110 results about "Encryption decryption" patented technology

The invention discloses an SM2 collaborative signature and encryption and decryption system and method fusing anti-quantum characteristics, and relates to the field of cryptography and information security. According to the method, an anti-quantum cryptographic algorithm and a national cryptographic SM2 cooperative computing framework are deeply integrated, and a key security system is constructed: SM2 sub-private keys, anti-quantum key pairs and public keys are acquired and generated through an anti-quantum algorithm software and hardware enhancement module, and the private keys are encrypted and stored and are regularly alternated; on the basis of anti-quantum collaborative signature, encryption and decryption modules, an anti-quantum verification mechanism is embedded, and data is transmitted in combination with a national secret TLCP protocol, so that signature, encryption and decryption operations are completed; the equipment integration and dynamic security control unit monitors a security state, calculates a threat index to generate a protection strategy, and dynamically switches a security mode, so that the problems of insufficient security, vulnerability to attacks and data tampering of a traditional SM2 algorithm under the threat of quantum computing are effectively solved; and the long-term anti-attack capability and the operation reliability of the equipment in a high-security demand scene are remarkably improved.

This invention relates to an image-based configuration file embedding and recovery system for industrial vision software. The system includes a configuration data processing module, an encryption / decryption module, an image embedding module, an image output module, an image acquisition and recognition module, a configuration recovery module, a scene restoration module, and a data verification module. The core innovation lies in using images as the storage and transmission medium for configuration files. Through a composite embedding method of "customized QR code + LSB steganography," standardized and encrypted configuration data is embedded into the carrier image to generate an embedded image. This invention features high robustness, high security, and ease of operation, and can adapt to complex industrial environments, significantly improving the deployment and maintenance efficiency of industrial vision systems.

The invention discloses a medical image encryption method based on a trap door network and a diffusion model, and relates to the technical field of image encryption. The method comprises the following steps: encrypting a focus image scanned by medical equipment of a patient by using a session key through key negotiation between the patient and a doctor, and sending the encrypted image to an image filing and communication server; and when the doctor needs to look up the lesion image, decrypting the ciphertext image through the previously established session key, and recovering the corresponding original lesion image. The image encryption / decryption network of the invention is composed of a Diffusion model and a trap door network. The trap door network enhances the security of the medical image encryption method, and the forward generation and sampling process based on the Diffusion model ensures the security of the encrypted image and the high-quality reconstruction effect of the decrypted image.

The present disclosure relates to a data encryption and decryption method, system, device, medium and program product, comprising: an encryption and decryption function container receiving an encryption / decryption request sent by an application execution container, wherein the encryption and decryption function container and the application execution container are pre-deployed on a node, the encryption / decryption request comprises data to be encrypted / decrypted, the application execution container comprises an application program, and the encryption and decryption function container comprises a plurality of encryption and decryption algorithms; the data to be encrypted / decrypted is encrypted / decrypted based on a target encryption / decryption algorithm and a preset key, wherein the target encryption / decryption algorithm is selected from the plurality of encryption and decryption algorithms by the encryption and decryption function container according to a pre-configured environment variable; and the encrypted / decrypted data is returned to the application execution container. The present application can shield the implementation differences between different encryption and decryption languages, and isolate the key, encryption and decryption algorithm from the application program code, thereby improving the security of the encrypted / decrypted data.

The present application provides an AES encryption and decryption device and method. The AES encryption and decryption device comprises a key expansion module configured to perform key expansion based on an encryption seed key to generate round keys required for a current round of encryption by rounds; an encryption module configured to receive the round keys of the current round from the key expansion module and perform the current round of encryption based on the round keys until a plurality of rounds of encryption required are completed to generate encrypted information; a reverse key expansion module configured to perform reverse key expansion based on a decryption seed key to generate round keys required for a current round of decryption by rounds; and a decryption module configured to receive the round keys of the current round from the reverse key expansion module and perform the current round of decryption based on the round keys until a plurality of rounds of decryption required are completed to generate plaintext information. Based on the AES encryption and decryption device and the corresponding encryption and decryption process, the storage space for storing the round keys can be saved while effectively implementing the AES encryption and decryption.

The invention relates to the technical field of electronic equipment protection, in particular to a quantum key encrypted 5G communication module and an encryption method thereof.The quantum key encrypted 5G communication module comprises a quantum key generation unit, a 5G communication unit, a data encryption and decryption unit, an instruction verification unit and a main control unit, and the quantum key generation unit is used for generating and outputting a quantum key; the quantum key generation unit is used for generating a quantum key, the 5G communication unit is used for achieving data transmission of a control instruction, a patient electronic medical record and a medical image in a remote medical scene, the data encryption and decryption unit is connected with the quantum key generation unit and the 5G communication unit and used for calling the quantum key to encrypt or decrypt transmission data, and the instruction verification unit is connected with the 5G communication unit. The data is effectively prevented from being illegally intercepted, tampered or leaked in the transmission process, the potential safety hazard of a traditional encryption technology in a medical high-sensitivity data transmission scene is thoroughly solved, and a level of safety guarantee is provided for remote medical data privacy protection.

A computer-implemented method for an encryption for secure communication between devices during quantum annealing or QUBO-based routines, which are executed on a quantum device with configurations determined or supported by at least one classical computing device, wherein the encryption and decryption of data are managed by the classical computing device, the method characterized by within a QUBO based routine that includes set of pre-trained weak learners that provide output for test values and weight adjustment process for these weak learners and after the discretized to model it as a QUBO; using different encoding depths for different weights with the assigning the weights randomly according to the correlation in between the weak learners with the registration of this encoding information; shuffling the order of the variables randomly with the registering this order information; converting the QUBO matrix, which is stored in at least one storage medium and generating a string which includes two different number whose length matches the solution space dimensionality and registering the strings with spin flipping these numbers; decryption of the data which is received from at least one quantum device with encrypted by classical computing device before the transfer procedure with using encoding information, order information, spin flipped result, combination order information or suitable combination of them according to the encryption.

A method actuates a device to perform hardware interfacing (S1314 and S1323) for retrieving hardware and / or OS DI (device identification) information embedded or installed thereon, so as to provide cybersecurity protection (S1326) to the device itself (S1320) and / or to an external control system (S1311) or Internet system to be accessed (S309), for establishing unique DI intercommunication (S1315 and S1324) with the external control system (S1311), for replacing the conventional antivirus software, for providing OS piracy protection (S1109) to an OS maker, for functioning as a unique private key (S1317) in encrypting / decrypting outgoing commands (S1328) and / or feedback signals (S1319).

The application discloses a two-contact bidirectional communication encryption and decryption architecture and a communication method, and belongs to the technical field of anti-fake function encryption and decryption chips. The two-contact bidirectional communication encryption and decryption architecture comprises a two-contact power supply detection unit, a microcontroller unit, an encryption and decryption ALU unit and an encryption and decryption storage unit. The two-contact power supply detection unit is provided with a signal input end, a voltage input end, a voltage output end and a grounding end. The signal input end is connected with the voltage input end. When external signals and power are received by the two-contact bidirectional communication encryption and decryption architecture, the polarity of the two-contact voltage input end and the grounding end is automatically judged, and the voltage input end is connected with the voltage output end. When the voltage of the voltage output end reaches the working voltage range, the voltage output end is connected with the microcontroller unit, the encryption and decryption ALU unit and the encryption and decryption storage unit, so that the encryption and decryption function of the chip is realized.

To provide an encryption communication system capable of notifying a user of a storage amount of encryption keys.SOLUTION: An encryption communication system includes an application execution environment, an encryption / decryption execution environment, and a key exchange node. The encryption / decryption execution environment encrypts transmission data and decrypts encrypted reception data while consuming the encryption key. The key exchange node generates an encryption key and shares the encryption key with a communication partner. The key exchange node controls whether or not to generate a cryptographic key based on the stored amount of cryptographic keys. The application execution environment includes a stored key amount notification function unit and a band control function unit. The stored key amount notification function unit notifies the stored amount of cryptographic keys. The band control function part receives the notification and automatically executes control of a communication band different for each communication content on the basis of the priority set for each communication content. The band control function unit automatically changes the control content of the communication band according to the notification content without a user's operation.SELECTED DRAWING: Figure 9

The application relates to the technical field of data encryption, and discloses a data encryption device, a memory encryption and decryption system and a chip. The device comprises an address input end, a password root output end, a key generation circuit for generating a first key and a second key with n bits, and a data encryption logic circuit comprising a four-round encryption module. Four-round encryption units in the four-round encryption module comprise an interleaver with n bits, four 64-bit round function components arranged on both sides of the interleaver, and two sub-circuits for encrypting residual data and residual keys. The data encryption logic circuit is connected with the address input end, the password root output end and the key generation circuit, is used for performing alignment processing on a memory access address, and performs interleaving encryption processing on the n-bit aligned address, the first key and the second key obtained through the alignment processing on the basis of the four-round encryption module to generate a password root with n bits. The encryption device is used for encrypting write data on the basis of the password root, and the decryption device is used for decrypting read data on the basis of the password root.

The application relates to the technical field of signal encryption, and discloses a method for realizing optical transmission signal encryption and decryption, which comprises the following steps: generating transmission requirements and a dynamic response time length to obtain a to-be-transmitted data group and a data amount, matching an encryption mode based on the data amount, generating an optical transmission signal, analyzing the data amount of the optical transmission signal and decrypting and recombining the optical transmission signal to obtain transmission data. In a point-to-point structure, the transmission requirements and the dynamic response time length generated by a receiver can make a sender accurately match transmission data, the data can be reasonably divided according to the dynamic response time length, a proper encryption mode can be adapted based on the data amount, and the data can be efficiently encrypted and transmitted and accurately decrypted and recombined while meeting the time and content requirements of the receiver; in a non-point-to-point structure, the generation and application of the dynamic response time length are combined, the sender effectively divides, encrypts, decrypts and recombines transmission data according to complex network conditions, and the adaptability, security and transmission efficiency of optical transmission signal encryption and decryption in different network topologies are improved.

This invention provides an encryption method and system applied to a trusted application. The method includes: obtaining key encryption storage request information from a client application, the key encryption storage request information containing an original key to be encrypted; reading the hash value of the root key from the electronic fuse area; generating key encryption information based on the hash value; encrypting the original key using the key encryption information to obtain key ciphertext; and storing the key ciphertext in a storage device. The encryption scheme provided by this invention achieves efficient protection of the key by combining hardware and key transfer (TA) protection, effectively overcoming security vulnerabilities in traditional storage methods and enhancing the security, integrity, and availability of key management.

The invention discloses an authentication method, an authentication system and a communication method, a complex three-level architecture under a PKI (Public Key Infrastructure) framework is abandoned, a two-layer architecture of a main controller and nodes is adopted, hierarchical interaction overhead is reduced, a certificate signature request is firstly sent through the nodes, a trust chain between the two layers is established by adopting a signature verification mode, and a certificate signature request is sent through the nodes. And then, within a preset time, based on encryption, decryption, signature and signature verification of the secret key, strict identity authentication of a request-response-confirmation mechanism is completed, so that the security of data interaction during communication can be ensured.

The invention discloses an anti-counterfeiting material safety production method and system based on multi-encryption, and the method comprises the steps: obtaining encryption processing data corresponding to a target process in response to a signal that a production raw material of an anti-counterfeiting material enters the target process; based on preset decrypted data, decrypting the encrypted processing data to obtain decrypted processing data; based on a preset verification rule corresponding to the target process, verifying the decrypted processing data; and when the verification is passed, generating an equipment processing instruction corresponding to the decrypted processing data and sending the equipment processing instruction to corresponding processing equipment so as to process the production raw materials. Therefore, accurate anti-counterfeiting material processing control based on encryption, decryption and multiple verification can be realized, the safety and traceability of the production process are improved, and the counterfeiting risk caused by data tampering or verification failure is reduced.

The application is suitable for the field of communication technology improvement, and provides an encryption communication method and system between EtherCAT slave nodes, which realizes encryption / decryption of EtherCAT messages at the hardware level by integrating OTP / non-volatile storage, encryption scrambling units and decryption scrambling units in the EtherCAT slave chip of the coupler and the I / O module; the encryption adopts XOR operation or AES algorithm, and the key is stored in the non-modifiable storage unit; meanwhile, an architecture parallel to the standard network is constructed, so as to ensure that the encryption communication does not affect the standard interaction between the slave node and the master station. The system solves the contradiction between "poor real-time performance of the private protocol" and "easy copying of the plaintext communication" in the prior art, realizes the effects of real-time lossless, strong communication exclusivity and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under Industry 4.0.

The application discloses a protective shoe AI generation method based on physical process constraints and safety standard verification, relates to the technical field of product design automation, and comprises the following steps: assembling the topological relationship of the protective component and the material process constraint based on the scale conversion benchmark and the determinable rule table, binding the rules according to the functional partition, forming a parameterized constraint set, generating a shoe scheme according to the parameterized constraint set and the appearance intention, performing semantic segmentation, key point positioning and edge extraction measurement and verifying the rules, when the verification result indicates that the shoe scheme does not conform to the determinable rule table and the parameterized constraint set, sequentially performing local shape correction, local redrawing generation and discarding regeneration, and obtaining a final scheme, rechecking the final scheme, outputting a multi-view design drawing, a partition annotation drawing, a vectorized contour line, a key dimension table, a material list and a process specification, and performing encryption and decryption, clearing the plaintext and recording the access log.

A method for secure data transmission is provided. The method includes requesting a key from an encryption and decryption application in a near real-time radio access network (RAN) intelligent controller (Near-RT RIC). The method includes receiving the key from the encryption and decryption application. The method includes encrypting data by using the key, and generating encrypted data. The method includes storing the encrypted data to a database in the Near-RT RIC through a shared data layer.

The application discloses a maternal and child health care data security sharing exchange method and system, relates to the technical field of data security sharing, and comprises the following steps: a patient initiates authorization through zero-knowledge proof DID identity, defines a three-dimensional strategy, generates a strategy fingerprint and a dynamic access token DAT; a data use direction privacy gateway submits an access request, channel 1 performs on-chain verification, sends the DAT to a smart contract, and outputs an on-chain verification result; channel 2 performs environment verification and outputs True / False; when the double-channel combined verification result is passed, a metadata key is decrypted by using attribute-based encryption, the storage position of data is acquired, a physically isolated safe area is created, the metadata key is input into an enclave, the data body key is decrypted in the enclave memory, and the data is decrypted by using the key; scientific research code runs in a TEE, and only a compliant calculation result is output. From key decryption to data calculation, all operations are completed in a safe environment, and plaintext data is not exposed.

The invention provides a multistage electrochromic encryption device and an encryption / decryption method and application thereof, and the multistage electrochromic encryption device sequentially comprises a first transparent conductive layer (1), a patterned electrochromic layer (2), an electrolyte gel layer (3), an ion storage layer (4) and a second transparent conductive layer (5) from top to bottom. The patterned electrochromic layer comprises at least two mutually independent non-overlapping pattern areas, the non-overlapping pattern areas are independently formed by at least two electrochromic materials, the electrochromic materials have different characteristic oxidation potentials, and the electrochromic materials are in a colorless transparent state in a neutral state. According to the invention, by combining the gradient voltage threshold value and the spatial pattern coding, multi-stage and step-by-step dynamic decryption is realized, and the information capacity and complexity are far better than those of the traditional binary switching encryption.

Requests are submitted to a request processing entity where the requests include a cryptographic key to be used in fulfilling the request. The request processing entity, upon receipt of the request, extracts the key from the request and uses the key to perform one or more cryptographic operations to fulfill the request. The one or more cryptographic operations may include encryption / decryption of data that to be / is stored, in encrypted form, by a subsystem of the request processing entity. Upon fulfillment of the request, the request processing entity may perform one or more operations to lose access to the key in the request, thereby losing the ability to use the key.

This application provides a database encryption method, device, and system based on large-scale model multi-agent collaboration. By setting up a data request control agent and an encryption / decryption execution agent, the data request control agent, upon receiving a database operation request, determines the operation request type and the operation request object. If it determines that the operation request object has an encryption strategy, it sends an encryption / decryption processing request for the operation request object to the encryption / decryption execution agent based on the operation request type. The encryption / decryption execution agent, based on a reinforcement learning algorithm, determines the optimal resource scheduling scheme from multiple candidate resource scheduling schemes and performs encryption / decryption processing on the operation request object according to the determined optimal resource scheduling scheme. By dynamically scheduling encryption resources based on real-time monitored performance indicators of various types of encryption resources, resource utilization is improved, and the real-time performance of encryption / decryption processing is enhanced.

The present application relates to the technical field of vehicle-mounted cipher box, in particular to a control method, a domain controller and a system of vehicle-mounted cipher box. The method comprises: obtaining a setting signal for controlling the vehicle-mounted cipher box; determining a target operation type of the vehicle-mounted cipher box according to the setting signal; the target operation type comprises at least one of encryption, decryption, unlocking and locking of the vehicle-mounted cipher box; calling a service interface corresponding to the target operation type on a vehicle information unit (VIU) to drive the vehicle-mounted cipher box to perform the target operation in response to the calling operation of the service interface; and the service interface comprises at least one of an encryption service interface, a decryption service interface, an unlocking service interface and a locking service interface. The present application improves the flexibility and security of operation; and the vehicle-mounted cipher box is controlled by the CDC, realizing the integration of the vehicle-mounted cipher box and the vehicle machine and reducing the cost.

This invention relates to the field of data interaction, specifically to a cross-network data security interaction method and system, comprising: obtaining the sensitivity level of a field to be accessed in the directory information corresponding to a data access request; determining the permission level of the field to be accessed; if the permission level is greater than the sensitivity level, obtaining the utility weight and risk weight of the field to be accessed; if the utility weight is greater than or equal to the risk weight, determining that the field to be accessed is an open field; wherein, the encryption level of the open field is less than a preset level threshold, the open field is temporarily encrypted to obtain encrypted access data, and the encrypted access data is sent to the sending end. This invention, by determining that a field is an open field when the utility weight is greater than or equal to the risk weight, and by only temporarily or lightly encrypting data marked as open fields, rather than uniformly using high-strength encryption, significantly reduces the computational overhead and transmission latency of encryption and decryption.

Disclosed is a memory system which includes a non-volatile memory device, and a memory controller configured to control the non-volatile memory device. The memory controller includes a key index table including an extended key index associated with a logical address from a host device and an encryption / decryption key table including a replicated key index associated with the extended key index, and an encryption / decryption key associated with encryption or decryption of target data associated with the logical address. The memory controller is configured to change the replicated key index based on a key change request for the encryption / decryption key. Based on the encryption or the decryption being performed with respect to the target data, the memory controller is configured to compare the extended key index and the replicated key index to detect whether the encryption / decryption key associated with the encryption or the decryption is changed.

A computer-implemented method, according to one embodiment, includes: receiving encrypted data at a storage controller, and providing the encrypted data to a secure software container. The secure software container is configured to decrypt the encrypted data, calculate hash values using the decrypted data, and compress the decrypted data. The secure software container is also configured to re-encrypt the decrypted data. The computer-implemented method also includes receiving a new copy of the encrypted data from the secure software container. The new copy of the encrypted data may be compressed, include hash values calculated at the secure software container, or compressed as well as including hash values. The new copy of the encrypted data received may thereby be stored in memory.

The invention discloses a multi-security guarantee identifier issuing method based on identifier analysis, which comprises the following steps: S1, identity authentication: issuing a unique identity certificate to a client needing to apply for an identifier by using an offline certificate issuing mode, and solving a string of unique identity authentication keys of the client through an encryption and decryption algorithm, the server stores the same secret key; step S2, identification quantity determination: the server calculates a redundant identification quantity according to the secret key quantity applied by the client, and finally sends an identifier to the client according to the redundant identification quantity; s3, the identifiers enter an identifier pool, the identifier pool divided into a normal identifier area and a redundant identifier area is established at the client, and the identifiers sent by the server are respectively put into the normal identifier area and the redundant identifier area according to the normally used identifiers and the remaining identifiers; and S4, identifier binding: randomly selecting one identifier from the normal identifier area in the identifier pool to complete binding of the identifier and the product. According to the invention, the security and authenticity of the identification are ensured.

The invention discloses a DNA sequence direct encryption method and system based on automaton cryptography, and relates to the technical field of DNA storage security. By designing a DS-mealy machine and a DS-cellular automaton, direct encryption of a DNA sequence is achieved, and the problems that in an existing DNA storage encryption method, compatibility with a coding model is poor, safety is insufficient, performance is low, and expandability is weak are solved. According to the method, sequence-level encryption is realized through base diffusion and rotation operation, so that base distribution is more uniform and random, and the security of DNA storage data is improved; meanwhile, the space resource consumption of encryption and decryption is reduced, the processing speed is increased, and the method is suitable for various DNA storage scenes and particularly suitable for storage of sensitive information such as medical data with high requirements for safety and efficiency.

A method for constructing a data-parallel trusted distributed neural network accelerator architecture, the accelerator architecture, the accelerator, and the server includes the following steps: a host node construction step for remote authentication, control, and data distribution of multiple neural network accelerator nodes; a dynamic random access memory construction step; and a construction of the multiple neural network accelerator nodes, further including: a control processor construction step; a computing unit construction step; and a memory controller construction step for providing trusted data protection, which further includes: constructing a global version number structure of a distributed large model on-chip; and encrypting, decrypting, generating, and verifying data using a method that does not use data addresses; wherein the encryption, decryption, integrity protection generation, and integrity protection verification are communicated at the tensor granularity of the neural network layers.

The present disclosure is directed to systems and methods for securely managing and administering an encryption / decryption key using distributed ledger technology (DLT). In some examples, a client may possess a data attribute (or a dataset of data attributes). The client may receive tokenization parameters to apply to the data attribute to encrypt the data attribute. After tokenizing the data attribute, the client may then request the creation of an encryption key to be applied to the token. A third-party key management system (KMS) may create an encryption key and a salt. The salt may be applied to the token, and the salted token may then be encrypted. Additionally, a decryption key may be created and stored securely at the third-party KMS. The client may transmit the encrypted token to a third-party consolidation platform, wherein the consolidation platform requests access to the decryption key to unveil the underlying token.