131 results about "Ephemeral key" patented technology

The invention discloses a dynamic key threshold fragmentation privacy tracing method based on block chain collaborative verification, and belongs to the field of information security. According to the method, a dynamic key is taken as a hub, decentralized identity, zero-knowledge verification, deep watermark and threshold collaborative decryption are deeply coupled, a temporary key generated by each conference is split into a plurality of fragments, the fragments are stored in a distributed manner by a block chain node and a tracing unit, only a hash fingerprint combined by the fragments is subjected to chaining and evidence storage, and the dynamic key is subjected to zero-knowledge verification and deep watermark and threshold collaborative decryption. A light evidence chain which cannot be tampered but has no privacy exposure is formed; participants are anonymously accessed through a verifiable certificate without leaking specific information, and truth of anonymous identity is ensured through signature of a trusted unit; when data leakage occurs, the tracing unit extracts a watermark, compares a zero knowledge proof, verifies the relevance between a leaked ciphertext and a chain fingerprint, triggers a multi-party threshold decryption recovery key, and finally accurately positions a person in charge in combination with the encrypted and stored DID mapping table without exposing irrelevant information in the whole process.

A method of enabling knowledge proof in a blockchain transaction is disclosed. The method comprises sending, from a verifier to a prover, a blockchain transaction redeemable by means of data including (i) first data (y) based on a combination of an ephemeral key (r), second data (c) and a private key of a public-private key pair of a cryptography system, wherein the public key (v) is based on an integer generator raised to a first power, wherein the first power is based on the private key, and wherein knowledge of the private key is required in order to determine the ephemeral key from the first data, and (ii) third data (x) based on the integer generator raised to a second power, wherein the second power is based on the ephemeral key.

A navigation system and method are disclosed for operation in GPS-denied environments using quantum-inspired sensor fusion, dynamic virtual anchor points (VAPs), and predictive environmental modeling. The system represents multiple position hypothesis using wavefunction-like expansions and integrates VAP-based triangulation for drift correction. A predictive modeling module ingests solar, geomagnetic, and environmental data to proactively adjust sensor weighting. A cybersecurity module employs quantum-algebraic key generation and location-derived ephemeral keys to secure inter-device communication. The system includes an augmented reality (AR) interface to visualize and edit anchor references, and a neurofeedback module that adapts the AR interface based on real-time physiological signals from the user. The method further enables anchor optimization via AI-driven repositioning and supports low-power edge execution using approximate amplitude filtering. Additional modules may include fractal antennas, neuromorphic processors, and adaptive forecasting layers to maintain positional accuracy and user experience in subterranean, multi-floor, or magnetically complex environments.

The invention discloses a target equipment upgrading method and device based on an equipment grading strategy, equipment, a medium and a product, and relates to the field of mobile terminal software upgrading, and the method comprises the steps that a server collects hardware features of target equipment and automatically grades the equipment by using a K-means clustering algorithm; generating a differential OTA upgrade package based on the grading result; segmenting the differential packet into data fragments with fixed sizes, and generating a hash value and a digital signature for each fragment; the equipment end downloads one by one, verifies integrity and signatures in real time, and supports breakpoint resume; the server side predicts the OTA upgrade failure risk through the trained random forest model, and dynamically adjusts a push strategy; the equipment adopts an A / B partition mechanism to realize safe rollback; in a non-secure network environment, the server and the device cooperatively generate a temporary key based on a device ID and a timestamp to encrypt and transmit fragments. The volume of the upgrade package is effectively reduced, the transmission efficiency is improved, the security is enhanced, and the upgrade failure rate is remarkably reduced.

The invention discloses an inter-vehicle bidirectional authentication and key agreement method and system, and relates to the technical field of Internet of Vehicles information security, and the method comprises the steps: a registration stage: a vehicle and a trusted mechanism derive a temporary session key based on ECDH and HKDF, and achieve the secure interaction; the trusted institution generates a basic identity label, a part of private key, a signature and a basic certificate for the vehicle, and encrypts and transmits the basic identity label, the part of private key, the signature and the basic certificate to the vehicle; the vehicle generates a hardware fingerprint and extracts a secret key by using the embedded PUF, and part of the private key is encrypted and then is locally and safely stored with the basic certificate; in the authentication stage, the two communication parties dynamically recover part of private keys through PUF, and generate dynamic pseudo names, temporary ECDH key pairs and cryptographic evidence; and calculating a cross item and a binding item by interaction parameters of the two parties, negotiating a unique session key, and completing bidirectional confirmation through a message authentication code. According to the method and the device, efficient, physical attack-resistant and privacy-protecting V2V security mutual recognition and key agreement are realized in a resource-limited vehicle-mounted environment.

The invention discloses an Internet of Things device anti-quantum password migration method based on a national cryptographic algorithm, and relates to the field of data security, the method comprises the following steps: configuring a Hash agility module taking a national cryptographic SM3 as a default algorithm, and dynamically switching to an anti-quantum or compatibility alternative algorithm based on monitoring; carrying out identity authentication and temporary key negotiation by adopting SM2, and generating a key pair only used for a single session; deriving a session key based on the key pair, and adopting a differential double-layer signature verification mechanism according to the data security level; for firmware updating, a differential package is generated through function level differential analysis, and atomic updating and rollback are achieved through A / B system partition. According to the method, quantum computing threats are effectively resisted, national security compliance and forward security are ensured, the volume of an update package is remarkably reduced through a resource optimization technology, memory occupation is reduced, verification efficiency is improved, and the method is particularly suitable for resource-limited Internet of Things equipment.

Systems and methods for secure electronic data transfer utilizing an ephemeral key for encryption and decryption of data.

The invention discloses a system and method for constructing a trusted secure digital storage space, and relates to the technical field of secure data storage, and the method comprises the following steps: carrying out dynamic fragmentation mapping on original data, and generating an initial dynamic distribution key; performing secondary encryption on the initial time dynamic distribution key to obtain a re-encrypted time dynamic distribution key; performing authority control on the data access behavior according to the user role and the dynamically generated temporary key; performing hierarchical verification on the encrypted data fragments, and calculating and storing an authentication code; a dynamic redundancy storage strategy is carried out according to the data sensitive category of the original data, and the secondary encryption processing calculation process is accelerated. By systematically integrating dynamic fragmentation, hierarchical encryption, dynamic access control, hierarchical verification and a self-healing disaster recovery technology, a comprehensive data security protection framework is constructed, and a set of complete and operable methodology and technology implementation giving consideration to security and efficiency is provided.

In a method of data processing, when a service request is initiated by an application running on a terminal device, a temporary key is allocated to the service request. The temporary key is encrypted by using a certificate public key, to obtain an encrypted temporary key, the certificate public key is preset in a source code of the application, and a certificate private key associated with the certificate public key is stored in a server for the application. Request data of the service request is encrypted by using the temporary key, to obtain at least a ciphertext. A network response request packet is generated based on the encrypted temporary key and the ciphertext. The network response request packet is transmitted to the server, the network response request packet requests the server to respond to the service request. Apparatus and non-transitory computer-readable storage medium counterpart embodiments are also contemplated.

The invention discloses a sandbox debugging method and device and a storage medium, and the method comprises the steps: responding to an API interface of a payment platform selected by a user on a sandbox debugging platform, analyzing a corresponding API document, and generating a parameter debugging form; performing standardization preprocessing on parameters in the parameter debugging form according to an API interface requirement of the payment platform; signing the parameters after standardization preprocessing based on a national cryptographic algorithm, wherein a signature key of the signature is a temporary key dynamically distributed when the user logs in the sandbox debugging platform; the signed parameters are packaged into a request message, and the request message is sent to the API interface; and receiving response data which is returned by the API interface based on the request message and comprises a signature verification result. According to the application, through fusion of full-process automation and the national cryptographic algorithm, the ubiquitous problems of low efficiency and high security risk in the API debugging process in the payment industry are solved.

The invention relates to the technical field of data transmission, in particular to an industrial data transmission security authentication method and system based on OpenHarmony, and the method comprises the steps: obtaining equipment information for data transmission, constructing a cross-platform equipment trust root, generating a dynamic challenge code based on the obtained equipment identification information, and carrying out bidirectional identity verification according to the challenge code. And performing session isolation on the terminal passing the bidirectional identity verification, namely deriving a session key by adopting a hierarchical HKDF mechanism and realizing session isolation, transmitting industrial data by adopting a dual-encryption mechanism based on a session isolation result, automatically triggering key update according to the transmission data volume and duration, destroying a temporary key after the session is ended and generating a chained auditing log, and transmitting the chained auditing log to the terminal after the chained auditing log is ended. According to the method, the dynamic challenge code is generated based on the device identifier through multiple times of Hash, the temporary key pair and the double ECDSA signature are generated in combination with the multi-dimensional entropy source, strict two-way identity verification is achieved, and illegal device access is completely eradicated from the source.

This disclosure relates to a firmware update method, an electronic device, a server, and a system. The method includes: obtaining from a user device an encrypted firmware update package sent by a server to the user device in response to a firmware update request from the electronic device, and a firmware decryption key enDecKey encrypted by the server using a key encryption key KEK, wherein the key encryption key KEK is a temporary key derived based on a predetermined key derivation function; decrypting the received encrypted firmware decryption key enDecKey using the key encryption key KEK to obtain a firmware decryption key decKey; and decrypting the encrypted firmware update package using the firmware decryption key decKey to obtain a firmware update package for updating the firmware in the electronic device.

Systems and methods for secured peripheral device communication via a bridge device in virtualized computer systems. An example method may comprise receiving, by a virtualized execution environment running on a computing system, a state measurement associated with a bridge device of the computing system; generating an ephemeral key; responsive to validating the state measurement, transmitting, to the bridge device, the ephemeral key encrypted using a device key associated with the bridge device; and transmitting, to the bridge device, an access request directed to a peripheral device accessible via the bridge device, wherein the access request is encrypted using a value derived from the ephemeral key.

This invention discloses a blockchain-based method for medical data privacy protection and authorized sharing, relating to the field of medical data technology. This invention achieves medical data privacy protection and compliant sharing through a four-step closed-loop process. The first step is data splitting and encryption: the original data from the target hospital is split into cell units according to the smallest clinical semantic unit, independently encrypted using the SM4 algorithm, and then differentiated enhancement processing is implemented according to sensitivity to build a strong privacy defense. The second step is storage and evidence preservation: the encrypted units are distributed and stored in fragments, and the fragment hash value, semantic tag, and storage index are uploaded to the shared chain for evidence preservation, simultaneously building a cross-chain gateway and protocol to break down sharing barriers. The third step is authorization and verification: a four-dimensional intelligent authorization model is built to verify requests and generate a temporary key bound to this authorization, achieving precise authorization. The fourth step is usage control: the user decrypts and reassembles the data in a TEE adapted to the cryptographic algorithm, with real-time monitoring of the entire operation and synchronization to both chains, ensuring end-to-end security, controllability, and traceability.

The application provides a key distribution method and system based on end-to-end encryption of national encryption, and relates to the field of key distribution, which comprises the following steps: generating a derived temporary key pair based on an SM4 algorithm and sending the derived temporary key pair to a client; receiving identity ciphertext information sent by the client, decrypting the identity ciphertext information, and generating a derived session key pair; encrypting a session public key ciphertext information based on a private key of the derived temporary key pair and sending the session public key ciphertext information to the client; receiving encrypted request ciphertext information sent by the client and decrypting the encrypted request ciphertext information to obtain an encryption request; generating a target content key and encrypting the target content key through a private key of the derived session key pair to obtain target content key ciphertext information and send the target content key ciphertext information to the client. The application protects the process of distributing the key by using the national encryption algorithm, meets the application under specific security requirements and compliance requirements, can meet most of the scenes of securely distributing the key, solves the problem that a single point failure causes the system to be unable to be used, and is more flexible and suitable for large-scale distributed systems.

The application provides a data trusted sharing method and device, and belongs to the technical field of data sharing. The application effectively solves the problems of privacy leakage and compliance of data sharing across domains by constructing a national secret authorization system based on a block chain and an HDFS in-situ computer mechanism. The ownership and domain identifier are strictly checked by using the block chain combined with the national secret asymmetric encryption algorithm, the HDFS block position and other meta information are anchored on the chain, and the non-tamperable digital asset ownership is established. After checking the access certificate based on the temporary key of the national secret symmetric encryption algorithm generated on the chain, only the encrypted query logic is received and executed in the local HDFS, and only the calculation result checked by the national secret hash algorithm and encrypted by the national secret symmetric encryption algorithm is outputted. The architecture of the ciphertext logic in and the statistical result out truly realizes the data usability and invisibility and the sovereignty not being transferred due to sharing under the premise that the whole process meets the national secret compliance requirements.

The technical solutions are directed to MAC address protection for frame integrity verification. A sender device can compute, using a temporal key (TK) programmed in hardware, a first key for a body of a frame and a second key for a header of the frame, different from the first key. The sender can encrypt the body of the frame at a machine access control (MAC) layer using the first key and the header of the frame at the MAC layer using the second key. The sender can compute a first MIC of the encrypted frame using the first key and a second MIC of a content of the header at the MAC layer using the second key. The sender can transmit the frame with the first MIC and the second MIC to a receiver configured to determine integrity of the header of the frame based on the second MIC.

The application relates to a data sharing method and device of a vehicle, electronic equipment and a storage medium, wherein the method comprises the following steps: in response to a data sharing instruction, a preset sharing random number of the vehicle is acquired, and a first random number of the vehicle is generated; a preset sharing random number is calculated by using a hash function to obtain a temporary key, and the first random number is encrypted by using the temporary key to obtain a first encrypted random number; a corresponding sharing ciphertext is generated by combining the first encrypted random number, a current time, a data integrity check value of the vehicle and a registration identification mark of the vehicle, and the sharing ciphertext is sent to a sharing end; after the sharing ciphertext is verified at the sharing end, an encrypted session generated by a second random number of the sharing end is received; the encrypted session is verified, and in the case that the encrypted session is verified to be qualified, the to-be-transmitted data of the vehicle is shared to the sharing end. Therefore, the technical problem that in the related art, it is difficult to avoid illegal means, the user's privacy information is called without user authorization, and there is a great security risk is solved.

The embodiment of the invention provides a satellite communication authentication method, a satellite communication authentication device, satellite communication authentication equipment and a storage medium, which can be applied to the technical field of satellite communication networks, in the method, before satellite communication is carried out, a user node generates a temporary key pair in a finite field through discrete sampling; the finite field is used for limiting a sampling range; generating a communication credential based on a temporary private key in the temporary key pair and the user registration credential; the user registration credential represents that the user node is a legally registered communication node, and the user registration credential is generated by the registration node based on a user registration private key of the user node; the user registration private key is generated by the registration node through discrete sampling in a finite field; obtaining communication authentication information based on the user identifier of the user node, the communication credential and a temporary public key in the temporary key pair; and the communication authentication information is sent to the satellite node, so that the satellite node performs communication authentication on the user node, and the security of identity authentication is improved due to the fact that quantum attacks can be resisted by the complexity of a finite field.

The invention discloses an intelligent Internet of Things access management method based on dynamic encryption, particularly relates to the field of Internet of Things access control, and is used for solving the problem that when existing Internet of Things equipment is accessed, validity is not dynamically judged based on interaction behaviors, and session keys are not updated in real time. The method comprises the following steps: firstly, constructing a communication chain group based on a communication topology of registered equipment, and establishing an upstream and downstream interaction role identification table; distributing a temporary key when an access request is initiated, and extracting a communication record of a current communication period to form a data collaboration window; extracting an input response from the window, outputting a numerical value, executing feedback and an echoing state to generate a collaborative residual parameter, and matching the collaborative residual parameter with a collaborative behavior model of the communication chain group; if matching succeeds, extracting communication abstract features and a time window identifier to generate a key disturbance factor, and generating a current session key; and if matching fails, communication is rejected and key synchronization is blocked, so that dynamic encryption access control based on interaction feature driving is realized.

The present application discloses a quantum-resistant security enhancement method for OpenID Connect in a communication network. The method comprises: when communication preprocessing is completed, receiving quantum-resistant token request information sent by a client; generating an access token and an identity token on the basis of the quantum-resistant token request information; generating a temporary key pair associated with the client; acquiring a quantum key identifier; processing the access token to generate a quantum-resistant access token; obtaining a quantum-resistant identity token on the basis of the temporary key pair, the quantum key identifier, post-quantum cryptography and the identity token; sending the quantum-resistant access token and the quantum-resistant identity token to the client; and receiving a resource access request generated on the basis of the quantum-resistant access token and the quantum-resistant identity token, and confirming an access permission to a corresponding resource, such that the client performs resource access on a server. The server and the client encrypt communications by means of post-quantum cryptography and quantum key distribution, thereby significantly enhancing the ability to resist quantum computing attacks.

The invention discloses a privacy computing method and system based on state driving and a storage medium thereof, and relates to the technical field of information security and privacy computing. The method comprises the steps of obtaining execution state information of a current calculation task; dynamically generating a temporary key set based on the state information and configuring access authority; state information and interaction behaviors are continuously monitored in the task execution process; if the abnormal event is detected, key access response operation is executed, including revoking the current key access authority, updating a key set and authorization information thereof, and continuing task execution; and the updated state information and authorization information are fed back to the state evaluation module to realize closed-loop adaptive optimization of the control strategy. According to the method, the state credibility score and path deviation degree double-index feedback model is constructed, so that the exception recognition capability and the key management precision of the system in a complex environment are effectively improved, the flexibility of state perception and access control is enhanced, and the method is suitable for security sensitive scenes such as multi-party computing and federated learning.

A method for establishing secure communication between a first device and a second device. The method includes generating ephemeral keys at the first device, encapsulating a public key of the second device to generate a first cipher key and a first shared secret key, transmitting a first message to the second device including the ephemeral public key and the first cipher key, receiving a second message from the second device containing a second cipher key, decapsulating the second cipher key to achieve a second shared secret key, receiving and decapsulating a third cipher key to achieve a third shared secret key, deriving a final encryption key using the first, second, and third shared secret keys, and establishing secure communication by encrypting communication using the final encryption key. The method further includes verifying the final encryption key with the second device through hash exchange.

Provided in the present application is a lightweight encryption and authentication method for a wireless sensor network. The method comprises: a gateway node respectively generating a sensor ephemeral key and a user ephemeral key on the basis of a one-way hash function and a preconfigured physically unclonable function, and respectively sending to a user end and a sensor node the sensor ephemeral key, the user ephemeral key, a preconfigured sensor long-term key and a preconfigured user long-term key; and after the user end and the sensor node are registered, the user end performing identity authentication on identity information currently input by a user, and performing, on the basis of the identity information, mutual authentication between the user end, the gateway node and the sensor node, so as to send a sensor hash-based message authentication code and a user hash-based message authentication code to the sensor node on the basis of the authentication result, such that the sensor node and the gateway node perform key agreement and authentication to obtain a session key, and wireless sensor network communication can thus be performed on the basis of the session key, thereby effectively solving the problem of authenticating the security of a wireless sensor network.

The application provides a patient data privacy encryption processing method and system based on digital signature encryption, which comprises the following steps: when a first entity requests to access patient privacy data held by a second entity, the following steps are performed: the first entity sends an access request to the second entity, and attaches a first message signed by a long-term digital signature private key of the first entity; after the second entity verifies the signature, the second entity generates a temporary key exchange key pair, signs a second message containing the temporary public key using the long-term digital signature private key of the second entity, and sends the second message to the first entity; a shared secret is calculated based on the long-term or temporary private key of the first entity and the temporary public key of the second entity, and a symmetric session key dedicated to this data access is derived therefrom; and the metadata information of this data access is jointly signed using the signature private keys of the first entity and the second entity to form an unalterable audit log for storage. The above method guarantees the data security of patient privacy.

An information handling system includes a hardware processor and a memory device to execute code instructions of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, the DICE certificate including a public key. The hardware processor executes computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key. The hardware processor executes the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key. The hardware processor to sends the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device. The hardware processor executes a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

Various embodiments of the present disclosure provide techniques for modifying a value of a credential-less exchange in near real time using a plurality of identifier mappings, member interfaces, and exchange modifiers. The techniques may include receiving an exchange request for executing a value-based exchange that is indicative of a universally unique ephemeral key (UUEK) and one or more request attributes. The techniques include identifying an exchange data object based on the UUEK and identifying a user exchange modifier for the exchange request based on the exchange data object and the request attributes. The techniques include generating a modified exchange value for the exchange request based on the user exchange modifier and providing an exchange authorization request to a member platform with the modified exchange value.

Various embodiments of the present disclosure provide a network linking technique that improves the functionality of a computer in various aspects. The techniques comprise receiving an exchange request comprising a universally unique ephemeral key (UUEK); identifying a local data construct of a cross-platform data object based on the UUEK; providing a value request to a internal service corresponding to a member platform using the cross-platform data object; receiving, based on a contribution ruleset corresponding to the member platform, an updated exchange request from the internal service; providing an adjusted authorization request to another member platform based on the updated exchange request; receiving, from the other member platform, an authorization response based on the adjusted authorization request; and providing the authorization response to the terminal.

Various embodiments of the present disclosure provide a network linking technique that improves the functionality of a computer in various aspects. The techniques comprise receiving an exchange request comprising a universally unique ephemeral key (UUEK); identifying a local data construct of a cross-platform data object based on the UUEK; providing a value request to a internal service corresponding to a member platform using the cross-platform data object; receiving, based on a contribution ruleset corresponding to the member platform, an updated exchange request from the internal service; providing an adjusted authorization request to another member platform based on the updated exchange request; receiving, from the other member platform, an authorization response based on the adjusted authorization request; and providing the authorization response to the terminal.