38 results about "Identity privacy" patented technology

The invention discloses an identity privacy protection system and method oriented to power data security sharing, which combine single-factor combination authentication and identity traceability and utilize the transparency and tamper resistance of a block chain. Comprising an electric power key generation center, an electric power cloud service provider, an electric power data owner, an electric power data user and a block chain, user identity privacy is ensured, safe identity verification is supported, identity traceability is achieved under necessary conditions, and meanwhile safe distribution of keys is achieved. In addition, services and resources are isolated by using groups, so that the flexibility and the expandability of the services and the resources are enhanced. Security analysis and experimental evaluation prove that the method can effectively resist selected plaintext attacks, and meanwhile, high efficiency and practicability are kept.

The invention discloses a relay cross-chain method and system applied to block chain cross-chain, and belongs to the technical field of block chain interoperation. The method comprises the following steps that: in an anonymous committee election stage, a candidate node performs anonymous drawing by using an anonymous verifiable random function combined with a weight and a temporary identity key; in the key generation stage, an asynchronous distributed key generation protocol is adopted, a reliable broadcast protocol is combined, and a threshold signature private key share is generated on the premise that a complete private key does not need to be reconstructed; in a cross-chain consensus stage, a committee member generates a threshold signature share containing an identity bit vector, an aggregation node encrypts the bit vector by using an accountability public key and generates a zero-knowledge proof, and a binding relationship between an identity ciphertext and an aggregation signature is constructed. According to the invention, identity privacy protection of a whole cross-chain verification process is realized, and the problem of key generation deadlock in an asynchronous network environment is solved.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

The application relates to the technical field of user identity privacy protection, and discloses a data illegal propagation accountability method and device based on a time-varying identity watermark. The method generates a time-varying identity TDID and a dynamic verifiable expression DVP of a user based on a timestamp, prevents malicious users from performing privacy information association analysis on the user by collecting a large amount of distributed identity verifiable expression information VP, embeds the signature of the TDID and the request access timestamp as a watermark into an owner data file, and stores the TDID and a DID identifier in a chain. When the authorized shared data is secondarily non-authorized to be propagated or accessed, the file watermark is extracted, an accountability smart contract is called, the non-authorized data propagator can be accurately located, and fast accountability is realized.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

A communication method and apparatus, belonging to the field of communications, are disclosed. The method includes: a first module receiving a first parameter from a first network, the first parameter being a calculation parameter of a first security mechanism; the first module obtaining a second hidden identity identifier based on the first parameter, the second hidden identity identifier being a hidden identity identifier obtained by processing plaintext identity information according to the first security mechanism and the first parameter. A terminal-side device includes a first module supporting the first security mechanism and a second module not supporting the first security mechanism. The terminal-side device can first use the hidden identity identifier calculated by the second security mechanism to access the network, thereby using an anonymized identity identifier during network access to protect user privacy. The network side can issue calculation parameters of a first protection mechanism with higher security strength, enabling the terminal-side device to provide a higher level of security for user identity privacy protection during subsequent access processes.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

A communication method and apparatus, relating to the field of communications. The communication method comprises: a first module in a terminal-side device acquires a first concealed identity identifier from a second module in the terminal-side device, the first concealed identity identifier being obtained by the second module by using a second security mechanism to process plaintext identity information; the first module, by using a first security mechanism, processes the first concealed identity identifier to obtain a second concealed identity identifier; and the first module sends the second concealed identity identifier to a first network, the second concealed identity identifier being used to access the first network. The first module can use the first security mechanism with higher security strength to further process the first concealed identity identifier computed by the second module, so as to obtain the second concealed identity identifier. In this way, when the first module accesses a network, the second concealed identity identifier computed by the first module can provide subscriber identity privacy protection with a higher security level.

The application discloses a face image identity privacy protection method and device, the method comprises the following steps: constructing a feature learning model, extracting features of an acquired face image by the feature learning model, and decoupling statistical information and background information in the face image by a face identity feature decoupling subnetwork model; integrating the features extracted by the feature learning model and the statistical information to obtain integrated information; constructing an identity disturbance model, adding random disturbance to the integrated information based on a privacy level of a face image user; and constructing an image reconstruction model, reconstructing the face image based on the integrated information after adding random disturbance. The method of the application can effectively resist background knowledge attacks, reconstruction attacks and combination attacks, realize provable and controllable face identity privacy protection, and ensure the optimization trade-off between the privacy and usability of the published image.

The invention belongs to the technical field of privacy protection, and discloses a millimeter wave identity privacy protection method based on an adversarial sample, which comprises the following steps: acquiring a training set of millimeter wave signals comprising action types and corresponding identity information; the millimeter wave signals in the training set are preprocessed, and a three-channel pseudo image fusing a distance-velocity diagram, a distance-azimuth diagram and a distance-elevation diagram is generated; constructing and pre-training an action recognition model used for recognizing action types and an identity recognition model used for recognizing identity information on the basis of taking the three-channel pseudo image as input; based on the pre-trained action recognition model and the pre-trained identity recognition model, generating an initial attention area for identifying the action category and the identity information; introducing learnable parameters to construct a dynamic attention mechanism to dynamically update the attention area; the problems that in the prior art, effective privacy protection and reliable action recognition functions are difficult to consider at the same time, and the adaptability of a defense mechanism is insufficient are effectively solved.

The present disclosure provides a user identity privacy protection method and related equipment, which are applied to the technical field of wireless communication. The method comprises the following steps: receiving a user registration request from a user terminal, wherein the user registration request comprises a user identity hiding identifier; determining subscription identity information of the user terminal in a network according to the user identity hiding identifier; transmitting the user identity hiding identifier to an identity authentication server according to the subscription identity information, so that the identity authentication server decrypts the user identity hiding identifier, performs identity authentication, and returns an identity authentication result to a core network element based on the subscription identity information; and receiving the identity authentication result returned by the identity authentication server and sending the identity authentication result to the user terminal. The present disclosure reduces the risk of user identity information being stolen or misused in the transmission and processing process, effectively protects the user identity privacy, and solves the problem of easy leakage of user identity information.

The application provides an edge-computing-based blockchain node identity privacy scheme. The blockchain has the characteristics of high security, high transparency, high autonomy and non-tamperability, and has wide application prospects in the Internet of Things, finance, trade and other industries. However, due to the characteristics of decentralization, a more targeted security scheme is needed to protect user privacy, and the existing signature protection scheme has a large number of complex operations, which brings a large computing burden to the wireless terminal node. In combination with the advantages of edge computing and identity threshold short signature, the application provides an edge-computing-based blockchain node identity weighted threshold short signature scheme to ensure the identity privacy information of the blockchain node and resist collusion attacks.

The application discloses a kind of vehicle identity privacy protection methods based on blockchain in Internet of Vehicles, first according to the actual scene in Internet of Vehicles reality, system constructs alliance chain Hyperledger Fabric blockchain network, writes reputation score smart contract in chain code, sets reputation score for each vehicle, manages the reputation score of vehicle in reputation score smart contract, changes the reputation score of vehicle according to the behavior of vehicle;In the communication after vehicle enters, by on-board unit OBU determines which category the message belongs to, whether it needs to be encrypted, for the message that does not need to be encrypted, directly sent to network, and for the message that needs to be encrypted, after being encrypted, sent to specific user by RSU.The application protects vehicle identity privacy from tracking attack, and also prevents vehicle from spreading malicious messages, to establish a safe, reliable and efficient communication environment.

The application discloses a kind of low altitude unmanned aerial vehicle network in multi-cloud storage data integrity verification and error positioning method, data integrity verification is in low altitude unmanned aerial vehicle network, after generating user private key and public key by comprehensive supervision service platform registration, stored data is sent to multiple cloud servers to carry out multi-cloud storage data;The low altitude unmanned aerial vehicle data stored on multiple cloud servers is executed integrity verification, including: the first smart contract on the blockchain generates audit challenge according to chain state and issues;Each cloud server generates response proof according to the stored encoding data block and issues to chain;Verification contract listens to and aggregates all response proofs, batch verification is carried out, and the result is published in audit log.The method constructs a decentralized audit framework and does not rely on third-party auditors.If verification fails, a positioning mechanism can be triggered to accurately locate damaged data.To protect identity privacy, a key exchange protocol is embedded to achieve conditional anonymity.The supervision platform can balance anonymity and accountability.

The invention discloses a block chain-based lightweight message distribution mechanism for Internet of Things end equipment, CP-ABE decryption operation is unloaded to edge equipment for processing, and after the edge equipment completes ciphertext dimension reduction conversion, terminal equipment only needs to execute bilinear pairing operation and group element multiplication operation once to complete decryption. A task scheduling mechanism based on attribute cooperative authorization is designed, and distribution of ciphertext conversion tasks between edge devices is supported. According to the method, the ciphertext is encrypted by adopting CP-ABE, the identity information of the message receiver on the block chain is encrypted and hidden, and the temporary identity credential is decrypted on the edge equipment, so that correct distribution of the message is ensured, and the risk of inferring the long-term behavior privacy of the user through on-chain transaction mode analysis is prevented. A credible collaboration system is constructed based on an intelligent contract, and the traceability of a collaboration process, the compliance of node screening and the blocking of illegal equipment are guaranteed. The mechanism effectively avoids the limitation of the traditional scheme in the aspects of terminal computing load, edge expansibility, identity privacy protection and the like.

The invention belongs to the technical field of reputation verification of a vehicle-mounted crowd sensing system, and discloses a lightweight privacy protection reputation verification method and system. Reputation value privacy is realized by using a Paillier homomorphic encryption algorithm, and leakage-free reputation legal verification and reputation equivalent verification are realized through zero-knowledge proof. Specifically, a perception platform cannot obtain plaintext information of a reputation value of a perception vehicle in a verification process, and the legality and equivalence of the reputation value can be verified only through zero-knowledge proof. According to the method, identity privacy and reputation privacy are realized, and replay attack, reasoning attack, reputation tampering attack and reputation link attack can be resisted.

The invention belongs to the technical field of blockchain security, and discloses an industrial Internet of Things anonymous responsibility-traceable data editing method and system based on a blockchain. The method comprises the following steps: generating a chameleon Hash trap door by a trusted mechanism, splitting the chameleon Hash trap door into shares by using threshold secret sharing, distributing the shares to verifier nodes, and initializing a dynamic accumulator; the owner encrypts the production data and formulates a modification strategy, and generates a hash value and an initial voucher by using chameleon hash and uploads the hash value and the initial voucher to a chain; the modifier initiates a request containing zero-knowledge proof, after verification is passed, the verifier node generates partial vouchers by using the trap door share, and the modifier aggregates the partial vouchers into a one-time voucher to complete editing; and the trusted mechanism decrypts the identity of the malicious modifier, moves the malicious modifier out of the dynamic accumulator and updates the revocation list. According to the method, trap door leakage is prevented through a threshold sharing mechanism, zero knowledge proof and a dynamic accumulator are combined, and effective tracking and permission revocation of malicious behaviors are realized while identity privacy of a modifier is guaranteed.

The application provides a transaction processing method, an electronic device and a readable storage medium, and is suitable for the technical field of blockchains. The method is applied to a first transaction node, and the method comprises the following steps: receiving a transaction request and transaction structure data sent by a user end, wherein the transaction structure data comprises a first signature message and a first attribute value of the user end, and the first attribute value does not comprise an account address of the user end; verifying the first signature message; and when the first signature message is verified, determining an execution result of the transaction request according to the first attribute value. In the embodiment of the application, the user end only needs to disclose one attribute value when proving its identity, and does not need to disclose the account address of the user end, so that the identity privacy of the user end in the consortium chain can be completely anonymous.

The invention discloses a mobile network test method and device under user anonymity and a medium, belongs to the technical field of identity privacy protection, and is used for solving the technical problems of user privacy leakage and data potential safety hazards in the current mobile network test. The method comprises the following steps: performing system initialization processing on a to-be-tested mobile network system to obtain system public parameters public in a block chain; performing block chain public processing on the registered user public key set of the user; performing access calculation processing on the user application information to obtain access request information published in the block chain; performing verification calculation under related access response on the registered user public key set and the access request information to obtain access response information published in the block chain; performing network performance evaluation under related network test service on the user access behavior to obtain a mobile network test record based on the user mobile equipment; and performing encryption uplink processing on the to-be-shared record to complete data sharing.

The invention relates to the technical field of information security, in particular to a data transmission method and system based on information security, and the method comprises the steps: obtaining a zero-knowledge proof capability declaration, a distributed identity label and to-be-transmitted data of a client; in a handshake stage, generating an identity verification proof based on the zero-knowledge proof capability declaration, and verifying that the client meets a preset strategy and has a private key corresponding to the long-term identity commitment; verifying the matching between a public key corresponding to the distributed identity identifier and the handshake signature, and querying the block chain to confirm that the block chain has a specific qualification certificate; executing mixed key exchange and double signature operation to generate a session key; in the data transmission stage, user behavior characteristics are collected, trust scores are calculated, and a safety response strategy is executed according to a comparison result of the trust scores and a dynamic threshold value; transmitting data through the encryption channel; according to the method, the confidentiality, the integrity, the identity privacy and the quantum aggression resistance of data transmission can be guaranteed in an untrusted network environment.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

The application discloses a kind of based on block double chain's Internet of Vehicles anonymous authentication method and system, mainly solve the problems of low security, poor scalability and high centralization risk in prior art in authentication.Its implementation scheme includes: initializing vehicle service provider VSP and the block chain main chain maintained by it;Vehicle V submits registration application and real identity identification to adjacent VSP;VSP generates random pseudonym and issues anonymous pseudonym certificate, links it and generates Merkle root and writes into side chain;When vehicle V accesses network, it uses unused pseudonym certificate to send authentication request to RSU, RSU forwards it to main chain node, and side chain node obtains pseudonym certificate based on Merkle root to assist main chain node, verifies its consistency with main chain certificate, to determine the identity of vehicle V.The application has the advantages of strong identity privacy protection capability and high authentication efficiency, and can be used for identity privacy, authentication security and efficient information sharing in multi-domain communication environment.

A speaker anonymization system and method based on differential privacy, relating to the field of speech processing, is disclosed. The method includes: extracting speaker vectors, fundamental frequency F0, and content features for each original speech; performing batch anonymization processing on the extracted speaker vectors using a generalized differential privacy algorithm to obtain anonymous speaker vectors; and synthesizing the anonymous speaker vectors, fundamental frequency F0, and content features to generate desensitized anonymized speech waveform data. This invention combines generalized differential privacy with a language-transferable speaker anonymization framework based on a self-supervised model. This allows for the protection of speaker identity privacy data even when attackers possess some prior knowledge. Furthermore, it ensures both the privacy and usability of the anonymized speech, better addressing the balance between WER (Written Emissions) and EER (External Emissions).

This invention proposes a drone swarm authentication method based on zero-knowledge proof, belonging to the field of drone swarm secure communication technology. Its technical solution includes the following steps: S1, system initialization; S2, secondary drone registration before takeoff; S3, bidirectional authentication and key negotiation between secondary drones during flight; S4, dynamic networking of secondary drones. This invention combines zero-knowledge proof and elliptic curve cryptography to achieve drone swarm identity authentication. Through a two-stage design of pre-registration and online authentication, it significantly reduces the computational and communication overhead of in-flight authentication while ensuring drone identity privacy and communication security. It effectively resists typical threats such as man-in-the-middle attacks, impersonation attacks, replay attacks, and message tampering, avoiding single points of failure and communication bottlenecks caused by the central node.

The invention discloses a block chain-based government affair data trusted shared signature method and system, and aims to solve the problems of easy leakage of identity privacy in an authorization process, opaque cross-department verification, difficulty in tracing and credibility in a data circulation process and the like in existing government affair data sharing. The method comprises the following steps: firstly, constructing a government affair data trusted sharing alliance chain network, and registering distributed identities by participants; the data owner encrypts and links the private data and issues a directory; when a data user applies for use, a data owner generates a ring signature of a specified verifier based on a lattice password as an authorization certificate for uplink, and the signature can hide the identity of a real signer and can only be verified by a specified authorization verification node; the verification node automatically verifies the signature validity and the authorization strategy through the smart contract; and after the verification is passed, the encrypted data or the processing result is securely transmitted in an'available and invisible 'mode. According to the method, the identity privacy of the authorizer is protected through the ring signature, authorization controllability is realized through a specified verifier mechanism, whole-course traceability is realized in combination with the block chain, and the credibility, the security and the compliance of cross-department government affair data sharing are improved on the premise of ensuring the data privacy.

A communication method and apparatus, belonging to the field of communications, are disclosed. The method includes: a first module in a terminal-side device obtaining a first hidden identity identifier from a second module in the same device; the first hidden identity identifier being a hidden identity identifier obtained by the second module processing plaintext identity information using a second security mechanism; the first module processing the first hidden identity identifier using the first security mechanism to obtain a second hidden identity identifier; and the first module sending the second hidden identity identifier to a first network for accessing the first network. The first module can further process the first hidden identity identifier calculated by the second module using a first security mechanism with higher security strength to obtain the second hidden identity identifier. Thus, when the first module accesses the network, the second hidden identity identifier calculated by the first module can provide a higher level of security for user identity privacy protection.

The invention relates to the field of privacy protection and cryptography, in particular to a linkable ring signature method supporting batch verification on a speaking lattice and protecting identity privacy. When an existing ring signature method is applied to a crowd sensing data collection scene, it cannot be ensured that collected data comes from different sensing users, and batch verification cannot be carried out on multiple ring signatures. Therefore, a method for linking different ring signatures of the same signer is designed by generating a label associated with the signer. Secondly, based on the homomorphic addition property of the homomorphic hash function, a new ring signature batch verification method is designed, and then a linkable ring signature method supporting batch verification on a lattice is provided. The ring signature method provided by the invention can effectively solve the problem. A data analysis result shows that the data collected based on the ring signature method provided by the invention has more sources and higher efficiency.