for receiving a to-be-decrypted ciphertext data frame from the air interface, and the to-be-decrypted ciphertext data frame comprises a second MAC frame header, a second security header and a second frame body; reading the ciphertext data and the integrity check MIC ciphertext value from the second frame body, so that the MAC layer sends decryption information to the application layer after carrying out decryption processing through a decryption module; the encryption module encrypts plaintext data; and the decryption module decrypts the ciphertext data. Therefore, the hardware circuit scale is remarkably reduced, and the space occupancy rate is remarkably reduced.

According to the safety coprocessor hybrid encryption method based on the SM2 / 3 / 4 domestic cryptographic algorithm, a novel hybrid encryption system based on the SM2 / 3 / 4 and considering encryption safety, efficiency and key management convenience is constructed on the basis of the characteristics of the SM2 algorithm, the SM3 algorithm and the SM4 algorithm, and the encryption / decryption and signature / verification process is achieved. And aiming at the efficiency problem of a domestic SM algorithm, an encryption / decryption and signature / verification scheme is designed and realized through pure software analysis and software and hardware (SW / HW) collaboration, so that optimal division of software and hardware is realized, and the algorithm efficiency is greatly improved.

The invention is suitable for the field of communication technology improvement, and provides an encryption communication method and system used between EtherCAT slave station nodes, an OTP / nonvolatile storage, an encryption scrambling unit and a decryption descrambling unit are integrated in an EtherCAT slave station chip of a coupler and an I / O module, and encryption / decryption of an EtherCAT message is achieved on the hardware level; xOR operation or an AES algorithm is adopted for encryption, and a secret key is stored in an unmodifiable storage unit; and meanwhile, a parallel architecture of an encrypted network and a standard network is constructed, so that the standard interaction between the slave station node and the master station is not influenced by encrypted communication. The system solves the contradiction of poor real-time performance of a private protocol and easy plaintext communication plagiarism in the prior art, realizes the effects of no real-time performance loss, strong communication exclusiveness and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under industrial 4.0.