202 results about "Key derivation function" patented technology

The invention relates to the technical field of food information tracing, in particular to a food information tracing method and system based on laser code spraying. The method comprises the following steps: obtaining production related information; the method comprises the following steps: collecting production data in a food production process, and carrying out blockchain up-chain evidence storage to obtain a blockchain up-chain record; carrying out data association and integration on the block chain uplink record and the production related information, and carrying out multi-dimensional data packet generation to obtain a multi-dimensional data packet; performing Hash calculation on the multi-dimensional data packet to obtain a Hash value of the multi-dimensional data packet; obtaining a unique serial number of the product; performing seed key generation on the Hash value of the multi-dimensional data packet and the unique serial number of the product by using a preset master key, and performing key derivation function calculation to obtain a product key; and according to the multi-dimensional data packet and the product key, performing traceability information encryption to obtain encrypted traceability information. The invention provides a safer, more reliable and more convenient food traceability method through a food information traceability technology.

Systems and techniques for secure communications and distribution of random values, provided via satellite communications, are described. These random values are generated from one or more ground-based entropy sources (e.g., quantum random number generators (QRNGs) at terrestrial locations), and optionally combined with values from satellite-based entropy sources (e.g., QRNGs at non-terrestrial locations). An example method includes: receiving a first random value generated by a first QRNG at a terrestrial location; receiving a second random value and a third random value via at least one satellite communication, each additional random value generated by other QRNGs; and generating a cryptographic key based on the first random value, the second random value, and the third random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.

The invention discloses a jewelry transaction data security and privacy protection method based on a 5G fusion application. The method comprises the following steps: establishing a distributed database; generating a first transaction public key and a first transaction private key of two transaction parties through a pre-established first asymmetric encryption algorithm; carrying out random multivariate function calculation on the first transaction public key and the first transaction private key of the two transaction parties, and desensitizing the random multivariate function through an encryption algorithm and storing the random multivariate function in a distributed database; solving a random seed of the random multivariate function as a second transaction private key of the two transaction parties through a key derivation function of a second Hash algorithm; in the encryption period, the transaction data of the two transaction parties are encrypted through an encryption algorithm, and meanwhile, the encrypted data are desensitized and stored; in the decryption period, the two transaction parties obtain plaintext data through the second transaction private key; on the basis of an existing encryption algorithm, the neural network algorithm is introduced to generate the purchaser key, and meanwhile, desensitization processing is performed on the ciphertext data, so that jewelry transaction data is safer.

The invention discloses a data encryption method and system based on multi-terminal interaction, and relates to data encryption: when a user registers for the first time, acquiring main password data input by the user, and generating main key seed data through a key derivation function according to the main password data; based on the master key seed data, a hierarchical hash algorithm is adopted to construct a key derivation tree data structure, the key derivation tree data structure takes the master key seed data as a root node, and the key derivation tree data structure is expanded layer by layer according to the device category and the device identifier to form a tree-shaped derivation path; when a new device requests authorization, a derivation path is calculated according to the key derivation tree data structure in combination with the attribute data of the corresponding new device, and exclusive key data corresponding to the new device is derived and generated from the master key seed data along the derivation path; according to the exclusive key data of the sending device, in combination with the path data of the receiving device in the key derivation tree, encrypting the data to be transmitted between the devices to generate an encrypted data stream; the encryption efficiency of the offline equipment is improved.

Systems and techniques for secure communications and distribution of random values, produced from at least two satellite entropy sources, are described. These random values may be provided by respective quantum random number generators (QRNGs) at separate satellites, and optionally combined with values from ground-based entropy sources (e.g., QRNGs at terrestrial locations). An example method includes: receiving a first random value and a second random value via at least one satellite communication, where the first random value is generated by a first QRNG at a first satellite, and the second random value is generated by a second QRNG at a second satellite; and generating a cryptographic key based on the first random value and the second random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.

A module with an embedded universal integrated circuit card (eUICC) can include a received eUICC profile and a set of cryptographic algorithms. The received eUICC profile can include an initial shared secret key for authentication with a wireless network. The module can receive a key K network token and send a key K module token to the wireless network. The module can use the key K network token, a derived module private key, and a key derivation function to derive a secret shared network key K that supports communication with the wireless network. The wireless network can use the received key K module token, a network private key, and the key derivation function in order to derive the same secret shared network key K derived by the module. The module and the wireless network can subsequently use the mutually derived key K to communicate using traditional wireless network standards.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

The invention provides an AES (Advanced Encryption Standard)-based data enhancement encryption method, system and equipment and a medium, and belongs to the technical field of data security. The method comprises the following steps: receiving plaintext data to be encrypted and a password provided by a user; deriving a master key and an HMAC key from the password and the randomly generated salt value by using a key derivation function; randomly generating an initialization vector, and encrypting the plaintext data through the master key by using an AES encryption mode to obtain encrypted ciphertext data; performing message authentication code calculation on the ciphertext data, the initialization vector and the salt value through an HMAC key to generate an HMAC check value; and combining the salt value, the initialization vector, the ciphertext data and the HMAC verification value into a final output encrypted data packet. According to the method, a series of enhancement mechanisms such as strong key derivation, random salt values, message authentication codes and initialization vectors are introduced, so that the security and integrity of data are further improved.

According to the distributed photovoltaic ring communication group key generation method provided by the invention, safe and efficient group key management is realized by combining a group number derivation mechanism, environment feature binding and a quantum key enhancement technology. The method comprises the steps that a preset broadcast root key is called from a concentrator, and the broadcast root key is used for deriving group keys of members in each group; acquiring environment characteristics of members in each group in a communication group corresponding to the concentrator, and recording an acquisition timestamp; summarizing the environmental characteristics of all members in the communication group, and performing hash processing on the summarized environmental characteristics to obtain an initial environmental characteristic vector; and generating a first group key with a preset length through a key derivation function based on the broadcast root key, the initial environment feature vector, the timestamp and a preset group identifier.

The invention relates to a method for operating a communication system including a. a first station preparing a message including a relay service code indicative of the type of service a user needs for relaying combined with a communication key or an indication of a communication key to be used for communication with a relay station: b. the first station generating a keystream by applying a key derivation function on at least a confidentiality key and freshness value, c. the first station ciphering the message with the key stream.

The invention discloses a vehicle information safety protection system based on combination of a national cryptographic algorithm and a PUF (Physical Unclonable Function), which belongs to the field of vehicle information safety and encrypted communication, and comprises a response generation module used for generating a PUF response in a safety chip of a vehicle; the key derivation module is used for generating an encrypted master key through a key derivation function based on the PUF response, the vehicle owner identity and the random number nonce; the encryption and signature module is used for generating a ciphertext and carrying out digital signature on the ciphertext; the state monitoring module is used for monitoring the running state of the vehicle hardware; the key management module is used for triggering a failure operation of the encrypted master key when the state monitoring module detects that the hardware state is abnormal; and the decryption verification module is used for regenerating the PUF response and verifying the consistency of the generated key so as to execute data decryption. According to the method, hardware-level encryption protection of the vehicle data is realized through combination of the PUF and the national cryptographic algorithm, so that the safety of the vehicle owner data is protected in the whole life cycle of the vehicle.

The invention relates to a method for the local generation of quantum-safe keys in a network, in which a respective quantum-safe key, namely a user key usable for quantum-cryptographically secured communication, is generated locally in at least one of several network nodes interconnected via the network. This is done by applying a Key Derivation Function (KDF) to at least one random number and / or by combining it with a pre-shared secret. The at least one random number is provided to the aforementioned key-generating network node (NRN) via the network by one of the other network nodes (RGN) that locally generate random numbers using quantum mechanical means.A given random number is received by the NRN as a number of several subsequences, which are formed by the RGN according to a polynomial scheme PS encompassing this random number and enabling its later reconstruction, and are redundantly transmitted to the network node NRN via the same number of completely disjoint network paths, with each subsequence being transmitted via a different network path.

The invention discloses a data transmission method for a meteorological satellite communication system, and relates to the technical field of data transmission. Receiving original meteorological data, performing security level analysis on the original meteorological data, determining a security level, and processing the key change parameter by using the master key based on a preset key derivation function to obtain an encrypted session key; performing encryption processing on the original meteorological data based on the encrypted session key to obtain first ciphertext data; combining the key change parameter with the communication identification information to obtain first associated data; performing message authentication code calculation on the first associated data and the first ciphertext data to obtain a message authentication code; assembling the security level, the first associated data, the first ciphertext data and the message authentication code based on a preset format to obtain a target data frame; and sending the target data frame to a meteorological data center so as to decrypt the target data frame to obtain original meteorological data. By implementing the technical scheme provided by the invention, the security in the transmission process is ensured.

Methods, systems, and devices for wireless communications are described. Communication devices may perform secret key generation using a set of line-of-sight (LOS) communication modes to secure a physical channel. For example, a first device and a second device may communicate a set of reference signals over the physical channel using a set of LOS communication modes. The first device and the second device may generate a secret key based on the set of LOS communication modes, for example, by using information associated with the set of LOS communication modes to compute the secret key using a key derivation function that outputs the secret key. The first device and the second device may secure the physical channel by encrypting signaling between the first device and the second device with the secret key and communicating the signaling over the physical channel using LOS communications.

The invention discloses a micro-fluidic DNA detection-based security key generation and authentication method, which comprises the following steps: S1, carrying out DNA detection on a biological sample through a micro-fluidic chip to obtain SNP and STR feature data; s2, performing unified coding on the SNP and STR feature data to form stable bit string representation; s3, processing the bit string representation by using a fuzzy extraction mechanism, and generating a consistent key material under the condition of permitting a detection error; s4, deriving a final symmetric key from the key material by using a key derivation function; and S5, performing security packaging, transmission and authentication on the final symmetric key by adopting a post-quantum cryptography mechanism. According to the security key generation and authentication method based on microfluidic DNA detection, a set of key generation and identity authentication scheme with instantaneity, high specificity and anti-quantum security is constructed.

The invention provides a PUF (Physical Unclonable Function)-based post-quantum Internet of Things static key management method and system. Generation and storage of a secret key in the method comprise the following steps: firstly, inputting a challenge signal determined based on Internet of Things equipment into a physical unclonable function (PUF) to generate a PUF response; then, the PUF response is input into a key derivation function (KDF), and a key encryption key (KEK) is obtained; then, generating a PQC public key and a PQC private key by using a post quantum cryptography PQC algorithm; then, the PQC private key is encrypted by using a KEK and a symmetric encryption algorithm, and the encrypted PQC private key is stored in a secure storage area; wherein the KEK and the unencrypted PQC private key are cleared from the memory. By adopting the lightweight algorithm, efficient and low-cost key management can be realized on resource-limited Internet of Things equipment, meanwhile, the PUF characteristic is utilized to avoid storage of KEK, the quantum attack resistance of the key is enhanced in combination with the quantum cryptographic algorithm, and the security improvement of key management is realized.

The invention discloses a construction method of a hybrid key encapsulation mechanism, which comprises the following steps of: generating a public and private key pair of two PKE (Public Key Exchange) algorithms based on security parameters, and outputting a public and private key pair of the hybrid key encapsulation mechanism; taking a public key of a mixed key encapsulation mechanism as the input of an encapsulation algorithm, randomly selecting two plaintexts, respectively generating ciphertexts through public key encryption algorithms of two PKE algorithms, deriving a shared key through a key derivation function, and outputting the shared key; and taking the ciphertext and the private key of the mixed key encapsulation mechanism as the input of a de-encapsulation algorithm, and outputting a shared key. According to the method, a construction method based on the KEM is not used any more, universal construction of the hybrid KEM based on the PKE scheme is achieved, multiple PKE schemes can be adopted for instantiation, multi-level safety under classical and quantum models is achieved, a key derivation function of the KEM for achieving CPA and CCA safety only depends on a plaintext part, and therefore the key derivation function of the hybrid KEM is independent of the plaintext part. Running efficiency is improved by simplifying hash operations and removing redundant hash operations.

Example embodiments of the present disclosure provide for an example method including maintaining a current version info list including version info tuples for software layers. The example method includes, upon receipt of a request for a registered version key, performing a comparison algorithm to authenticate a requested version info list including a number of version info tuples associated with software layers. The tuples can include a security version number (SVN) and a security context string for each software layer. The requested version info list can be authenticated using the comparison algorithm to determine that the requested version info list includes version info tuples with higher SVNs than the current version info list. Responsive to authenticating the requested version info list, the method include providing a portion of the requested version info list as input into a key derivation function (KDF) and obtaining a device requested version key as output.

Methods, systems, and devices for using a device-specific key for key derivation are described. A user device receives, via a client application on the user device, a request to perform a cryptographic operation using a cryptographic key. The user device causes, after receiving the request, a secure subsystem of the user device to generate the cryptographic key using multiple iterations of a key derivation function and a device-specific key as input into the key derivation function. The device-specific key is stored in the secure subsystem. The user device performs a cryptographic operation using the cryptographic key.

The invention provides a Xiaohua chicken traceability method and system based on a block chain, and the method comprises the steps: generating a root public parameter and a root verification key through credible setting, generating an independent sub-proof key for each node from breeding to selling through a hierarchical key derivation function based on a traceability hierarchical structure, encoding the acquired multi-modal traceability data into private input of the zero-knowledge proof circuit; selecting a corresponding rule circuit from a predefined circuit library, and splitting a data source party; each data party generates a zero-knowledge proof fragment by using a sub-proof key and a blinding factor, and after a main node verifies public state consistency and blinding factor constraint through a recursive aggregation algorithm, an aggregation proof is generated; the common input comprises a new state commitment generated by a cryptographic accumulator, and continuous updating of the state is realized; and verifying the aggregation certification by using the root verification key, and storing the certification abstract passing the verification in the block chain. According to the invention, cross-link data privacy protection and verifiable chain type tracing can be realized.

A method for establishing a secure messaging channel between a smartcard and an end device is described. The smartcard contains a Personal Identification Number (PIN), an initial key derivation function, and a communication channel establishment protocol. The end device contains the PIN, the initial key derivation function, and the communication channel establishment protocol. The method comprises the following steps: creating an initial key on the smartcard and on the end device based on the PIN and the initial key derivation function; creating a nonce value, which further comprises the following steps: generating the nonce value on one end device or the end device; encrypting the nonce value with the initial key; and sending the encrypted nonce value to the other end device or the smartcard.and decrypting the encrypted nonce value with the first key, executing the communication channel establishment protocol on the smartcard and on the terminal device based on the generated nonce value to generate a second key on the smartcard and on the terminal device, first deriving a first secure messaging channel key on the smartcard and on the terminal device based on the second key, and second deriving a second secure messaging channel key on the smartcard and on the terminal device based on the second key.

A system and method for multi-factor key derivation includes: a user having a plurality of authentication factors; whereby the plurality of authentication factors are converted into key material using intermediate factor-specific functions, and whereby said key material is then converted into a key using a key derivation function.

The invention provides a quantum security gateway system, and the system comprises a position obtaining module which is used for obtaining the geographical position information of the quantum security gateway system; the position fingerprint generation module is used for generating a position fingerprint from the geographical position information through a password hash algorithm; the quantum security module is used for acquiring an original quantum key, performing post-processing on the original quantum key by taking the position fingerprint as an input parameter of a key derivation function, generating a quantum key bound with the geographic position, and storing the quantum key bound with the geographic position; the position verification module is used for obtaining the current geographic position when the quantum key bound with the geographic position is used, and calculating the deviation between the current geographic position and the geographic position bound with the quantum key; and the data encryption module is used for determining a security policy according to the deviation. The technical problem that quantum encryption equipment in the prior art is single in security policy dimension and difficult to adapt to security protection requirements of complex environments can be solved.

This disclosure relates to a firmware update method, an electronic device, a server, and a system. The method includes: obtaining from a user device an encrypted firmware update package sent by a server to the user device in response to a firmware update request from the electronic device, and a firmware decryption key enDecKey encrypted by the server using a key encryption key KEK, wherein the key encryption key KEK is a temporary key derived based on a predetermined key derivation function; decrypting the received encrypted firmware decryption key enDecKey using the key encryption key KEK to obtain a firmware decryption key decKey; and decrypting the encrypted firmware update package using the firmware decryption key decKey to obtain a firmware update package for updating the firmware in the electronic device.

The present invention proposes a method for provisioning a credential to a user equipment (10) in a private telecommunications network, the private telecommunications network including a credential holder and a gNB / AMF or eNB / MME, the method comprising: a) sending a provisioning request (40) from the user equipment (10) to the gNB / AMF or eNB / MME (11); b) establishing a PLS key (41) between the user equipment (10) and the gNB / AMF or eNB / MME (11) by physical layer security; c) providing a PLS key to the user equipment (10) via a PLS key; d) transmitting 43 a message from the user equipment 10 to the gNB / AMF or eNB / MME 11, the message including data permitting identification of the user of the user equipment 10 and / or the user equipment 10 and the master key, the message being integrity and confidentiality protected by a PLS key or a key derived from the PLS key; e) transmitting 44 a message from the gNB / AMF or eNB / MME 11 to the credential holder 12, the message including data permitting identification of the user of the user equipment 10 and / or the user equipment 10 and the master key, the message being integrity and confidentiality protected by a PLS key or a key derived from the PLS key. f) verifying in the credential holder (12) the data that allows identifying the user of the user equipment (10) and / or the user equipment (10); g) if the verification is positive, assigning in the credential holder (12) a unique subscription identifier to the user equipment (10) and generating corresponding keys, security parameters, and key derivation functions; h) transmitting the unique subscription identifier from the credential holder (12) to the gNB / AMF or eNB / MME (11). i) transmitting the unique subscription identifier, security parameters, and key derivation function from the gNB / AMF or eNB / MME (11) to the user equipment (10) in a message integrity and confidentiality protected by a PLS key or a key derived from the PLS key (47); j) generating a final key at the user equipment (10), the final key being a credential including the unique subscription identifier, security parameters, and final key (48);Including.

The invention discloses a Mesh network data encryption transmission method and device, equipment and a medium. When the method is applied to a key management node, the method comprises the following steps: generating a random number of a preset byte through a preset random number algorithm at an interval of preset generation time; generating a to-be-updated key from the random number through a preset key derivation function, and determining a corresponding index value according to the index value of the current synchronous key; and encrypting the to-be-updated key and the index value thereof according to a preset encryption algorithm and the current synchronous key and the index value thereof to generate a key update message, and sending the key update message to the network communication node. When the method is applied to a network communication node, the method comprises the following steps: receiving a key updating message, analyzing and checking the key updating message, and obtaining a newest key and an index value thereof; and encrypting the to-be-communicated data according to the latest key and the index value thereof to generate an encrypted message, and sending the encrypted message to the to-be-communicated node. By implementing the method provided by the invention, the problem that data transmission of the Mesh network lacks security and reliability can be solved.

Systems and techniques for secure communications and distribution of random values, provided via satellite communications, are described. These random values are generated from one or more ground-based entropy sources (e.g., quantum random number generators (QRNGs) at terrestrial locations), and optionally combined with values from satellite-based entropy sources (e.g., QRNGs at non-terrestrial locations). An example method includes: receiving a first random value generated by a first QRNG at a terrestrial location; receiving a second random value and a third random value via at least one satellite communication, each additional random value generated by other QRNGs; and generating a cryptographic key based on the first random value, the second random value, and the third random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.

A method includes: accessing at least one key derivation parameter; and generating a first key (KH-SEAF) for a network function configured to serve as a security anchor for a home public land mobile network (H-PLMN), where the first key is generated based on a key derivation function and the at least one key derivation parameter.

A computer-implemented method that exhibits: Publishing (202), by one or more processors, a conventional key in a conventional certificate and a public post-quantum cryptography, PQC, key in a PQC certificate; Encrypting (204), by one or more processors, of data with a hybrid shared secret, wherein the hybrid shared secret was generated with a key derivation function by using a conventional shared secret based on the conventional public key and a shared PQC secret based on the public PQC key, comprising: Encrypting (404) the conventional shared secret by one or more processors using a randomly generated (402) conventional public key; Deriving (406) a new public PQC key using a PQC key encapsulation mechanism based on the public PQC key; Generating (410) the hybrid common secret by using the key derivation function based on the conventional common secret and the common PQC secret; and Encrypting (412) the data with the hybrid shared secret; Decryption (206), by one or more processors, of data using the hybrid shared secret based on a conventional private key and a private PQC key; and Signing (208), by one or more processors, which signs data with a conventional signature followed by a PQC signature.

The application belongs to the technical field of artificial intelligence, and particularly relates to a private AI model calling method and system based on encrypted data interaction, which comprises the following steps: S1, a client generates a series of structured random numbers through a key derivation function based on a main random number seed and each dimension index, encrypts an original input vector into an initial ciphertext vector by using a partial homomorphism encryption public key and the structured random numbers, generates a conditional re-encoding key pair for nonlinear calculation in the AI model, and sends a re-encoding public key to a server. The application can eliminate the confusion ciphertext, so that the server side constructs a quasi-gradient noise based on the intermediate state of the calculation process and injects the result, resisting side channel attacks on the output ciphertext; and the client can reconstruct and remove the noise, so that the lossless calling result is obtained without sacrificing any calculation accuracy, and end-to-end privacy protection of the whole model reasoning process is realized.