1526 results about "Handshake" patented technology

The invention discloses a financial data privacy protection system based on block chain security multi-party computing, and belongs to the technical field of data protection, and the system specifically comprises the steps that a data preprocessing module segments original financial data, and adds a unique watermark identifier; the distributed account book stores the Hash abstract and watermark mapping relation of the encrypted logic data fragment, and the digital signature and the timestamp are fused to ensure reliability; the computing node cluster receives data through a special interface, dynamically builds a computing group according to a service rule and outputs an encrypted computing result; bidirectional authentication is carried out on the zero-knowledge proof verifier and the computing node cluster to verify the data holding right; the encryption proxy gateway processes an output result of the computing node cluster to complete format conversion and ciphertext superposition; the cross-link routing module constructs a virtual coverage layer, cross-link transmission of encryption results is achieved through protocol conversion and three-way handshake verification, and a heterogeneous chain protocol converter and a verification assembly guarantee transmission safety; the financial data privacy security is comprehensively guaranteed, and the data processing efficiency and reliability are improved.

The invention relates to a power adapter charging protocol identification and compatibility self-learning optimization method. After the adapter establishes physical connection with a target terminal, a voltage signal output by the target terminal is collected, a handshake data sequence is formed, feature extraction is performed on the handshake data sequence, and a first protocol feature vector is generated. And performing similarity matching on the feature vectors in a protocol feature library to determine a historical protocol category and extract a corresponding historical charging parameter template. And during voltage and current step-by-step adjustment, collecting target terminal load impedance change data, extracting impedance spectrum features, and fusing the impedance spectrum features with the first protocol feature vector to form an enhanced protocol feature vector. And based on the enhancement protocol feature vector and the historical parameter template, predicting negotiation parameters supported by the target terminal, generating a predicted negotiation parameter set, and applying the predicted negotiation parameter set to a charging negotiation process, thereby realizing stable charging output with the target terminal. According to the method, the compatibility and the self-adaptive capability of the power adapter to various fast charging protocols can be improved.

Techniques for utilizing a portion of a communication session identifier (e.g., a Session-ID, an SPI, a CID, a DCID, and / or the like) to indicate a target routing device (e.g., a VPN and / or ZTNA termination device) for establishing control plane session(s) and / or data plane session(s) at wire-speed in a networked computing environment. The routing device(s) of a networked computing environment may generate a communication session identifier and send the communication session identifier to the client device, such that subsequent packets send from the client device may be forwarded to the proper routing device indicated by the communication session identifier for establishment of one or more data plane sessions. Additionally, data plane sessions may be established using a Resumed Handshake rather than a full handshake that is typically required, as Session Resumption utilizes the assigned communication session identifier for mapping.

The invention discloses a session key capture and security event analysis method, device, equipment and medium, and relates to the technical field of network communication and information security, a data security protection system is established, a probe service is deployed at a security event monitoring end, and an eBPF technology is utilized to capture a TLS session key in a network stack of an operating system according to analysis of a TLS handshake message; and the probe service combines time features, session features and the captured secret key to generate a mapping relation, and the mapping relation is stored into a persistent file. According to the method, the HASH structure is used for storing the secret key file, the mapping relation between the quintuple and the session time point and the mapping relation between the quintuple and the session secret key are increased, searching and symmetric decryption of the mapping relation between the encrypted traffic and the session secret key can be efficiently completed at the decryption server end, the decryption performance is greatly improved, meanwhile, the session generation time and the session secret key are stored in the HASH value, and the decryption efficiency is improved. The method can solve the problem that the old connection is released and the quintuple of the new connection and the old connection is consistent in a high-concurrency scene, and can improve the decryption accuracy.

The invention discloses a spinning equipment real-time monitoring system based on an itinerant robot and stroboscopic control, particularly relates to the field of spinning equipment monitoring, is used for solving the problems of low monitoring precision and insufficient inspection efficiency, and is used for accurately evaluating the state of spinning equipment and generating a score based on historical operation data and real-time feedback. And then planning and dynamically adjusting an inspection path by adopting an ant colony optimization and reinforcement learning algorithm to ensure that high-risk equipment is preferentially monitored. Resource allocation is optimized and inspection efficiency is improved through accurate simulation of path time consumption and a coverage range; meanwhile, handshake connection is encrypted through multiple protocols, equipment operation parameters are extracted in real time, stroboscopic control is dynamically adjusted, and the definition of image collection and data safety are guaranteed; high-frame-rate high-definition camera shooting and self-adaptive stroboscopic control are combined, high-quality image data are collected and preprocessed, deep analysis is carried out by using a convolutional neural network and a multivariable correlation model, abnormal early warning is generated in real time, and an inspection path is optimized.

The invention discloses a method and system for quickly constructing a national secret encryption channel, and the method comprises the steps: a client and a server respectively generate a client private key and a server private key based on a sensitive data transmission scene, and apply for an SM2 algorithm certificate; based on the private key and the digital certificate, the client and the server perform a handshake process, and the handshake process comprises that the client and the server perform identity verification and negotiation by exchanging certificates, temporary public keys and signature information; based on temporary public key information exchanged between the client and the server, performing key negotiation through an SM2 elliptic curve algorithm to obtain negotiation data; and based on the session key in the negotiation data, encrypting and decrypting the communication data by using a GCM mode of the SM4 algorithm. According to the method, various negotiation parameters are optimized and simplified based on a domestic encryption algorithm, rapid establishment of the secure channel is realized, only one round-trip delay is needed in the whole process, and time and bandwidth are saved on the premise of ensuring communication security.

A method for authenticated asset assessment is provided. The method involves executing a scan assistant on an asset to allow a remote scan engine to execute one or more scan operations on the asset for determining a state of the asset. The scan assistant may verify the identity of the scan engine by checking that a certificate received from the scan engine is signed with a private key associated with the scan engine. In some embodiments, the authentication may be performed as part of a TLS handshake process that establishes a TLS connection between the scan engine and the scan assistant. Once the scan engine is authenticated, the scan engine may communicate with the scan assistant according to a communication protocol to collect data about the asset. Advantageously, the disclosed technique reduces security risks associated with authenticated scans and improves the performance of authenticated scans.

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention discloses an optimized registration method and system based on a micro-service architecture. The invention relates to the technical field of Nacos systems. The health monitoring center is started and starts to send a health examination request to a downstream service at regular time; the gateway access layer service receives a client request; obtaining a network address of a target service instance through a Nacos service discovery mechanism according to a service name in the request; then forwarding the request to a target service instance for processing; when the configuration information is changed, the Nacos configuration management center pushes an update notification to all subscribed service instances; the service instance pulls the latest configuration information and updates the local cache; according to the method, a secondary hand waving mechanism is implemented in Nacos cluster node, gateway service and downstream service communication, so that the offline condition of the downstream service can be accurately judged, and the problem of data inconsistency caused by node faults or network partition is avoided.

The invention provides a handshake protocol method and system based on an SM2 algorithm and an SM4 algorithm, and relates to the field of encrypted transmission, and the method comprises the steps: obtaining first request information in a session process; sending a first SM2 public key generated based on an SM2 algorithm and first client random number ciphertext information to the server; decrypting the SM4 ciphertext information based on a first SM2 private key generated by an SM2 algorithm to obtain an SM4 target key; processing the random number ciphertext information of the second client and the random number ciphertext information of the first server; sending the second server random number target ciphertext information to the server; and processing the first request information to receive the session return ciphertext information from the server and decrypt to determine the session return plaintext information. The handshake encryption between the client side and the server side is completed based on the SM2 algorithm and the SM4 cryptographic algorithm, the SM2 algorithm and the SM4 algorithm are used for replacing an RSA algorithm, an ECDHE algorithm and a DES algorithm on which an SSL protocol depends, and autonomous controllability of data security and information security is achieved.

The invention discloses an AI-based automatic connection and handshake protocol for a trusted data space connector. The AI-based automatic connection and handshake protocol comprises a data supply end connector, a data demand end connector and a platform operation end, the data supply end connector is used for collecting and preprocessing data; the demand end connector is used for receiving and processing data; the platform operation end is used for connection management, authority distribution and security auditing; the method has the beneficial effects that through automatic connection and an intelligent handshake protocol, manual intervention is reduced, and the data circulation cost is reduced; multi-factor authentication, dynamic encryption and privacy protection technologies are adopted to ensure the safety of the whole life cycle of the data; aI and machine learning technologies are introduced, so that the system can intelligently select an optimal strategy according to real-time network conditions and data features; interoperation and data sharing among different data spaces are realized, and circulation and value mining of data elements are promoted.

Implementation(s) for multi-factor network segmentation are described. A plurality of packets at a higher layer of a network stack is processed, where at least one packet of the plurality of packets was previously determined, as part of processing the at least one packet at lower layers of the network stack, to be authorized to be processed by the higher layer. Specifically, responsive to successful authentication of a cryptographic certificate received during the handshake process, a second service is identified from the cryptographic certificate. It is determined, based on a security policy, that the second service is authorized to access the first service. Responsive to the determination, a configuration is caused such that packets sent using the source address are now authorized to be processed by the higher layer.

The invention relates to the technical field of network communication security, and discloses a real-time encrypted transmission network communication security guarantee system, which comprises a dynamic fragmentation quantum resistance encryption module, a flow perception-based adaptive encryption engine, a zero-handshake continuous identity authentication module and a hardware acceleration fragmentation processing architecture, and the dynamic fragmentation quantum resistance encryption module is configured to segment a data stream into a plurality of fragments according to a time window, and independently generate an unassociated key for each fragment based on a quantum security NTRU algorithm. According to the network communication security guarantee system for real-time encryption transmission, the traditional network communication security guarantee technology is comprehensively innovated, and the problems of static key management, encryption algorithm adaptation, data fragmentation encryption, identity authentication and encryption cooperation, quantum computing threat response and the like are successfully solved; and the performance of the system in key performance dimensions such as security, real-time performance, adaptability, reliability and anti-attack capability is obviously improved.

The invention discloses an automatic data acquisition method and system suitable for instruments and equipment, and relates to the technical field of equipment management. Comprising an equipment management module, a dynamic protocol module, a multi-mode sampling module, a correlation analysis module, a data compensation and reconstruction module, a load balance module, a data enhancement module, a real-time feedback regulation and control module and a time synchronization module. According to the automatic data acquisition method and system suitable for the instrument equipment, the highly intelligent and flexible data acquisition capability is realized, the task allocation efficiency of the equipment is remarkably improved through a two-way handshake protocol and an acquisition load balance strategy, and the data loss risk is reduced; the data integrity and timeliness are remarkably improved through multi-modal sampling and correlation analysis; and a parallelized time synchronization calibration mechanism ensures high precision of multi-device cooperation. The whole system can adapt to complex and changeable application scenes, and provides an efficient and reliable solution for the fields of industrial control, environment monitoring, medical instruments and the like.

The invention provides a communication module low-delay switching control method based on HPLC and HRF, and relates to the technical field of data processing, and the method comprises the following steps: when an index continuously exceeds a dynamically adjusted judgment threshold, a switching judgment unit generates a mode switching enable signal, and initializes an HRF channel pre-synchronization sequence; based on a pre-stored HRF channel feature vector table, HRF channel negotiation and authentication handshake processes are executed in parallel while HPLC link state monitoring is maintained; through a dual-channel redundancy transmission mechanism, the key fault information is packaged into a final priority protocol data unit before the establishment of the HRF link is not completed, and redundancy forwarding is carried out through a reserved time slot window of the HPLC link; and after the handshake of the HRF link is completed, the switching control unit executes seamless switching of the data transmission channel. According to the invention, the accuracy of channel state judgment is improved.

Presented herein is a Message Layer Security (MLS)-based secure channel communication arrangement that involves a minimal set of changes to the MLS standard to reduce the redundant overhead in case of two-party (one-to-one or 1:1) communication. These techniques reduce the communication and computation complexity of both devices involved in establishing and supporting the one-to-one secure channel communication. Methods are provided to establish a one-to-one secure channel between a first endpoint and a second endpoint by performing a one-to-one secure channel handshake.

The invention discloses a meteorological data transmission method based on an edge protection gateway algorithm, and belongs to the technical field of data transmission, and the method comprises the steps: building communication connection with meteorological observation equipment through a serial port service controller, carrying out the standardization processing of data, and carrying out the fragmentation storage and backup; generating a random seed by using a hardware random number generator, generating a round key through a key expansion function, performing encryption operation on the grouped data, and calculating a message authentication code; sending a password suite list to establish handshake connection, exchanging a key through elliptic curve operation, segmenting compressed data into records, and adding an authentication tag for transmission; identity authentication is carried out by adopting a digital certificate, and security protection is carried out on data through a firewall state table and a feature matching algorithm. Through the scheme of the application, the security of meteorological observation data transmission can be improved, data leakage, tampering and attacking are prevented, and the security and reliability of meteorological data are guaranteed.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

The invention relates to an automatic switching method and system adaptive to multiple communication protocols, and the method comprises the steps: executing the wake-up operation of a controller after an instrument is powered on, and monitoring a data frame on a CAN bus; extracting a CANID (Controller Area Network Identifier) in the data frame, matching the CANID with a preset manufacturer handshake command list, and judging whether a handshake command exists or not; if the matched handshake instruction exists, determining a corresponding manufacturer communication protocol type; according to the manufacturer communication protocol type, determining a corresponding CAN message analysis method and a CAN message sending method; receiving a first CAN message, and analyzing the first CAN message by using a CAN message analysis method to generate display data; and obtaining operation data of the user, converting the operation data into a second CAN message according to the CAN message sending method, and sending the second CAN message to the controller. The application has the effect of improving the communication efficiency.

The invention provides a secret key negotiation method based on an SM2 encryption certificate and a communication system. Wherein the definition of an SM2 key exchange protocol and an SM2 encryption certificate is added in the extension of a TLS protocol, so that the SM2 dual-certificate mechanism of the national secret can be applied to the key negotiation process based on the TLS protocol, namely, a client and a server can respectively generate temporary public keys through handshake messages and complete the generation of a shared key; the application of the encryption certificate of the SM2 algorithm in the key negotiation based on the TLS protocol is realized, and the normal application of other extensions of the TLS protocol is not influenced.

In a GPU design, “launching a worker” is de-coupled from “assigning a work item” in a work distributor, and new handshake mechanisms between a worker and the work-distributor is provided for work assignment, in order to provide persistent kernel functionality. In example embodiments, software specifies the work that has to be done, hardware selects a variable number of workers based on available resources, and a hardware scheduler handshaking with the executing workers assigns more work as previously assigned work is completed and / or more resources become available.

Systems and methods for mutual trust establishment among components of an Information Handling System (IHS) are described. In an illustrative, non-limiting embodiment, an IHS may include: at least one processor; and at least one memory coupled to the processor, wherein the at least one memory comprises program instructions stored thereon that, upon execution by the at least one processor, cause the at least one processor to: obtain a plurality of identifiers for a respective plurality of CPLDs or FPGAs, including an identifier for a first CPLD or FPGA; and provide to a second CPLD or FPGA an expected handshake token for the first CPLD or FPGA, wherein the expected handshake token is based, at least in part, on the identifier for the first CPLD or FPGA, and wherein the second CPLD or FPGA uses the expected handshake token to establish trust for communication with the first CPLD or FPGA.

Contents of client-initiated handshake messages of a security protocol are obtained at a handshake processing offloader configured for an application. The offloader uses a first security artifact (which is inaccessible from a front-end request processor of the application) and the contents of the handshake messages to generate a second security artifact. The second security artifact is transmitted to the front-end request processor, which uses it to perform cryptographic operations for client-server interactions of the application.

The invention relates to the technical field of data processing, in particular to a triple modular redundancy data synchronization method and device based on an FPGA. The method comprises the following steps: performing three-mode synchronization based on a periodic synchronization signal generated by an FPGA (Field Programmable Gate Array); when data interaction needs to be carried out among the three modes, non-periodic data handshake is carried out among the three modes by adopting an FPGA (Field Programmable Gate Array); and after the data handshake succeeds, performing data interaction among the three modes by adopting the FPGA. According to the invention, on the basis of triple-modular redundancy periodic synchronization, a data handshake function is added before data interaction among the three moduli at any moment is executed, synchronization errors caused by hardware of a triple-modular redundancy system or other reasons are reduced, and triple-modular redundancy synchronization is realized more accurately. Meanwhile, periodic synchronization, data handshake and data interaction are realized by adopting an FPGA (Field Programmable Gate Array), and the time delay is further reduced on the basis of triple modular redundancy architecture synchronization, so that the synchronization precision of the synchronization method reaches + / -20ns.

The invention discloses a method for applying an anti-quantum certificate to a TLS1.2 handshake process, which realizes the application of an MLDSA anti-quantum signature algorithm and an MLKEM anti-quantum key encapsulation mechanism in the handshake process by expanding a cipher suite and a signature algorithm field of a TLS1.2 protocol. The method specifically comprises the following steps: defining a cipher suite supporting MLKEM and an MLDSA signature algorithm enumeration value; the client declares algorithm support in ClientHello, and the server responds and returns a certificate chain containing the double-antibody quantum certificate; after the client verifies the certificate, the pre-master key is encapsulated by using MLKEM, and the server de-encapsulates the derived session key; and the two parties send Finished messages to each other to complete handshake. According to the scheme, on the premise that a TLS1.2 basic framework is not changed, the communication security is enhanced through double-resistance quantum algorithm integration, international and national cryptographic algorithms are supported, quantum computing attacks can be resisted, meanwhile, adaptation of the international and national cryptographic algorithms is supported, compatibility with an existing system is ensured, the security risk of a traditional cryptographic algorithm in a quantum environment is solved, and the security risk of the traditional cryptographic algorithm in the quantum environment is reduced. And a standardized solution is provided for anti-quantum upgrade of the TLS1.2 protocol.

The invention provides an atomization control method and system based on a breathing machine, and belongs to the technical field of breathing gas instruments. The method comprises the steps that after receiving a handshake request signal from a second microcontroller, a first microcontroller establishes serial port communication connection with an atomizer based on the handshake request signal so as to receive an atomizer control protocol sent by the second microcontroller; wherein the handshake request signal is generated based on the operation that the communication wire is connected to the communication interface of the atomizer; the atomizer control protocol at least comprises an instruction required by the respirator to control the atomizer; determining a breathing stage corresponding to the patient according to the breathing information of the patient from the breathing sensor; and after an atomization control instruction is received and before a breathing phase enters, according to an atomizer control protocol, continuously generating an inspiration phase fog supply instruction and sending the inspiration phase fog supply instruction to the second microcontroller, so that the atomizer carries out synchronous fog supply along with the air supply airflow of the breathing machine based on a preset delayed fog outlet duration and stops fog supply in an expiration phase.

The invention discloses an automatic integrated system from an asynchronous pipeline to an asynchronous circuit, which adopts a modular architecture, takes a high-level structure description file in a JSON / XML format as input, and gradually maps to generate a gate-level netlist and a standard delay format file so as to be in butt joint with a commercial back-end design process. According to the method, asynchronous design based on an asynchronous structure can be automatically mapped into an asynchronous circuit, the automatic mapping process can seamlessly process multi-level design representation, the mapping result is stable and cooperatively operated, asynchronous circuit time sequence detection and delay matching are automatically completed, the design efficiency is greatly improved, and the design cost is reduced. An automatic delay matching mechanism enables the circuit to have a good data ready detection and handshake mechanism, and the characteristics of low power consumption, high throughput and no global clock drift sensitivity are realized; in addition, automation of asynchronous design key links such as structure abstraction, time delay modeling and testability insertion is achieved while design readability, hierarchical consistency and time sequence controllability are guaranteed.

Described systems and methods protect client devices such as personal computers and IoT devices against harmful or inappropriate Internet content. When a client uses an encrypted handshake to hide the identity of the end server, e.g., in applications implementing an encrypted client hello (ECH), some embodiments employ a modified DNS server to provide a surrogate key to the client instead of the genuine handshake key. A traffic filter executing for instance on a network gateway may then intercept and decrypt the handshake and apply an access policy to selectively allow or deny access to the respective end server. When access is allowed, the traffic filter may re-encrypt the server identifier using the genuine handshake key before forwarding the handshake to its destination. Communication privacy is maintained since the illustrated methods only decrypt the handshake, and not the actual payload.

The invention provides a parameter negotiation method for a high-speed serial interface, which is applied to an adaptation layer of any chip in a chip pair for data interaction based on UCIE, and comprises the following steps: requesting a home terminal physical layer to enter an active state under the condition that the home terminal physical layer completes link training; under the condition that a home terminal physical layer enters an active state and a backdoor selection bit is not set, determining a home terminal performance index based on a link training result and home terminal performance parameters pre-configured by a user; determining a target protocol stack to be subjected to parameter negotiation and a to-be-negotiated protocol type of the target protocol stack based on the home terminal performance index, and performing parameter negotiation handshake with the opposite terminal based on the to-be-negotiated protocol type of the target protocol stack; under the condition that the parameter negotiation is successful, the target protocol and the target data format are determined based on the result of the parameter negotiation handshake, and the indication information of the target protocol and the target data format is sent to a home terminal protocol layer, so that the parameter negotiation efficiency of the high-speed serial interface can be improved.

The invention discloses a charging control method and system of a super charging pile, and relates to the field of super charging, and the method comprises the steps that the super charging pile responds to a charging signal of a vehicle, and sends an initial handshake signal to the vehicle; the super charging pile responds to a received response signal returned by the vehicle, handshake with the vehicle is established according to the response signal, and a charging protocol and a communication protocol of the vehicle are determined according to the response signal; the super charging pile obtains vehicle information of the vehicle according to the communication protocol and sends the vehicle information to the service terminal, the response signal is generated by the vehicle based on the initial handshake signal, and the vehicle information comprises battery information and charging parameters; and the super charging pile responds to the received charging strategy sent by the service terminal, and the charging strategy is executed according to the charging protocol to charge the vehicle. According to the invention, the vehicle can be effectively charged, so that the service life of a vehicle battery is effectively prolonged.