114 results about "Group key" patented technology

The invention provides a TCAM-based message header data processing method and related equipment, and the method comprises the steps: caching and inputting message header data through an FIFO queue, and scheduling the message header data to a message header processing assembly line composed of a TCAM memory, an RAM memory and a parallel processor through an arbiter; a round processing mechanism is combined and adopted, a lookup key value of the current round is matched with an index value in a TCAM in each round of processing, an action table in an RAM is read according to the index value, and a message header analysis instruction of the current round, a group key instruction of the next round and a jump state value of the next round are obtained; executing the instruction through the parallel processor to obtain and update message metadata; when each round is finished, whether the round is finished or not is judged based on the jump state value of the next round; and after the round is finished, outputting the obtained final message metadata by the order-preserving cache queue. According to the invention, the message header data is analyzed by using the TCAM-based data processing technology, so that the flexibility of message header analysis is improved.

The invention provides an anti-quantum cryptography application method and device based on an FIDO 2.0 standard and a related product, and relates to the technical field of information security. According to the method, on the basis of an FIDO2.0 standard specification, two groups of keys, namely a traditional key and an anti-quantum key, are generated by using cryptographic algorithm key derivation through the same random number seed; the two groups of keys are tightly coupled to serve as a composite key for FIDO authentication to be used for a subsequent authentication signature process, so that the anti-quantum security is enhanced; when the composite signature is used, the anti-quantum signature covers the traditional password signature, so that a strong dependency chain of two password algorithms is formed, and the security authentication strength is enhanced; when the signature is verified, the composite public key is used for verifying the traditional signature and the anti-quantum signature, authentication can be passed only when the traditional signature and the anti-quantum signature pass, double security protection of the traditional password technology and the anti-quantum password technology is achieved, and the attack risk of the traditional password in quantum computing is effectively resisted.

This invention relates to the field of automated file transfer processing technology, and discloses an automated SFTP task processing method, apparatus, and computer-readable storage medium. The method includes: acquiring directory change data and objectifying the directory change data to generate candidate file objects and determine file objects to be preprocessed; preprocessing the file objects to be preprocessed based on file feature data and preprocessing rule data corresponding to the file objects to be preprocessed, to generate preprocessing result objects; generating structured transfer tasks based on the preprocessing result objects, and determining group keys based on the target SFTP server IP and target directory, grouping structured transfer tasks with the same group key into the same group of tasks; establishing a group-level execution context based on the group tasks, and executing the structured transfer tasks within the group in the group-level execution context to obtain task execution results; and updating the task status and / or generating result records of the structured transfer tasks based on the task execution results.

A method performed by a network device for enabling and disabling a group of Ambient Internet of Things (AIoT) devices in a communication network includes provisioning the group of AIoT devices with a group identifier (ID), a group key, and a first stop code, transmitting, to the group of AIoT devices, a second stop code and a third stop code that are associated with the group ID and secured using the group key, and determining whether to disable the RF transmission capability of the group of AIoT devices based on the second stop code and the third stop code.

This invention discloses a multi-agent communication key management method and system adapted to dynamic topologies, relating to the field of multi-agent communication security technology. It addresses the problems of low scalability and high failure risk in the existing centralized key generation and distribution processes of agent keys. The invention includes: the role of the GC can be elected and rotated among multiple agents, avoiding physical single points of failure; and it establishes a multi-agent group key system based on a logical key tree. When an agent joins or leaves, only logarithmic-level key updates are required, reducing the communication overhead of key distribution from O(N) to O(logN), significantly improving the system's efficiency and scalability when handling large-scale, highly dynamic groups.

This application provides a batch authentication and dynamic group key negotiation method for vehicle-to-everything (V2X) networks. The method includes: in the third-party authentication phase, a roadside unit (Roadside Unit) aggregates multiple vehicle authentication requests for batch verification by a trusted center, and encodes the authentication response and group key calculation parameters into a single composite value using the Chinese Remainder Theorem for broadcasting. Vehicles extract verification information and their unique parameters through modulo operation to complete bidirectional authentication. In the dynamic group key negotiation phase, the Roadside Unit maps authenticated vehicles and itself as binary tree leaf nodes, recursively generating a public group key based on the node's public key and unique parameters. When member changes, only the affected path node information is locally updated. This application integrates authentication response and key negotiation information, reducing downlink channel bandwidth usage and decreasing the group key update complexity from linear to logarithmic levels. It ensures forward and backward security while meeting the real-time communication requirements of high-concurrency access and highly dynamic topology scenarios in V2X networks.

The embodiment of the invention provides a key management method and device, equipment, a medium and a product, and the method comprises the steps: responding to a first triggering event of a Kth private key in L groups of key pairs, and determining L node sets in a block chain network corresponding to the L groups of key pairs; respectively acquiring a first fusion polynomial share from the T nodes in the (K-2) th node set, and respectively acquiring a second fusion polynomial share from the T nodes in the (K-1) th node set; determining the polynomial share of the (K-1) th private key in the L groups of key pairs according to the obtained T first fusion polynomial shares and T second fusion polynomial shares; the polynomial share of the (K-1) th private key is used for generating the (K-1) th private key. According to the embodiment of the invention, the security of the private key can be improved.

A communication network comprising an access point, AP, affiliated with an AP multi-link device AP MLD, and a non-AP station, STA, affiliated with a non-AP MLD. The AP MLD transmits a frame 400 includ

Methods of securely distributing a message to a group of nodes within a network, wherein the network comprises a plurality of nodes and the group of nodes comprises a subset of the plurality of nodes. The methods comprise: agreeing a common group key between all of the nodes in the group of nodes; encrypting, by a first node amongst the group of nodes, a message with the group key such that only nodes that are members of the group of nodes are able to decrypt and read the message; and distributing the encrypted message through the network using a gossip-based protocol.

The invention relates to a key generation method and device, a computer readable storage medium, a computer program product and a computer program. The method comprises: a first device sending a plurality of signals to each of a plurality of second devices, radio frequency coefficients of the plurality of signals being calculated based on channel characteristics between each second device and the first device; and the first device generates a first group key based on the related information of the plurality of signals, and the first group key is used for communication between the first device and the plurality of second devices.

The invention discloses a quantum trusted relay multicast routing method and system. The quantum trusted relay multicast routing method is used for a cryptographic service management center, and comprises the following steps: in response to a group key distribution request initiated by a source node, obtaining state information of a quantum key distribution network; constructing a multicast routing distribution path according to the state information; and sending a routing instruction to the source node and the trusted relay node based on the multicast routing distribution path. Therefore, multiplexing of a network sharing link is realized by constructing a multicast routing distribution path, and compared with repeated transmission of the same secret key in a point-to-point distribution mode, original multiple point-to-point transmission is integrated into one multicast transmission, so that the total time of secret key distribution is shortened to a certain extent, the occupation of network bandwidth is reduced, and the transmission efficiency is improved. Therefore, the distribution efficiency of the quantum key and the utilization rate of the network bandwidth are improved to a certain extent.

The embodiment of the invention provides a communication group key generation method and device, equipment and a computer storage medium. According to the communication group key generation method provided by the embodiment of the invention, when the first user node sends the second training sequence, the second user node sends the interference signal to the relay node so as to actively pollute the observation environment of the relay node, and when the relay node carries out linear estimation on the received first mixed signal, the interference signal is not influenced. The obtained second channel estimation value is a result polluted by noise and interference signals, and the eavesdropping risk of the relay node is effectively reduced. A first mixed signal is amplified and forwarded at a relay node, estimation is carried out at a first user node and the relay node respectively to obtain a third channel estimation value and a second channel estimation value which are highly related, and then key negotiation only needs to be carried out once based on the third channel estimation value and the second channel estimation value subsequently. Therefore, the consistent group key can be generated, and the channel estimation time slot and the key negotiation frequency are obviously reduced.

A system and method are provided for generating group encryption keys for global and private groups to encrypt wireless messages between an access point and a station. The private group key is based on a unique private group identifier. The global group key and the private group key are sent from the access point to the one or more stations via an M3 message, wherein the M3 message is part of a 4-way handshake or a 2-way group key handshake. The global group key is used for encrypted broadcast or multicast messages for the entire group, while the private group key is used for encrypted broadcast or multicast messages for the private group that is a subset of the entire group.

The invention discloses a group quantum key distribution method and system, and relates to the field of quantum communication. The method comprises the steps that a management and control center responds to a multi-party group key distribution request and determines distribution nodes and receiving nodes; a group key distribution relay path is determined based on a topological relation among a distribution node, a relay node and a receiving node, a relay link resource state and total consumption of a relay key, and the path is a forked directed tree which is constructed along a quantum key relay transmission direction after repeated relay links are removed and a unique effective link is reserved. The distribution node and all the receiving nodes can be unidirectionally communicated; the distribution node generates a group key and initiates a distribution process based on the path, the relay node executes key distribution relay based on the path, and the receiving node obtains the group key through the path. According to the scheme, the node load is reduced by reducing the number of relaying times, resource waste is avoided, the coding rate is improved, the system performance is optimized, and a large-scale multi-party group distribution scene is adapted.

The invention discloses a vehicle-mounted CAN (Controller Area Network) bus safety communication method based on attribute grouping. The method comprises the following steps: firstly, selecting a master key, a public key, a hash function and related parameters; the electronic control unit ECU registers with a gateway electronic control unit GECU; in the key generation stage, the GECU groups the ECUs and distributes key generation parameters to the ECUs in the groups, and the ECUs in the groups calculate group keys according to the key generation parameters; the ECUs in the group communicate with each other by using the group key; and in the key updating and ECU re-joining stage, the ECU can update the key without interaction. Through constructing a group key generation mechanism based on an access structure tree, group communication based on ECU function attributes is realized. And a key self-authentication mechanism is introduced, so that the interaction turns between the ECUs are reduced, and the communication load is reduced. The method is suitable for a vehicle-mounted network dynamic scene, and effectively resists attacks such as counterfeiting and replaying.

The invention provides a block encryption method based on four-valued logic operation combined with AES column mixing. AES column mixing is combined with four-valued logic operation. An encryption / decryption device is constructed based on the four-valued logic arithmetic unit and is used for generating a ciphertext / plaintext according to the plaintext / ciphertext and the key; and a key deriver is constructed based on the four-valued logic arithmetic unit and is used for generating a next group of keys according to the ciphertext and the keys mixed by the AES column. And introducing double encryption, namely, performing reverse encryption on the ciphertext subjected to the first forward encryption again to obtain final encrypted data. Decryption is opposite to encryption, the first round of reverse decryption is carried out firstly, then forward decryption is carried out, and final decryption data is obtained. According to the block encryption method based on the four-valued logic operation, the security problems of plaintext information exposure, poor key sensitivity, poor differential attack resistance and the like existing in encryption scenes such as audio, images, videos and the like with relatively high plaintext data correlation are solved.

This application discloses a credit report generation method, system, computer equipment, and storage medium. The method includes: generating a report pre-assembly request via a first server and uploading it to a credit reporting chain; generating a set of keys and a data preparation request based on the report pre-assembly request via a second server, and obtaining a first key, a second key, and the data preparation request from them, and sending them to a third server; enabling the third server to obtain target data, encrypting the target data sequentially using the first key and the second key, and uploading it to the credit reporting chain; enabling the first server to decrypt the encrypted data based on the second key, and generating a pre-assembled report based on the decrypted data and a preset report template; enabling the first server to decrypt the decrypted data based on the first key, and generating a credit report based on the decrypted data and the pre-assembled report. This application can balance the timeliness of credit inquiries with data security.

The invention discloses a key generation method, related equipment, a medium and a product. The method comprises the following steps: sending a first message to network equipment; the first message comprises a target grouping identifier; the target grouping identifier indicates a group identifier of a target grouping key; the target group key is one group in multiple groups of group keys included in the charging key; the first message requests to generate a combined key.

The invention provides a data transmission method and electronic equipment, the method is applied to a data transmission system, the data transmission system comprises first electronic equipment, second electronic equipment and third electronic equipment, and the method comprises the following steps: the first electronic equipment establishes communication connection with the second electronic equipment and the third electronic equipment; the first electronic equipment generates a group key; the first electronic device sends the group key to the second electronic device and the third electronic device; the first electronic equipment encrypts the first data based on the group key to obtain encrypted first data; the first electronic device sends the encrypted first data to the second electronic device and the third electronic device; and the second electronic equipment and the third electronic equipment decrypt the encrypted first data based on the group key to obtain the first data. Therefore, the first electronic equipment only needs to encrypt the first data once by using the group key, so that the occupation of system resources of the first electronic equipment is reduced.

The invention discloses an authentication method and device of terminal equipment and electronic equipment. The method comprises the steps that under the offline condition, after target terminal equipment completes an authorization process, a target authorization permission file in a local memory is acquired; and performing an authentication process according to the target authorization permission file, the target authorization permission file being bound with a target chip identifier, and the target chip identifier being a chip identifier of the target terminal device. The technical problem that offline authentication in the prior art depends on cloud interaction, needs to preset a plurality of groups of keys or needs to be updated through satellite communication, and is not matched with autonomous authorization authentication of an offline terminal is solved.

A code conversion apparatus first combines key columns, and detects a first function code for executing a grouping operation for each combined key column, next detects a key column name from the first function code, next generates a group key using the key column name for each two-dimensional array data of the first function code, next detects overlap key column names in the group keys, and generates an overlap group composed of the overlap key column names, next adds a second function code for executing a grouping operation using the overlap group name of the overlap group and the key column names constituting the overlap group, and a third function code for adding the overlap group name to the two-dimensional array data as a key column, and next replaces the key column name used in the overlap group included in the first function code with the overlap group name.

A method for cross-non-cooperative domain identity authentication is provided. The method includes: utilizing routers in a core network to negotiate symmetric keys and global group keys to complete system initialization; performing user identity registration through a registration server, generating digital identity identifiers, anonymized identity identifiers, and MAC address lists, and establishing mapping relationships; users negotiating symmetric keys with adjacent routers and associating with MAC address lists; users encrypting anonymized identity identifiers based on address hopping engines and symmetric keys, embedding into data packet source IP addresses, randomly selecting MAC addresses as source MAC addresses, calculating integrity check codes, and completing data packet construction; uploading data packets to routers and performing intra-cooperative domain authentication and cross non-cooperative domain authentication. The disclosure strongly binds user identity information with source addresses, simultaneously achieving source address verification and identity authentication, considers privacy protection from multiple angles, including link addresses and network addresses, without introducing new identifiers, supports cross non-cooperative domain scenarios, and is applicable to different scenarios.

The invention discloses a batch function bootstrap method and computing equipment. The method comprises the following steps: acquiring a first RLWE ciphertext of a first polynomial; generating an MLWE ciphertext based on the first RLWE ciphertext; obtaining a plurality of test polynomials; acquiring / group key ciphertext; generating a sequence of a second RLWE ciphertext based on the number of coefficients of a fifth polynomial and the number of test polynomials; performing an h + / time preset algorithm based on the sequence of the second RLWE ciphertext; the h + / -time preset algorithm comprises / group of preset algorithms corresponding to / first key polynomials, and the j-th group of preset algorithms in / group of preset algorithms comprises the step of obtaining group key ciphertexts corresponding to the j-th group of preset algorithms from multiple groups of key ciphertexts, and the group key ciphertexts are determined based on the number of times of items in the first key polynomials corresponding to the j-th group of preset algorithms; based on the group key ciphertext, performing secondary rotation processing on the sequence comprising the fourth RLWE ciphertexts; and on the basis of the sequence comprising the third RLWE ciphertexts, obtaining the ciphertexts.

A secure aggregation computation device 10 comprises: a sorting unit 1 that, by sorting rows of a table which includes a share {→g} of a group key column →g, a share {→o} of an order key column →o, and a share {→v} of a data column →v on the basis of the order key column →o and the group key column →g, generates a sorted table using the share {→g}, the share {→o}, and the share {→v}; a group boundary flag column generation unit (2) that uses a share {→g'} of a sorted group key column →g' included in the sorted table to generate a share [→b] of a boundary flag column →b which indicates a boundary between groups in the sorted table; and an aggregation computation unit 3 that uses the share [→b] and a share {→v'} of a sorted data column →v' included in the sorted table to perform, for each group, a prescribed aggregation computation using a prescribed binary operator.

The application provides a UAV-assisted vehicle cross-domain authentication method in a vehicular networking emergency communication scene, and belongs to the technical field of vehicular networking security. The application solves the technical problems of poor stability, low efficiency, security and performance defects of vehicle identity authentication and key negotiation in an emergency scene. The technical scheme comprises the following steps: S1, system initialization; S2, UAV group deployment; S3, UAV dynamic group key generation; S4, vehicle identity pre-authentication; and S5, vehicle cross-domain authentication. The application designs a UAV-assisted vehicle cross-domain authentication method in a vehicular networking emergency communication scene, and realizes low cost, high security and stability of vehicle authentication.

A method for processing homomorphic ciphertexts and a computing device, the method comprising: obtaining a sequence of a plurality of first RLWE ciphertexts, a plaintext corresponding to each first RLWE ciphertext comprising a first monomial expression using each coefficient of a first polynomial as a first index; group key ciphertexts are obtained, each group key ciphertext comprises a plurality of RGSW ciphertexts which are binary bits of a second index of a second monomial expression, the binary bits are larger than or equal to 2, and the ith group key ciphertext corresponds to the value of the ith bit in the second index; based on the group key ciphertext, secondary rotation processing is carried out on the sequence of the multiple first RLWE ciphertexts to obtain a sequence of multiple second RLWE ciphertexts, the rotation mode is selected based on the ith group key ciphertext in the ith rotation processing, and the plaintext corresponding to each second RLWE ciphertext comprises a third monomial expression using each coefficient of a second polynomial as a third index; the second polynomial is obtained by multiplying the first polynomial by the second monomial.

A command to perform a data operation at a memory device is received. The command includes an encryption key tag. A first key table is accessed from local memory. The first key table includes a first set of key entries corresponding to a first set of encryption keys. The first key table is searched to determine whether it includes an entry corresponding to the encryption key tag. Based on determining the first key table does not include an entry corresponding to the tag, a second key table is accessed from RAM. The second key table includes a second set of key entries corresponding to a second set of encryption keys. A key entry corresponding to the encryption key tag is identified from the second key table. The key entry includes an encryption key corresponding to the encryption key tag. The command is processed using the encryption key.

The application discloses a quantum key use and storage method for remote power communication, both the sender and the receiver have two key pools, one key pool is used for encryption and decryption, and the other key pool is used for accepting new security keys transmitted by a quantum key distribution system. Some binary bits in each group of keys are used as flag bits. The sender randomly selects a group of keys, determines an encryption algorithm according to the flag bits of the keys, encrypts plaintext information to obtain ciphertext, and places the number of the keys and the ciphertext together to obtain a data packet. The receiver finds the corresponding keys according to the key number in the data packet, knows the encryption algorithm according to the flag bits, and decrypts. When the quantum key distribution system fails, the application can ensure that both parties still have enough keys, since each group of keys adopts different encryption methods, the encryption methods of various data packets are different, the difficulty of cracking by attackers is increased, and the security is effectively improved.

This invention discloses a group key negotiation method in a drone ad hoc network that can resist internal attackers. The method includes: broadcasting a first message from one drone to other drones and receiving first messages from other drones to verify the correctness of shared key contributions by the other drones based on their first messages; restoring the key share of a first secure drone and generating an aggregate commitment for each first secure drone based on its key share; broadcasting a second message from one of the first secure drones and receiving its second message; verifying the correctness of the aggregate key of the first secure drone based on its aggregate commitment and second message; and generating a group key based on the aggregate key of the second secure drone. The method provided by this invention can resist both external and internal attacks.