139 results about "Hash tree" patented technology

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention belongs to the technical field of data management, and discloses a research and development data traceability and collaborative management system based on a block chain, and the system comprises a sensing layer which is used for collecting multi-source research and development data on various research and development tool chains through a multi-protocol collection agent, carrying out the structural packaging of the data to generate metadata, and embedding a data blood relationship tracking mark in the metadata; false data filtering is carried out on the metadata by deploying a trusted execution environment; the chain network layer is used for dividing the filtered metadata into data fragments and respectively storing the data fragments in a distributed storage platform; applying a Hash algorithm to each data fragment to generate a corresponding Hash value; taking the hash values corresponding to all the data fragments as leaf nodes, constructing a fragment hash tree, and further obtaining global root hash; the security of research and development data is ensured, and the cooperation efficiency is improved.

The invention discloses a post-quantum signature method, a post-quantum signature verification method and a related device, OTS signature data and LMS signature data can be generated by using a Chinese Hash algorithm, and the LMS signature data can resist quantum attacks and meet Chinese encryption requirements. The post-quantum signature method comprises the following steps: after selecting an OTS private key from an LMS private key, generating OTS signature data according to a Chinese Hash algorithm, the OTS private key, a first reference random number and a message, generating a Hash tree according to the LMS private key, generating an LMS public key according to a root node of the Hash tree, determining a brother node set in the Hash tree according to a target leaf node corresponding to the OTS private key, and sending the brother node set to the OTS private key; generating LMS signature data according to the serial number of the OTS private key, the OTS signature data, the LMS feature value and the brother node set; and sending the LMS public key, the LMS signature data and the message to a signature verification device.

The invention discloses a bar code and RFID dual-mode fused tamper-proof data storage system, and relates to the field of data security storage, which comprises the following steps: uploading complete data to be stored into a scanning monitoring platform, splitting the data into static data and dynamic data, writing the static data into a bar code module, and writing the dynamic data into the bar code module; randomly distributed initial fluorescent particles are generated on the surface of the bar code data label through a scanning monitoring platform, a unique initial optical fingerprint is generated, if a bar code module is tried to be written or modified, the distribution position of the initial fluorescent particles is modified, an abnormal optical fingerprint is obtained, and an alarm is given; and writing the dynamic data into the RFID module, generating a dynamic key in each communication, and performing cross validation on the hash value based on the static data and the dynamic data. The method has the advantages that a three-dimensional protection system is constructed through a dual tamper-proof mechanism of a physical layer of fluorescent particle displacement and a password layer of a dynamic key in combination with cross validation of a hash tree, and the tamper-proof capability is improved.

The invention relates to the field of data query, and particularly provides a medical big data query method and system based on dynamic desensitization, a terminal and a medium, and the method comprises the steps: collecting multi-source heterogeneous medical data, carrying out semantic normalization, constructing a unique identifier of a patient, and generating standardized intermediate plaintext data; constructing an adaptive isomorphic index structure based on the data, constructing a semantic hash B + tree index for structured data, constructing a feature vector index for unstructured data, and dynamically optimizing index hierarchy and parameters according to access frequency; and after a query request is received, the permission context is analyzed, intermediate plaintext data is positioned and read by using the index, and a differential privacy protection strategy is dynamically applied according to the access permission. According to the method, the problem of balance between privacy protection and data effectiveness as well as between retrieval efficiency and storage cost in medical data processing is effectively solved, and data availability and access performance are improved while safety compliance is guaranteed.

The invention discloses a secure transmission system based on a multimedia short message, and relates to the technical field of communication and network security, and the system comprises a protocol stack security reinforcement module which carries out the hierarchical reconstruction of an MMS protocol stack, comprises a preprocessing layer, is used for intercepting and filtering illegal characters, and verifies the legality of a message structure through a finite-state machine; the analysis layer is used for pre-judging memory requirements based on message types and lengths by adopting a dynamic memory allocation strategy; the execution layer is integrated with a null pointer checking mechanism, and the validity of a pointer is forcibly verified before a protocol stack calls a function; the encryption and signature module is used for carrying out end-to-end encryption on a message body and metadata by adopting a hybrid encryption algorithm and carrying out message integrity verification through a lightweight hash tree; and the vulnerability real-time monitoring module is embedded into an abnormal behavior detection model based on machine learning and is used for dynamically identifying memory occupation abnormity and illegal instruction calling high-risk operation when the protocol stack runs.

The invention discloses an energy big data right confirmation method and system based on a hierarchical hash tree and dynamic authorization, and belongs to the field of energy big data management and information security, and the method comprises the steps: obtaining and standardizing original data in an energy scene, and dividing the original data into a data block set according to equipment and time; constructing a hierarchical hash tree and generating root hash; writing the root hash and the associated metadata into the block chain to realize right confirmation and evidence storage; executing proxy re-encryption according to the access token, and converting the ciphertext into a decryptable format; verifying the data consistency through the Hash path and the root Hash, and completing the access; and recording the access behavior and distributing transaction earnings by the smart contract based on the contribution degree. Hash calculation and local path updating of a data block level are supported through a layered Hash tree structure, so that when large-scale energy data is frequently updated, a new root Hash value can be quickly generated and right confirmation updating can be completed only by carrying out local Hash recalculation on a changed path.

The invention relates to the technical field of distributed data processing systems, and discloses a data processing system supporting full localization deployment and a compliance guarantee method thereof.The data processing system supporting full localization deployment comprises an audit event collection module used for collecting and storing processing event hash; the event organization module is used for realizing logic time sequence management of events through topological sorting and causal relationship marking; the hash chain construction module is used for constructing a local-to-global double-layer hash chain by utilizing the constructed directed acyclic graph and event hash; the increment synchronization module is used for executing increment synchronization based on Hash tree difference identification; the conflict solving module is used for detecting and solving event conflicts in the distributed environment by applying a version vector technology aiming at data differences found in the incremental synchronization process; according to the method, the lightweight linear hash chain is used for replacing a traditional binary tree structure, high-efficiency and low-cost audit chain maintenance is realized, and the data integrity is guaranteed in an unstable network environment.

The invention discloses an Internet of Things equipment security protection method based on big data, and the method comprises the steps: screening obtained original data sent by Internet of Things equipment, and determining to-be-encrypted target data in the original data; matching in a Hash tree library based on the Hash calculation value of the target data to obtain a target Hash tree matched with the Hash calculation value; splitting the target data to obtain a plurality of sub-data, and performing modulo conversion on each sub-data to obtain a modulo result value of each sub-data; determining an encryption mode of the sub-data based on the total number of the sub-data in the target data, and encrypting each sub-data based on the target hash tree, the modulo result value of each sub-data and the encryption mode to obtain an encryption result of each sub-data; and combining the encryption results of the sub-data to obtain an encryption result of the target data, and uploading the encryption result to a cloud for storage. According to the invention, the cracking difficulty is increased, and the security protection capability of the Internet of Things equipment is improved at the same time.

The invention discloses an on-orbit security identification method, which comprises the following steps: a system initialization stage: a trusted third party distributes a key for a satellite and initializes a Cuckou filter; in the coarse granularity comparison stage, a satellite divides a remote sensing scene into sub-images, extracts feature vectors, and performs preliminary difference identification through a Cuckou filter and a secure matrix encryption (SME) technology. In the fine granularity identification stage, if potential differences are found, difference sub-images are confirmed through construction of a binary hash tree and MSIP calculation. And the difference is further accurately positioned in the DCTree-based identification stage. And the differential sub-image is encrypted by using a symmetric session key and is safely transmitted to a ground station, so that the confidentiality and integrity of data are ensured. On the premise of protecting the data confidentiality of the remote sensing image, remote sensing satellite on-orbit safety difference data identification is completed, the method is suitable for the situation that satellite resources are limited, and satellite on-orbit data efficient safety processing and data downlink are achieved.

Techniques for signing internet data are disclosed. The techniques include accessing a plurality of internet data records. The techniques also include generating, using at least one electronic processor, leaf nodes from the plurality of internet data records, and constructing a recursive hash tree from the plurality of leaf nodes. The techniques also include deriving information sufficient to validate the root node, and publishing, in an internet public key infrastructure (PKI) as a synthesized public key, the information sufficient to validate the root node. The techniques also include providing, through the internet and as a signature on at least one of the plurality of internet data records, validation data including sibling path data from the recursive hash tree, such that an internet client validates the at least one of the internet data records using at least the validation data and the synthesized public key.

Dynamic data access control may be provided by granting an access request for accessed data that is governed by an access policy. A hash tree may be generated for the accessed data. The hash tree may be stored in conjunction with the access policy, and the access policy may be related to uploaded data, based on the hash tree.

The present application relates to messaging between instances of a microservice in a decentralized architecture. A computer device hosting an instance may include a memory storing instructions to operate a microservice and a processor. The instance receives a message for the microservice from another instance of the microservice, the message including a branch of a hash tree with at least a block for a root hash of a central node, one or more blocks for intermediate nodes, and a leaf block including message content. The instance places at least the leaf block into a local hash tree based on the branch of the hash tree. The instance verifies an integrity and an order of the message based on the root hash and the location of the leaf block in the local hash tree. The instance acts on the message content in response to verifying the integrity and the order.

The invention relates to the technical field of medical information security, in particular to a security guarantee method and system in a medical data interaction process, and the method comprises the steps: firstly carrying out the read-only solidification and disk encryption of data, and building a fingerprint hash tree; zero-knowledge proof and dynamic privacy budget are generated according to strategies such as purposes and calling times, and semantic vectors are obtained through encoding and signed into a revocation chain; the algorithm is divided into linear, nonlinear and pulse sub-graphs in a credible environment, three-domain ciphertext calculation is carried out, Laplace noise is injected into pulse output according to budget and then fusion is carried out, and a re-linearization key is derived; a hypergraph commitment is generated based on a fused ciphertext, a semantic vector and a key drive delay function are utilized to take a random value and a proof, a composite commitment is obtained through a threshold signature and a random bit sequence, cross-chain evidence storage with root hash is carried out, and differential privacy and long-term auditing are realized.

Systems, devices, and techniques are disclosed for verification of backup data across a data pipeline. Records from a first storage may be received at a first end of a data pipeline. The records may be hashed to generate first hashes. A first hash tree may be generated from the first hashes. The records may be received at a second end of the data pipeline. Bits of bitmaps that correspond to the records may be set. The records may be hashed to generate second hashes. The records may be stored in a second storage. A second hash tree may be generated form the second hashes. Using the bitmaps, whether all of the records or any duplicate records were received may be determined. The first hash tree and the second hash tree may be compared to determine if any of the records stored in the second storage are corrupt.

The present disclosure relates to systems and methods for generating a persona and detecting anomalies using a hash tree. In one implementation, the system may include one or more memories storing instructions and one or more processors configured to execute the instructions. The instructions may include instructions to receive a plurality of data structures related to an individual, convert the data structures into a plurality of Bayesian wavelets, group the Bayesian wavelets into a tree structure, using transitions between the Bayesian wavelets within the tree structure, generate a plurality of Markovian wavelets representing the transitions, replace one or more of the Bayesian wavelets with hashes, and output the tree structure as a persona representing the individual. The instructions may also include training a neural network.

The invention is suitable for the technical field of text management, and particularly relates to a security processing method and system for big data, and the method comprises the steps: setting a plurality of common characters, selecting text data needing to be subjected to security processing, traversing the first appearance position of each common character, calculating the character bit order, integrating all the character bit orders, and carrying out security processing on the text data. Generating identifiers, wherein each piece of text data corresponds to one identifier; the method comprises the following steps: creating text data, creating child nodes in one-to-one correspondence with the text data, writing identifiers into the child nodes, selecting a hash function, performing pairwise hash on adjacent child nodes to obtain a plurality of first hash values, creating a plurality of levels of father nodes, writing the first hash values into the father nodes, and mounting the corresponding child nodes into the father nodes. By intercepting the state snapshot, lightweight storage can be carried out on the Hash tree, the storage burden is further reduced, and the safety processing efficiency and tamper-proofing capability of the text data are greatly improved.

The invention discloses a firmware upgrading system and method, electronic equipment, a storage medium and a program product, and relates to the technical field of server hardware management.The system comprises a firmware issuing end used for conducting block encryption processing on target upgrading firmware so as to generate a hash tree, conducting signature on a root hash value of the hash tree based on a root layer private key, generating first signature data and sending the first signature data to a server; storing a root layer private key; the firmware supervision end is used for generating second signature data by using the intermediate layer private key and storing the intermediate layer private key; the firmware use end is used for generating third signature data by using the leaf layer private key and storing the leaf layer private key; the firmware publishing end writes a data packet formed by the first signature data, the second signature data, the third signature data and the root hash value into the block chain; and the firmware using end verifies the data packet, and if the verification is passed, firmware upgrading is carried out. The technical problem of relatively low security of a firmware upgrading mode in related technologies is solved, and the technical effect of improving the firmware upgrading security is achieved.

The invention discloses a WebRTC-based vehicle-mounted video stream secure transmission management method, and relates to the technical field of real-time communication, and the method comprises the steps: 1, constructing a hierarchical security system, and building a basic security framework; the layered security system comprises an application layer, a transmission layer, a network layer and a physical layer; 2, according to the basic security framework, in the WebRTC interactive connection establishment process, zero-knowledge proof is introduced, access strategy dynamic updating is achieved through a block chain, an authentication access control strategy set is output, and the authentication access control strategy set comprises device access, a bidirectional identity authentication rule and a block chain-based fine-grained access control strategy; 3, on the basis of the authentication access control strategy set, data security is guaranteed through hybrid encryption, the integrity of the Hash tree is verified, and an improved encryption transmission scheme is output; wherein the Hash tree is verified, and anti-jitter and code rate self-adaption are carried out in combination with the LDPC and the DRL.

The invention discloses an augmented reality inspection method and device based on a building information model, and a medium. The method comprises the following steps: converting the building information model into a BIM conditional Gaussian point field and a semantic signed distance field, and collecting multi-source heterogeneous sensor data; constructing a joint optimization factor graph, calculating a current camera pose estimation value and a covariance matrix, and monitoring numerical values of a projection edge consistency residual error and an SDF distance residual error in real time; according to the uncertainty degree of pose estimation, the transparency and the shielding effect of augmented reality rendering content are dynamically adjusted, and when it is monitored that the alignment error of a local area exceeds a threshold value and the pose covariance is lower than the threshold value, local non-rigid deformation adjustment based on engineering tolerance constraint is triggered; generating a signature visual residual proof and carrying out digital signature and timestamp authentication; and mapping the signature visual residual proof to a pre-constructed hash tree to calculate a root hash value, and storing the root hash value and the digital signature to the block chain.

A computer-implemented method of determining a verification path for a target hash of a hash tree, wherein the hash tree comprises a layer comprising a plurality of leaf hashes, one or more layers each comprising one or more inner hashes, and a layer comprising a root hash, wherein each hash is associated with a respective position within a respective layer of the hash tree, and wherein the hashes of the hash tree, or respective values for deriving said hashes of the hash tree, are stored as an array ordered based on the respective layer of the hash tree and the respective position of the respective hash within the respective layer, wherein each hash or respective value stored in the array is associated with a respective index representing its position within the array.

The embodiment of the invention provides a data forwarding method and device for a four-layer load balancer, equipment and a storage medium, and belongs to the field of CDN acceleration, and the method comprises the steps: receiving a connection request, and analyzing the message information of the connection request; querying whether a first forwarding rule corresponding to the connection request exists in a local forwarding table and a synchronous forwarding table according to the message information; if it is queried that the first forwarding rule does not exist in the local forwarding table and the synchronous forwarding table, obtaining back-end information corresponding to a first RS back end from an RS hash tree according to a hash value calculated by the message information; and according to the back-end information, creating a second forwarding rule corresponding to the connection request, storing the second forwarding rule in a local forwarding table, and forwarding the message information to the first RS back-end. According to the method and the device, real-time full-quantity synchronization does not need to be carried out on the forwarding table information of a plurality of four-layer load balancers, so that the resource consumption of the four-layer load balancers is greatly reduced, and large-bandwidth service scenes such as a CDN (Content Delivery Network) are met.

A method and a system for maintaining immutability of evidence that relates to software development life cycle data and that is protected from tampering in order to guarantee data integrity and consistency are provided. The method includes: receiving an evidence item that relates to a software development; encrypting the evidence item; storing the encrypted evidence item in a memory; computing a hash value based on the evidence item; and combining the hash value with a hash tree that relates to the software development. The hash tree includes a set of hash values for which there is a one-to-one correspondence with a set of evidence items that are represented in the hash tree. When tampering, such as content alteration or deletion, occurs with respect to an evidence item, the hash values in the hash tree may be used to determine the evidence item for which the tampering has occurred.

Disclosed are a computer-hosted database system providing cryptographic verifiability and comprising an immutable key-value data store and cryptographic proof data (which may be stored in a Merkle Hash Tree). The logical structure of a data record is defined by a rich data model and comprises a first field and a second field. Disclosed is a method that comprises receiving an instruction requesting retrieval of first field data and returning the data stored in the first field and cryptographic proof data sufficient to prove data originality of the first field data without knowledge of the data in the second field. The rich data model may be a relational data model or a document data model.

Systems, devices, and techniques are disclosed for verification of backup data across a data pipeline. Records from a first storage may be received at a first end of a data pipeline. The records may be hashed to generate first hashes. A first hash tree may be generated from the first hashes. The records may be received at a second end of the data pipeline. Bits of bitmaps that correspond to the records may be set. The records may be hashed to generate second hashes. The records may be stored in a second storage. A second hash tree may be generated form the second hashes. Using the bitmaps, whether all of the records or any duplicate records were received may be determined. The first hash tree and the second hash tree may be compared to determine if any of the records stored in the second storage are corrupt.

The invention discloses a data offline encryption storage method and system based on a mobile terminal, and the method is executed in a network connection-free environment, and comprises the following steps: dynamically dividing original data into N data blocks; performing double encryption on each data block to generate a composite ciphertext; splitting the master key into a plurality of fragments, and distributing the fragments to a local security module and a trusted execution environment for independent storage through a secret sharing algorithm; writing the composite ciphertext into an encrypted database in a tree index structure; during data reading, carrying out integrity verification on the data block based on the Hash tree structure; and when the data is detected to be damaged, performing data reconstruction by using redundant data and an erasure code algorithm. The method disclosed by the invention has the beneficial effects that the security, efficiency and reliability of offline data storage of the mobile terminal can be remarkably improved.

The invention provides a performance testing device and method, electronic equipment, a storage medium and a program product. Relates to the technical field of performance testing. The device comprises a script management module, a script test module, a script execution module, a result acquisition module and a debugging record management module which are connected through interfaces, the script management module is used for acquiring a performance test script and managing the performance test script; the script test module is used for calling a target performance test script in response to the debugging instruction to obtain a test hash tree, and adjusting the test hash tree to obtain an adjusted test hash tree; the script execution module is used for sending a debugging test request to the server to be tested according to the adjusted test hash tree and receiving a script test result; the result acquisition module is used for monitoring a debugging result and transmitting the debugging result to the debugging record management module; and the debugging record management module is used for managing and storing debugging results. According to the invention, the effect of improving the performance test efficiency is achieved.

The application discloses a kind of zero job platform multi-tenant authority hierarchical access control processing methods, specifically related to computer network and information security technical field, for solving the difficulty of cross-domain access under multi-tenant cooperation to consider isolation, dynamic authorization and tamper-proof archiving;By responding to the cross-domain collaborative matching event triggered by the first tenant and the second tenant for the target user, the minimum set attribute data is extracted and the target shadow entity is generated in the second tenant, the entity binding message is output to the API gateway layer, and the first permission policy token is generated and issued around the life cycle state vector, the global permission fuse is triggered at the archiving lock node, the identification and rollback cleaning of the to-be-tested cross-domain concurrent write request are identified and rolled back, the pre-archiving cache area is formed and the final state shadow entity is obtained, and then a data digest hash tree is generated based on the cross-domain interaction data, a digital signature is received and a three-party signature consensus verification is performed, and a legal release voucher and a right-confirmation archiving load are output.

The invention discloses a list matching method and device, electronic equipment and a computer program product. The method comprises the steps that data to be matched are obtained, and the data to be matched comprise attribute values to be matched corresponding to a plurality of attribute items respectively; the to-be-matched attribute values are matched layer by layer in multiple matching layers of a preset list Hash tree to obtain a matching result, the to-be-matched nodes are attribute nodes used for being matched with the to-be-matched attribute values in the preset list Hash tree, and the matching result is used for representing whether a path exists in the preset list Hash tree or not; under the condition that the matching result shows that the access exists in the preset list hash tree, it is determined that the to-be-matched data conforms to rules recorded in a preset list, the preset list is used for establishing the preset list hash tree, the preset list comprises multiple rules, and each rule comprises preset attribute values corresponding to multiple attribute items. The technical problem that the matching efficiency of the multi-attribute black list and the multi-attribute white list is poor is solved.

Systems and techniques are provided for a booting a container. For instance, a process can include obtaining, from a first verified boot metadata partition of a host operating system, a first public key associated with a container; verifying a second verified boot metadata partition of the container using the first public key, wherein the second verified boot metadata partition of the container is signed using a first private key corresponding to the first public key associated with the container; accessing the second verified boot metadata partition of the container to obtain a first hash tree for a first file system of the container; and verifying the first file system of the container based on the first hash tree for the first file system of the container.