116 results about "Hash tree" patented technology

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention belongs to the technical field of data management, and discloses a research and development data traceability and collaborative management system based on a block chain, and the system comprises a sensing layer which is used for collecting multi-source research and development data on various research and development tool chains through a multi-protocol collection agent, carrying out the structural packaging of the data to generate metadata, and embedding a data blood relationship tracking mark in the metadata; false data filtering is carried out on the metadata by deploying a trusted execution environment; the chain network layer is used for dividing the filtered metadata into data fragments and respectively storing the data fragments in a distributed storage platform; applying a Hash algorithm to each data fragment to generate a corresponding Hash value; taking the hash values corresponding to all the data fragments as leaf nodes, constructing a fragment hash tree, and further obtaining global root hash; the security of research and development data is ensured, and the cooperation efficiency is improved.

The invention discloses a bar code and RFID dual-mode fused tamper-proof data storage system, and relates to the field of data security storage, which comprises the following steps: uploading complete data to be stored into a scanning monitoring platform, splitting the data into static data and dynamic data, writing the static data into a bar code module, and writing the dynamic data into the bar code module; randomly distributed initial fluorescent particles are generated on the surface of the bar code data label through a scanning monitoring platform, a unique initial optical fingerprint is generated, if a bar code module is tried to be written or modified, the distribution position of the initial fluorescent particles is modified, an abnormal optical fingerprint is obtained, and an alarm is given; and writing the dynamic data into the RFID module, generating a dynamic key in each communication, and performing cross validation on the hash value based on the static data and the dynamic data. The method has the advantages that a three-dimensional protection system is constructed through a dual tamper-proof mechanism of a physical layer of fluorescent particle displacement and a password layer of a dynamic key in combination with cross validation of a hash tree, and the tamper-proof capability is improved.

The invention relates to the field of data query, and particularly provides a medical big data query method and system based on dynamic desensitization, a terminal and a medium, and the method comprises the steps: collecting multi-source heterogeneous medical data, carrying out semantic normalization, constructing a unique identifier of a patient, and generating standardized intermediate plaintext data; constructing an adaptive isomorphic index structure based on the data, constructing a semantic hash B + tree index for structured data, constructing a feature vector index for unstructured data, and dynamically optimizing index hierarchy and parameters according to access frequency; and after a query request is received, the permission context is analyzed, intermediate plaintext data is positioned and read by using the index, and a differential privacy protection strategy is dynamically applied according to the access permission. According to the method, the problem of balance between privacy protection and data effectiveness as well as between retrieval efficiency and storage cost in medical data processing is effectively solved, and data availability and access performance are improved while safety compliance is guaranteed.

The invention discloses a secure transmission system based on a multimedia short message, and relates to the technical field of communication and network security, and the system comprises a protocol stack security reinforcement module which carries out the hierarchical reconstruction of an MMS protocol stack, comprises a preprocessing layer, is used for intercepting and filtering illegal characters, and verifies the legality of a message structure through a finite-state machine; the analysis layer is used for pre-judging memory requirements based on message types and lengths by adopting a dynamic memory allocation strategy; the execution layer is integrated with a null pointer checking mechanism, and the validity of a pointer is forcibly verified before a protocol stack calls a function; the encryption and signature module is used for carrying out end-to-end encryption on a message body and metadata by adopting a hybrid encryption algorithm and carrying out message integrity verification through a lightweight hash tree; and the vulnerability real-time monitoring module is embedded into an abnormal behavior detection model based on machine learning and is used for dynamically identifying memory occupation abnormity and illegal instruction calling high-risk operation when the protocol stack runs.

The invention discloses an energy big data right confirmation method and system based on a hierarchical hash tree and dynamic authorization, and belongs to the field of energy big data management and information security, and the method comprises the steps: obtaining and standardizing original data in an energy scene, and dividing the original data into a data block set according to equipment and time; constructing a hierarchical hash tree and generating root hash; writing the root hash and the associated metadata into the block chain to realize right confirmation and evidence storage; executing proxy re-encryption according to the access token, and converting the ciphertext into a decryptable format; verifying the data consistency through the Hash path and the root Hash, and completing the access; and recording the access behavior and distributing transaction earnings by the smart contract based on the contribution degree. Hash calculation and local path updating of a data block level are supported through a layered Hash tree structure, so that when large-scale energy data is frequently updated, a new root Hash value can be quickly generated and right confirmation updating can be completed only by carrying out local Hash recalculation on a changed path.

The invention relates to the technical field of distributed data processing systems, and discloses a data processing system supporting full localization deployment and a compliance guarantee method thereof.The data processing system supporting full localization deployment comprises an audit event collection module used for collecting and storing processing event hash; the event organization module is used for realizing logic time sequence management of events through topological sorting and causal relationship marking; the hash chain construction module is used for constructing a local-to-global double-layer hash chain by utilizing the constructed directed acyclic graph and event hash; the increment synchronization module is used for executing increment synchronization based on Hash tree difference identification; the conflict solving module is used for detecting and solving event conflicts in the distributed environment by applying a version vector technology aiming at data differences found in the incremental synchronization process; according to the method, the lightweight linear hash chain is used for replacing a traditional binary tree structure, high-efficiency and low-cost audit chain maintenance is realized, and the data integrity is guaranteed in an unstable network environment.

Techniques for signing internet data are disclosed. The techniques include accessing a plurality of internet data records. The techniques also include generating, using at least one electronic processor, leaf nodes from the plurality of internet data records, and constructing a recursive hash tree from the plurality of leaf nodes. The techniques also include deriving information sufficient to validate the root node, and publishing, in an internet public key infrastructure (PKI) as a synthesized public key, the information sufficient to validate the root node. The techniques also include providing, through the internet and as a signature on at least one of the plurality of internet data records, validation data including sibling path data from the recursive hash tree, such that an internet client validates the at least one of the internet data records using at least the validation data and the synthesized public key.

Dynamic data access control may be provided by granting an access request for accessed data that is governed by an access policy. A hash tree may be generated for the accessed data. The hash tree may be stored in conjunction with the access policy, and the access policy may be related to uploaded data, based on the hash tree.

The invention relates to the technical field of medical information security, in particular to a security guarantee method and system in a medical data interaction process, and the method comprises the steps: firstly carrying out the read-only solidification and disk encryption of data, and building a fingerprint hash tree; zero-knowledge proof and dynamic privacy budget are generated according to strategies such as purposes and calling times, and semantic vectors are obtained through encoding and signed into a revocation chain; the algorithm is divided into linear, nonlinear and pulse sub-graphs in a credible environment, three-domain ciphertext calculation is carried out, Laplace noise is injected into pulse output according to budget and then fusion is carried out, and a re-linearization key is derived; a hypergraph commitment is generated based on a fused ciphertext, a semantic vector and a key drive delay function are utilized to take a random value and a proof, a composite commitment is obtained through a threshold signature and a random bit sequence, cross-chain evidence storage with root hash is carried out, and differential privacy and long-term auditing are realized.

Systems, devices, and techniques are disclosed for verification of backup data across a data pipeline. Records from a first storage may be received at a first end of a data pipeline. The records may be hashed to generate first hashes. A first hash tree may be generated from the first hashes. The records may be received at a second end of the data pipeline. Bits of bitmaps that correspond to the records may be set. The records may be hashed to generate second hashes. The records may be stored in a second storage. A second hash tree may be generated form the second hashes. Using the bitmaps, whether all of the records or any duplicate records were received may be determined. The first hash tree and the second hash tree may be compared to determine if any of the records stored in the second storage are corrupt.

The invention is suitable for the technical field of text management, and particularly relates to a security processing method and system for big data, and the method comprises the steps: setting a plurality of common characters, selecting text data needing to be subjected to security processing, traversing the first appearance position of each common character, calculating the character bit order, integrating all the character bit orders, and carrying out security processing on the text data. Generating identifiers, wherein each piece of text data corresponds to one identifier; the method comprises the following steps: creating text data, creating child nodes in one-to-one correspondence with the text data, writing identifiers into the child nodes, selecting a hash function, performing pairwise hash on adjacent child nodes to obtain a plurality of first hash values, creating a plurality of levels of father nodes, writing the first hash values into the father nodes, and mounting the corresponding child nodes into the father nodes. By intercepting the state snapshot, lightweight storage can be carried out on the Hash tree, the storage burden is further reduced, and the safety processing efficiency and tamper-proofing capability of the text data are greatly improved.

The invention discloses a firmware upgrading system and method, electronic equipment, a storage medium and a program product, and relates to the technical field of server hardware management.The system comprises a firmware issuing end used for conducting block encryption processing on target upgrading firmware so as to generate a hash tree, conducting signature on a root hash value of the hash tree based on a root layer private key, generating first signature data and sending the first signature data to a server; storing a root layer private key; the firmware supervision end is used for generating second signature data by using the intermediate layer private key and storing the intermediate layer private key; the firmware use end is used for generating third signature data by using the leaf layer private key and storing the leaf layer private key; the firmware publishing end writes a data packet formed by the first signature data, the second signature data, the third signature data and the root hash value into the block chain; and the firmware using end verifies the data packet, and if the verification is passed, firmware upgrading is carried out. The technical problem of relatively low security of a firmware upgrading mode in related technologies is solved, and the technical effect of improving the firmware upgrading security is achieved.

The invention discloses a WebRTC-based vehicle-mounted video stream secure transmission management method, and relates to the technical field of real-time communication, and the method comprises the steps: 1, constructing a hierarchical security system, and building a basic security framework; the layered security system comprises an application layer, a transmission layer, a network layer and a physical layer; 2, according to the basic security framework, in the WebRTC interactive connection establishment process, zero-knowledge proof is introduced, access strategy dynamic updating is achieved through a block chain, an authentication access control strategy set is output, and the authentication access control strategy set comprises device access, a bidirectional identity authentication rule and a block chain-based fine-grained access control strategy; 3, on the basis of the authentication access control strategy set, data security is guaranteed through hybrid encryption, the integrity of the Hash tree is verified, and an improved encryption transmission scheme is output; wherein the Hash tree is verified, and anti-jitter and code rate self-adaption are carried out in combination with the LDPC and the DRL.

The invention discloses an augmented reality inspection method and device based on a building information model, and a medium. The method comprises the following steps: converting the building information model into a BIM conditional Gaussian point field and a semantic signed distance field, and collecting multi-source heterogeneous sensor data; constructing a joint optimization factor graph, calculating a current camera pose estimation value and a covariance matrix, and monitoring numerical values of a projection edge consistency residual error and an SDF distance residual error in real time; according to the uncertainty degree of pose estimation, the transparency and the shielding effect of augmented reality rendering content are dynamically adjusted, and when it is monitored that the alignment error of a local area exceeds a threshold value and the pose covariance is lower than the threshold value, local non-rigid deformation adjustment based on engineering tolerance constraint is triggered; generating a signature visual residual proof and carrying out digital signature and timestamp authentication; and mapping the signature visual residual proof to a pre-constructed hash tree to calculate a root hash value, and storing the root hash value and the digital signature to the block chain.

Systems, devices, and techniques are disclosed for verification of backup data across a data pipeline. Records from a first storage may be received at a first end of a data pipeline. The records may be hashed to generate first hashes. A first hash tree may be generated from the first hashes. The records may be received at a second end of the data pipeline. Bits of bitmaps that correspond to the records may be set. The records may be hashed to generate second hashes. The records may be stored in a second storage. A second hash tree may be generated form the second hashes. Using the bitmaps, whether all of the records or any duplicate records were received may be determined. The first hash tree and the second hash tree may be compared to determine if any of the records stored in the second storage are corrupt.

The invention discloses a data offline encryption storage method and system based on a mobile terminal, and the method is executed in a network connection-free environment, and comprises the following steps: dynamically dividing original data into N data blocks; performing double encryption on each data block to generate a composite ciphertext; splitting the master key into a plurality of fragments, and distributing the fragments to a local security module and a trusted execution environment for independent storage through a secret sharing algorithm; writing the composite ciphertext into an encrypted database in a tree index structure; during data reading, carrying out integrity verification on the data block based on the Hash tree structure; and when the data is detected to be damaged, performing data reconstruction by using redundant data and an erasure code algorithm. The method disclosed by the invention has the beneficial effects that the security, efficiency and reliability of offline data storage of the mobile terminal can be remarkably improved.

The invention provides a performance testing device and method, electronic equipment, a storage medium and a program product. Relates to the technical field of performance testing. The device comprises a script management module, a script test module, a script execution module, a result acquisition module and a debugging record management module which are connected through interfaces, the script management module is used for acquiring a performance test script and managing the performance test script; the script test module is used for calling a target performance test script in response to the debugging instruction to obtain a test hash tree, and adjusting the test hash tree to obtain an adjusted test hash tree; the script execution module is used for sending a debugging test request to the server to be tested according to the adjusted test hash tree and receiving a script test result; the result acquisition module is used for monitoring a debugging result and transmitting the debugging result to the debugging record management module; and the debugging record management module is used for managing and storing debugging results. According to the invention, the effect of improving the performance test efficiency is achieved.

The application discloses a kind of zero job platform multi-tenant authority hierarchical access control processing methods, specifically related to computer network and information security technical field, for solving the difficulty of cross-domain access under multi-tenant cooperation to consider isolation, dynamic authorization and tamper-proof archiving;By responding to the cross-domain collaborative matching event triggered by the first tenant and the second tenant for the target user, the minimum set attribute data is extracted and the target shadow entity is generated in the second tenant, the entity binding message is output to the API gateway layer, and the first permission policy token is generated and issued around the life cycle state vector, the global permission fuse is triggered at the archiving lock node, the identification and rollback cleaning of the to-be-tested cross-domain concurrent write request are identified and rolled back, the pre-archiving cache area is formed and the final state shadow entity is obtained, and then a data digest hash tree is generated based on the cross-domain interaction data, a digital signature is received and a three-party signature consensus verification is performed, and a legal release voucher and a right-confirmation archiving load are output.

The invention discloses a list matching method and device, electronic equipment and a computer program product. The method comprises the steps that data to be matched are obtained, and the data to be matched comprise attribute values to be matched corresponding to a plurality of attribute items respectively; the to-be-matched attribute values are matched layer by layer in multiple matching layers of a preset list Hash tree to obtain a matching result, the to-be-matched nodes are attribute nodes used for being matched with the to-be-matched attribute values in the preset list Hash tree, and the matching result is used for representing whether a path exists in the preset list Hash tree or not; under the condition that the matching result shows that the access exists in the preset list hash tree, it is determined that the to-be-matched data conforms to rules recorded in a preset list, the preset list is used for establishing the preset list hash tree, the preset list comprises multiple rules, and each rule comprises preset attribute values corresponding to multiple attribute items. The technical problem that the matching efficiency of the multi-attribute black list and the multi-attribute white list is poor is solved.

Systems and techniques are provided for a booting a container. For instance, a process can include obtaining, from a first verified boot metadata partition of a host operating system, a first public key associated with a container; verifying a second verified boot metadata partition of the container using the first public key, wherein the second verified boot metadata partition of the container is signed using a first private key corresponding to the first public key associated with the container; accessing the second verified boot metadata partition of the container to obtain a first hash tree for a first file system of the container; and verifying the first file system of the container based on the first hash tree for the first file system of the container.

The present invention discloses a security protection method for an Internet of Things device based on big data. The method comprises the following steps: screening the original data sent by the obtained Internet of Things device to determine the target data to be encrypted in the original data; matching the target data in a hash tree library based on the hash calculation value to obtain a target hash tree that matches the hash calculation value; splitting the target data to obtain multiple sub-data, and performing a modulus conversion on each sub-data to obtain a modulus result value of each sub-data; determining the encryption mode of the sub-data based on the total number of sub-data in the target data, and encrypting each sub-data based on the target hash tree, the modulus result value of each sub-data, and the encryption mode to obtain an encryption result of each sub-data; combining the encryption results of each sub-data to obtain an encryption result of the target data, and uploading the encryption result to cloud storage. The present invention increases the difficulty of cracking while improving the security protection capability of the Internet of Things device.

A computer-implemented method for implementing data storage verification, where the method comprises: obtaining a plurality of data blocks, where the plurality of data blocks together represent data items to be stored by one or more respective second parties; for each respective second party, generating a respective hash root of a respective hash tree based on a respective set of data blocks of the plurality of data blocks, where each respective data block in the respective set of data blocks is used to generate a respective leaf hash of the respective hash tree; for each corresponding second party, submitting a corresponding request transaction to one or more blockchain nodes of the blockchain network; wherein the respective request transaction is a blockchain transaction configured to require a respective response transaction to include a respective hash attestation of a respective leaf hash of the respective hash tree.

The invention provides a safe starting method and system for a vehicle-mounted terminal, electronic equipment and a storage medium, and the method comprises the steps: verifying whether an external bootstrap program, a starting bootstrap program and a system kernel of a system-on-chip are tampered or not through a first digest value in a one-time programmable memory of the system-on-chip and a mirror image file in a storage region; if all the contents are not tampered, verifying whether the firmware of the MCU is tampered or not by using the mirror image file; if the firmware of the MCU is not tampered, starting the MCU; verifying whether the file system and the application program of the system-on-chip are tampered or not by utilizing the hash tree of the mirror image file; and if the file system and the application program of the system-on-chip are not tampered, starting the file system and the application program of the system-on-chip to complete starting of the system-on-chip. According to the scheme, whether firmware of the system-on-chip and the MCU is tampered or not is detected on the basis of the system-on-chip with the one-time programmable memory, and then safe starting of the system-on-chip and the MCU is achieved.

This invention provides a real-time synchronization method for cross-organizational approval system personnel based on public and private keys. This method relates to the field of information encryption and synchronization technology. The method involves generating unique public and private key pairs, constructing a multi-level hash tree of active nodes, forming a multidimensional association matrix based on distribution feature maps, performing dynamic programming to obtain optimal propagation paths, and utilizing network slicing for consistency checking and fault location. This method ensures the security, real-time performance, and consistency of cross-organizational personnel information synchronization, improves the overall system response efficiency, and enhances the reliability of data transmission.

Methods and apparatuses relate to transferring user-specific data that can be validated via a hash tree. If not all of the underlying data of the hash tree is transferred, then in place of the non-transferred data, a suitable hash value from the hash tree can be transferred. The data to be transferred includes at least one reference data element which is suitable for checking the authenticity of the sender.

Disclosed herein are computer-implemented methods of, and computer systems for, constructing dual cryptographic proofs for transactions where transaction data is stored in a cryptographically-linked data file and in an incremental hash tree, where a dual cryptographic proof includes linear cryptographic proof data from the cryptographically-linked transaction file and binary cryptographic proof data from the incremental hash tree. The transaction may include one or more key-value pairs.

The present application relates to the technical field of computers, and particularly relates to a triangle counting implementation method and apparatus for a graphics processing unit (GPU). The method comprises: acquiring graphics data of a GPU; identifying neighbor lists of all vertices in the graphics data, constructing hash trees in a lock-free manner and on the basis of the neighbor lists of all the vertices, and establishing an index array of the hash trees corresponding to all the vertices; when a target graph vertex is accessed, traversing in parallel all neighbor graph nodes of the target graph vertex, and mapping neighbor lists of all the neighbor graph nodes to a contiguous memory region; and on the basis of the index array and the contiguous memory region, implementing triangle counting. Thus, the problems in the relevant art, e.g., insufficient GPU computing capability, low GPU computational efficiency and poor GPU memory access efficiency, during triangle counting are solved.

A method includes, by a first node in a distributed network: generating a hash tree representing a structured data object including a data unit, the hash tree including a root hash and a data unit hash representing the data unit; accessing a non-interactive proof of inclusion representing membership of the data unit hash within the hash tree; generating a transaction configured to generate a blockchain object including the root hash; and transmitting the transaction and the non-interactive proof of inclusion to a second data node in the distributed network.

The application discloses a model construction method, device, equipment, medium and product. The model construction method comprises: acquiring feature data of a plurality of users; wherein each user has a plurality of feature data; each feature data is data corresponding to a service complained by the user; obtaining a hash function family based on the feature data of each user and a distance hash function; constructing a hash tree based on the hash function family; constructing a distance hash forest based on a plurality of hash trees; and predicting whether a to-be-detected user is a to-be-complained user based on the distance hash forest. According to the embodiment of the application, it is not necessary to determine whether the user is a complained user, so that it is not necessary to add a label to the complained user, unsupervised learning is realized, a model for predicting a to-be-complained user is obtained, and the accuracy of the prediction of the complained user is improved.