90 results about "Identity privacy" patented technology

The invention belongs to a data security transmission method, and provides a data transmission method and system for privacy protection of power terminal equipment, aiming at the technical problems that the existing identity authentication method has limitation in the aspect of protecting the identity privacy of the equipment and has the risk of leaking the identity privacy of the equipment identifier. Two-way identity verification is carried out between the equipment trusted center and the equipment, the equipment initiates an access authentication request based on zero-knowledge proof to the equipment trusted center, session key negotiation and verification are carried out between the equipment trusted center and the equipment, a plaintext message transmitted between the equipment trusted center and the equipment is encrypted based on the negotiated and verified session key, and the encrypted plaintext message is sent to the equipment trusted center. And performing data transmission. And the requirements of equipment privacy protection, authentication and data security transmission for the power terminal can be met.

The invention relates to an alliance chain identity privacy protection method and system based on multi-level group signature and distributed key management, and belongs to the field of block chain technology, network and information security. According to the method, a multi-level group signature structure is adopted, anonymous identity verification is achieved in the transaction process, privacy protection is further enhanced through zero-knowledge proof, anonymous identity verification is achieved in the transaction process, it is ensured that privacy of participants is not leaked, a homomorphic encryption algorithm is used in the signature and verification process of transaction data, and the transaction data are subjected to identity authentication. And privacy leakage is prevented. And meanwhile, the Shamir secret sharing algorithm divides the master key and stores the master key in a plurality of sub-group members in a distributed manner, so that the anti-attack capability and the key security are enhanced. According to the method, a dynamic group member management and double signature verification mechanism is further introduced, so that the flexibility and the overall security are improved. The method has significant advantages in the aspects of identity anonymity, data integrity and efficiency, and is suitable for alliance chain application scenarios with high privacy and security requirements.

The invention discloses a privacy protection method for a block chain bidding and tendering process based on a trusted execution environment. According to the method, identity privacy and data privacy in the bidding and tendering process of a block chain system are analyzed; the bidding and tendering process is subjected to standard division, and privacy information appearing in each stage is subjected to safety protection. According to the invention, the execution of the smart contract in the block chain is transferred to the feasible execution environment by using the trusted execution environment technology, which is helpful for protecting the related privacy information involved in the execution of the smart contract. Therefore, privacy leakage of the bidding and tendering users is effectively prevented, and the method has important research significance and application value for privacy protection of the block chain bidding and tendering users.

The invention discloses an on-cloud semi-homomorphic encryption method capable of resisting private key tracking, which comprises the following steps of: S1, generating a blind identity based on the real identity of a data user, and performing identity de-association processing; s2, the attribute authority generates a binding key pair based on the blind identity and returns the binding key pair; s3, the data user discloses a real identity and a public key to the data owner; s4, the data owner encrypts the plaintext after verifying the public key to form a ciphertext set; s5, uploading the ciphertext set to a cloud service provider, and performing classified storage; s6, the cloud service provider receives the analysis request and performs homomorphic addition aggregation on the ciphertext set to generate an aggregated ciphertext; and S7, the data user uses the private key to decrypt the aggregated ciphertext, and a plaintext analysis result is recovered. According to the method, the identity privacy of the user is protected while encrypted data analysis is realized, and the method has the characteristics of untraceability and lightweight deployment.

The invention discloses an Internet of Things cross-domain payment method with a privacy protection function. The method comprises the steps of initialization, storage, uploading, verification, cross-chain interaction, settlement and timeout. According to the method, the validity of the content can be verified under the condition of not leaking any content by adopting the zero-knowledge proof technology, the specific position of group members, namely each site, can be hidden by adopting the group signature technology, the position information of a user is hidden, and the position privacy of the user is protected; the anonymous block chain technology hides the transfer relationship between the real user and the corresponding virtual user, so that the user identity privacy is effectively protected; according to the cross-chain channel technology, information transfer between sites on different block chains is realized, the cross-chain interaction efficiency is improved, and the cross-domain payment requirements between different block chains in different industries are met; the intelligent contract, the zero-knowledge certification technology and the group signature technology realize privacy protection and realize distributed automatic verification of information with relatively low chain cost, so that verification efficiency is improved, and computing resources and cost are saved.

The invention provides a face anonymization method and device for availability reservation, equipment and a medium, and the method comprises the steps: constructing an anonymization network which comprises a backbone network, an attribute reservation module and an identity dissociation module, and achieving the attribute feature reservation and anonymization of a face; performing attribute feature and identity feature decoupling operation by using an attribute retention module and an identity dissociation module, and training an anonymized network by optimizing a loss function of a potential diffusion model in a backbone network; attribute feature retention is carried out on a face image to be anonymized through an attribute retention module, identity features and key point images of a face to be anonymized are injected through an identity dissociation module, and anonymization is completed. According to the face anonymization method, the attribute retention module and the identity dissociation module are introduced to complete the decoupling of the attribute features and the identity features, so that the face anonymization is realized, the identity privacy of the face image is protected, and the availability attribute of the face image is retained.

The invention discloses a blockchain identity privacy protection system. The system comprises a user, an authentication center, a transaction verification party and a supervision party, the user comprises a receiving party and a sending party, the receiving party and the sending party respectively generate a secret key, and a real-name authentication request is submitted to the authentication center by using a public key in the secret key; the sender respectively generates one-time public keys by using the public key of the sender and the public key of the receiver, and then generates transaction information by using the one-time public keys; and the supervisor extracts the supervision ciphertext from the transaction information, and decrypts the supervision ciphertext by using a private key in the supervision key to obtain the real identities of the sender and the receiver so as to realize off-line supervision. On the basis of ensuring identity secrecy of transaction participants, a supervisor is allowed to identify the real identity of a transaction party offline when necessary so as to realize controllable anonymous supervision requirements, correct operation of a protocol is ensured through an anti-quantum zero-knowledge proof technology, required computing resources and time are reduced, and correctness of communication data is ensured.

The invention discloses an identity privacy protection system and method oriented to power data security sharing, which combine single-factor combination authentication and identity traceability and utilize the transparency and tamper resistance of a block chain. Comprising an electric power key generation center, an electric power cloud service provider, an electric power data owner, an electric power data user and a block chain, user identity privacy is ensured, safe identity verification is supported, identity traceability is achieved under necessary conditions, and meanwhile safe distribution of keys is achieved. In addition, services and resources are isolated by using groups, so that the flexibility and the expandability of the services and the resources are enhanced. Security analysis and experimental evaluation prove that the method can effectively resist selected plaintext attacks, and meanwhile, high efficiency and practicability are kept.

The invention discloses a relay cross-chain method and system applied to block chain cross-chain, and belongs to the technical field of block chain interoperation. The method comprises the following steps that: in an anonymous committee election stage, a candidate node performs anonymous drawing by using an anonymous verifiable random function combined with a weight and a temporary identity key; in the key generation stage, an asynchronous distributed key generation protocol is adopted, a reliable broadcast protocol is combined, and a threshold signature private key share is generated on the premise that a complete private key does not need to be reconstructed; in a cross-chain consensus stage, a committee member generates a threshold signature share containing an identity bit vector, an aggregation node encrypts the bit vector by using an accountability public key and generates a zero-knowledge proof, and a binding relationship between an identity ciphertext and an aggregation signature is constructed. According to the invention, identity privacy protection of a whole cross-chain verification process is realized, and the problem of key generation deadlock in an asynchronous network environment is solved.

The invention relates to a decentralized federated learning method based on identity privacy protection and economic incentive, and the method comprises the steps: publishing a target federated learning task based on a preset decentralized network and a target task publisher, and determining an economic incentive mechanism and privacy protection requirements of the target federated learning task, determining a data owner receiving the target federal learning task; the data owner downloads the global model, the economic incentive mechanism and the privacy protection requirement, and pays registration fees to obtain a training voucher; and training a global model by using a local training data set, evaluating the trained model to update the global model, iteratively executing evaluation and updating operations to obtain a final federated learning model, and meanwhile, based on a mixed currency server, enabling a target task publisher to pay award fees to a data owner. Therefore, the problems that in the prior art, data privacy leakage is easily caused, effective economic incentive is lacked, and data owners are severely hindered from participating in federated learning are solved.

The invention relates to an Internet of Things data security sharing method for blockchain fragmentation. The method comprises the following steps: firstly, performing identity anonymous authentication based on an auditing mechanism combining encryption packaging and zero-knowledge proof; thirdly, performing threshold slicing on the to-be-stored data by adopting an IDA slicing algorithm, performing dynamic allocation of storage nodes based on weighted consistency hash, and performing data storage and distribution based on the allocated storage nodes; afterwards, a PBFT consensus mechanism based on behavior reputation is adopted to carry out security auditing of data recovery and storage, a recovery voucher is generated, and on-chip data recovery is carried out; and finally, querying a target fragment of data distribution based on a trusted relay cross-fragment transaction mechanism, and completing cross-fragment data recovery in the target fragment. According to the invention, high efficiency and security of IoT data sharing and terminal identity privacy protection can be realized, and application requirements in a large-scale IoT environment are well met.

The invention discloses a linkable mobile network voting method capable of protecting privacy, and relates to the technical field of data communication security. The method comprises the following steps: setting a safety parameter, and issuing a public parameter based on the safety parameter; the management center generates certificates for the user and the organization; the organizational mechanism initiates network voting and sets voting information, users select voting options according to the voting information and randomly form a user group, a public key set is constructed according to public keys of all the users in the user group, and after the voting options are selected by all the users, the voting options of all the users in the user group are selected by all the users; generating an effective vote by using the corresponding private key and the public key set; and after the organization mechanism receives all the ballots, the validity and relevance of the ballots are checked. According to the invention, in network voting, the confidentiality of voting contents can be ensured, the identity privacy of voting users can be ensured, and abuse of voting power can be prevented.

The present invention proposes a pedestrian identity privacy protection method combined with k-anonymity. The present invention generates higher quality anonymous images through a cross-identity training strategy; finally, through the designed k-anonymity privacy protection method, the privacy of pedestrian image data is retained while also retaining the availability of data; specific steps: Step 1: Proxy data set acquisition and image preprocessing; Step 2: Establishing a k-anonymity mechanism; Step 3: Constructing an anonymous pedestrian generation adversarial network; Step 4: Anonymous pedestrian generation objective function; Step 5: Using a public data set for training and testing, and outputting the final result. The present invention retains both the identity privacy and the attributes of pedestrians. In terms of anonymous pedestrian generation, on the one hand, the method combines the fusion of attributes and target background into the pedestrian generation process, and on the other hand, the method proposes a cross-identity training strategy to improve the quality of the generated image.

The application discloses a kind of enhanced security revocable anonymous authentication method of Internet of Things, including the following steps, S1: system initialization, for generating public parameters and user registration;S2: authentication between user and gateway, for identity authentication and session key establishment;S3: password update and revocation, authorized user can update password, gateway can revoke malicious user.It is beneficial to generate a pseudonym using the random number of gateway, provide a safe and effective identity privacy protection scheme, perfectly solve the problem of anonymity and message unlinkability.Add an effective revocation mechanism, when malicious user appears, gateway will record it to revocation list, and gateway does not provide key generation service for the user, so as to realize user revocation, realize identity authentication, anonymity, unlinkability, password update and revocation, etc.Security requirements such as.

This disclosure generally relates to protecting sensitive user subscription data in wireless communication. Performed by first network element, the method includes: the method includes: receiving, from a second network element, a first message associated with a service request for a wireless device, the first message carrying at least one of: a Subscription Concealed Identifier (SUCI) of the wireless device; a User Equipment (UE) identifier of the wireless device that is associated with a Subscription Permanent Identifier (SUPI) of the wireless device; a Serving Network (SN) name of an SN serving the wireless device; or a service indicator indicating that the service request is initiated from a security domain different from the first network element.

The invention discloses a continuous authentication method based on a trusted connection architecture in an Internet of Vehicles environment, which comprises the following steps of: firstly, designing an initial authentication stage, and completing bidirectional identity authentication of a vehicle and a road side unit in the stage under the assistance of a cloud service provider; then, after the vehicle drives into the coverage area of other road side units, the vehicle or the road side units can initiate continuous identity verification on the vehicle, the vehicle sends latest identity information to the road side units and the cloud service provider, and the cloud service provider completes continuous verification on the vehicle identity and completes switching of the vehicle among different road side units at the same time. According to the method, initial authentication of the road vehicle is realized, continuous authentication and switching in the subsequent driving process are also realized, key negotiation, forward / backward confidentiality and identity privacy protection can be realized, common attacks such as collusion attack, man-in-the-middle attack, replay attack, counterfeit attack and modification attack can be effectively resisted, and the safety of the vehicle is improved. And the safety of the Internet of Vehicles environment is enhanced.

The application relates to the technical field of user identity privacy protection, and discloses a data illegal propagation accountability method and device based on a time-varying identity watermark. The method generates a time-varying identity TDID and a dynamic verifiable expression DVP of a user based on a timestamp, prevents malicious users from performing privacy information association analysis on the user by collecting a large amount of distributed identity verifiable expression information VP, embeds the signature of the TDID and the request access timestamp as a watermark into an owner data file, and stores the TDID and a DID identifier in a chain. When the authorized shared data is secondarily non-authorized to be propagated or accessed, the file watermark is extracted, an accountability smart contract is called, the non-authorized data propagator can be accurately located, and fast accountability is realized.

The application discloses a method for protecting vehicle identity privacy based on a certificateless authentication mechanism, and the method comprises the following steps: a mapping relationship between a vehicle user identity certificate P and a real identity is established and is stored in a trusted authorization agency in a safe mode, then a regional manager verifies and confirms the legal identity of a vehicle user, and issues a short-time valid pseudonym identity generation parameter for the vehicle user, and finally, the vehicle generates a complete communication pseudonym when having a communication demand, and the communication pseudonym is associated with a message. When a malicious event occurs, a supervisory department extracts a pseudonym identity parameter of a vehicle involved in the message and completes network isolation of the malicious vehicle. The application further discloses a system for protecting vehicle identity privacy based on the certificateless authentication mechanism.

The present invention discloses a method for protecting identity privacy in a digital scene. A key pair is generated through global parameters, a public key of a transaction recipient is obtained, a target hidden address is generated through a public key derivation function, a transaction initiator sends transaction information to the target hidden address, transactions on a blockchain are monitored, the target hidden address is identified, the transaction recipient obtains the target hidden address, ciphertext and a key pair, a private key corresponding to the target hidden address is calculated through a private key derivation function, and the target hidden address and the key pair are obtained. A transaction credential of the target hidden address is generated by executing a signature algorithm, other users in the blockchain obtain the target hidden address and the key pair, and the validity of the transaction process between the transaction initiator and the transaction recipient is verified by executing a verification algorithm.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

The invention discloses a cross-chain identity privacy protection method based on casual transmission, and the method is characterized in that the method comprises the following steps: S1, employing a negotiation key designed based on a peninsula group replaceable rational function, so as to guarantee that a supervision mechanism and a local enterprise can safely negotiate the key; and S2, when the supervision mechanism carries out identity attribute compliance check on the local enterprise on the local chain, a cross-chain communication scheme based on the casual transmission technology is adopted to realize cross-chain identity authentication. The invention relates to the technical field of identity privacy protection, in particular to a cross-chain identity privacy protection method based on casual transmission. The technical problem to be solved by the invention is to provide a cross-chain identity privacy protection method based on casual transmission, so that on the premise of ensuring the security of a supervision mechanism in a regional stock exchange market, the security authentication and compliance check of identity information of local enterprises on a local chain can be carried out in a cross-chain manner. The method has higher security and is suitable for a plurality of fields such as finance and the like.

The invention provides a block chain supervisible identity privacy protection method based on a compression ring signature. The method comprises the following steps: a system executes an initialization algorithm to generate a key pair of a user and a supervisor; a transaction sender obtains a public key set from a block chain, confuses own public keys in the public key set, executes a one-time linkable mark generation algorithm, an ElGamal encryption algorithm and a one-time linkable revocable compression ring signature generation algorithm, and sends generated encrypted transaction information to an intelligent contract on a block chain transaction system; the smart contract calls a pre-compiled contract to verify the validity of the ring signature, and the verified secret transaction information is uploaded to the block chain; and the supervisor obtains the secret transaction information from the block chain, executes a supervision recovery algorithm, and recovers the signature public key of the transaction sender. According to the method, the identity privacy of the transaction sender can be protected, meanwhile, supervision is achieved, the storage overhead and communication consumption are smaller, and the performance is higher in the aspect of system execution.

The invention discloses an attribute-based dynamic searchable encrypted data sharing method in the Internet of Vehicles, relates to the technical field of Internet of Vehicles security, and solves the problems that an existing encryption method is difficult to support ciphertext search, reduces the availability of data sharing, is difficult to prevent privacy risks in an index updating process, lacks an effective incentive mechanism, and is poor in security. And the vehicle does not want to share high-value data. According to the method, an attribute-based searchable encryption framework is constructed, and attribute-based encryption and searchable encryption technologies are combined, so that flexible data retrieval and sharing in an encryption environment are realized, and identity privacy of a receiver is protected by adopting a strategy hiding mechanism; a forward and backward safe index updating mechanism is designed, and index addition and deletion operation in an encryption state is supported. In order to improve data sharing enthusiasm, an incentive mechanism based on reputation evaluation is introduced, intelligent contracts are used for automatic scoring, reward and punishment rules are set, high-quality data sharing is incentive, and meanwhile the risk that malicious vehicles spread false data is reduced.

A communication method and apparatus, belonging to the field of communications, are disclosed. The method includes: a first module receiving a first parameter from a first network, the first parameter being a calculation parameter of a first security mechanism; the first module obtaining a second hidden identity identifier based on the first parameter, the second hidden identity identifier being a hidden identity identifier obtained by processing plaintext identity information according to the first security mechanism and the first parameter. A terminal-side device includes a first module supporting the first security mechanism and a second module not supporting the first security mechanism. The terminal-side device can first use the hidden identity identifier calculated by the second security mechanism to access the network, thereby using an anonymized identity identifier during network access to protect user privacy. The network side can issue calculation parameters of a first protection mechanism with higher security strength, enabling the terminal-side device to provide a higher level of security for user identity privacy protection during subsequent access processes.

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

Disclosed is a technique for protecting a user identity by encrypting a user permanent identifier (SUPI) using a set of one-time temporary asymmetric keys generated by a user equipment (UE) and a key provided by the network to form a one-time user hidden identifier (SUCI). Encrypting the SUPI to form the SUCI can mitigate snooping by malicious network entities such as fake base stations. The UE is restricted from providing unencrypted SUPI through an unauthenticated connection with a network entity. In some cases, the UE uses a trusted symmetric fallback encryption key K FB or trusted asymmetric fallback public key PK FB to authenticate messages from an unauthenticated network entity and / or to encrypt the SUPI to form a fallback SUCI for communicating messages with the unauthenticated network entity FB .

Techniques for user identity privacy protection in a communication network environment are disclosed. For example, a method includes obtaining, at the user equipment, a user identifier for a user of the user equipment, wherein the user is one or more users associated with a subscription for the user equipment. The method includes securing, by the user equipment, the user identifier and a subscription identifier for the subscription. The method includes sending, from the user equipment, the secured user identifier and subscription identifier in a request to a communication network.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein disclose a method for handling a privacy of a user equipment (UE). The method includes receiving, by a first network function entity in a roaming hub, an authenticate request message from a second network function entity in a first network domain. Further, the method includes sharing, by the first network function entity in the roaming hub, the authenticate request message to an Authentication Server Function (AUSF) entity in a second network domain. Further, the method includes receiving, by the first network function entity in the roaming hub, an authenticate response message from the AUSF entity in the second network domain based on the authenticate request message. Further, the method includes sharing, by the first network function entity in the roaming hub, the authenticate response message to the second network function entity in the first network domain.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

A communication method and apparatus, relating to the field of communications. The communication method comprises: a first module in a terminal-side device acquires a first concealed identity identifier from a second module in the terminal-side device, the first concealed identity identifier being obtained by the second module by using a second security mechanism to process plaintext identity information; the first module, by using a first security mechanism, processes the first concealed identity identifier to obtain a second concealed identity identifier; and the first module sends the second concealed identity identifier to a first network, the second concealed identity identifier being used to access the first network. The first module can use the first security mechanism with higher security strength to further process the first concealed identity identifier computed by the second module, so as to obtain the second concealed identity identifier. In this way, when the first module accesses a network, the second concealed identity identifier computed by the first module can provide subscriber identity privacy protection with a higher security level.