59 results about "Identity privacy" patented technology

The invention discloses an on-cloud semi-homomorphic encryption method capable of resisting private key tracking, which comprises the following steps of: S1, generating a blind identity based on the real identity of a data user, and performing identity de-association processing; s2, the attribute authority generates a binding key pair based on the blind identity and returns the binding key pair; s3, the data user discloses a real identity and a public key to the data owner; s4, the data owner encrypts the plaintext after verifying the public key to form a ciphertext set; s5, uploading the ciphertext set to a cloud service provider, and performing classified storage; s6, the cloud service provider receives the analysis request and performs homomorphic addition aggregation on the ciphertext set to generate an aggregated ciphertext; and S7, the data user uses the private key to decrypt the aggregated ciphertext, and a plaintext analysis result is recovered. According to the method, the identity privacy of the user is protected while encrypted data analysis is realized, and the method has the characteristics of untraceability and lightweight deployment.

The invention discloses an identity privacy protection system and method oriented to power data security sharing, which combine single-factor combination authentication and identity traceability and utilize the transparency and tamper resistance of a block chain. Comprising an electric power key generation center, an electric power cloud service provider, an electric power data owner, an electric power data user and a block chain, user identity privacy is ensured, safe identity verification is supported, identity traceability is achieved under necessary conditions, and meanwhile safe distribution of keys is achieved. In addition, services and resources are isolated by using groups, so that the flexibility and the expandability of the services and the resources are enhanced. Security analysis and experimental evaluation prove that the method can effectively resist selected plaintext attacks, and meanwhile, high efficiency and practicability are kept.

The invention discloses a relay cross-chain method and system applied to block chain cross-chain, and belongs to the technical field of block chain interoperation. The method comprises the following steps that: in an anonymous committee election stage, a candidate node performs anonymous drawing by using an anonymous verifiable random function combined with a weight and a temporary identity key; in the key generation stage, an asynchronous distributed key generation protocol is adopted, a reliable broadcast protocol is combined, and a threshold signature private key share is generated on the premise that a complete private key does not need to be reconstructed; in a cross-chain consensus stage, a committee member generates a threshold signature share containing an identity bit vector, an aggregation node encrypts the bit vector by using an accountability public key and generates a zero-knowledge proof, and a binding relationship between an identity ciphertext and an aggregation signature is constructed. According to the invention, identity privacy protection of a whole cross-chain verification process is realized, and the problem of key generation deadlock in an asynchronous network environment is solved.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

This disclosure generally relates to protecting sensitive user subscription data in wireless communication. Performed by first network element, the method includes: the method includes: receiving, from a second network element, a first message associated with a service request for a wireless device, the first message carrying at least one of: a Subscription Concealed Identifier (SUCI) of the wireless device; a User Equipment (UE) identifier of the wireless device that is associated with a Subscription Permanent Identifier (SUPI) of the wireless device; a Serving Network (SN) name of an SN serving the wireless device; or a service indicator indicating that the service request is initiated from a security domain different from the first network element.

The application relates to the technical field of user identity privacy protection, and discloses a data illegal propagation accountability method and device based on a time-varying identity watermark. The method generates a time-varying identity TDID and a dynamic verifiable expression DVP of a user based on a timestamp, prevents malicious users from performing privacy information association analysis on the user by collecting a large amount of distributed identity verifiable expression information VP, embeds the signature of the TDID and the request access timestamp as a watermark into an owner data file, and stores the TDID and a DID identifier in a chain. When the authorized shared data is secondarily non-authorized to be propagated or accessed, the file watermark is extracted, an accountability smart contract is called, the non-authorized data propagator can be accurately located, and fast accountability is realized.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

The invention discloses an attribute-based dynamic searchable encrypted data sharing method in the Internet of Vehicles, relates to the technical field of Internet of Vehicles security, and solves the problems that an existing encryption method is difficult to support ciphertext search, reduces the availability of data sharing, is difficult to prevent privacy risks in an index updating process, lacks an effective incentive mechanism, and is poor in security. And the vehicle does not want to share high-value data. According to the method, an attribute-based searchable encryption framework is constructed, and attribute-based encryption and searchable encryption technologies are combined, so that flexible data retrieval and sharing in an encryption environment are realized, and identity privacy of a receiver is protected by adopting a strategy hiding mechanism; a forward and backward safe index updating mechanism is designed, and index addition and deletion operation in an encryption state is supported. In order to improve data sharing enthusiasm, an incentive mechanism based on reputation evaluation is introduced, intelligent contracts are used for automatic scoring, reward and punishment rules are set, high-quality data sharing is incentive, and meanwhile the risk that malicious vehicles spread false data is reduced.

A communication method and apparatus, belonging to the field of communications, are disclosed. The method includes: a first module receiving a first parameter from a first network, the first parameter being a calculation parameter of a first security mechanism; the first module obtaining a second hidden identity identifier based on the first parameter, the second hidden identity identifier being a hidden identity identifier obtained by processing plaintext identity information according to the first security mechanism and the first parameter. A terminal-side device includes a first module supporting the first security mechanism and a second module not supporting the first security mechanism. The terminal-side device can first use the hidden identity identifier calculated by the second security mechanism to access the network, thereby using an anonymized identity identifier during network access to protect user privacy. The network side can issue calculation parameters of a first protection mechanism with higher security strength, enabling the terminal-side device to provide a higher level of security for user identity privacy protection during subsequent access processes.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

A communication method and apparatus, relating to the field of communications. The communication method comprises: a first module in a terminal-side device acquires a first concealed identity identifier from a second module in the terminal-side device, the first concealed identity identifier being obtained by the second module by using a second security mechanism to process plaintext identity information; the first module, by using a first security mechanism, processes the first concealed identity identifier to obtain a second concealed identity identifier; and the first module sends the second concealed identity identifier to a first network, the second concealed identity identifier being used to access the first network. The first module can use the first security mechanism with higher security strength to further process the first concealed identity identifier computed by the second module, so as to obtain the second concealed identity identifier. In this way, when the first module accesses a network, the second concealed identity identifier computed by the first module can provide subscriber identity privacy protection with a higher security level.

The application discloses a face image identity privacy protection method and device, the method comprises the following steps: constructing a feature learning model, extracting features of an acquired face image by the feature learning model, and decoupling statistical information and background information in the face image by a face identity feature decoupling subnetwork model; integrating the features extracted by the feature learning model and the statistical information to obtain integrated information; constructing an identity disturbance model, adding random disturbance to the integrated information based on a privacy level of a face image user; and constructing an image reconstruction model, reconstructing the face image based on the integrated information after adding random disturbance. The method of the application can effectively resist background knowledge attacks, reconstruction attacks and combination attacks, realize provable and controllable face identity privacy protection, and ensure the optimization trade-off between the privacy and usability of the published image.

The invention belongs to the technical field of privacy protection, and discloses a millimeter wave identity privacy protection method based on an adversarial sample, which comprises the following steps: acquiring a training set of millimeter wave signals comprising action types and corresponding identity information; the millimeter wave signals in the training set are preprocessed, and a three-channel pseudo image fusing a distance-velocity diagram, a distance-azimuth diagram and a distance-elevation diagram is generated; constructing and pre-training an action recognition model used for recognizing action types and an identity recognition model used for recognizing identity information on the basis of taking the three-channel pseudo image as input; based on the pre-trained action recognition model and the pre-trained identity recognition model, generating an initial attention area for identifying the action category and the identity information; introducing learnable parameters to construct a dynamic attention mechanism to dynamically update the attention area; the problems that in the prior art, effective privacy protection and reliable action recognition functions are difficult to consider at the same time, and the adaptability of a defense mechanism is insufficient are effectively solved.

A cross-domain identity authentication method based on SGX belongs to the field of Internet of Things identity authentication and solves the technical problems of edge terminal node identity privacy exposure, session insecurity, and high security authentication complexity. The central agent registers on the Intel online identity authentication server, completes trusted authentication, and obtains a remote authentication report as the trusted root of the entire inter-domain trusted network. Each trusted domain establishes a domain proxy server in its own security domain based on the relevant conditions within its own domain, and uses the edge domain agent and the central agent as nodes of the inter-domain trusted network. The edge trusted domain agent obtains trusted authentication by registering and remotely authenticating with the central agent. The two edge domain agents achieve mutual authentication of the trusted state through two-way remote authentication, thereby realizing trust transmission and privacy protection. Through the trusted and secure communication channel established by the two edge domain agents, the identity authentication and key negotiation process of the data requesting terminal node and the data owning node is completed.

The present disclosure provides a user identity privacy protection method and related equipment, which are applied to the technical field of wireless communication. The method comprises the following steps: receiving a user registration request from a user terminal, wherein the user registration request comprises a user identity hiding identifier; determining subscription identity information of the user terminal in a network according to the user identity hiding identifier; transmitting the user identity hiding identifier to an identity authentication server according to the subscription identity information, so that the identity authentication server decrypts the user identity hiding identifier, performs identity authentication, and returns an identity authentication result to a core network element based on the subscription identity information; and receiving the identity authentication result returned by the identity authentication server and sending the identity authentication result to the user terminal. The present disclosure reduces the risk of user identity information being stolen or misused in the transmission and processing process, effectively protects the user identity privacy, and solves the problem of easy leakage of user identity information.

The application provides an edge-computing-based blockchain node identity privacy scheme. The blockchain has the characteristics of high security, high transparency, high autonomy and non-tamperability, and has wide application prospects in the Internet of Things, finance, trade and other industries. However, due to the characteristics of decentralization, a more targeted security scheme is needed to protect user privacy, and the existing signature protection scheme has a large number of complex operations, which brings a large computing burden to the wireless terminal node. In combination with the advantages of edge computing and identity threshold short signature, the application provides an edge-computing-based blockchain node identity weighted threshold short signature scheme to ensure the identity privacy information of the blockchain node and resist collusion attacks.

The application discloses a kind of vehicle identity privacy protection methods based on blockchain in Internet of Vehicles, first according to the actual scene in Internet of Vehicles reality, system constructs alliance chain Hyperledger Fabric blockchain network, writes reputation score smart contract in chain code, sets reputation score for each vehicle, manages the reputation score of vehicle in reputation score smart contract, changes the reputation score of vehicle according to the behavior of vehicle;In the communication after vehicle enters, by on-board unit OBU determines which category the message belongs to, whether it needs to be encrypted, for the message that does not need to be encrypted, directly sent to network, and for the message that needs to be encrypted, after being encrypted, sent to specific user by RSU.The application protects vehicle identity privacy from tracking attack, and also prevents vehicle from spreading malicious messages, to establish a safe, reliable and efficient communication environment.

The application discloses a distributed stealth address generation method and device for threshold signature, a medium and a product, relates to the field of user identity privacy protection, and comprises the following steps: initialization: generating public parameters required by a distributed stealth address generation system; decentralized key generation: a sender, a total number of n1, a threshold of t1; a receiver, a total number of n2, a threshold of t2, generating respective private key fragments, public key fragments and complete public keys; distributed stealth address generation: at least t1 senders input the private key fragments, the complete public key of the receiver, and calculate a stealth address D; one-time private key fragment generation: at least t2 receivers input the private key fragments, the complete public key of the sender, calculate corresponding one-time private key fragments, and verify consistency by using a Lagrange polynomial. The distributed receiver entity can use the stealth address to receive money, and execute threshold signature of subsequent transactions by using the corresponding one-time private key fragments.

The invention provides an efficient kana dynamic updating method based on a neighbor cooperation algorithm in an Internet of Vehicles environment, and belongs to the technical field of Internet of Vehicles safety. The technical problems of high communication overhead and large storage burden of the pseudonym updating scheme caused by strong vehicle mobility and infrastructure dependence in the Internet of Vehicles environment are solved. According to the technical scheme, the method comprises the following steps that S1, a system is initialized; s2, bidirectional identity authentication; s3, generating and updating a short pseudonym; s4, maintaining a neighbor vehicle list; s5, exchanging temporary pseudonyms; and S6, updating the vehicle-pseudonym mapping. The problem of infrastructure dependence caused by frequent communication between the vehicles and the RSU in an existing pseudonym updating scheme is effectively solved, flexible pseudonym exchange between the vehicles is achieved, meanwhile, on the premise that multiple safety requirements of identity privacy protection, pseudonym non-relevance and the like are met, the number of pre-stored pseudonyms and the pseudonym exchange frequency are effectively reduced, and the probability of pseudonym exchange is lowered. And the storage and communication overhead is relatively low.

The application discloses a kind of low altitude unmanned aerial vehicle network in multi-cloud storage data integrity verification and error positioning method, data integrity verification is in low altitude unmanned aerial vehicle network, after generating user private key and public key by comprehensive supervision service platform registration, stored data is sent to multiple cloud servers to carry out multi-cloud storage data;The low altitude unmanned aerial vehicle data stored on multiple cloud servers is executed integrity verification, including: the first smart contract on the blockchain generates audit challenge according to chain state and issues;Each cloud server generates response proof according to the stored encoding data block and issues to chain;Verification contract listens to and aggregates all response proofs, batch verification is carried out, and the result is published in audit log.The method constructs a decentralized audit framework and does not rely on third-party auditors.If verification fails, a positioning mechanism can be triggered to accurately locate damaged data.To protect identity privacy, a key exchange protocol is embedded to achieve conditional anonymity.The supervision platform can balance anonymity and accountability.

The invention discloses a block chain-based lightweight message distribution mechanism for Internet of Things end equipment, CP-ABE decryption operation is unloaded to edge equipment for processing, and after the edge equipment completes ciphertext dimension reduction conversion, terminal equipment only needs to execute bilinear pairing operation and group element multiplication operation once to complete decryption. A task scheduling mechanism based on attribute cooperative authorization is designed, and distribution of ciphertext conversion tasks between edge devices is supported. According to the method, the ciphertext is encrypted by adopting CP-ABE, the identity information of the message receiver on the block chain is encrypted and hidden, and the temporary identity credential is decrypted on the edge equipment, so that correct distribution of the message is ensured, and the risk of inferring the long-term behavior privacy of the user through on-chain transaction mode analysis is prevented. A credible collaboration system is constructed based on an intelligent contract, and the traceability of a collaboration process, the compliance of node screening and the blocking of illegal equipment are guaranteed. The mechanism effectively avoids the limitation of the traditional scheme in the aspects of terminal computing load, edge expansibility, identity privacy protection and the like.

The present invention provides a privacy-preserving cross-domain authentication method for large-scale heterogeneous networks. This method records the user terminal's pseudonym, trust level, and protected access rights on a blockchain. Therefore, during cross-domain network access, the service network can directly authenticate the user without communicating with the user's local network. Furthermore, access rights are encrypted before being published to the blockchain, allowing only authorized service networks to access them, thus enhancing user privacy. The present invention also employs a ring signature algorithm to blend user pseudonyms and ensure a reliable association between the trust level and the new pseudonym without exposing the correlation between the old and new pseudonyms. This method, apart from the local network and the user themselves, prevents anyone from identifying the true signer of the ring signature, thereby blending the user's pseudonym and ensuring unconnectability. The present invention allows the local network to use forged users to participate in pseudonym updates, further enhancing the level of identity privacy protection.

The invention belongs to the technical field of reputation verification of a vehicle-mounted crowd sensing system, and discloses a lightweight privacy protection reputation verification method and system. Reputation value privacy is realized by using a Paillier homomorphic encryption algorithm, and leakage-free reputation legal verification and reputation equivalent verification are realized through zero-knowledge proof. Specifically, a perception platform cannot obtain plaintext information of a reputation value of a perception vehicle in a verification process, and the legality and equivalence of the reputation value can be verified only through zero-knowledge proof. According to the method, identity privacy and reputation privacy are realized, and replay attack, reasoning attack, reputation tampering attack and reputation link attack can be resisted.

The application discloses a trusted worker recruitment method based on identity privacy protection and relates to the fields of trusted computing and quality guarantee data collection of a crowd intelligence network. The network structure is composed of a data requester, a server, a reputation authentication center (TA) and workers. The workers obtain pseudonyms by interacting with the TA in advance, and the pseudonyms are used in the data interaction process to protect privacy. The reputation information of the workers is stored in the TA, and the encrypted reputation degree is taken when applying for a task. Then, the server adopts a two-party reputation verification process based on zero-knowledge proof, so that the server can verify whether the reputation submitted by the worker is true without knowing the reputation value of the worker. Then, the server selects N workers to collect data. After the data is collected, the server calculates the true value by adopting a true value calculation method to provide the data requester with the true value, compares and calculates the reputation degrees of the workers, and updates the reputation degrees of the workers through the TA.

The present invention discloses a traceable anonymous authentication method and system, the method comprising: a trusted third party as the credential issuer issues an attribute credential to a user using the issuer's private key signature; the user presents the attribute certificate in the attribute credential according to the verification requirements of the verification party; the verification party verifies the attribute certificate presented by the user, and if the verification passes, the authentication is successful; the credential issuer tracks the user's identity based on the attribute certificate presented by the malicious user sent by the verification party. The present invention achieves concise and efficient credential presentation. When presenting an attribute credential, the user does not need to present all attribute credential information, but only needs to present the portion of the attribute credential that needs to be verified, and an aggregation method is used to achieve efficient verification of the presented credential. The present invention achieves tracking of the identity of malicious users, and enables the issuer to track the identity of malicious users while ensuring that the identity privacy of non-malicious users will not be leaked during the credential presentation stage.

The invention belongs to the technical field of blockchain security, and discloses an industrial Internet of Things anonymous responsibility-traceable data editing method and system based on a blockchain. The method comprises the following steps: generating a chameleon Hash trap door by a trusted mechanism, splitting the chameleon Hash trap door into shares by using threshold secret sharing, distributing the shares to verifier nodes, and initializing a dynamic accumulator; the owner encrypts the production data and formulates a modification strategy, and generates a hash value and an initial voucher by using chameleon hash and uploads the hash value and the initial voucher to a chain; the modifier initiates a request containing zero-knowledge proof, after verification is passed, the verifier node generates partial vouchers by using the trap door share, and the modifier aggregates the partial vouchers into a one-time voucher to complete editing; and the trusted mechanism decrypts the identity of the malicious modifier, moves the malicious modifier out of the dynamic accumulator and updates the revocation list. According to the method, trap door leakage is prevented through a threshold sharing mechanism, zero knowledge proof and a dynamic accumulator are combined, and effective tracking and permission revocation of malicious behaviors are realized while identity privacy of a modifier is guaranteed.

The application provides a transaction processing method, an electronic device and a readable storage medium, and is suitable for the technical field of blockchains. The method is applied to a first transaction node, and the method comprises the following steps: receiving a transaction request and transaction structure data sent by a user end, wherein the transaction structure data comprises a first signature message and a first attribute value of the user end, and the first attribute value does not comprise an account address of the user end; verifying the first signature message; and when the first signature message is verified, determining an execution result of the transaction request according to the first attribute value. In the embodiment of the application, the user end only needs to disclose one attribute value when proving its identity, and does not need to disclose the account address of the user end, so that the identity privacy of the user end in the consortium chain can be completely anonymous.