147 results about "Initialization vector" patented technology

The invention relates to the technical field of network security and edge computing, in particular to a trusted asymmetric encryption communication protocol of an edge computing gateway driven by a certificate chain, which comprises the following steps of: generating node characteristic data based on edge node hardware characteristics, generating dynamic certificate chain data through edge node cooperation, and recording the dynamic certificate chain data to a block chain to form global trust data; generating global random number data in combination with the dynamic certificate chain data and a chaotic mapping algorithm, and verifying the integrity of the global random number data; generating quantum initialization vector data in combination with the global random number data and the hardware noise data, and performing block encryption on the original communication data to generate block encrypted data; a secret sharing algorithm is used to distribute a dynamic session key to a highly trusted node to ensure the security of the key; and dynamically optimizing subsequent communication parameters according to a result of decrypting the communication data. According to the method, the security, robustness and adaptability of data transmission in an edge computing scene are improved by introducing a dynamic certificate chain, a chaotic mapping algorithm, block encryption and a feedback optimization mechanism.

The invention relates to the technical field of security auditing, in particular to a security auditing method and system for an industrial control system, and the method comprises the following steps: aiming at a key control task, a communication task and a security task of a real-time operating system, collecting a period, a starting timestamp, a finishing timestamp, a central processing unit occupied time slice and peak memory usage amount data. According to the method, the period, timestamp, central processing unit occupation and memory usage data of a key task of a real-time operating system are collected, a task execution time boundary and a resource consumption envelope are set, and then an expected relation rule set of a task time sequence and resource consumption is constructed by applying historical data statistics and logic rule deduction; and meanwhile, the key length of symmetric and asymmetric encryption, initialization vector generation, hash algorithm selection, key derivation parameters and encryption operation context are stipulated, so that a comprehensive and specific ICS behavior specification baseline is established.

The invention discloses an intelligent variable-frequency dimming method and system, and relates to the technical field of computer platform load balancing, and the method comprises the steps: establishing communication between a module and a gateway, loading a frequency mapping table, a duty ratio segmentation point, a safety threshold and a forbidden frequency point table, and generating an initialization vector in combination with parameters of a driver and a lamp; collecting current, voltage and optical brightness data at typical brightness points to form a matrix, calculating a risk value and marking a critical point, generating three-section type frequency mapping by combining segmentation points, and performing interpolation correction; and receiving a brightness instruction according to the mapping table to generate a PWM signal, performing slope limiting, edge shaping and micro-jitter frequency processing and outputting, and performing closed-loop frequency correction under real-time sampling. According to the method, by collecting multi-source data and introducing a stroboscopic risk model, critical point identification and three-section type frequency mapping are realized, and frequency continuity and stability are ensured by combining interpolation and forbidden frequency point constraint; on the basis, a PWM signal is generated and optimized, so that self-adaptive dimming is realized in a full-brightness interval.

Systems and techniques are described for signing and verifying a data stream with an encryption signature. An example method includes determining, for a data block group, an initialization vector. The example method also includes generating, based at least in part on the data block group, encrypted hash data. The example method also includes determining an encryption signature based at least in part on the encrypted hash data, a private key, and the initialization vector. The example method also includes inserting the encryption signature into the data block group. The example method also includes causing transmission, by a network interface to a media server, of the data block group and the encryption signature. Finally, the example method includes causing verification, via the media server using a public key and synchronized data, that the data block group was generated by the computing device.

The invention discloses a city inspection data sharing method and device based on an unmanned aerial vehicle, and the method comprises the steps: firstly determining an inspection time period when the inspection data needs to be shared, and collecting the position, speed, signal and meteorological data set of the unmanned aerial vehicle in the time period according to a preset sampling frequency; after all the data sets are aligned through timestamps, features are extracted respectively to form multi-dimensional feature vectors; converting the multi-dimensional feature vector into a one-dimensional array, and generating a hash feature value through a hash algorithm in combination with a timestamp and a random number; extracting a master key and an authentication key from the hash feature value, generating an initialization vector based on the master key, binding the master key, the authentication key and a timestamp, and then distributing the three to a receiver; inspection data is divided into blocks, a number and a timestamp are added to each block, encryption is performed by using a master key and an initialization vector, an authentication tag is generated in combination with an authentication key, and a data packet is packaged and then transmitted. According to the invention, the problem of low security during routing inspection data sharing of the unmanned aerial vehicle in the prior art is solved.

Examples of systems and methods described herein provide for accessing memory devices and, concurrently, generating access codes using an authenticated stream cipher at a memory controller. For example, a memory controller may use a memory access request to, concurrently, perform translation logic and / or error correction on data associated with the memory access request; while also utilizing the memory address as an initialization vector for an authenticated stream cipher to generate an access code. The error correction may be performed subsequent to address translation for a write operation (or prior to address translation for a read operation) to improve processing speed of memory access requests at a memory controller; while the memory controller also generates the encrypted access code.

The invention provides a data encryption transmission method, system and device based on SM4, and belongs to the technical field of data encryption transmission. The method comprises the following steps: acquiring an encrypted fragmented data packet from front-end equipment; wherein the encrypted fragment data packet at least comprises a ciphertext fragment set, a timestamp and an environment feature hash value which are determined based on the network state value of the front-end equipment and the acquisition environment parameters. The number of ciphertext fragments in the ciphertext fragment set is in positive correlation with the network state value; matching the environment feature hash value with a preset environment feature hash library to determine whether a decryption parameter is generated or not according to a matching result; wherein the decryption parameters at least comprise a dynamic key and an initialization vector IV; if yes, generating decryption parameters according to the encrypted fragmented data packet; and decrypting each ciphertext fragment in the ciphertext fragment set based on the decryption parameters and a preset SM4 algorithm. Therefore, flexible, safe and stable data encryption transmission is realized in a water conservancy monitoring scene.

The application discloses a method and device for realizing high-speed operation of an algorithm based on a multi-level field cache, which comprises the following steps: a configuration management CPU sends algorithm parameters to an FPGA chip and saves the algorithm parameters in a RAM; a service processing CPU creates a handle and sends the handle to the configuration management CPU; the configuration management CPU generates a key number according to the handle; the configuration management CPU sends a key library to the FPGA chip; the service processing CPU sends a to-be-operated message to the FPGA chip; an algorithm scheduling module performs fragmentation judgment, and performs subsequent processing according to a sequence judgment result; a password operation module takes the received key, an initialization vector or an intermediate chain variable and the to-be-operated message as input, performs password operation, and outputs a calculation result and an operated intermediate chain variable; whether the to-be-operated message is the last data fragment is judged according to a tail fragment identifier, and subsequent processing is performed according to a tail fragment judgment result. The application can reduce the communication interface and CPU access times, realize high-speed operation of a password algorithm, and improve the overall performance of a password service system.

The invention provides an AES (Advanced Encryption Standard)-based data enhancement encryption method, system and equipment and a medium, and belongs to the technical field of data security. The method comprises the following steps: receiving plaintext data to be encrypted and a password provided by a user; deriving a master key and an HMAC key from the password and the randomly generated salt value by using a key derivation function; randomly generating an initialization vector, and encrypting the plaintext data through the master key by using an AES encryption mode to obtain encrypted ciphertext data; performing message authentication code calculation on the ciphertext data, the initialization vector and the salt value through an HMAC key to generate an HMAC check value; and combining the salt value, the initialization vector, the ciphertext data and the HMAC verification value into a final output encrypted data packet. According to the method, a series of enhancement mechanisms such as strong key derivation, random salt values, message authentication codes and initialization vectors are introduced, so that the security and integrity of data are further improved.

Disclosed are a method and device for installing a certificate on the basis of encryption and decryption of a contract certificate private key for an electric vehicle communication controller. The method for installing the certificate comprises: a step in which the electric vehicle communication controller transmits, to a secondary actor, a certificate installation request message signed with a private key associated with a manufacturer's provisioning certificate; and a step of receiving, from the secondary actor, a certificate installation response message signed with a private key associated with a leaf certificate of a certificate provisioning service, wherein an encrypted private key element of the certificate installation response message stores a private key belonging to a new contract certificate which is encrypted for the electric vehicle communication controller without a trust platform module, the private key belonging to the new contract certificate is encrypted with AES-GCM-256 on the basis of an encryption key which is entered from a public key of the manufacturer's provisioning certificate and generated through an ECDH protocol, and the private key encrypted with the AES-GCM-256 is included in a ciphertext at 528-bits or 448-bits after an initial initialization vector of a contract certificate data packet.

The invention relates to the technical field of image processing, and discloses an image processing method and device based on secret key updating, a medium and a chip system.The method comprises the steps that first digest values corresponding to an Nth frame image and an (N-1) th frame image are obtained, image block information is extracted from the Nth frame image, and the N frame images are coded; performing key updating and initialization vector IV updating processing by using the first digest value and the image block information to obtain a first key and a first IV value; inputting the first key and the first IV value into a stream encryption algorithm system for processing to generate a key sequence; and encrypting the encoded Nth frame of image by using the key sequence to obtain an encrypted stream and outputting the encrypted stream. The method not only realizes encryption and decryption of the video image, but also ensures the security of the image data.

The invention discloses a network data processing method and a storage medium, and the method comprises the steps: a data transmitting end obtains network operation data, carries out the division of the network operation data, and determines a plurality of target data blocks of a first length corresponding to the network operation data according to a division result; the data sending end encrypts each target data block through an initialization vector to obtain a ciphertext data block corresponding to the target data block, and generates a data authentication tag corresponding to the ciphertext data block; and the data sending end sends the ciphertext data block and the data authentication tag to a data receiving end, so that the data receiving end performs security verification on the ciphertext data block through the data authentication tag and decrypts the network operation data through the initialization vector and the ciphertext data block. Confidentiality and integrity protection of data in the transmission process can be achieved, and safe transmission and verification of network operation data are ensured.

The invention discloses a computer network security protection method, which relates to the field of computer security technology and comprises the following steps: strengthening login control, formulating security strategies, key generation, generating a key K1 and a key K2 in a data transmission process through a key management service, extracting a user code D, a timestamp T and a hash value H in the key K1 through system operation, combining the key K1 and generating a key K3 according to the timestamp T and the user code D, data encryption, updating and maintaining the key encryption system, daily monitoring and recording, and having multiple means such as using a multi-key encryption method, introducing a timestamp, using a random salt value, adding a random initialization vector, combining an encryption block and a data block, and combining multi-layer encryption and verification information, thereby effectively improving the security and unpredictability of data transmission, thereby enhancing the effect of the quality of computer network security protection.

The invention provides an encryption method and device for dynamic data of an unmanned aerial vehicle and a medium, and relates to the technical field of data encryption, and the method comprises the steps: dividing an airspace into a plurality of initial airspace grids according to a preset longitude interval and a preset latitude interval, and determining a target airspace grid corresponding to the dynamic data of the unmanned aerial vehicle; based on an AES-CBC encryption mode, using an AES key corresponding to the target airspace grid and the initialization vector to encrypt the dynamic data of the unmanned aerial vehicle; based on a preset access control strategy tree corresponding to the target airspace grid, encrypting the AES key and the initialization vector corresponding to the target airspace grid by using a CP-ABE encryption algorithm; the encryption result of the dynamic data of the unmanned aerial vehicle is obtained; according to the method, each initial airspace grid is used as an independent encryption and authorization unit, and fine-grained access control is realized through a hybrid encryption architecture, so that unauthorized access can be effectively prevented, and calculation, storage and transmission overhead caused by traditional multi-copy encryption is avoided.

Examples are described for dynamically encrypting and / or decrypting a file formed of multiple blocks of ordered data. In one example, a method of dynamically encrypting a file to enable partial decryption of the file includes generating, using a secret key and one or more initialization vectors, a keystream for the multiple blocks of ordered data, encrypting the multiple blocks of ordered data of the file by performing a logical operation of the keystream with the multiple blocks of ordered data in a one-to-one correspondence, and building a file index of the file to identify location information of the multiple blocks of ordered data. The method may further include dynamically decrypting at least a portion of the file by decrypting at least one selected block of encrypted data of the file using a portion of the keystream, the portion of the keystream corresponding to the at least one selected block.

A method for operating secure computer processes includes storing a local encryption key in a register of a processor. The local encryption key is stored in a masked state. The method further includes receiving, from a memory communicating with the processor, an operational encryption key. The method includes encrypting the operational encryption key using the local encryption key and an initialization vector to generate an encrypted operation key. The local encryption key is unmasked prior to encrypting the operational encryption key. Further, the method includes storing the encrypted operational key, the initialization vector, and a verification hash value in the memory. The method includes decryption of symmetric operational keys directly to processor registers without using memory. The method includes decryption of asymmetric operational keys. In the method, the asymmetric key material is decrypted temporarily to memory and that memory is sanitized following the use of the key.

The invention discloses an LDPC encoder based on a DVB-S2 protocol, a transmitting terminal and a test platform, and the LDPC encoder comprises an information bit matrix multi-port input RAM which is used for storing input information bits; the check matrix multi-port ROM is used for storing a check matrix; the accumulative sum matrix RAM is used for storing the accumulative sum matrix generated by the accumulative sum matrix calculation module; the check bit matrix RAM is used for storing a check bit matrix; the check matrix calculation module reads a check matrix from the check matrix multi-port ROM, and the check matrix is converted into a cyclic shift matrix through preprocessing; the accumulative sum matrix calculation module is used for reading information bits from the information bit matrix multi-port input RAM, executing loop right shift and accumulative operation, and calculating to obtain an accumulative sum matrix; and the check bit matrix initialization module is used for calculating a check bit matrix initialization vector according to a calculation result of the accumulation and matrix calculation module.

The invention provides a video encryption transmission method and device and a video decryption output method and device. The video encryption transmission method comprises the following steps: constructing a security parameter set according to an encrypted video encryption key and an initialization vector of an image group; performing XOR operation on the first L-1 bytes of the original data byte stream by adopting the stream key to obtain encrypted byte stream data; setting a network abstraction layer header for each network abstraction layer unit after the image group is processed, wherein the network abstraction layer header at least comprises original coding standard information and encryption state information; performing hash signature processing on the encrypted byte stream data of the image group to generate signature data, and packaging the signature data into an authentication network abstraction layer unit; packaging the security parameter set, the network abstraction layer unit provided with the network abstraction layer head, the authentication network abstraction layer unit and the original parameter set of the image group according to the transmission sequence of the original code stream of the image group to obtain an encrypted video code stream; and sending the encrypted video code stream to a receiver.

Systems and methods are described for encrypting and decrypting data in a distributed storage environment. Such systems and methods for encryption may divide a data payload into slices, the slices including a first slice and a subsequent slice, employ a content encryption key and an initialization vector, encrypt the first slice using the content encryption key and the initialization vector, generate a subsequent initialization vector for the subsequent slice based upon the initialization vector and the unencrypted content of the first slice, and encrypt the subsequent slice using the subsequent initialization vector and the content encryption key. The systems and methods may then generate a list of the encrypted slices into which the data payload has been generated, and publish to a secure storage location, the slice list, the content encryption key and the initialization vector for the first slice in the slice list, with the slices outputted to the distributed storage environment. Systems and methods for decryption may receive, from a secure storage location, a slice list, a content encryption key, and an initialization vector, determine the encrypted slices to be received from the distributed storage environment. The systems and methods may receive, from the distributed storage environment, at least encrypted first slice and the encrypted subsequent slice, and decrypt the first slice using the content encryption key and the initialization vector, to generate a decrypted first slice, and generate a subsequent initialization vector for the subsequent slice based upon the initialization vector and the decrypted first slice, decrypt the subsequent slice using the subsequent initialization vector and the content encryption key, and combine the first slice and the subsequent slice into a data payload.

A method for transmitting secured Ethernet frames on a communication line, the method including the following in a transmitter module: receiving an Ethernet frame comprising payload data from a network layer; retrieving a secure policy, defining the type of security to be applied to the Ethernet frame; producing an initialization vector based on an encryption counter and a physical address of the transmitter module; creating an authentication tag by applying an authentication algorithm on the secure policy, the initialization vector and the payload data using a shared key and the initialization vector; adding the secure policy, the initialization vector and the authentication tag to the payload data to create a secured Ethernet frame; and sending the secured Ethernet frame to a data link layer for transmission on the communication line.

The invention discloses a data processing method and device, and relates to the field of multimedia. The method comprises the following steps: encrypting an encryption basic unit in a code stream to obtain an encrypted basic unit; and under the condition that the encrypted basic unit contains a pseudo start code, updating the initialization vector, processing the encrypted basic unit by using the updated initialization vector and a secret key contained in the security parameter until the updated encrypted basic unit does not contain the pseudo start code, and sending an encryption code stream. The encrypted code stream comprises the updated encrypted basic unit and the security parameter. And after the encrypted password stream is received, decrypting the encrypted basic unit according to the security parameter to obtain a decrypted encrypted basic unit. Different initialization vectors are used for encrypting and decrypting different encryption basic units, so that the security of the code stream is improved, an anti-counterfeiting code does not need to be inserted and removed for multiple times, and system resources are effectively saved.

Techniques described herein can allocate respective unique secure channel identifiers (SCIs) to respective uplink encryptor interfaces which provide intersite connectivity over multipathing internet protocol (IP) networks between a first data center site and a second data center site. A respective uplink encryptor interface can then use the unique SCI allocated thereto, along with a packet number counter value to encrypt and generate an integrity check value for at least a portion of a packet. The encryption can comprise using the SCI and the packet number counter value to generate a unique packet initialization vector for the packet, which is then used to encrypt and integrity protect the packet. The respective uplink encryptor interface can send the encrypted packet via a tunnel to a second data center site via a secure communication channel spanning across multiple encryptors and multiple decryptors. The encrypted packet can be decrypted at the second data center site and forwarded along to its destination within the second data center site.

Disclosed are a method and device for installing a certificate on the basis of encryption and decryption of a contract certificate private key for an electric vehicle communication controller. The method for installing the certificate comprises: a step in which the electric vehicle communication controller transmits, to a secondary actor, a certificate installation request message signed with a private key associated with a manufacturer's provisioning certificate; and a step of receiving, from the secondary actor, a certificate installation response message signed with a private key associated with a leaf certificate of a certificate provisioning service, wherein an encrypted private key element of the certificate installation response message stores a private key belonging to a new contract certificate which is encrypted for the electric vehicle communication controller without a trust platform module, the private key belonging to the new contract certificate is encrypted with AES-GCM-256 on the basis of an encryption key which is entered from a public key of the manufacturer's provisioning certificate and generated through an ECDH protocol, and the private key encrypted with the AES-GCM-256 is included in a ciphertext at 528-bits or 448-bits after an initial initialization vector of a contract certificate data packet.

The invention discloses a color QR code generation method and system based on AES-RSA dual encryption, and relates to the technical field of data encryption, and the method comprises the steps: carrying out the byte filling and segmentation of a preprocessing data package; performing AES encryption operation on each data block based on the AES key and the initialization vector to obtain a complete AES ciphertext; filling the AES key packet by adopting an OAEP filling method; encrypting the key packet filled with the OAEP by adopting an RSA public key to generate an identifier; obtaining a hybrid ciphertext packet based on the complete AES ciphertext, the key packet and the identifier; the mixed ciphertext packet is divided into three equal parts, check codes are added, three sections of mixed ciphertext data with the check codes are obtained, priority coding is carried out, and a QR code dot matrix is generated; and obtaining a final color QR code based on the color mapping function and the QR code dot matrix. According to the invention, the security of data transmission is improved, and the information capacity of data transmission is increased.

The invention provides a video privacy protection method, a video decryption method and related devices. Wherein the video encryption equipment can encrypt the video frame containing the privacy information in the original video by adopting the initialization vector and the encryption key, so that the privacy protection function can be realized. In the process of carrying out compression coding on the privacy protection video, the video encryption equipment can encrypt the initialization vector and / or the encryption key by adopting preset password information, and writes encryption parameter data obtained by encryption into video coding data. On one hand, for an illegal attacker who does not know the preset password information, the original video cannot be accurately restored, so that the information security can be further ensured. And on the other hand, for a legal authorizer with preset password information, the lossless compressed encoding data can be accurately decrypted by using the complete reversibility of encryption and decryption, so that the original video is accurately restored, and reversible video privacy protection is realized.

The present invention discloses an LDPC encoder, a transmitting end and a test platform based on the DVB-S2 protocol. The LDPC encoder includes an information bit matrix multi-port input RAM for storing input information bits; a check matrix multi-port ROM for storing the check matrix; an accumulated sum matrix RAM for storing the accumulated sum matrix generated by a accumulated sum matrix calculation module; a check bit matrix RAM for storing the check bit matrix; a check matrix calculation module for reading the check matrix from the check matrix multi-port ROM, wherein the check matrix is converted into a cyclic shift matrix after preprocessing; a accumulated sum matrix calculation module for reading the information bits from the information bit matrix multi-port input RAM, performing cyclic right shift and accumulation operations, and calculating to obtain the accumulated sum matrix; and a check bit matrix initialization module for calculating a check bit matrix initialization vector according to the calculation result of the accumulated sum matrix calculation module.

The invention discloses a data table lookup method and device, equipment, a storage medium and a computer program product, and relates to the technical field of data lookup, the method comprises the following steps: when a data table query statement is received, converting the data table query statement into a semantic vector; performing similarity matching on the semantic vector and a table vector set and a non-table vector set in a to-be-queried database to obtain a first similarity set and a second similarity set; the initialization vector is normalized based on the first similarity set and the second similarity set, a normalized vector is obtained, and the initialization vector is constructed based on the knowledge graph of the database to be queried; and calculating a correlation score, corresponding to the data table query statement, of each component in the normalized vector, and searching a target data table from the to-be-queried database based on the correlation score. Based on the method, deep mining and relational network construction are performed on the to-be-queried database, so that the target data table can be accurately searched from the database.

Techniques described herein are directed toward a counter hash generation scheme. One embodiment includes a method for counter hash generation. The method includes a device receiving an instruction to transmit an artifact from a source system to a target system, the artifact comprising a plurality of blocks. The device receives a block from the source system. The device generates an initialization vector based at least in part on the artifact. The device generates a nonce based at least in part on the initialization vector and a block value, each block being assigned a respective block value by a counter. The device generates a combined data instance based at least in part on a combination of the nonce, data of the block, and a length of the block. The device generates a hash of the combined data instance. The device transmits the hash and the block to the target system.

Authorization for access to an application server and associated communication service can be desirably managed. When a device attempts to access an application server and service, an authorization server generates an encrypted token, comprising device identifier information, and communicates the token to the device. The device communicates the token to the application server. The application server communicates the token to the authorization server. The authorization server determines whether the device is validated to access the application server and service based on the encrypted token, private decryption key, and initialization vector, and based on subscriber-related information. The authorization server does not share the private decryption key or initialization vector with the application server. If validated, the authorization server communicates validation-related information, including a permitted portion of subscriber-related information, to the application server. If not validated, the authorization server communicates not-validated information to the application server.

The present invention provides a data enhancement encryption method, system, device, and medium based on AES, belonging to the field of data security technology. The method comprises: receiving plaintext data to be encrypted and a password provided by a user; deriving a master key and an HMAC key from the password and a randomly generated salt value using a key derivation function; randomly generating an initialization vector, and encrypting the plaintext data using the master key using the AES encryption mode to obtain encrypted ciphertext data; performing a message authentication code calculation on the ciphertext data, the initialization vector, and the salt value using the HMAC key to generate an HMAC check value; and combining the salt value, the initialization vector, the ciphertext data, and the HMAC check value into a final output encrypted data packet. The present invention further improves the security and integrity of data by introducing a series of enhancement mechanisms such as strong key derivation, random salt value, message authentication code, and initialization vector.