301 results about "Ephemeral key" patented technology

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention discloses an encrypted data transmission method and server based on a dynamic key, and relates to the field of data transmission security, and the method comprises the steps: generating a first private key through a quantum random number generator; receiving an encrypted public key data packet sent by the client, and decrypting the encrypted public key data packet based on the one-time key to obtain a client public key; performing key operation on the client public key and the first private key to generate a first temporary key; generating a confirmation message based on the one-time key encryption, and establishing an encrypted communication connection with the client based on the first temporary key after the confirmation message is sent to the client; after a preset time interval, generating a second private key through the quantum random number generator, and updating the first temporary key based on the second private key to obtain a second temporary key; and after synchronizing the second temporary key to the client, maintaining encrypted communication connection with the client based on the second temporary key. By implementing the application, the security of data transmission can be improved in a complex network environment.

The invention discloses a dynamic key threshold fragmentation privacy tracing method based on block chain collaborative verification, and belongs to the field of information security. According to the method, a dynamic key is taken as a hub, decentralized identity, zero-knowledge verification, deep watermark and threshold collaborative decryption are deeply coupled, a temporary key generated by each conference is split into a plurality of fragments, the fragments are stored in a distributed manner by a block chain node and a tracing unit, only a hash fingerprint combined by the fragments is subjected to chaining and evidence storage, and the dynamic key is subjected to zero-knowledge verification and deep watermark and threshold collaborative decryption. A light evidence chain which cannot be tampered but has no privacy exposure is formed; participants are anonymously accessed through a verifiable certificate without leaking specific information, and truth of anonymous identity is ensured through signature of a trusted unit; when data leakage occurs, the tracing unit extracts a watermark, compares a zero knowledge proof, verifies the relevance between a leaked ciphertext and a chain fingerprint, triggers a multi-party threshold decryption recovery key, and finally accurately positions a person in charge in combination with the encrypted and stored DID mapping table without exposing irrelevant information in the whole process.

The invention provides a post quantum cryptography and national cryptographic algorithm hybrid encryption and decryption method and device, and relates to the technical field of password application. The hybrid encryption method comprises the following steps: acquiring a hybrid encryption public key of a receiver and plaintext data to be encrypted, performing de-encapsulation processing on the hybrid encryption public key to obtain a first national cryptographic encryption public key component and a post-quantum key encapsulation public key component, generating a first national cryptographic encryption ciphertext and a post-quantum key encapsulation ciphertext, and transmitting the first national cryptographic encryption ciphertext and the post-quantum key encapsulation ciphertext to the receiver; generating a first temporary key according to a first random number corresponding to the first national cryptographic encryption ciphertext and a symmetric key corresponding to the post-quantum key encapsulation ciphertext, and encrypting the plaintext data to be encrypted by adopting a second national cryptographic encryption algorithm according to the first temporary key to obtain a second national cryptographic message ciphertext, and performing third national cryptographic algorithm hash operation on the to-be-encrypted plaintext data to obtain a message hash value, and performing packaging processing on the first national cryptographic encrypted ciphertext, the post quantum key packaging ciphertext, the second national cryptographic message ciphertext and the message hash value to obtain a mixed encrypted ciphertext.

A navigation system and method are disclosed for operation in GPS-denied environments using quantum-inspired sensor fusion, dynamic virtual anchor points (VAPs), and predictive environmental modeling. The system represents multiple position hypothesis using wavefunction-like expansions and integrates VAP-based triangulation for drift correction. A predictive modeling module ingests solar, geomagnetic, and environmental data to proactively adjust sensor weighting. A cybersecurity module employs quantum-algebraic key generation and location-derived ephemeral keys to secure inter-device communication. The system includes an augmented reality (AR) interface to visualize and edit anchor references, and a neurofeedback module that adapts the AR interface based on real-time physiological signals from the user. The method further enables anchor optimization via AI-driven repositioning and supports low-power edge execution using approximate amplitude filtering. Additional modules may include fractal antennas, neuromorphic processors, and adaptive forecasting layers to maintain positional accuracy and user experience in subterranean, multi-floor, or magnetically complex environments.

Embodiments of the present application provide a data processing method and a related device. The method comprises: when a service request initiated by an application is detected, acquiring a temporary key randomly allocated for the service request; performing encryption processing on the temporary key using a certificate public key, to obtain an encrypted temporary key, the certificate public key being preset in source code of the application, and a certificate private key corresponding to the certificate public key being stored in a server; performing encryption processing on data requested by the service request using the temporary key, to obtain a ciphertext; generating a network response request packet on the basis of the encrypted temporary key and the ciphertext; and sending to the server the network response request packet, the network response request packet being used to request the server to respond to the service request. The embodiments of the present application can ensure data security in a data transmission process, and reduce resource overhead for a server.

Mechanisms for resource management are described. A public key of a second device and an identifier of the public key may be received at a first device. The public key may correspond to a private key stored at the second device, be referenceable using the key identifier, and be associated with a user. A string of randomized characters may be encrypted at the first device using a secret generated from an ephemeral key generated at the first device and the public key, and encrypted data may be obtained. A packet may be generated at the first device that includes the ephemeral key, the key identifier, and the encrypted data. Based on providing the packet to the second device, the string of randomized characters may be inputted into the first device and the user may be authenticated for access to the first device.

A method of enabling knowledge proof in a blockchain transaction is disclosed. The method comprises sending, from a verifier to a prover, a blockchain transaction redeemable by means of data including (i) first data (y) based on a combination of an ephemeral key (r), second data (c) and a private key of a public-private key pair of a cryptography system, wherein the public key (v) is based on an integer generator raised to a first power, wherein the first power is based on the private key, and wherein knowledge of the private key is required in order to determine the ephemeral key from the first data, and (ii) third data (x) based on the integer generator raised to a second power, wherein the second power is based on the ephemeral key.

The invention discloses a cross-regional vehicle authentication method based on a physical unclonable function, which belongs to the field of Internet of Vehicles information security, and comprises the following steps: initializing a trusted management mechanism system; initializing a regional agent mechanism; the cross-regional vehicle CDV selects a local trusted vehicle LTV; carrying out cross-regional vehicle authentication; the agent ATA creates an interaction identity; the LTV generates a temporary key; the CDV obtains the secret key and verifies the secret key; and the LTV verifies the credibility of the CDV. According to the method, the unique identity label is generated by using the PUF, so that the authentication security is ensured, the calculation and communication overhead is reduced, the robustness and diversity of the authentication information are improved, the potential safety hazard in cross-regional authentication can be effectively reduced, and the method has a wide application prospect in the fields of intelligent transportation, automatic driving and the like.

The present disclosure provides a method and a device by which a terminal is safely provisioned, from a PS, with credentials of an SO-SNPN to receive service when a non-public network is used in a wireless communication system. The method performed by a terminal in a wireless communication system may comprise the operations of: acquiring configuration information including a certificate of the terminal and a CA certificate associated with a certificate of a provisioning server; confirming that provisioning using a control plane is performed; generating a temporary key pair on the basis of the confirmation; and acquiring credentials of an SO-SNPN on the control plane on the basis of the configuration information and the temporary key pair.

A navigation system and method are disclosed for operation in GPS-denied environments using quantum-inspired sensor fusion, dynamic virtual anchor points (VAPs), and predictive environmental modeling. The system represents multiple position hypothesis using wavefunction-like expansions and integrates VAP-based triangulation for drift correction. A predictive modeling module ingests solar, geomagnetic, and environmental data to proactively adjust sensor weighting. A cybersecurity module employs quantum-algebraic key generation and location-derived ephemeral keys to secure inter-device communication. The system includes an augmented reality (AR) interface to visualize and edit anchor references, and a neurofeedback module that adapts the AR interface based on real-time physiological signals from the user. The method further enables anchor optimization via AI-driven repositioning and supports low-power edge execution using approximate amplitude filtering. Additional modules may include fractal antennas, neuromorphic processors, and adaptive forecasting layers to maintain positional accuracy and user experience in subterranean, multi-floor, or magnetically complex environments.

The invention discloses a target equipment upgrading method and device based on an equipment grading strategy, equipment, a medium and a product, and relates to the field of mobile terminal software upgrading, and the method comprises the steps that a server collects hardware features of target equipment and automatically grades the equipment by using a K-means clustering algorithm; generating a differential OTA upgrade package based on the grading result; segmenting the differential packet into data fragments with fixed sizes, and generating a hash value and a digital signature for each fragment; the equipment end downloads one by one, verifies integrity and signatures in real time, and supports breakpoint resume; the server side predicts the OTA upgrade failure risk through the trained random forest model, and dynamically adjusts a push strategy; the equipment adopts an A / B partition mechanism to realize safe rollback; in a non-secure network environment, the server and the device cooperatively generate a temporary key based on a device ID and a timestamp to encrypt and transmit fragments. The volume of the upgrade package is effectively reduced, the transmission efficiency is improved, the security is enhanced, and the upgrade failure rate is remarkably reduced.

A method for atomic exchange of assets on multiple blockchains using transient key pairs includes: generating, by a first computing device, a proposal message, the proposal message including at least a first transaction value, a first network identifier corresponding to a first blockchain, a second transaction value, a second network identifier corresponding to a second blockchain, and a swap public key of a swap cryptographic key pair; generating, by the first computing device, a first digital signature for the proposal message; encrypting, by the first computing device, the first digital signature using the swap public key and a first private key of a first cryptographic key pair; appending, by the first computing device, the encrypted first digital signature to the generated proposal message; and transmitting, by the first computing device, the generated proposal message with appended encrypted first digital signature to a second computing device.

The invention discloses an inter-vehicle bidirectional authentication and key agreement method and system, and relates to the technical field of Internet of Vehicles information security, and the method comprises the steps: a registration stage: a vehicle and a trusted mechanism derive a temporary session key based on ECDH and HKDF, and achieve the secure interaction; the trusted institution generates a basic identity label, a part of private key, a signature and a basic certificate for the vehicle, and encrypts and transmits the basic identity label, the part of private key, the signature and the basic certificate to the vehicle; the vehicle generates a hardware fingerprint and extracts a secret key by using the embedded PUF, and part of the private key is encrypted and then is locally and safely stored with the basic certificate; in the authentication stage, the two communication parties dynamically recover part of private keys through PUF, and generate dynamic pseudo names, temporary ECDH key pairs and cryptographic evidence; and calculating a cross item and a binding item by interaction parameters of the two parties, negotiating a unique session key, and completing bidirectional confirmation through a message authentication code. According to the method and the device, efficient, physical attack-resistant and privacy-protecting V2V security mutual recognition and key agreement are realized in a resource-limited vehicle-mounted environment.

Methods and systems for maintaining security of communications in a multi-device environment are provided herein. A private key associated with a first device is obtained. The private key is known to the first device and unknown to other devices. A public key is generated based on the obtained private key. The public key and the symmetric key is provided to a second device. A respective ephemeral key is generated for each time period of a future time window, where each ephemeral key is generated based on the private key and the symmetric key. A set of hash values is obtained based on each respective ephemeral key and provided to a computing device of a platform. A notification of a secure message of the second device for the first device is received. Content of the secure message is accessed based on the symmetric key and the private key.

Disclosed in the embodiments of the present application are a secure communication method and apparatus based on a lightweight key algorithm, and a medium. The method comprises: generating a first temporary key on the basis of a pre-shared key, a first random number and a lightweight key algorithm; generating a first encryption result and a first message signature on the basis of the first temporary key, a session serial number, the first random number and identity identification information; on the basis of the first random number, the identity identification information, the first encryption result and the first message signature, generating a key negotiation request and sending same to a second Internet-of-Things device; receiving a negotiation reply message, and performing qualification authentication on the negotiation reply message; and if the qualification authentication is passed, generating a secure key on the basis of the first random number, a second random number, the pre-shared key and the lightweight key algorithm, encrypting a message to be sent, so as to generate an encrypted message, and sending the encrypted message to the second Internet-of-Things device. By means of implementing the method in the embodiments of the present application, the security of communication can be ensured, so as to make a communication process more flexible and efficient.

The invention relates to a vehicle diagnosis system, method and device, which are used for solving the unsafe influence caused by using a long-term secret key to carry out vehicle diagnosis. The vehicle diagnosis system comprises a key management system and a to-be-diagnosed unit, the key management system receives a key authorization request sent by a diagnosis device, generates a temporary key according to the key authorization request and sends a key authorization response to the diagnosis device, the temporary key is carried in the key authorization response, and the to-be-diagnosed unit sends the temporary key to the diagnosis device. And the key management system configures the temporary key to the to-be-diagnosed unit, so that the diagnosis device and the to-be-diagnosed unit complete diagnosis based on the temporary key and obtain a diagnosis result. Wherein the temporary key is independent of the long-term key in the vehicle. The vehicle diagnosis is completed by configuring the temporary secret key, and the diagnosis equipment can be prevented from being in contact with the long-term secret key in the vehicle as much as possible, so that the privacy data of a vehicle owner can be protected, the possibility that illegal personnel control the operation of the vehicle by using the long-term secret key can be reduced, and the driving safety of the vehicle owner is improved.

The invention discloses an internet of things equipment identity authentication method based on an implicit certificate and a multi-layer management system. The method comprises the steps that terminal equipment generates a terminal equipment pre-secret key; the terminal equipment initiates a certificate application request to the terminal management platform; the terminal management platform generates a platform temporary key based on the certificate application request; the terminal management platform requests the PKI / CA system to apply for a terminal device certificate; the PKI / CA system generates a terminal equipment implicit certificate and a CA private key reconstruction value ciphertext after signature verification, and sends the terminal equipment implicit certificate and the CA private key reconstruction value ciphertext to the terminal management platform; the terminal management platform backs up the terminal equipment implicit certificate and sends the terminal equipment implicit certificate to the terminal equipment; and the terminal device generates a device certificate key based on the terminal device implicit certificate. On the premise of realizing multi-layer system authentication, hierarchical management is realized, the PKI / CA system is only responsible for the terminal management platform, and the terminal management platform is responsible for Internet of Things equipment information, so that the equipment authentication mode is systematically improved, overall management is facilitated, and storage and transmission of redundant information are effectively reduced.

The invention discloses an Internet of Things device anti-quantum password migration method based on a national cryptographic algorithm, and relates to the field of data security, the method comprises the following steps: configuring a Hash agility module taking a national cryptographic SM3 as a default algorithm, and dynamically switching to an anti-quantum or compatibility alternative algorithm based on monitoring; carrying out identity authentication and temporary key negotiation by adopting SM2, and generating a key pair only used for a single session; deriving a session key based on the key pair, and adopting a differential double-layer signature verification mechanism according to the data security level; for firmware updating, a differential package is generated through function level differential analysis, and atomic updating and rollback are achieved through A / B system partition. According to the method, quantum computing threats are effectively resisted, national security compliance and forward security are ensured, the volume of an update package is remarkably reduced through a resource optimization technology, memory occupation is reduced, verification efficiency is improved, and the method is particularly suitable for resource-limited Internet of Things equipment.

Systems and methods for secure electronic data transfer utilizing an ephemeral key for encryption and decryption of data.

Methods and systems for maintaining security of communications in a multi-device environment are provided herein. A private key associated with a first device is obtained. The private key is known to the first device and unknown to other devices. A public key is generated based on the obtained private key. The public key and the symmetric key is provided to a second device. A respective ephemeral key is generated for each time period of a future time window, where each ephemeral key is generated based on the private key and the symmetric key. A set of hash values is obtained based on each respective ephemeral key and provided to a computing device of a platform. A notification of a secure message of the second device for the first device is received. Content of the secure message is accessed based on the symmetric key and the private key.

The invention discloses a system and method for constructing a trusted secure digital storage space, and relates to the technical field of secure data storage, and the method comprises the following steps: carrying out dynamic fragmentation mapping on original data, and generating an initial dynamic distribution key; performing secondary encryption on the initial time dynamic distribution key to obtain a re-encrypted time dynamic distribution key; performing authority control on the data access behavior according to the user role and the dynamically generated temporary key; performing hierarchical verification on the encrypted data fragments, and calculating and storing an authentication code; a dynamic redundancy storage strategy is carried out according to the data sensitive category of the original data, and the secondary encryption processing calculation process is accelerated. By systematically integrating dynamic fragmentation, hierarchical encryption, dynamic access control, hierarchical verification and a self-healing disaster recovery technology, a comprehensive data security protection framework is constructed, and a set of complete and operable methodology and technology implementation giving consideration to security and efficiency is provided.

The invention relates to the technical field of near field communication, in particular to an NFC card encryption transaction process based on certificate exchange. The existing NFC card encryption transaction process has the problems of insufficient security, weak tamper-proof capability, limited applicability and the like. According to the invention, by introducing a dynamic key negotiation mechanism based on certificate exchange, the security, flexibility and communication efficiency of NFC card encryption transaction are improved. The technical scheme of the invention mainly comprises the following steps of: using a temporary key pair, generating a pair of new keys in each transaction, and avoiding a fixed key; verifying the identity through a public key certificate based on a secret key exchange mechanism of the certificate; the dynamic generation of the AES session key improves the communication efficiency through a key sharing protocol. Through the technical scheme, the security is remarkably improved, the key management is simplified, the communication efficiency is improved, the identity verification is enhanced, the application range is expanded, the implementation cost is reduced, and a comprehensive security guarantee is provided for the encrypted transaction of the NFC card.

The invention relates to a secure data transmission method based on an FTTR networking mode, and relates to the technical field of FTTR networking, and the method comprises the steps that a key management center generates a hardware identifier matched with terminal equipment for each registered terminal equipment, and feeds back the hardware identifier to the terminal equipment; the terminal equipment sends a data packet containing a timestamp, a random number and a hardware identifier to the key management center; the key management center calculates a temporary key of the data transmission through a preset encryption function based on the timestamp, the random number and the hardware identifier in the received data packet, and sends the temporary key to the terminal equipment; the terminal device encrypts the data packet based on the temporary key and sends the encrypted data packet to the target device; and the target device extracts the timestamp, the random number and the hardware identifier based on the encrypted data packet and calculates a temporary key through a preset encryption function to decrypt the data and verify the timestamp and the hardware identifier.

A secure communications method includes: receiving, by a first network device, a second ephemeral public key of a second network device; determining, by the first network device, an ephemeral session key based on a first shared key, a first ephemeral secret key of the first network device, and the second ephemeral public key, where the first shared key is shared between the first network device and the second network device; and performing, by the first network device, secure communication with the second network device based on the ephemeral session key.

In a method of data processing, when a service request is initiated by an application running on a terminal device, a temporary key is allocated to the service request. The temporary key is encrypted by using a certificate public key, to obtain an encrypted temporary key, the certificate public key is preset in a source code of the application, and a certificate private key associated with the certificate public key is stored in a server for the application. Request data of the service request is encrypted by using the temporary key, to obtain at least a ciphertext. A network response request packet is generated based on the encrypted temporary key and the ciphertext. The network response request packet is transmitted to the server, the network response request packet requests the server to respond to the service request. Apparatus and non-transitory computer-readable storage medium counterpart embodiments are also contemplated.

A method for associating and authenticating a station (STA) with a coordinated access point (AP) group may include generating a pairwise master key (PMK) between the STA and a coordinator of the coordinated AP group, and maintaining an association and authentication state between the STA and the coordinated AP group based on the PMK. The method may further include generating one or more temporal keys between the STA and the coordinator based on the PMK. The method may further include distributing the PMK from the coordinator to a first member AP and a second member AP of the coordinated AP group. The method may further include generating a first temporal key between the STA and the first member AP, and generating a second temporal key between the STA and the second member AP.

The invention relates to an access control method and system for an intelligent door lock, and the method is applied to the intelligent door lock, and comprises the steps: carrying out the key negotiation with user equipment, and generating a temporary key pair for building a secure channel; receiving an encrypted data packet from the user equipment, the encrypted data packet being obtained by encrypting access information by using a first persistent symmetric key and encrypting data generated by encrypting the first persistent symmetric key by using the temporary key; decrypting the encrypted data packet by adopting the first persistent symmetric key and the temporary key pair; and in response to successful decryption, executing a corresponding action according to the access information. According to the scheme, the security of bidirectional authentication is combined, access can be accelerated by using the symmetric key obtained through bidirectional authentication negotiation, and the system security and the user experience are improved.

The invention relates to MAC header protection using pre-existing keys. Technical solutions relate to MAC address protection for frame integrity verification. A sender device may calculate a first key for a subject of a frame and a second key for a header of the frame using a temporary key (TK) programmed in hardware, the second key being different from the first key. The sender may encrypt the subject of the frame at a machine access control (MAC) layer using the first key, and encrypt the header of the frame at the MAC layer using the second key. The sender may compute a first MIC for an encrypted frame using the first key and compute a second MIC for content of the header at the MAC layer using the second key. The sender may transmit the frame having the first MIC and the second MIC to a receiver configured to determine an integrity of the header of the frame based on the second MIC.

A communication method includes obtaining, from a second electronic device, an operation request comprising a temporary key and a control instruction; checking the temporary key; performing a time validity check based on a first valid time period, wherein the first valid time period corresponds to the temporary key and is stored in a security system of a vehicle; and operating, based on the control instruction, the vehicle when checking the temporary key and the time validity check have succeeded.