30 results about "Exchange protocol" patented technology

The invention relates to the technical field of block chains and secure transactions, and discloses a secure data transaction method based on a block chain exchange protocol key replacement attack, comprising the following steps: S1, a seller generates a Merkel root as an integral commitment based on an all-encrypted symmetric key; s2, the seller responds to the random challenge of the buyer and generates a composite zero-knowledge proof to confirm the validity of the key; s3, the buyer verifies the authenticity of the composite zero-knowledge proof; s4, the seller divides the main key and the private key, and the buyer calculates a verification target value and deploys an intelligent contract containing transaction fund; and S5, the seller submits the second key share to the smart contract to trigger automatic verification and atomized liquidation. According to the method, key replacement attacks are defended by using Merkel root commitment and zero-knowledge proof, atomic fair exchange is realized by combining key segmentation and an intelligent contract, and the security and fairness of transactions are ensured.

The invention discloses a data forwarding method and device for a data center bridging switching protocol, equipment and a storage medium, relates to the technical field of data traffic management, and discloses the data forwarding method for the data center bridging switching protocol, which comprises the following steps: acquiring a preset data center bridging switching protocol set and traffic data; performing standardization processing on the preset data center bridging exchange protocol set to obtain a target data center bridging exchange protocol set; performing traffic classification scheduling according to the traffic data to obtain a target traffic queue; and performing data balanced forwarding according to the target flow queue and the target data center bridging switching protocol set to obtain a target forwarding result so as to complete data forwarding of the data center bridging switching protocol. The technical effects of improving interoperability among different devices, simplifying network management, enhancing performance in a high-density network environment and reducing delay and packet loss are achieved.

The invention discloses a single-interface dual-protocol communication method and system, electronic equipment and a readable storage medium, and relates to the technical field of communication, both active communication equipment and passive communication equipment are provided with target interfaces, and the target interfaces are configured with a real-time data exchange protocol and a file transfer protocol. The method comprises the following steps that: active communication equipment generates a parameter configuration command of a target sending parameter carrying a negotiation character of a file transfer protocol based on a real-time data exchange protocol; the passive communication device configures a sending parameter of the negotiation character by using the parameter configuration command; after configuration is completed, the active communication equipment sends a file transmission starting command to the passive communication equipment so as to trigger the passive communication equipment to send negotiation characters; and during the period, the active communication equipment can determine each sending moment when the passive communication equipment sends the negotiation character, and determines each bus conflict time period according to the sending moment, so as to send a real-time data exchange message to the passive communication equipment at the moment outside each bus conflict time period.

The invention relates to the field of security protection of the electric power Internet of Things, in particular to a lightweight identity authentication method for limited equipment under the electric power Internet of Things, which can adapt to a large-scale and widely distributed network environment of the electric power Internet of Things by introducing a lightweight encryption algorithm and an efficient key exchange protocol, ensures the security, and improves the authentication efficiency of the limited equipment under the electric power Internet of Things. The calculation burden and the energy consumption of limited equipment in the power Internet of Things are effectively reduced; a decentralized authentication mechanism is adopted, so that the problems of single-point failure and performance bottleneck in a traditional centralized authentication method are solved, efficient equipment authentication and key exchange are realized, and the expandability of a network is ensured; security threats such as replay attacks and man-in-the-middle attacks are effectively prevented by periodically updating session keys and using digital signatures, and the reliability of network communication and the confidentiality of data are enhanced. By introducing a key exchange protocol and a digital signature technology, the integrity and authenticity of data are guaranteed, tampering behaviors of malicious nodes are prevented, and the overall security of the system is improved.

This invention proposes a hybrid quantum-resistant security enhancement method for IPSec VPNs. The method includes: intercepting Internet Key Exchange (ITE) packets and adding a proxy header between the transport layer header and the ISE payload of the packets; obtaining a quantum key from a key pool using quantum key distribution technology and generating a first-stage session key based on the quantum key; protecting the ISE key negotiation process using a quantum-resistant cryptographic algorithm to generate a second-stage session key; and using the first-stage and second-stage session keys as input parameters for a key derivation function to generate a final session key for encrypted data transmission. This invention, without modifying the original IPSec negotiation process, supports dynamic key combinations of different security levels, enhancing the quantum security protection capability of VPN data transmission while maintaining system flexibility and performance.

Aspects of the present disclosure describe secure user registration and device provisioning with respect to transaction systems. Some example embodiments use a Password-Authenticated Exchange (PAKE) protocol to facilitate secure registration of a user identifier (ID) and a password with a transaction account service, and provisioning of a user's client device with a client device provisioning service. Upon completion of the PAKE protocol, two keys can be generated: a session key for encrypting and authenticating communications with the server; and a client key for sharing information among client devices. For some example embodiments, a user registers their user ID and password, and subsequently uses their user ID and a personal identified number (PIN) code to provision a primary client device in association with the user ID. Additionally, for some example embodiments, a secondary client device is provisioned in association with the user ID via a provisioned primary client device.

Disclosed herein are systems, methods, and computer-readable media for an exchange management platform that obtains, using artificial intelligence (AI) orchestrators, a set of available exchanges based on a set of exchange protocols. In some implementations, a first command set directs one or more AI orchestrators to generate, as output, a set of resources satisfying a first protocol from the set of exchange protocols. A second command set and a second protocol from the set of exchange protocols can then be provided, as input, to the one or more AI orchestrators, causing the one or more AI orchestrators to determine a set of available exchanges for transferring a resource between two entities. The set of available exchanges can be obtained from the one or more AI orchestrators and display of a graphical layout based on the set of available exchanges can be caused.

A system includes a first coarse-grained reconfigurable (CGR) processor including first and second CGR arrays. A second CGR processor includes third and fourth CGR arrays. Each CGR array includes an address generator and coalescing unit (AGCU) designated as an array master AGCU (AMAGCU). The first CGR array AGCU is also designated as a processor master AGCU (PMAGCU) and as a system master (SMAGCU). The third CGR array AGCU is also designated as a PMAGCU. Each AMAGCU performs first execution synchronization actions, each PMAGCU also performs second execution synchronization actions, and the SMAGCU also performs third execution synchronization actions. The execution synchronization actions include a token exchange protocol for tokens such as “array ready”, “processor ready”, “system master ready”, “program start”, “array done, “processor done”, and “program terminate”. The tokens are communicated over a token bus via token interfaces that include a bus interface and a token receive FIFO.

A system for scheduling a timed interchange protocol via an integrated augmented-reality presentation, includes a computing system having a processor, a memory device and a non-transitory storage device. The one or more processor executes computer-readable instructions. A network connection connects multiple user devices to the computing system, each of the multiple user devices having a known or determinable current location. Upon execution of the computer-readable instructions, the computing system performs steps including, for each user device of the multiple user devices, receiving geolocation data identifying the current location of the user device, and retrieving, from the at least one of a memory device and a non-transitory storage device, overlay content for display on the user device. The overlay content includes information about an accessible item (AI) in a non-transient position proximal to a current location of the user device. The overlay content is sent for display on the user device.

Systems and methods are provided for effectuating overlay tunnels between software-defined wide area network (SD-WAN) end-point devices despite the use of IPSec passthrough in one or more network devices, such as modems or routers that exist between the end-point devices. In particular, the Internet Key Exchange (IKE) protocol can be allowed to progress until a modem / router is able to establish an IKE tunnel, after which overlay packets using cloud-managed keys can be allowed to pass through the modem / router. An overlay tunnel may then be established between the end-point devices, and the IKE tunnel can be taken down.

The application discloses a kind of data processing method, system and storage medium of intelligent construction, it is related to data processing technical field, comprising the following steps: obtaining the communication path parameter between the multiple cooperative operation equipment of construction site, constructs first constraint condition, and using clustering algorithm to filter the first path set satisfying first constraint condition;Cooperative operation data flow in the first path set is obtained, and multi-resolution feature extraction is carried out using DWT, and layered data exchange protocol stack is obtained;According to layered data exchange protocol stack, construct bandwidth pre-allocation matrix, and carry out bandwidth preemption in combination with preset bandwidth preemption algorithm;Bandwidth preemption result is evaluated based on bayesian decision model, and equipment moving path switching is carried out according to evaluation result, solve the problem that traditional method is difficult to deal with the burst demand of high concurrency data stream, and high priority task delay is caused by bandwidth competition, seriously threatens construction safety.

Techniques are described for securely transmitting diagnostic data between a STA and an AP before the STA has successfully been on boarded at the AP. In the embodiments herein, the STA can use a key (e.g., a long-term key) to encrypt diagnostic data transmitted to the AP when the STA has not been on boarded by the AP. This key can be provided to the STA several different ways such as when the STA was provisioned to connect to a service set identifier (SSID) supported by the AP, or the STA may have previously associated with the SSID (e.g., by connecting to the same or another AP supporting the SSID during a previous session) and received or generated the key.

The application discloses a kind of low altitude unmanned aerial vehicle network in multi-cloud storage data integrity verification and error positioning method, data integrity verification is in low altitude unmanned aerial vehicle network, after generating user private key and public key by comprehensive supervision service platform registration, stored data is sent to multiple cloud servers to carry out multi-cloud storage data;The low altitude unmanned aerial vehicle data stored on multiple cloud servers is executed integrity verification, including: the first smart contract on the blockchain generates audit challenge according to chain state and issues;Each cloud server generates response proof according to the stored encoding data block and issues to chain;Verification contract listens to and aggregates all response proofs, batch verification is carried out, and the result is published in audit log.The method constructs a decentralized audit framework and does not rely on third-party auditors.If verification fails, a positioning mechanism can be triggered to accurately locate damaged data.To protect identity privacy, a key exchange protocol is embedded to achieve conditional anonymity.The supervision platform can balance anonymity and accountability.

In embodiments of the present disclosure improved capabilities are described for a tag operating system configured to manage asset data exchanged between an RF reader and one or more asset RF tags, and an IoT connector core integrated with the tag operating system, where the IoT connector core transfers asset data collected via the RF reader from the one or more asset RF tags and delivers the asset data to an IoT system of a cloud platform over a data exchange protocol, and where the asset data was generated at least in part based on an endpoint intelligence function stored on the one or more asset RF tags.

The invention discloses a circulation method for archive management of a power supply system, and the method comprises the steps: building an archive version control model in advance according to the business demands of archive circulation, and generating a unique version identifier for the modification operation of each node; obtaining sensitive information fields in the archive, encrypting the sensitive information through a symmetric encryption algorithm, and if the archive needs to be decrypted in the circulation process, judging whether decryption operation is allowed or not according to an authority verification result; for archive management systems of different departments and institutions, a data exchange protocol is established in advance, and a standardized data format is adopted for archive transmission; the security requirement in the archive circulation process is determined, a multi-level access control mechanism including identity authentication, role authorization and data level control is adopted, if a user requests to access an archive, whether access is allowed or not is judged according to an authority verification result, and an access log is recorded at the same time.

A method for quantum-resistant security enhancement to an Internet key exchange protocol, comprising: (011) performing key agreement with a second network device to generate an initial key; (012) acquiring a quantum key from a first network node; (013) performing post-quantum password encryption on the quantum key, and sending to the second network device a first encryption result that has undergone encryption; (014) performing decryption on a received second encryption result, and obtaining a second decryption result; and, (015) on the basis of a first quantum key, a first encryption key, a first verification key, a first derivation key, the first encryption result, and the second decryption result, generating a second encryption key, a second verification key, and a second derivation key, so as to encrypt communication between a first network device and the second network device.

A method for protecting data transmission in an ad hoc network including nodes, each node including a private key, a public key and a certificate of the public key signed by a certification authority, the method including transmitting by the first node to the second node: a first message signed with the private key of the first node; a third message containing a first set of initialization data including: a first certificate including the public key of the first node, signed by the certification authority; a second data set including the IP address of the first node; and the first certificate associated with the IP address of the first node, wherein the second data set is signed with the private key of the first node.

The application discloses an industrial process control data access method supporting a multi-user data exchange protocol and relates to the technical field of data access.The application sets a cache space, analyzes data information corresponding to each data in underlying data, obtains a data evaluation coefficient, and judges whether the data is suitable for being stored in the cache space, so that the data frequently accessed can be stored in the cache space, the number of access to the underlying data can be reduced, the data access speed is improved, whether expansion is needed is judged, the capacity of the cache space can be increased, more data can be stored in the cache, the situation that the cache hit rate is low can be reduced, the data access speed and response time are improved, the priority of each user data stream is set, limited resources can be more effectively allocated to important data streams, and the transmission rate and response time of the important data streams are improved.

The invention discloses a key management and distribution method and device, related equipment, a product and a storage medium. The method is applied to a quantum key relay service system, and comprises the following steps: acquiring a first quantum key from quantum key distribution equipment; generating an identification (QID) tag based on the first quantum key; the QID tag is encrypted, and an encrypted QID tag is obtained; sending the first quantum key and the encrypted QID tag to a business server of at least one business type; the business servers are distributed to a plurality of terminals; the encrypted QID tag is shared by a first terminal and a second terminal in the plurality of terminals through a quantum key sharing exchange protocol, so that the paired first quantum keys are safely distributed to the first terminal and the second terminal.

A dynamic routing information exchange protocol session is established between a protocol processing intermediary and an application pipeline function executor running at a virtualized computing service. During the session, the intermediary receives a message indicating reachability information of a pipeline function implemented by the executor, and causes an entry indicating the executor as a destination to be stored in a route table of the service. After the entry is stored, a request for the application function is directed to the executor using the entry.

Disclosed herein are methods and systems for securely sending user plane data from a base station to an artificial intelligence (AI) server via a mobile telecommunication network. In one embodiment, a method performed by a base station located in a radio access network (RAN) includes sending an interface setup request to an (AI) server, receiving an interface setup response from the AI server, establishing an Internet Protocol Security (IPSec) network protocol based data transfer tunnel between the base station and the AI server by exchanging encryption keys using an Internet Key Exchange (IKE) protocol, and sending user plane data from the base station to the AI server for training an artificial intelligence based model.

The invention discloses an intelligent assistant multi-terminal screen sharing linkage control method based on a block chain and a network optimization engine, and the method comprises the following steps: S1, heterogeneous equipment interconnection adaptation: a heterogeneous equipment compatible engine completes cross-architecture instruction conversion through a WASM drive sandbox, and achieves the zero-configuration interconnection of Windows, Android, iOS and Linux multi-system equipment based on a UDI protocol stack; s2, network transmission optimization: a small-world network optimization engine sequentially executes link evaluation, path optimization, topology construction and bandwidth allocation, and improves the network transmission efficiency in combination with multiple models and algorithms; s3, decentration consensus is achieved, specifically, an acceleration consensus mechanism elects a verification group through a VRF algorithm, an improved two-stage PBFT architecture is adopted, and linkage instruction decentration verification and synchronization are completed in combination with SGX hardware acceleration; and S4, security communication guarantee: the quantum security communication layer generates a session key based on a hybrid key exchange protocol, and realizes data encryption transmission and illegal access interception through on-chain identity authentication and an event-driven smart contract.

An Internet Key Exchange protocol message indicating a first Internet Protocol Security traffic flow is to be established via a first device is obtained at the first device. The Internet Key Exchange protocol message is forwarded from the first device to a second device. An encryption key used to transmit traffic via the first Internet Protocol Security Traffic flow is received at the first device from a key value store. The key value store is populated with the encryption key in response to the second device obtaining the Internet Key Exchange protocol message. A first data packet to be transmitted via the first Internet Protocol Security traffic flow is obtained at the first device. The first device provides the first data packet encrypted with the encryption key of the first Internet Protocol Security traffic flow.

This invention discloses a multi-encrypted self-service rapid lottery redemption system, specifically relating to the field of data transmission technology. It involves first encrypting the lottery redemption voucher data scanned by the user using a hash algorithm based on a random salt value; establishing an authorized connection with the lottery redemption server using an asymmetric key exchange protocol and obtaining a connection authorization token; verifying the redemption voucher data layer by layer based on a hierarchical permission key management mechanism to determine redemption eligibility; then, performing secondary encryption on the redemption amount and user account information to generate ciphertext for the redemption fund transfer; further, using multi-path encryption channels for security cross-comparison verification; and finally, completing the fund transfer confirmation through multi-level dynamic password verification and sending a successful redemption status feedback to the self-service lottery redemption device. This invention effectively improves the security of the lottery redemption process and the efficiency of fund settlement, while protecting user data privacy and transaction security.

The invention provides a lattice-based TLS unbalanced key exchange protocol, a lattice-based TLS unbalanced key exchange device, a readable storage medium and a product, and belongs to the technical field of communication protocols. The problem of efficient and safe communication of low-computing-power equipment in an internet-of-things scene is solved; according to the protocol, a key exchange mechanism is constructed based on an on-ring error learning (R-LWE) problem, and the protocol has good quantum attack resistance; according to the protocol, a shared key is constructed through a robust extractor and an SHA-256 hash, so that the consistency and confidentiality of negotiation results are ensured; the protocol can be seamlessly embedded into a TLS 1.3 handshake process, and on the premise of not changing the original communication semantics and message structure of the TLS, the high compatibility with the existing TLS protocol stack is realized by inserting RLWE related key materials in the stages of ClientHello, Server KeyExchange and the like; the application is applied to key exchange.

Techniques are described for securely transmitting diagnostic data between a STA and an AR before the STA has successfully been on boarded at the AR. In the embodiments herein, the STA can use a key (e.g., a long-term key) to encrypt diagnostic data transmitted to the AR when the STA has not been on boarded by the AR. This key can be provided to the STA several different ways such as when the STA was provisioned to connect to a service set identifier (SSID) supported by the AR, or the STA may have previously associated with the SSID (e.g., by connecting to the same or another AR supporting the SSID during a previous session) and received or generated the key.

The invention relates to the technical field of big data or financial science and technology, and discloses a batch data processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: in response to a batch resource processing request triggered in a resource processing page, obtaining multiple pieces of resource adjustment ratio interchange protocol information corresponding to the batch resource processing request; obtaining a target resource adjustment ratio curve associated with each piece of resource adjustment ratio exchange protocol information from a resource adjustment ratio curve library; according to the target resource adjustment ratio curve and the multiple pieces of resource adjustment ratio exchange protocol information, processing request messages corresponding to the batch resource processing requests are generated, and the processing request messages are sent to a data processing end; and receiving a batch resource processing result returned by the data processing end for the processing request message, and displaying the batch resource processing result on the resource processing page. By adopting the method, the batch processing efficiency of the resource adjustment service can be improved.

The invention discloses a multi-cloud storage data integrity verification and error positioning method in a low-altitude unmanned aerial vehicle network, and the method comprises the steps: carrying out the data integrity verification in the low-altitude unmanned aerial vehicle network, carrying out the registration through a comprehensive supervision service platform, generating a private key and a public key of a user, and transmitting storage data to a plurality of cloud servers, so as to carry out the multi-cloud storage of the data; the execution of integrity verification on the low-altitude unmanned aerial vehicle data stored on the plurality of cloud servers comprises the following steps: a first intelligent contract on a block chain generates an audit challenge according to a chain state and issues the audit challenge; each cloud server generates a response proof according to the stored coded data block and issues the response proof to the chain; the verification contract monitors and aggregates all response certificates, batch verification is carried out, and the result is published as an audit log. According to the method, a decentralized auditing framework is constructed and does not depend on a third-party auditor. If verification fails, a positioning mechanism can be triggered to accurately position damaged data. In order to protect identity privacy, a key exchange protocol is embedded to realize conditional anonymity; and the supervision platform can balance anonymity and responsibility.

Aspects of the present disclosure describe secure user registration and device provisioning with respect to transaction systems. Some example embodiments use a Password-Authenticated Exchange (PAKE) protocol to facilitate secure registration of a user identifier (ID) and a password with a transaction account service, and provisioning of a user's client device with a client device provisioning service. Upon completion of the PAKE protocol, two keys can be generated: a session key for encrypting and authenticating communications with the server; and a client key for sharing information among client devices. For some example embodiments, a user registers their user ID and password, and subsequently uses their user ID and a personal identified number (PIN) code to provision a primary client device in association with the user ID. Additionally, for some example embodiments, a secondary client device is provisioned in association with the user ID via a provisioned primary client device.

The invention relates to the technical field of computers, provides a communication method and device, a medium and a program product, and aims to solve the problem that wireless transmission is unreliable. The method comprises the following steps: sending a first message to a network element of a core network, wherein the first message is used for requesting to execute identity authentication and key negotiation based on a lightweight connection-oriented authentication key exchange protocol; receiving a second message from the network element of the core network, wherein the second message is used for responding to the first message; and sending a third message to the core network element, wherein the third message is used for responding to the second message.