10 results about "Encryption software" patented technology

The invention relates to the technical field of rail transit, and discloses a method for selecting built-in encryption software and an external encryption card, which comprises the following steps: S1, when a system is started, interface software selects a message according to a pre-configured encryption mode, and selects to use an encryption card hardware encryption mode or a software built-in encryption mode. According to the method for selecting the built-in encryption software and the external encryption card, a dynamic switching mechanism controlled by interface detection software is established through a hardware encryption card, when the encryption card works normally, a system preferentially uses the hardware encryption card to perform hardware encryption and decryption, and a CPU is liberated from heavy encryption operation, so that the communication delay is remarkably reduced, and the communication efficiency is improved. The data transmission bandwidth is improved, high communication delay and bandwidth limitation caused by the fact that a software encryption mode occupies a large number of CPU resources are prevented, interface detection software monitors the state of the encryption card in real time, software encryption is automatically and seamlessly switched back when the encryption card fails, and the low system reliability and the single-point fault risk are prevented.

A computer-implemented method causes a data processing hardware to perform operations when executed by the data processing hardware. The operations include providing a common encryption key and a unique encryption key at a system on a chip (SoC) of a radar module, providing a unique key pair at the SoC, the unique key pair including a unique public key and a unique private key, and encrypting software with the common encryption key. The operations further include generating a secure boot certificate for the encrypted software, signing the secure boot certificate using the unique private key, and writing the encrypted software to an external flash memory. The operations further include updating the software at the SoC, verifying the software update via a regional public key, and signing the secure boot certificate with a device unique private key via a hardware security module (HSM) of the SoC.

The invention discloses a method and a system for managing software based on an encryption lock, and belongs to the technical field of information security. The method comprises a process that the slave encryption lock initiates software authorization to the master encryption lock and a process that the sub encryption lock operates software encrypted by the master encryption lock through an authorization file. A hierarchical authorization architecture is adopted, authorization management of the software is achieved, the software is safely created and encrypted through the master encryption lock, the use right of the software is authorized to the slave encryption locks, the number of the slave encryption locks can be multiple, flexible management of the authorization states of the slave encryption locks is achieved, and the security of the software is improved. And the controllability of software authorization and the flexibility of software use are enhanced.

This specification provides a method for backing up a key, comprising: deriving a hardware key based on a system state metric stored in the Platform Configuration Register (PCR) of a Trusted Platform Module (TPM); performing a first encryption and a second encryption on the target key to obtain a first ciphertext; performing the first encryption using the hardware key in the TPM, and performing the second encryption using a white-box encryption software module; and exporting the first ciphertext to obtain backup data of the target key.

The application provides a computer equipped with information security verification and interactive verification system, and relates to the field of computer information security.The computer relates to a first computer or a second computer, and is configured with a fingerprint and face recognition module or is configured with the fingerprint and face recognition module through a connected auxiliary device, so as to implement the input and collection of fingerprint and face information of multiple priority users, and through the execution of a matching program, a CPU obtains a priority result, queries a first and a second sub-mapping relationship of a local mapping table, implements the execution of startup and system login, and based on the startup and login of encryption software, the reading, modification and / or copy and movement of encrypted files, and the monitoring rules triggered by the copy and movement, implements local authorization / restriction feedback; based on the local restriction feedback and continuous operation, after the user implements a pre-verification program, the CPU sends an instruction to a smart device bound to the priority user, based on the interactive authorization / restriction implementation standard, the CPU executes interactive authorization / restriction feedback; and the overall information security verification and interactive verification of computer use are realized.

This invention discloses a method and system for managing software based on encryption locks, belonging to the field of information security technology. The method includes a process where a primary encryption lock initiates software authorization to a master encryption lock, and a process where a secondary encryption lock runs the software encrypted by the master encryption lock through an authorization file. This invention employs a hierarchical authorization architecture to achieve software authorization management. The master encryption lock securely creates and encrypts software, and then authorizes the use of that software to secondary encryption locks. Multiple secondary encryption locks can exist, enabling flexible management of the authorization status of the secondary encryption locks and enhancing the controllability of software authorization and the flexibility of software use.

A computer-implemented procedure, when executed by data processing hardware, causes the data processing hardware to perform operations. These operations include providing a shared encryption key and a unique encryption key in a system-on-chip (SoC) of a radar module, providing a unique key pair on the SoC, where the unique key pair comprises a unique public key and a unique private key, and encrypting software using the shared encryption key. The operations also include generating a secure boot certificate for the encrypted software, signing the secure boot certificate using the unique private key, and writing the encrypted software to external flash memory.The processes also include updating the software on the SoC, verifying the software update via a regional public key, and signing the secure boot certificate with a device-native private key via a hardware security module (HSM) of the SoC.

This key exchange system includes a plurality of communication devices and performs key exchange in encryption communication using a shared key. Each of the communication devices includes: a key exchange unit that performs the key exchange with a communication partner by using encryption software including an encryption algorithm; an encryption communication unit that performs the encryption communication with the communication partner by using the shared key; a key supply unit that supplies the shared key to the encryption communication unit; and a key supply control unit that acquires encryption software for renewal and constructs a new key exchange unit including the encryption software for renewal. After the new key exchange unit is constructed, the key supply unit of a certain communication device requests the key supply unit of the communication partner to construct a new key exchange unit including renewed encryption software. Upon receiving the request for constructing a new key exchange unit, the key supply unit of the communication partner instructs the key supply control unit to construct the new key exchange unit in the communication device of the communication partner. The key supply unit of the certain communication device performs synchronization between the key supply unit of the certain communication device and the key supply unit of the communication device of the communication partner, and switches the key exchange unit that has been used until then with the new key exchange unit.

This invention provides a file encryption device, comprising: a file input pool, a file formatter, a matrix multiplier, an inverse matrix unit, a file output pool, a user password manager, an encryption matrix generator, a universal DES encryptor, an encryption matrix array, and a universal DES decryptor. This invention can meet the needs of people's daily electronic data for low security and large data volumes, avoiding the use of expensive professional data encryption hardware or software, and preventing low-cost data cracking. It provides a low-computation, low-latency, and low-cost encryption device based on a matrix transformation algorithm.

The invention discloses an application multidirectional signature verification method based on a hardware encryption chip, and the method achieves the full-life-cycle signature verification of an application program through the construction of a remote master station platform and terminal equipment cooperation architecture and the adoption of an SM3 algorithm as a core verification means. The remote master station platform executes SM3 calculation on the application software package and generates an authoritative release signature; in the terminal signature verification stage, terminal equipment encryption software reads complete application data in the application installation stage, the application starting stage and the application running stage to calculate an SM3 hash value, a hardware encryption chip receives the hash value and an authoritative published signature, a verification result is output after decryption and comparison, and if verification fails, an execution process is blocked, and a safety response is triggered. The method aims at overcoming the defects that an existing application signature verification technology is unbalanced in security architecture, fragmented in protection range and weak in credible foundation, gives consideration to calculation flexibility and verification safety, protects and covers the whole process, and is suitable for the field of high-security requirements of terminal equipment such as industrial control and government affair service.