19 results about "Encryption software" patented technology

Embodiments are directed to methods and systems for crypto-agile encryption and decryption. A computer system can possess a protocol file that identifies one or more cryptographic software modules. Using these cryptographic software modules, the computer system can generate a plurality of shared secrets and a session key, then use the session key to encrypt a message. The message can be sent to a server computer that can subsequently decrypt the message. At a later time, the protocol file can be updated to identify a different set of cryptographic software modules, which can be used to encrypt messages. Further, the server computer can transmit additional cryptographic software modules to the computer system, enabling the computer system to use those cryptographic software modules to generate cryptographic keys. As such, the cryptographic protocol file can be changed in response to changes in the cryptographic needs of the computer system.

The invention relates to the technical field of rail transit, and discloses a method for selecting built-in encryption software and an external encryption card, which comprises the following steps: S1, when a system is started, interface software selects a message according to a pre-configured encryption mode, and selects to use an encryption card hardware encryption mode or a software built-in encryption mode. According to the method for selecting the built-in encryption software and the external encryption card, a dynamic switching mechanism controlled by interface detection software is established through a hardware encryption card, when the encryption card works normally, a system preferentially uses the hardware encryption card to perform hardware encryption and decryption, and a CPU is liberated from heavy encryption operation, so that the communication delay is remarkably reduced, and the communication efficiency is improved. The data transmission bandwidth is improved, high communication delay and bandwidth limitation caused by the fact that a software encryption mode occupies a large number of CPU resources are prevented, interface detection software monitors the state of the encryption card in real time, software encryption is automatically and seamlessly switched back when the encryption card fails, and the low system reliability and the single-point fault risk are prevented.

A computer-implemented method causes a data processing hardware to perform operations when executed by the data processing hardware. The operations include providing a common encryption key and a unique encryption key at a system on a chip (SoC) of a radar module, providing a unique key pair at the SoC, the unique key pair including a unique public key and a unique private key, and encrypting software with the common encryption key. The operations further include generating a secure boot certificate for the encrypted software, signing the secure boot certificate using the unique private key, and writing the encrypted software to an external flash memory. The operations further include updating the software at the SoC, verifying the software update via a regional public key, and signing the secure boot certificate with a device unique private key via a hardware security module (HSM) of the SoC.

The invention discloses a method and a system for managing software based on an encryption lock, and belongs to the technical field of information security. The method comprises a process that the slave encryption lock initiates software authorization to the master encryption lock and a process that the sub encryption lock operates software encrypted by the master encryption lock through an authorization file. A hierarchical authorization architecture is adopted, authorization management of the software is achieved, the software is safely created and encrypted through the master encryption lock, the use right of the software is authorized to the slave encryption locks, the number of the slave encryption locks can be multiple, flexible management of the authorization states of the slave encryption locks is achieved, and the security of the software is improved. And the controllability of software authorization and the flexibility of software use are enhanced.

Techniques for cryptographic computing isolation are described. A processor includes circuitry to be coupled to memory configured to store one or more instructions. The circuitry is to execute the one or more instructions to instantiate a first process based on an application. To instantiate the first process is to include creating a context table to be used by the first process, identifying a software component to be invoked during the first process, encrypting the software component using a first cryptographic key, and creating a first entry in the context table. The first entry is to include first context information identifying the encrypted software component and second context information representing the first cryptographic key. In more specific embodiments, third context information representing a first load address of the encrypted software component is stored in the first entry of the context table.

This specification provides a method for backing up a key, comprising: deriving a hardware key based on a system state metric stored in the Platform Configuration Register (PCR) of a Trusted Platform Module (TPM); performing a first encryption and a second encryption on the target key to obtain a first ciphertext; performing the first encryption using the hardware key in the TPM, and performing the second encryption using a white-box encryption software module; and exporting the first ciphertext to obtain backup data of the target key.

The invention discloses a calibration software configuration management system of a vehicle diagnostic instrument, which relates to the technical field of management systems, and has the technical key points that the system communicates with the vehicle diagnostic instrument, and comprises a configuration database, and a calibration software library, a controller format file, a configuration report and a calibration encryption software package which are respectively connected with the configuration database; the configuration database is used for maintaining controller information of each vehicle type; the controller format file is used for setting information of each controller; the configuration report is used for judging whether a vehicle controller diagnosed by a vehicle diagnostic instrument and calibration software of the vehicle controller need to be updated or not; and the calibration software library is used for storing application software, calibration software and network software required by the vehicle diagnosis instrument. According to the invention, the diagnostic instrument controller is updated by updating the software library of the vehicle diagnostic instrument controller, unified and efficient management can be carried out, and the flexibility, integrity, leakproofness and diagnostic efficiency of updating the configuration of the controller are improved.

The application provides a computer equipped with information security verification and interactive verification system, and relates to the field of computer information security.The computer relates to a first computer or a second computer, and is configured with a fingerprint and face recognition module or is configured with the fingerprint and face recognition module through a connected auxiliary device, so as to implement the input and collection of fingerprint and face information of multiple priority users, and through the execution of a matching program, a CPU obtains a priority result, queries a first and a second sub-mapping relationship of a local mapping table, implements the execution of startup and system login, and based on the startup and login of encryption software, the reading, modification and / or copy and movement of encrypted files, and the monitoring rules triggered by the copy and movement, implements local authorization / restriction feedback; based on the local restriction feedback and continuous operation, after the user implements a pre-verification program, the CPU sends an instruction to a smart device bound to the priority user, based on the interactive authorization / restriction implementation standard, the CPU executes interactive authorization / restriction feedback; and the overall information security verification and interactive verification of computer use are realized.

This invention discloses a method and system for managing software based on encryption locks, belonging to the field of information security technology. The method includes a process where a primary encryption lock initiates software authorization to a master encryption lock, and a process where a secondary encryption lock runs the software encrypted by the master encryption lock through an authorization file. This invention employs a hierarchical authorization architecture to achieve software authorization management. The master encryption lock securely creates and encrypts software, and then authorizes the use of that software to secondary encryption locks. Multiple secondary encryption locks can exist, enabling flexible management of the authorization status of the secondary encryption locks and enhancing the controllability of software authorization and the flexibility of software use.

Embodiments of the present invention disclose a method, device, electronic device, and storage medium for expanding the application of encryption software, relating to the technical field of software application expansion. These methods address the problem that traditional encryption software, due to its internal encryption algorithm not meeting relevant requirements, is limited in its application areas, hindering the promotion and application of encryption software. The encryption software application expansion method comprises obtaining the encryption algorithm and driver module within the encryption software, adding a driver corresponding to the national encryption algorithm to the driver module, and replacing the encryption algorithm code within the encryption software with the code corresponding to the national encryption algorithm, so that the encryption software can be applied within the scope of application of the national encryption algorithm. The present invention facilitates the application of traditional encryption software in scenarios with higher security requirements, and the method is simple and easy to operate.

A computer-implemented procedure, when executed by data processing hardware, causes the data processing hardware to perform operations. These operations include providing a shared encryption key and a unique encryption key in a system-on-chip (SoC) of a radar module, providing a unique key pair on the SoC, where the unique key pair comprises a unique public key and a unique private key, and encrypting software using the shared encryption key. The operations also include generating a secure boot certificate for the encrypted software, signing the secure boot certificate using the unique private key, and writing the encrypted software to external flash memory.The processes also include updating the software on the SoC, verifying the software update via a regional public key, and signing the secure boot certificate with a device-native private key via a hardware security module (HSM) of the SoC.

The invention discloses a method and system for verifying legality of equipment through software and a storage medium. The method comprises: sending, by a software source server, controllable software to a device; the device decrypts the encrypted permission feature code in a trusted execution environment to obtain a permission feature code; reading the hardware feature code from the secure OTP by the device, and comparing the hardware feature code with the permission feature code; if not, stopping processing the controllable software; and if yes, the equipment decrypts the encryption software in the trusted execution environment to obtain a software plaintext used for running in the equipment. According to the method and the device, the permission binding of the software and the equipment hardware is realized, the trusted execution environment is added into the permission verification process, and an encryption chip does not need to be additionally arranged, so that the effectiveness of preventing illegal embezzlement of the software and unauthorized use of the software is improved, and the hardware cost is reduced.

This key exchange system includes a plurality of communication devices and performs key exchange in encryption communication using a shared key. Each of the communication devices includes: a key exchange unit that performs the key exchange with a communication partner by using encryption software including an encryption algorithm; an encryption communication unit that performs the encryption communication with the communication partner by using the shared key; a key supply unit that supplies the shared key to the encryption communication unit; and a key supply control unit that acquires encryption software for renewal and constructs a new key exchange unit including the encryption software for renewal. After the new key exchange unit is constructed, the key supply unit of a certain communication device requests the key supply unit of the communication partner to construct a new key exchange unit including renewed encryption software. Upon receiving the request for constructing a new key exchange unit, the key supply unit of the communication partner instructs the key supply control unit to construct the new key exchange unit in the communication device of the communication partner. The key supply unit of the certain communication device performs synchronization between the key supply unit of the certain communication device and the key supply unit of the communication device of the communication partner, and switches the key exchange unit that has been used until then with the new key exchange unit.

This invention provides a file encryption device, comprising: a file input pool, a file formatter, a matrix multiplier, an inverse matrix unit, a file output pool, a user password manager, an encryption matrix generator, a universal DES encryptor, an encryption matrix array, and a universal DES decryptor. This invention can meet the needs of people's daily electronic data for low security and large data volumes, avoiding the use of expensive professional data encryption hardware or software, and preventing low-cost data cracking. It provides a low-computation, low-latency, and low-cost encryption device based on a matrix transformation algorithm.

The present invention discloses a protection method for preventing malicious copying of single-chip microcomputer firmware, which relates to the field of single-chip microcomputer protection. The method includes the following steps: S1. Build the minimum working system for the periphery of the single-chip microcomputer; S2. Burn the encryption software into the FLASH of the single-chip microcomputer, obtain the unique identifier of the single-chip microcomputer hardware, encrypt the obtained unique identifier through an encryption function, and store the formed encrypted data in the FLASH of the single-chip microcomputer; S3. Burn the IPMC firmware into the FLASH of the single-chip microcomputer to overwrite the encryption software; S4. When the IPMC firmware is executed, obtain the unique identifier of the single-chip microcomputer hardware, calculate the obtained identifier according to the encryption function, and compare it with the stored encrypted data; S5. After the comparison is completed, if the comparison result is successful, enter the normal execution of the IPMC firmware, and if the comparison fails, enter the safe mode for execution. In the work of the present invention, the function of preventing malicious copying of the single-chip microcomputer firmware is realized by using the unique chip ID of each single-chip microcomputer for encryption operation.

The invention relates to the technical field of electric power safety, in particular to a load control terminal and management master station encryption software design method, which comprises the following steps of: comprehensively evaluating requirements, safety and performance to design an encryption algorithm; through detailed interface design, a set of secure communication mechanism for ensuring data transmission confidentiality and integrity is constructed; an overall framework is constructed through demand analysis, component design, interface definition, coding implementation and testing; the overall security and performance of the system are optimized by continuously updating data, optimizing an encryption algorithm and introducing a security auditing mechanism. The method has the beneficial effects that a comprehensive and efficient data protection system is constructed through accurate selection of an encryption algorithm, fine key management, strict encryption and decryption operation, reliable verification and security protocol application. In combination with the RSA key pair and the AES session key, and the bidirectional identity authentication based on the public key certificate, the confidentiality and integrity of data transmission and the security of the system are ensured.

Disclosed are systems and methods for a cryptographic inventory management (CIM) framework that enables cryptography agility with regards to network security requirements regarding threats from / of quantum computing and artificial intelligence (AI). The disclosed CIM framework can support a mixture of algorithm types, such as, but not limited to, classical, lattice based, code based, isogeny based and the like, which makes switching between cryptographic algorithms efficient, secure and smooth. The disclosed framework can provide a centralized cryptography inventory system (e.g., keys, algorithms, protocols, libraries, crypto-accelerators) that can be compiled, updated and maintained, and can include all the cryptography assets of network functions and support network functions regardless whether they are physical or virtual, quantum vulnerable or not, and the like. The CIM framework can be compiled and implemented as a centralized cryptography system that is built and maintained via automated cryptography assets discovery tools.

The application discloses a data transmission method and related device, and relates to the field of encryption technology; when a first terminal needs to send first data to a second terminal, it can be judged whether encryption software of the first terminal is in an online state; when the encryption software of the first terminal is in the online state, the first terminal can encrypt the first data to be sent to obtain first ciphertext, and send the first ciphertext to a server. After the server decrypts the first ciphertext to obtain the first data, the server sends notification information to the second terminal, so that the encryption software of the second terminal can be in the online state, the first data can be encrypted to obtain second ciphertext, the second ciphertext is sent to the second terminal, and the second terminal can decrypt the second ciphertext to obtain the first data.

The invention discloses an application multidirectional signature verification method based on a hardware encryption chip, and the method achieves the full-life-cycle signature verification of an application program through the construction of a remote master station platform and terminal equipment cooperation architecture and the adoption of an SM3 algorithm as a core verification means. The remote master station platform executes SM3 calculation on the application software package and generates an authoritative release signature; in the terminal signature verification stage, terminal equipment encryption software reads complete application data in the application installation stage, the application starting stage and the application running stage to calculate an SM3 hash value, a hardware encryption chip receives the hash value and an authoritative published signature, a verification result is output after decryption and comparison, and if verification fails, an execution process is blocked, and a safety response is triggered. The method aims at overcoming the defects that an existing application signature verification technology is unbalanced in security architecture, fragmented in protection range and weak in credible foundation, gives consideration to calculation flexibility and verification safety, protects and covers the whole process, and is suitable for the field of high-security requirements of terminal equipment such as industrial control and government affair service.