1242 results about "Handshake" patented technology

The invention discloses a financial data privacy protection system based on block chain security multi-party computing, and belongs to the technical field of data protection, and the system specifically comprises the steps that a data preprocessing module segments original financial data, and adds a unique watermark identifier; the distributed account book stores the Hash abstract and watermark mapping relation of the encrypted logic data fragment, and the digital signature and the timestamp are fused to ensure reliability; the computing node cluster receives data through a special interface, dynamically builds a computing group according to a service rule and outputs an encrypted computing result; bidirectional authentication is carried out on the zero-knowledge proof verifier and the computing node cluster to verify the data holding right; the encryption proxy gateway processes an output result of the computing node cluster to complete format conversion and ciphertext superposition; the cross-link routing module constructs a virtual coverage layer, cross-link transmission of encryption results is achieved through protocol conversion and three-way handshake verification, and a heterogeneous chain protocol converter and a verification assembly guarantee transmission safety; the financial data privacy security is comprehensively guaranteed, and the data processing efficiency and reliability are improved.

The invention relates to a power adapter charging protocol identification and compatibility self-learning optimization method. After the adapter establishes physical connection with a target terminal, a voltage signal output by the target terminal is collected, a handshake data sequence is formed, feature extraction is performed on the handshake data sequence, and a first protocol feature vector is generated. And performing similarity matching on the feature vectors in a protocol feature library to determine a historical protocol category and extract a corresponding historical charging parameter template. And during voltage and current step-by-step adjustment, collecting target terminal load impedance change data, extracting impedance spectrum features, and fusing the impedance spectrum features with the first protocol feature vector to form an enhanced protocol feature vector. And based on the enhancement protocol feature vector and the historical parameter template, predicting negotiation parameters supported by the target terminal, generating a predicted negotiation parameter set, and applying the predicted negotiation parameter set to a charging negotiation process, thereby realizing stable charging output with the target terminal. According to the method, the compatibility and the self-adaptive capability of the power adapter to various fast charging protocols can be improved.

A method for authenticated asset assessment is provided. The method involves executing a scan assistant on an asset to allow a remote scan engine to execute one or more scan operations on the asset for determining a state of the asset. The scan assistant may verify the identity of the scan engine by checking that a certificate received from the scan engine is signed with a private key associated with the scan engine. In some embodiments, the authentication may be performed as part of a TLS handshake process that establishes a TLS connection between the scan engine and the scan assistant. Once the scan engine is authenticated, the scan engine may communicate with the scan assistant according to a communication protocol to collect data about the asset. Advantageously, the disclosed technique reduces security risks associated with authenticated scans and improves the performance of authenticated scans.

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

The invention discloses an optimized registration method and system based on a micro-service architecture. The invention relates to the technical field of Nacos systems. The health monitoring center is started and starts to send a health examination request to a downstream service at regular time; the gateway access layer service receives a client request; obtaining a network address of a target service instance through a Nacos service discovery mechanism according to a service name in the request; then forwarding the request to a target service instance for processing; when the configuration information is changed, the Nacos configuration management center pushes an update notification to all subscribed service instances; the service instance pulls the latest configuration information and updates the local cache; according to the method, a secondary hand waving mechanism is implemented in Nacos cluster node, gateway service and downstream service communication, so that the offline condition of the downstream service can be accurately judged, and the problem of data inconsistency caused by node faults or network partition is avoided.

The invention discloses an AI-based automatic connection and handshake protocol for a trusted data space connector. The AI-based automatic connection and handshake protocol comprises a data supply end connector, a data demand end connector and a platform operation end, the data supply end connector is used for collecting and preprocessing data; the demand end connector is used for receiving and processing data; the platform operation end is used for connection management, authority distribution and security auditing; the method has the beneficial effects that through automatic connection and an intelligent handshake protocol, manual intervention is reduced, and the data circulation cost is reduced; multi-factor authentication, dynamic encryption and privacy protection technologies are adopted to ensure the safety of the whole life cycle of the data; aI and machine learning technologies are introduced, so that the system can intelligently select an optimal strategy according to real-time network conditions and data features; interoperation and data sharing among different data spaces are realized, and circulation and value mining of data elements are promoted.

The invention relates to the technical field of network communication security, and discloses a real-time encrypted transmission network communication security guarantee system, which comprises a dynamic fragmentation quantum resistance encryption module, a flow perception-based adaptive encryption engine, a zero-handshake continuous identity authentication module and a hardware acceleration fragmentation processing architecture, and the dynamic fragmentation quantum resistance encryption module is configured to segment a data stream into a plurality of fragments according to a time window, and independently generate an unassociated key for each fragment based on a quantum security NTRU algorithm. According to the network communication security guarantee system for real-time encryption transmission, the traditional network communication security guarantee technology is comprehensively innovated, and the problems of static key management, encryption algorithm adaptation, data fragmentation encryption, identity authentication and encryption cooperation, quantum computing threat response and the like are successfully solved; and the performance of the system in key performance dimensions such as security, real-time performance, adaptability, reliability and anti-attack capability is obviously improved.

The invention provides a communication module low-delay switching control method based on HPLC and HRF, and relates to the technical field of data processing, and the method comprises the following steps: when an index continuously exceeds a dynamically adjusted judgment threshold, a switching judgment unit generates a mode switching enable signal, and initializes an HRF channel pre-synchronization sequence; based on a pre-stored HRF channel feature vector table, HRF channel negotiation and authentication handshake processes are executed in parallel while HPLC link state monitoring is maintained; through a dual-channel redundancy transmission mechanism, the key fault information is packaged into a final priority protocol data unit before the establishment of the HRF link is not completed, and redundancy forwarding is carried out through a reserved time slot window of the HPLC link; and after the handshake of the HRF link is completed, the switching control unit executes seamless switching of the data transmission channel. According to the invention, the accuracy of channel state judgment is improved.

Presented herein is a Message Layer Security (MLS)-based secure channel communication arrangement that involves a minimal set of changes to the MLS standard to reduce the redundant overhead in case of two-party (one-to-one or 1:1) communication. These techniques reduce the communication and computation complexity of both devices involved in establishing and supporting the one-to-one secure channel communication. Methods are provided to establish a one-to-one secure channel between a first endpoint and a second endpoint by performing a one-to-one secure channel handshake.

The invention discloses a meteorological data transmission method based on an edge protection gateway algorithm, and belongs to the technical field of data transmission, and the method comprises the steps: building communication connection with meteorological observation equipment through a serial port service controller, carrying out the standardization processing of data, and carrying out the fragmentation storage and backup; generating a random seed by using a hardware random number generator, generating a round key through a key expansion function, performing encryption operation on the grouped data, and calculating a message authentication code; sending a password suite list to establish handshake connection, exchanging a key through elliptic curve operation, segmenting compressed data into records, and adding an authentication tag for transmission; identity authentication is carried out by adopting a digital certificate, and security protection is carried out on data through a firewall state table and a feature matching algorithm. Through the scheme of the application, the security of meteorological observation data transmission can be improved, data leakage, tampering and attacking are prevented, and the security and reliability of meteorological data are guaranteed.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

In a GPU design, “launching a worker” is de-coupled from “assigning a work item” in a work distributor, and new handshake mechanisms between a worker and the work-distributor is provided for work assignment, in order to provide persistent kernel functionality. In example embodiments, software specifies the work that has to be done, hardware selects a variable number of workers based on available resources, and a hardware scheduler handshaking with the executing workers assigns more work as previously assigned work is completed and / or more resources become available.

The invention relates to the technical field of data processing, in particular to a triple modular redundancy data synchronization method and device based on an FPGA. The method comprises the following steps: performing three-mode synchronization based on a periodic synchronization signal generated by an FPGA (Field Programmable Gate Array); when data interaction needs to be carried out among the three modes, non-periodic data handshake is carried out among the three modes by adopting an FPGA (Field Programmable Gate Array); and after the data handshake succeeds, performing data interaction among the three modes by adopting the FPGA. According to the invention, on the basis of triple-modular redundancy periodic synchronization, a data handshake function is added before data interaction among the three moduli at any moment is executed, synchronization errors caused by hardware of a triple-modular redundancy system or other reasons are reduced, and triple-modular redundancy synchronization is realized more accurately. Meanwhile, periodic synchronization, data handshake and data interaction are realized by adopting an FPGA (Field Programmable Gate Array), and the time delay is further reduced on the basis of triple modular redundancy architecture synchronization, so that the synchronization precision of the synchronization method reaches + / -20ns.

The invention discloses a method for applying an anti-quantum certificate to a TLS1.2 handshake process, which realizes the application of an MLDSA anti-quantum signature algorithm and an MLKEM anti-quantum key encapsulation mechanism in the handshake process by expanding a cipher suite and a signature algorithm field of a TLS1.2 protocol. The method specifically comprises the following steps: defining a cipher suite supporting MLKEM and an MLDSA signature algorithm enumeration value; the client declares algorithm support in ClientHello, and the server responds and returns a certificate chain containing the double-antibody quantum certificate; after the client verifies the certificate, the pre-master key is encapsulated by using MLKEM, and the server de-encapsulates the derived session key; and the two parties send Finished messages to each other to complete handshake. According to the scheme, on the premise that a TLS1.2 basic framework is not changed, the communication security is enhanced through double-resistance quantum algorithm integration, international and national cryptographic algorithms are supported, quantum computing attacks can be resisted, meanwhile, adaptation of the international and national cryptographic algorithms is supported, compatibility with an existing system is ensured, the security risk of a traditional cryptographic algorithm in a quantum environment is solved, and the security risk of the traditional cryptographic algorithm in the quantum environment is reduced. And a standardized solution is provided for anti-quantum upgrade of the TLS1.2 protocol.

The invention discloses an automatic integrated system from an asynchronous pipeline to an asynchronous circuit, which adopts a modular architecture, takes a high-level structure description file in a JSON / XML format as input, and gradually maps to generate a gate-level netlist and a standard delay format file so as to be in butt joint with a commercial back-end design process. According to the method, asynchronous design based on an asynchronous structure can be automatically mapped into an asynchronous circuit, the automatic mapping process can seamlessly process multi-level design representation, the mapping result is stable and cooperatively operated, asynchronous circuit time sequence detection and delay matching are automatically completed, the design efficiency is greatly improved, and the design cost is reduced. An automatic delay matching mechanism enables the circuit to have a good data ready detection and handshake mechanism, and the characteristics of low power consumption, high throughput and no global clock drift sensitivity are realized; in addition, automation of asynchronous design key links such as structure abstraction, time delay modeling and testability insertion is achieved while design readability, hierarchical consistency and time sequence controllability are guaranteed.

The invention relates to the technical field of multi-modal behavior anomaly detection scheme design, in particular to a multi-modal behavior anomaly detection method and system under the condition that encrypted traffic is not decrypted. The method comprises the following steps: capturing a network encrypted traffic data packet in real time; on the premise that decryption is not carried out, multi-mode non-decryption features such as flow layer statistics, time sequence interaction, encryption handshake and context association are extracted in parallel; establishing a dynamic normal behavior baseline model of each feature based on historical data; the real-time features are compared with the baseline model, comprehensive judgment is carried out through a multi-mode correlation analysis algorithm, and an anomaly detection result is output; and when the abnormal condition is judged, the network control equipment is automatically linked for blocking. The method thoroughly gets rid of dependence on traffic decryption, realizes high-precision and self-adaptive detection and rapid automatic response to abnormal behaviors in encrypted traffic through multi-dimensional feature fusion and dynamic baseline technologies, and effectively solves the problem of failure of a traditional detection technology in an encrypted environment.

In some implementations, a system includes a set of servers configured to establish a set of virtual machines to provide a computing environment; a set of compute express link (CXL) interface components configured to communicate with the set of servers via a set of CXL interconnects; and a controller configured to at least one of: encrypt protocol data against a CXL interposer security threat associated with the set of CXL interconnects or a malicious extension security threat, provide a secure handshake verification of an identity of the set of CXL interface components, enforce a chain of trust rooted in hardware of the set of CXL interface components; restrict access to an area of memory of the set of CXL interface components that stores security data for verified or secured processes; or perform a security check and set up a set of security features of the set of CXL interface components.

The invention discloses an iframe two-way encryption communication method and system based on a network target range, and belongs to the technical field of network security. In the aspect of data communication of iframes of a front-end platform and a third-party platform, security is enhanced, a digital certificate is generated through an ECDH key pair, and a foundation is laid for identity verification; then TCP handshake is simulated to establish a reliable channel, and two-way identity authentication resisting replay attack is achieved through two-way certificate verification and random number exchange; then negotiating a shared key by using ECDH, deriving a dynamic session key through an HKDF algorithm, and ensuring forward confidentiality; and finally, real-time data encryption and integrity verification are carried out by adopting AES-GCM, and the anti-leakage capability is continuously improved through a timing key rotation mechanism. The whole process fuses the characteristics of quantum computing resistance, low resource consumption, efficient transmission and the like, an end-to-end secure communication normal form is provided for Web application, and cross-session key confusion is prevented.

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

Methods and systems are provided for cooperating routers in communication networks. The cooperating routers conduct a handshake to exchange information with respect to “cooperation types” which they are capable of performing and / or are configured to perform. In an exemplary “emergency connection” cooperation type, one cooperating router may use the ISP connection of another cooperating router to send and receive packets. In an exemplary “bandwidth sharing” cooperation type, one cooperating router may make excess bandwidth available for use by other cooperating routers. In an exemplary “latency optimization” cooperation type, one cooperating router may use another cooperating router to transmit duplicates of packets or to implement suppression techniques.

Ledger-less blockchain systems for data management and tokenization comprising: a Data Token Generation Module (DTGM) to capture data that is to be tokenized into a data token (TKN), for a given data token (TKN) used by this invention, only one transaction per block being allowed, said generated token (TKN) being Source of Truth; a verification module (VFM) to, authentically, verify data (101) that is to be tokenized, before generating a correlative data token (TKN); a Data Token Verification Module (DTVM) to allow a second user with a user-correlative non-fungible token (NFT), to verify said user-correlative non-fungible token (NFT), said Data Token Verification Module (DTVM) comprising: an app-adapter system that queues user requests and transactions, in an asynchronous-await module, allowing said system to process only one request at a time and create or read one block per transaction; and enabling handshake between said Proof of Truth and said Source of Truth.

The invention relates to the technical field of audio and video transmission, in particular to an internal and external network audio and video secure transmission method and system based on a cloud platform. By combining the load balancing technology with the real-time load state and the audio and video stream characteristics of the cloud platform, the encrypted traffic can be dynamically distributed to a plurality of back-end servers, and the calculation overhead in the encryption process can be effectively reduced through selection of the lightweight asymmetric encryption algorithm and the optimized key exchange process; in a handshake stage, by optimizing a key negotiation process and adjusting a key exchange process according to segmentation characteristics, the execution efficiency of a protocol is further improved, and by dynamically adjusting the execution opportunity of encryption operation, it is ensured that the encryption operation is executed at a proper opportunity, and the encryption efficiency is improved. By monitoring and adjusting the load distribution strategy and the encryption parameters in real time, the system operation mode can be dynamically adjusted according to the distortion degree and the transmission state of the audio and video streams, and the distortion degree of the audio and video streams is effectively reduced.

An information protection method based on software-defined perimeter (SDP) for Internet of Things (IoT) cloud security may comprise: receiving, at an SDP controller, an onboarding request message with an identity (ID) token from an SDP client acting as an initiating host, the onboarding request message comprising information requesting authentication of the SDP client and a handshake parameter specifying a handshake protocol for use in an SDP access process; and issuing, at the SDP controller, an SDP client credential corresponding to the handshake parameter.

The invention relates to a PLC-bridging gateway internet-of-things automatic identification method, system and device and a medium. The method comprises the following steps: sequentially sending handshake detection signals to a plurality of PLC devices and receiving response messages; forming a candidate handshake data combination set, and completing handshake matching through a priority algorithm and an adaptive polling mechanism; verifying the response frame, analyzing the equipment information, and confirming the active state and communication parameters of the PLC equipment; generating a drive binding strategy according to a matching result, and distributing a session identifier for the drive binding strategy; generating a session identifier of the target PLC equipment, and updating a session routing table in the bridging gateway; and translating the industrial data collected by the target PLC device into an Internet of Things protocol data packet and uploading the Internet of Things protocol data packet to a cloud data center. According to the invention, automatic identification and rapid adaptation of various interfaces and protocols can be realized; the communication stability and real-time performance are improved through dynamic scheduling and route updating; uniform data uploading is supported, and efficient deployment of cloud analysis and the industrial Internet of Things is facilitated.

The invention relates to the technical field of keyboard pairing, and discloses a keyboard multimode pairing method and device, equipment and a storage medium. The method comprises the following steps: establishing a switching time calculation model of a keyboard according to the reference switching time of keyboard hardware, a protocol node cooperation coefficient, an equipment response weight coefficient and a pre-connection optimization coefficient; calculating the theoretical optimal switching time of the current switching scene; selecting a working mode of single-node direct switching, double-node pre-connection or three-node parallel pre-connection of a keyboard Bluetooth node, a 2.4 GHz node and a USB node; activating a corresponding communication node, sending a connection handshake signal to the target equipment and establishing a communication link pre-connection state; and switching keyboard input and output from the current equipment to the target equipment to finish quick connection switching between the equipment. According to the invention, a pre-connection mechanism is adopted, the target equipment connection is established in advance before the user completes the switching instruction, passive response switching is converted into active prediction switching, and instantaneous equipment switching is realized.

The invention relates to the technical field of automobile communication, in particular to a wireless connection optimization method and device for an intelligent cabin car-aircraft interconnection system, electronic equipment and a storage medium, and the method comprises the steps: constructing a candidate channel list based on a network unique identifier and channel information of a historical successful connection network; concurrently performing a Wi-Fi scan on a plurality of common channels in the candidate channel list to identify at least one candidate wireless connection link; taking the candidate channel with the highest channel quality score in the candidate channel list as a target channel; wherein the channel quality score is calculated based on the packet loss rate, the signal strength and the interference parameter of the candidate channel. According to the method, on the basis of historical channel weights and a multi-stage concurrent scanning mechanism, consumed time of a Wi-Fi scanning stage is reduced, a target channel is rapidly determined through dynamic channel evaluation, and the connection speed and the connection success rate of the whole process are improved by combining asynchronous split WPA2 handshake and service initialization parallelization.

A method including the initiation of a state transition from a first state of a plurality of states to a second state of the plurality of states based on a message uniquely associated with the second state, the processing of a handshake protocol associated with the second state in response to the initiation of the state transition from the first state to the second state, and the causation of one or more vehicles to revert to the first state in response to an unsuccessful completion of the handshake protocol associated with the second state.

The invention belongs to the technical field of single-chip microcomputers, and particularly relates to a remote monitoring system based on a single-chip microcomputer and a control method thereof. The system comprises a single-chip microcomputer, a sensor acquisition unit, a wireless communication unit and an execution mechanism. When a single-chip microcomputer, a sensor acquisition unit and a system are initialized, a wireless communication unit and an execution mechanism are sequentially powered on, after the single-chip microcomputer completes hardware self-inspection, a handshake instruction is sent to the wireless communication unit, a secure channel with a remote control terminal is established, and after handshake is completed, the single-chip microcomputer writes in a unique identity identification code and enters a standby state; the single-chip microcomputer polls the sensor acquisition unit according to a preset sampling period to obtain an original data frame; the remote control terminal analyzes the error correction compressed data block, generates a control instruction according to a threshold strategy and returns the control instruction; the single-chip microcomputer receives the control instruction, then drives the execution mechanism to act, and records an execution state log. The method has the advantages of being high in communication efficiency, high in link fault-tolerant capability and fast in remote control response.

The invention relates to the technical field of communication security, in particular to a security authentication method and system and electronic equipment, and the method comprises the steps: sending an algorithm support list, a mixed key exchange parameter, a first random number and a first certificate request to a second terminal, and enabling the second terminal to generate a second handshake key and a ciphertext; and determining the first handshake key and verifying the target first certificate chain sent by the second terminal by using the first handshake key to obtain an authentication result. Identity authentication is performed based on the mixed key exchange parameter, so that the terminal has the security of quantum attack resistance, and in the whole identity authentication process, the authentication efficiency of the terminal is improved. The leakage of plaintext parameters in the initial handshake message is reduced, and subsequent messages are subjected to different encryption processing, so that the risk of leakage of an identity authentication key is reduced, and the security of identity authentication is improved. Meanwhile, the algorithm selection list is sent in a combined algorithm mode, the algorithm selection matching time of the second terminal can be effectively shortened, and the identity authentication efficiency is improved.

The invention relates to the technical field of integrated circuit design, computer system structures and embedded systems, in particular to a high-real-time interrupt management system and method based on an RISC-V. The system comprises an improved platform-level interrupt controller and an optimized processor internal interrupt processing unit. The system and the method are in tight coupling cooperative work through a special interruption field interface and a system bus, and the system further comprises a core local interrupter, an SRAM, an APB bus matrix and other components. The improved platform-level interrupt controller is responsible for sampling, gating, arbitration, flow control and direct memory access transmission of external interrupt, and a plurality of functional modules are arranged in the improved platform-level interrupt controller; an interrupt processing unit in the processor is responsible for hardware handshake, vector jump, nested control and tail biting mechanism implementation. Through hardware field management, multi-level priority arbitration, hardware nesting and tail biting mechanisms, delay and overhead caused by software intervention in a traditional architecture are eliminated, nanosecond response is achieved, the system throughput rate is increased, the software development threshold is lowered, and the method is suitable for strong real-time scenes.