70 results about "Identity privacy" patented technology

The invention relates to an alliance chain identity privacy protection method and system based on multi-level group signature and distributed key management, and belongs to the field of block chain technology, network and information security. According to the method, a multi-level group signature structure is adopted, anonymous identity verification is achieved in the transaction process, privacy protection is further enhanced through zero-knowledge proof, anonymous identity verification is achieved in the transaction process, it is ensured that privacy of participants is not leaked, a homomorphic encryption algorithm is used in the signature and verification process of transaction data, and the transaction data are subjected to identity authentication. And privacy leakage is prevented. And meanwhile, the Shamir secret sharing algorithm divides the master key and stores the master key in a plurality of sub-group members in a distributed manner, so that the anti-attack capability and the key security are enhanced. According to the method, a dynamic group member management and double signature verification mechanism is further introduced, so that the flexibility and the overall security are improved. The method has significant advantages in the aspects of identity anonymity, data integrity and efficiency, and is suitable for alliance chain application scenarios with high privacy and security requirements.

The invention discloses a privacy protection method for a block chain bidding and tendering process based on a trusted execution environment. According to the method, identity privacy and data privacy in the bidding and tendering process of a block chain system are analyzed; the bidding and tendering process is subjected to standard division, and privacy information appearing in each stage is subjected to safety protection. According to the invention, the execution of the smart contract in the block chain is transferred to the feasible execution environment by using the trusted execution environment technology, which is helpful for protecting the related privacy information involved in the execution of the smart contract. Therefore, privacy leakage of the bidding and tendering users is effectively prevented, and the method has important research significance and application value for privacy protection of the block chain bidding and tendering users.

The invention discloses an on-cloud semi-homomorphic encryption method capable of resisting private key tracking, which comprises the following steps of: S1, generating a blind identity based on the real identity of a data user, and performing identity de-association processing; s2, the attribute authority generates a binding key pair based on the blind identity and returns the binding key pair; s3, the data user discloses a real identity and a public key to the data owner; s4, the data owner encrypts the plaintext after verifying the public key to form a ciphertext set; s5, uploading the ciphertext set to a cloud service provider, and performing classified storage; s6, the cloud service provider receives the analysis request and performs homomorphic addition aggregation on the ciphertext set to generate an aggregated ciphertext; and S7, the data user uses the private key to decrypt the aggregated ciphertext, and a plaintext analysis result is recovered. According to the method, the identity privacy of the user is protected while encrypted data analysis is realized, and the method has the characteristics of untraceability and lightweight deployment.

The invention provides a face anonymization method and device for availability reservation, equipment and a medium, and the method comprises the steps: constructing an anonymization network which comprises a backbone network, an attribute reservation module and an identity dissociation module, and achieving the attribute feature reservation and anonymization of a face; performing attribute feature and identity feature decoupling operation by using an attribute retention module and an identity dissociation module, and training an anonymized network by optimizing a loss function of a potential diffusion model in a backbone network; attribute feature retention is carried out on a face image to be anonymized through an attribute retention module, identity features and key point images of a face to be anonymized are injected through an identity dissociation module, and anonymization is completed. According to the face anonymization method, the attribute retention module and the identity dissociation module are introduced to complete the decoupling of the attribute features and the identity features, so that the face anonymization is realized, the identity privacy of the face image is protected, and the availability attribute of the face image is retained.

The invention discloses an identity privacy protection system and method oriented to power data security sharing, which combine single-factor combination authentication and identity traceability and utilize the transparency and tamper resistance of a block chain. Comprising an electric power key generation center, an electric power cloud service provider, an electric power data owner, an electric power data user and a block chain, user identity privacy is ensured, safe identity verification is supported, identity traceability is achieved under necessary conditions, and meanwhile safe distribution of keys is achieved. In addition, services and resources are isolated by using groups, so that the flexibility and the expandability of the services and the resources are enhanced. Security analysis and experimental evaluation prove that the method can effectively resist selected plaintext attacks, and meanwhile, high efficiency and practicability are kept.

The invention discloses a relay cross-chain method and system applied to block chain cross-chain, and belongs to the technical field of block chain interoperation. The method comprises the following steps that: in an anonymous committee election stage, a candidate node performs anonymous drawing by using an anonymous verifiable random function combined with a weight and a temporary identity key; in the key generation stage, an asynchronous distributed key generation protocol is adopted, a reliable broadcast protocol is combined, and a threshold signature private key share is generated on the premise that a complete private key does not need to be reconstructed; in a cross-chain consensus stage, a committee member generates a threshold signature share containing an identity bit vector, an aggregation node encrypts the bit vector by using an accountability public key and generates a zero-knowledge proof, and a binding relationship between an identity ciphertext and an aggregation signature is constructed. According to the invention, identity privacy protection of a whole cross-chain verification process is realized, and the problem of key generation deadlock in an asynchronous network environment is solved.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The present invention proposes a pedestrian identity privacy protection method combined with k-anonymity. The present invention generates higher quality anonymous images through a cross-identity training strategy; finally, through the designed k-anonymity privacy protection method, the privacy of pedestrian image data is retained while also retaining the availability of data; specific steps: Step 1: Proxy data set acquisition and image preprocessing; Step 2: Establishing a k-anonymity mechanism; Step 3: Constructing an anonymous pedestrian generation adversarial network; Step 4: Anonymous pedestrian generation objective function; Step 5: Using a public data set for training and testing, and outputting the final result. The present invention retains both the identity privacy and the attributes of pedestrians. In terms of anonymous pedestrian generation, on the one hand, the method combines the fusion of attributes and target background into the pedestrian generation process, and on the other hand, the method proposes a cross-identity training strategy to improve the quality of the generated image.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

This disclosure generally relates to protecting sensitive user subscription data in wireless communication. Performed by first network element, the method includes: the method includes: receiving, from a second network element, a first message associated with a service request for a wireless device, the first message carrying at least one of: a Subscription Concealed Identifier (SUCI) of the wireless device; a User Equipment (UE) identifier of the wireless device that is associated with a Subscription Permanent Identifier (SUPI) of the wireless device; a Serving Network (SN) name of an SN serving the wireless device; or a service indicator indicating that the service request is initiated from a security domain different from the first network element.

The application relates to the technical field of user identity privacy protection, and discloses a data illegal propagation accountability method and device based on a time-varying identity watermark. The method generates a time-varying identity TDID and a dynamic verifiable expression DVP of a user based on a timestamp, prevents malicious users from performing privacy information association analysis on the user by collecting a large amount of distributed identity verifiable expression information VP, embeds the signature of the TDID and the request access timestamp as a watermark into an owner data file, and stores the TDID and a DID identifier in a chain. When the authorized shared data is secondarily non-authorized to be propagated or accessed, the file watermark is extracted, an accountability smart contract is called, the non-authorized data propagator can be accurately located, and fast accountability is realized.

The present invention discloses a method for protecting identity privacy in a digital scene. A key pair is generated through global parameters, a public key of a transaction recipient is obtained, a target hidden address is generated through a public key derivation function, a transaction initiator sends transaction information to the target hidden address, transactions on a blockchain are monitored, the target hidden address is identified, the transaction recipient obtains the target hidden address, ciphertext and a key pair, a private key corresponding to the target hidden address is calculated through a private key derivation function, and the target hidden address and the key pair are obtained. A transaction credential of the target hidden address is generated by executing a signature algorithm, other users in the blockchain obtain the target hidden address and the key pair, and the validity of the transaction process between the transaction initiator and the transaction recipient is verified by executing a verification algorithm.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

The invention discloses an attribute-based dynamic searchable encrypted data sharing method in the Internet of Vehicles, relates to the technical field of Internet of Vehicles security, and solves the problems that an existing encryption method is difficult to support ciphertext search, reduces the availability of data sharing, is difficult to prevent privacy risks in an index updating process, lacks an effective incentive mechanism, and is poor in security. And the vehicle does not want to share high-value data. According to the method, an attribute-based searchable encryption framework is constructed, and attribute-based encryption and searchable encryption technologies are combined, so that flexible data retrieval and sharing in an encryption environment are realized, and identity privacy of a receiver is protected by adopting a strategy hiding mechanism; a forward and backward safe index updating mechanism is designed, and index addition and deletion operation in an encryption state is supported. In order to improve data sharing enthusiasm, an incentive mechanism based on reputation evaluation is introduced, intelligent contracts are used for automatic scoring, reward and punishment rules are set, high-quality data sharing is incentive, and meanwhile the risk that malicious vehicles spread false data is reduced.

A communication method and apparatus, belonging to the field of communications, are disclosed. The method includes: a first module receiving a first parameter from a first network, the first parameter being a calculation parameter of a first security mechanism; the first module obtaining a second hidden identity identifier based on the first parameter, the second hidden identity identifier being a hidden identity identifier obtained by processing plaintext identity information according to the first security mechanism and the first parameter. A terminal-side device includes a first module supporting the first security mechanism and a second module not supporting the first security mechanism. The terminal-side device can first use the hidden identity identifier calculated by the second security mechanism to access the network, thereby using an anonymized identity identifier during network access to protect user privacy. The network side can issue calculation parameters of a first protection mechanism with higher security strength, enabling the terminal-side device to provide a higher level of security for user identity privacy protection during subsequent access processes.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein disclose a method for handling a privacy of a user equipment (UE). The method includes receiving, by a first network function entity in a roaming hub, an authenticate request message from a second network function entity in a first network domain. Further, the method includes sharing, by the first network function entity in the roaming hub, the authenticate request message to an Authentication Server Function (AUSF) entity in a second network domain. Further, the method includes receiving, by the first network function entity in the roaming hub, an authenticate response message from the AUSF entity in the second network domain based on the authenticate request message. Further, the method includes sharing, by the first network function entity in the roaming hub, the authenticate response message to the second network function entity in the first network domain.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

A communication method and apparatus, relating to the field of communications. The communication method comprises: a first module in a terminal-side device acquires a first concealed identity identifier from a second module in the terminal-side device, the first concealed identity identifier being obtained by the second module by using a second security mechanism to process plaintext identity information; the first module, by using a first security mechanism, processes the first concealed identity identifier to obtain a second concealed identity identifier; and the first module sends the second concealed identity identifier to a first network, the second concealed identity identifier being used to access the first network. The first module can use the first security mechanism with higher security strength to further process the first concealed identity identifier computed by the second module, so as to obtain the second concealed identity identifier. In this way, when the first module accesses a network, the second concealed identity identifier computed by the first module can provide subscriber identity privacy protection with a higher security level.

The application discloses a face image identity privacy protection method and device, the method comprises the following steps: constructing a feature learning model, extracting features of an acquired face image by the feature learning model, and decoupling statistical information and background information in the face image by a face identity feature decoupling subnetwork model; integrating the features extracted by the feature learning model and the statistical information to obtain integrated information; constructing an identity disturbance model, adding random disturbance to the integrated information based on a privacy level of a face image user; and constructing an image reconstruction model, reconstructing the face image based on the integrated information after adding random disturbance. The method of the application can effectively resist background knowledge attacks, reconstruction attacks and combination attacks, realize provable and controllable face identity privacy protection, and ensure the optimization trade-off between the privacy and usability of the published image.

The invention belongs to the technical field of privacy protection, and discloses a millimeter wave identity privacy protection method based on an adversarial sample, which comprises the following steps: acquiring a training set of millimeter wave signals comprising action types and corresponding identity information; the millimeter wave signals in the training set are preprocessed, and a three-channel pseudo image fusing a distance-velocity diagram, a distance-azimuth diagram and a distance-elevation diagram is generated; constructing and pre-training an action recognition model used for recognizing action types and an identity recognition model used for recognizing identity information on the basis of taking the three-channel pseudo image as input; based on the pre-trained action recognition model and the pre-trained identity recognition model, generating an initial attention area for identifying the action category and the identity information; introducing learnable parameters to construct a dynamic attention mechanism to dynamically update the attention area; the problems that in the prior art, effective privacy protection and reliable action recognition functions are difficult to consider at the same time, and the adaptability of a defense mechanism is insufficient are effectively solved.

A cross-domain identity authentication method based on SGX belongs to the field of Internet of Things identity authentication and solves the technical problems of edge terminal node identity privacy exposure, session insecurity, and high security authentication complexity. The central agent registers on the Intel online identity authentication server, completes trusted authentication, and obtains a remote authentication report as the trusted root of the entire inter-domain trusted network. Each trusted domain establishes a domain proxy server in its own security domain based on the relevant conditions within its own domain, and uses the edge domain agent and the central agent as nodes of the inter-domain trusted network. The edge trusted domain agent obtains trusted authentication by registering and remotely authenticating with the central agent. The two edge domain agents achieve mutual authentication of the trusted state through two-way remote authentication, thereby realizing trust transmission and privacy protection. Through the trusted and secure communication channel established by the two edge domain agents, the identity authentication and key negotiation process of the data requesting terminal node and the data owning node is completed.

The present disclosure provides a user identity privacy protection method and related equipment, which are applied to the technical field of wireless communication. The method comprises the following steps: receiving a user registration request from a user terminal, wherein the user registration request comprises a user identity hiding identifier; determining subscription identity information of the user terminal in a network according to the user identity hiding identifier; transmitting the user identity hiding identifier to an identity authentication server according to the subscription identity information, so that the identity authentication server decrypts the user identity hiding identifier, performs identity authentication, and returns an identity authentication result to a core network element based on the subscription identity information; and receiving the identity authentication result returned by the identity authentication server and sending the identity authentication result to the user terminal. The present disclosure reduces the risk of user identity information being stolen or misused in the transmission and processing process, effectively protects the user identity privacy, and solves the problem of easy leakage of user identity information.

The application provides an edge-computing-based blockchain node identity privacy scheme. The blockchain has the characteristics of high security, high transparency, high autonomy and non-tamperability, and has wide application prospects in the Internet of Things, finance, trade and other industries. However, due to the characteristics of decentralization, a more targeted security scheme is needed to protect user privacy, and the existing signature protection scheme has a large number of complex operations, which brings a large computing burden to the wireless terminal node. In combination with the advantages of edge computing and identity threshold short signature, the application provides an edge-computing-based blockchain node identity weighted threshold short signature scheme to ensure the identity privacy information of the blockchain node and resist collusion attacks.

The application discloses a kind of vehicle identity privacy protection methods based on blockchain in Internet of Vehicles, first according to the actual scene in Internet of Vehicles reality, system constructs alliance chain Hyperledger Fabric blockchain network, writes reputation score smart contract in chain code, sets reputation score for each vehicle, manages the reputation score of vehicle in reputation score smart contract, changes the reputation score of vehicle according to the behavior of vehicle;In the communication after vehicle enters, by on-board unit OBU determines which category the message belongs to, whether it needs to be encrypted, for the message that does not need to be encrypted, directly sent to network, and for the message that needs to be encrypted, after being encrypted, sent to specific user by RSU.The application protects vehicle identity privacy from tracking attack, and also prevents vehicle from spreading malicious messages, to establish a safe, reliable and efficient communication environment.

The present invention discloses a blockchain identity privacy protection system. The system includes users, an authentication center, a transaction verifier and a regulator. The users include a receiver and a sender. The receiver and the sender generate keys by themselves and submit a real-name authentication request to the authentication center using the public key in the key; the sender generates a one-time public key using its public key and the receiver's public key, and then generates transaction information using the one-time public key; the regulator extracts the regulatory ciphertext from the transaction information, and then uses the private key in the regulatory key to decrypt the regulatory ciphertext, obtains the real identity of the sender and the receiver, and realizes offline supervision. On the basis of ensuring the confidentiality of the identities of the transaction participants, the present invention allows the regulator to identify the real identity of the transaction party offline when necessary to realize the controllable anonymous supervision requirements, and ensures the correct operation of the protocol through quantum-resistant zero-knowledge proof technology, reduces the required computing resources and time, and ensures the correctness of the communication data.

The application discloses a distributed stealth address generation method and device for threshold signature, a medium and a product, relates to the field of user identity privacy protection, and comprises the following steps: initialization: generating public parameters required by a distributed stealth address generation system; decentralized key generation: a sender, a total number of n1, a threshold of t1; a receiver, a total number of n2, a threshold of t2, generating respective private key fragments, public key fragments and complete public keys; distributed stealth address generation: at least t1 senders input the private key fragments, the complete public key of the receiver, and calculate a stealth address D; one-time private key fragment generation: at least t2 receivers input the private key fragments, the complete public key of the sender, calculate corresponding one-time private key fragments, and verify consistency by using a Lagrange polynomial. The distributed receiver entity can use the stealth address to receive money, and execute threshold signature of subsequent transactions by using the corresponding one-time private key fragments.

The invention provides an efficient kana dynamic updating method based on a neighbor cooperation algorithm in an Internet of Vehicles environment, and belongs to the technical field of Internet of Vehicles safety. The technical problems of high communication overhead and large storage burden of the pseudonym updating scheme caused by strong vehicle mobility and infrastructure dependence in the Internet of Vehicles environment are solved. According to the technical scheme, the method comprises the following steps that S1, a system is initialized; s2, bidirectional identity authentication; s3, generating and updating a short pseudonym; s4, maintaining a neighbor vehicle list; s5, exchanging temporary pseudonyms; and S6, updating the vehicle-pseudonym mapping. The problem of infrastructure dependence caused by frequent communication between the vehicles and the RSU in an existing pseudonym updating scheme is effectively solved, flexible pseudonym exchange between the vehicles is achieved, meanwhile, on the premise that multiple safety requirements of identity privacy protection, pseudonym non-relevance and the like are met, the number of pre-stored pseudonyms and the pseudonym exchange frequency are effectively reduced, and the probability of pseudonym exchange is lowered. And the storage and communication overhead is relatively low.

The application discloses a kind of low altitude unmanned aerial vehicle network in multi-cloud storage data integrity verification and error positioning method, data integrity verification is in low altitude unmanned aerial vehicle network, after generating user private key and public key by comprehensive supervision service platform registration, stored data is sent to multiple cloud servers to carry out multi-cloud storage data;The low altitude unmanned aerial vehicle data stored on multiple cloud servers is executed integrity verification, including: the first smart contract on the blockchain generates audit challenge according to chain state and issues;Each cloud server generates response proof according to the stored encoding data block and issues to chain;Verification contract listens to and aggregates all response proofs, batch verification is carried out, and the result is published in audit log.The method constructs a decentralized audit framework and does not rely on third-party auditors.If verification fails, a positioning mechanism can be triggered to accurately locate damaged data.To protect identity privacy, a key exchange protocol is embedded to achieve conditional anonymity.The supervision platform can balance anonymity and accountability.