65 results about "Hash tree" patented technology

Revocation of digital certificates in a public-key infrastructure is disclosed, particularly in the case when a certificate might need to be revoked prior to its expirations. For example, if an employee was terminated or switched roles, his current certificate should no longer be valid. Accordingly, novel methods, components and systems are presented for addressing this problem. A solution set forth herein is based on the construction of grounded dense hash trees. In addition, the grounded dense hash tree approach also provides a time-communication tradeoff compared to the basic chain-based version of NOVOMODO, and this tradeoff yields a direct improvement in computation time in practical situations.

In a hybrid peer-to-peer file sharing network including a receiver peer and a provider peer, the receiver sends the provider a ticket [710] obtained from a server authorizing the receiver to obtain a data object O. The receiver obtains a root value of a hash tree for the object, verifies its digital signature, and sends the provider peer a request for a block of data object O and a request for a corresponding set of hash tree of hash values from the hash tree [714]. The receiver receives from the provider peer the block of O and the corresponding set of hash values of the hash tree [716] that do not contain any hash value in the local hash tree. The receiver sends the provider an acknowledgement of receipt [718], obtains a block key from the provider [720], decrypts the block, verifies the integrity of the block using the subset of hash values and the local hash tree for O, and updates the local hash tree by adding the subset of hash values to the local hash tree, as well as any newly calculated hash values [722]. The provider may submit to a server the acknowledgements as proof of its service to the receiver.

The invention provides a data processing method based on a block chain. The data processing method comprises the steps that a block chain system receives a transaction request; the blockchain system generates a transaction contract and transmits the transaction contract to both transaction parties; after the blockchain system detects that the two transaction parties sign the transaction contract,the blockchain system confirms that the transaction is completed and writes transaction information into the blockchain system; the enterprise data processing terminal obtains transaction informationfrom the block chain system and obtains preset transaction data; the enterprise data processing terminal uploads the financial data to the block chain system according to the determined financial data; the block chain system assembles the financial data in the form of a Hash tree and returns a Hash value to the tax node; and the tax node acquires financial data according to the Hash value. The invention further provides a data processing device based on the block chain, a terminal and a storage medium. By utilizing the embodiment of the invention, for one piece of transaction information, theaccounting operation is automatically completed, the accounting efficiency is improved, a manual account checking link is not needed, wrong records are reduced, and the auditing difficulty is reduced.

The embodiment of the invention discloses a data synchronization method and device, a storage medium and computer equipment. The embodiment of the invention is related to file storage and database synchronization of cloud storage, and the method comprises the steps: obtaining a first hash tree of a data set on a first server, and obtaining a second hash tree of a to-be-synchronized target data seton a second server; starting traversal comparison based on the root nodes of the first hash tree and the second hash tree, and determining target identifiers corresponding to different target leaf nodes; determining first data and second data, corresponding to the data set and the target data set, of the target identifier; and performing data synchronization according to the difference between the version information of the first data and the version information of the second data. The data synchronization efficiency can be effectively improved.

The invention discloses a light dynamic data integrity auditing method based on a hierarchical Merkel hash tree, which comprises the following steps that: 1) a data owner constructs the hierarchical Merkel hash tree for data, stores data information on a node, and introduces a local root node; 2) a cloud database stores the data of the data owner by using a position sensitive hash technology; 3) the cloud database generates challenge evidence according to the challenge information audited by a trusted third party; 4) the trusted third-party audits the integrity of the evidence ; and 5) when dynamic operation is performed on the data, the cloud database generates evidence, and the trusted third-party performs integrity auditing on the dynamic data. Compared with the prior art, the method ishigh in the auditing efficiency, can be effectively reduce the communication and calculation expenditure, and supports efficient data updating.

A method for auditing cloud access in real time includes steps of Step 1: client obtains necessary information from a synchronization server (SYS), by executing a library comprising index function [gamma] required by program, and saving a root hash value R of a fully binary hash tree (FBHTREE) in SYS; Step 2: the client obtains leave node position corresponding to FBHTREE and corresponding tree node position by inputting an index function [gamma] via file absolute path; Step 3: obtaining slice of FBHTREE based on the leave node position in Step 2; Step 4: performing a hash computation on treenode position in the slice and hash value saved at another tree node position to obtain hash value of tree node position of one previous level till root hash value Y is obtained; Step 5: comparing thehash value Y and the root hash value R saved by the client.

The invention discloses a hash tree caching method and device, and the method comprises the steps: determining the position information of written data in a hash tree according to the logic position of the written data, and storing a hash signature and the position information of the written data in a first front buffer region; when the first preposed buffer area is full, taking the first preposedbuffer area as a current standby preposed buffer area, and updating internal data of the first preposed buffer area to the hash tree; when the space size of the hash tree reaches a threshold value, persisting the hash tree to a disk. According to the method, the first front buffer area and the second front buffer area are introduced, so that the read-write data corresponds to the front buffer areas, the two inverse hash tree operations are effectively isolated, the complexity of the hash tree operations is improved, persistent concurrent execution of the user read-write task and the hash treecan be realized, and the user experience is improved. And the determination writing performance of the distributed storage system is effectively improved.

Disclosed is a digital signature service system and method based on a hash function in which a main agent, who requires the generation of a digital signature, does not personally generate the digital signature, and wherein digital signatures may be simultaneously and stably generated for large-scale data such as multiple electronic documents and digital data using a hash function and a hash tree, which are known as a simple and secure method, to guarantee the integrity of the data in a digital signature-based structure based on a server.

A method, system and apparatus of for validating uniqueness of a non-disclosed element of data, including in response to receiving a plurality of elements, generating an index of the plurality of elements of data received from a data store to create uniquely indexed data, generating filters from the index, generating a hash tree for the uniquely indexed data using the index, and validating a unique element of data from the hash tree and filters.

A data processing system having rich execution environment (REE) and a trusted execution environment (TEE) is provided. In the data processing system, an unsecure memory is coupled to the REE and used for storing encrypted data for use in the TEE. The TEE may have a cache for storing the encrypted data after it is decrypted. The data in both the memory and the cache is organized in blocks, and the cache is smaller than the memory. An interpreter is provided in the TEE, along with a service block in the REE, for fetching and decrypting the data to be stored in the cache. The interpreter checks an integrity of the decrypted data using a hash tree having multiple levels. In the event of a cache miss, all blocks of the hash tree in a path from the data block to a root block are retrieved from the memory in one access operation. A method for operating the cache in the data processing system is also provided.

A method for efficiently storing and verifying records is disclosed. The method may comprise receiving a first hash of first interaction data and determining an interaction identifier associated withthe first hash, then storing the first hash in a database along with the interaction identifier and determining a root hash of a hash tree. In addition, the method may also comprise providing the roothash of the hash tree to a public blockchain. Embodiments of the invention also allow users to easily present records to a third party or inquiring entity. Furthermore, interactions may be processedmore quickly than previous blockchain methods that publish to a block during each individual interaction.

The invention discloses an encrypted file deduplication method based on hybrid cloud storage, which is applied to a private cloud, including: receiving an upload request from a target user for uploading a target file to a public cloud; and calculating the target file according to the user permission set of the target user The deduplication label set of the file; when it is determined that the target file does not exist on the public cloud, calculate the permission label set of the target file according to the access restriction permission set of the target file; combine the permission label set of the target file with the Merkle Ha The encryption key calculated by Xishu is sent to the target user, so that the target user can use the encryption key to encrypt the target file, and upload the ciphertext and permission label set of the target file to the public cloud. Applying the technical solutions provided by the embodiments of the present invention ensures that duplicate files to be uploaded by users to the public cloud can be detected, thereby improving file security. The invention also discloses an encrypted file deduplication device based on hybrid cloud storage, which has corresponding technical effects.