890 results about "Key distribution" patented technology

The invention discloses a heterogeneous encrypted multi-mode multimedia message real-time fragmentation transmission method for a 5G network, and relates to the technical field of multimedia transmission optimization. According to the heterogeneous encryption multi-mode multimedia message real-time fragmentation transmission method for the 5G network, the fragmentation granularity and priority are optimized through a reinforcement learning algorithm by obtaining the sensitive label and the value density of multimedia data and combining the 5G slice resource state. And dynamically selecting an encryption algorithm cluster according to a fragmentation rule, and realizing cross-slice key distribution and updating by using an alliance chain. On the basis of space-time relevance of multi-modal data, a fountain code driven redundant coding strategy is constructed, and a fragment transmission path is optimized in combination with a game theory model. And finally, analyzing a transmission flow characteristic and a key distribution log, and dynamically adjusting an encryption strength threshold value and a fragment retransmission strategy. According to the method, the security, the reliability and the transmission efficiency of the multimedia data in the 5G network are improved, and the method is suitable for a multimedia communication scene with low time delay and high reliability.

The invention belongs to the technical field of digital information transmission, and relates to a vehicle-mounted ad hoc network security communication system and method based on an NTRU lattice cryptosystem, and the system comprises a message signature module, a message encryption module, a message decryption module, an identity authentication module, and a key exchange module. The message signature module carries out signature by utilizing a private key and a random polynomial dynamically generated by a pseudo-random number generator based on an NTRU lattice cryptosystem; the message encryption module encrypts a to-be-sent message by randomly selecting a temporary polynomial and combining a public key of a receiver; the message decryption module is used for decrypting the received ciphertext # imgabs1 # by using a private key and an inverse element # imgabs0 # of a module p of the private key; the identity authentication module is used for performing identity authentication; the key exchange module realizes secure key exchange between communication nodes in the vehicle-mounted ad hoc network through an improved Blom key distribution protocol. The system improves the security and communication efficiency of the vehicle-mounted network.

The invention discloses a computer network security monitoring system and method. The system comprises a quantum encryption traffic acquisition module, a biological recognition feature extraction module, a block chain detection traceability analysis module and a visual management module. The quantum encryption flow collection module generates and distributes a secure quantum key through a quantum key distribution unit, encrypts a collected data packet through an encryption transmission unit, and generates a flow data segment through a flow collection subunit and a data cache statistical analysis subunit. The biological recognition feature extraction module verifies the identity of a user through a biological recognition unit, and extracts a multi-dimensional feature vector by using a feature extraction subunit. And the block chain detection traceability analysis module performs detection and traceability analysis on the abnormal traffic through the anomaly detection subunit and the traceability analysis subunit, and stores a result in the block chain storage unit. The visual management module provides visual network state display and user identity verification functions through a visual display subunit and an identity verification and access control subunit. According to the invention, quantum encryption, biological recognition and block chain technologies are combined, so that the accuracy, security and traceability of network security monitoring are improved.

The invention discloses an industrial internet data security communication method based on hybrid anti-quantum cryptography, which relates to the technical field of data communication, and comprises the following steps: acquiring a key pair and an anti-quantum security certificate; sending a connection request to data receiver equipment to complete certificate credibility authentication, and sending an anti-quantum security certificate of the equipment; receiving a shared key seed sent by the data receiver equipment; decrypting the encapsulated ciphertext to obtain a shared key seed, and generating a corresponding shared key according to the same shared key generation algorithm as the data receiver equipment; the method comprises the following steps of: signing original data by using a signature private key, splicing a signature and the original data to obtain spliced data, encrypting the spliced data by using a shared key based on an AES-256-GCM algorithm to obtain an encrypted ciphertext and an ML-DSA signature, and sending the encrypted ciphertext to data receiver equipment. According to the method, the key distribution step is simplified, the signature verification calculation overhead is optimized, and the data communication efficiency is improved.

The invention discloses a data distributed storage and reading method and system based on multi-modal protection, and relates to the technical field of multi-modal data encryption storage, and the method comprises the steps: receiving input data, and preprocessing the input data into multi-modal segmentation data; executing multi-key cooperative encryption on the data; carrying out distributed storage on the encrypted data; signing and broadcasting the distributed stored node information based on the block chain; and receiving a data query request of a user, obtaining the corresponding encrypted segmented data through the permission vector of the user, and decrypting and recombining the encrypted segmented data to obtain query data. Through the multi-modal feature fusion technology, the security of data storage is improved, meanwhile, a multi-level encryption system is constructed through multi-key cooperation encryption, the security of key distribution is effectively guaranteed, a distributed storage strategy based on dynamic weight is adopted, intelligent selection and load balancing of storage nodes are achieved, and the security of data storage is improved. And the data storage reliability and the system expansibility are improved.

The invention relates to the technical field of quantum communication security, and discloses a quantum key distribution secure communication system based on a quantum mechanics principle. The system comprises a quantum state preparation unit which controls a quantum emission device to output a quantum state sequence containing a preset polarization angle and a phase modulation photon group; a quantum channel feature extraction unit captures channel environment interference parameters and constructs a photon polarization distribution matrix; a quantum communication security evaluation unit receives the matrix, and calculates a channel security coefficient threshold through a quantum bit error rate analyzer; the quantum key dynamic optimization unit generates an optimized key segmentation strategy in combination with a security coefficient threshold and a historical key negotiation record; the quantum key rotation control unit switches quantum state modulation parameters according to a segmentation strategy and a time window; and the quantum node synchronization management unit monitors node clock offset and injects a calibration signal to realize key distribution time slot alignment. The system can dynamically cope with environmental interference, and improves the security and adaptability of quantum key distribution.

The invention relates to the technical field of block chains, and discloses a data encryption system for evidence collection and storage based on a block chain technology. According to the data encryption system for evidence collection and storage based on the block chain technology, a hash value can be generated based on a timestamp of data chaining, so that integrity of storage data is regulated and controlled, data tampering detection is realized, a user permission access range can be regulated and controlled in combination with a key distribution mechanism, sensitive data leakage is effectively prevented, and user experience is improved. The consistency of the encryption step is verified according to the intelligent contract execution logic, the multi-node synchronization error is eliminated, the error of the encrypted data storage link is verified through the Hash verification algorithm, and the consistency of the block data is ensured.

The invention relates to the technical field of encryption communication, in particular to a distributed vehicle-mounted advertisement node encryption communication and tamper-proofing system. Comprising a vehicle-mounted advertisement node layer, an edge computing layer, a block chain layer and a cloud platform layer, the vehicle-mounted advertisement node layer is composed of a plurality of vehicle-mounted advertisement nodes and is responsible for collecting vehicle sensor data, playing advertisement content and performing local encryption. The edge computing layer is composed of edge computing nodes distributed in a regional base station or a road side unit and is responsible for dynamic key distribution, lightweight data verification and node state monitoring; the block chain layer comprises an advertisement evidence storage module and an identity management module, adopts an alliance chain, stores advertisement content hash, node identity certificates and operation logs, and ensures that data cannot be tampered; the cloud platform layer comprises an advertisement distribution module, a secret key life cycle module and an anomaly analysis module, and is responsible for global advertisement content distribution, secret key life cycle management and anomaly detection analysis.

The invention discloses a quantum secret communication application security test method, system and device and a medium, and belongs to the technical field of communication security. According to the quantum secret communication application security test method, an attack detection model, a receiving and transmitting end detection model, a security performance index test model and a security result analysis model are constructed, and a security test process and a test process index are provided for the security problem of a classical communication process in quantum secret key distribution practical application; according to the method, the anti-attack capability and the security performance of a tested system are evaluated, so that the security of the quantum key distribution network is evaluated, and a corresponding test result is generated, so that the integrity and the confidentiality of a key in a transmission process are ensured, and a security evaluation reference can be provided for a power wireless public network; a communication security test verification scheme is provided for the quantum key distribution network, and the security operation of the key infrastructure is ensured.

The invention discloses a multi-node secure communication method and system based on quantum key distribution, and the method comprises the steps: evaluating multi-dimensional parameters of a quantum channel, dynamically updating a node reputation value, constructing a four-dimensional topological graph database, and generating candidate routing paths based on a Monte Carlo tree search algorithm; a state-action space is constructed by further combining reinforcement learning, and path selection is optimized by using a dual Q network and a priority experience playback mechanism; through multi-dimensional channel assessment and node reputation value dynamic updating, the defects of a traditional quantum network static routing strategy are overcome, the communication safety and efficiency are improved, and low-delay and high-reliability key distribution of a complex quantum network is supported.

A method by an integrated access and backhaul, IAB, node and an IAB node for securely communicating with at least one second IAB node is provided. A connection is established a connection with a donor IAB node of a network. A first message including a symmetric key to use in securely communicating with the at least one second IAB node is received from the donor IAB node. A second message is transformed into a secure message using the symmetric key and a message protection algorithm. The secure message is transmitted to the at least one second IAB node.

The invention discloses a commodity transaction method and system for a block chain smart contract, and relates to the technical field of smart contracts, and the method comprises the steps: generating an entanglement particle pair through a quantum key distribution protocol, and generating an initial contract parameter package; when the commodity arrives at the logistics key node, generating a space-time stamp hash value, and writing the space-time stamp hash value into the block chain to generate a logistics event voucher; the intelligent contract monitors the logistics event voucher and outputs a verification signal to trigger payment; when the buyer and the seller are objection to the verification result, the smart contract randomly selects an arbitration node through a dark matter detector network; after zero-knowledge proof verification, weighted voting is carried out according to rules, funds are released through a cross-chain protocol, and the commodity ownership is unlocked; after arbitration and verification are completed, the smart contract calls a cross-chain protocol to release funds to the seller, and a closed-loop transaction voucher is formed; through the quantum entanglement particle pair and the gravitational wave sensor, high-precision time-space stamp verification is realized, and authenticity and non-tampering of logistics events are ensured.

The invention provides a power distribution automation terminal security debugging method based on Bluetooth communication, and the method comprises the steps: extracting a historical operation record and a current task context from an operator identity identifier, calculating a real-time permission range of resource access, and adjusting an initial access boundary according to the real-time permission range; a security gateway module is embedded in a Bluetooth communication channel, a cross-domain data exchange request is intercepted and analyzed, whether the request exceeds the adjusted access boundary is judged, and if yes, transmission is refused; analyzing the cross-domain data exchange request, extracting a source domain identifier and a target domain identifier of a data packet from the cross-domain data exchange request, and encrypting the data packet to obtain encrypted cross-domain transmission data; and obtaining a decryption key distribution record of the encrypted cross-domain transmission data in the security domain of the receiving end, judging whether the key is matched or not, if so, decrypting the data and transmitting the data to the target domain, and otherwise, discarding the data.

The invention discloses a high-load data steganography method, system and device and a medium, and the method comprises the steps: obtaining secret data of a power system, and converting the secret data into a novenary sequence; a quantum key distribution system is utilized to generate a shared key, the novenary sequence is encrypted through an encryption key, encrypted information is obtained, and the shared key comprises the encryption key and a mapping key; determining a corresponding first unit matrix from a preset mapping library based on the mapping key, and performing non-overlapping tiling on the first unit matrix in a two-dimensional plane to obtain a second-order reference matrix; and scanning a preset carrier image into a non-overlapping first pixel pair sequence according to a Hilbert curve, and embedding the encrypted information into the first pixel pair sequence by using the second-order reference matrix to obtain a steganographic image, so that the data transmission security can be improved.

The invention relates to the technical field of information encryption, in particular to a customer information encryption protection method in a pork transaction process, which comprises the following steps of: based on pork transaction data, sequentially finishing key distribution path sorting and serial number verification, screening deviation in combination with customer operation behaviors, adjusting a sensitive field encryption strategy and replacing a key; and performing consistency verification on the identity data abstract combination, generating a signature according to the transaction content, and verifying a signature consistency result. In the invention, through a dynamic key path and inter-node sorting coding, real-time adjustment of a flow link is realized, transaction behavior data drives an encryption strategy to be switched in time, a sensitive field key can be dynamically updated along with the change of an operation characteristic, and segmentation consistency confirmation of a client identity is realized through multi-abstract combination cross verification; digital signatures are synchronously incorporated into double check of multi-source abstracts and transaction contents, and when behavior abnormity and node abnormity are found, related processes are actively interrupted, and risk marking is automatically completed.

Embodiments of a present disclosure relate to communication systems and more particularly to a system and a method for a point-to-point decoy differential phase shift (DPS) Quantum Key Distribution (QKD). The system includes a source QKD device and a destination QKD device. The source QKD device generates and transmits one or more quantum states comprising a series of N coherent pulses with one or more phases to the destination QKD device. The destination QKD device receives, and records time information and corresponding detector units associated with each photon detection event in the received quantum states. The source and destination QKD devices use decoy states to detect and prevent attacks, such as Photon-Number-Splitting (PNS) attacks. The system allows for the secure generation of a secret key between the source and destination QKD devices.

The invention provides a power marketing archive intelligent management method, which comprises the steps of receiving archive data through a power data acquisition interface, matching an electricity price feature code in an archive based on a real-time electricity price policy identifier, and injecting a version calibration mark into unmatched data; constructing an electricity consumption abnormity prediction model based on the user historical load mode and the environmental factors; when a query request is responded, dynamic penalty parameters are generated based on the user behavior portrait and the rule base; a quantum key distribution path is generated based on a power grid topological structure, and cascade encryption is implemented along physical connection nodes; dynamically associating user operation authority with a power grid operation risk signal, and automatically disabling core operation in a high-risk state; and analyzing archive data in a security isolation environment to drive line loss optimization, electric charge tracing and fault pre-judgment service flow in real time, and outputting feedback archive update based on the service. According to the invention, the safety, reliability and operation efficiency of power marketing archive management are improved.

Techniques for encrypting data within a 5G Open Radio Access Network (O-RAN) includes receiving, at a first module of the 5G O-RAN, a first set of one or more data packets encrypted using mathematical encryption. The method also includes determining, using a machine-learning model trained to detect cybersecurity threats, the existence of a cybersecurity threat associated with the voice or data transaction, and in response, determining to switch encryption from the mathematical encryption to quantum encryption. The method further includes encrypting the one or more data packets using a quantum encryption key to generate quantum-encrypted data packets, transmitting the quantum encryption key from the first module of the 5G O-RAN core to a second module of the 5G O-RAN over a quantum key distribution (QKD) channel, and transmitting the quantum-encrypted data packets from the first module of the 5G O-RAN to the second module of the 5G O-RAN.

The invention discloses a cloud platform scheduling method and system based on multi-source Internet of Things perception, and relates to the technical field of cloud platform scheduling, and the method comprises the steps: constructing a dynamic adjustable sensor topology network, optimizing a node communication path, and employing an AES symmetric encryption protocol real-time dynamic key distribution and topology synchronization updating mechanism; fusing the core indexes in real time, establishing a multi-dimensional coupling model, and generating a dynamic priority matrix; based on the dynamic priority matrix, quantitatively analyzing the coupling relationship of the core indexes; based on historical data and real-time monitoring information, carrying out security-aware dynamic partition management on the encrypted computing resources, and dynamically allocating the encrypted computing resources; a closed-loop security control framework from the edge to the cloud is constructed, data flow security is guaranteed through end-to-end encryption transmission, cross-task interference is prevented by calculating security partitions of encryption calculation resources, fusion of multi-modal data is completed, and a real-time feedback adjustment closed-loop control mechanism is formed.

Some embodiments provide a method for a first data compute node (DCN) operating in a public datacenter. The method receives an encryption rule from a centralized network controller. The method determines that the network encryption rule requires encryption of packets between second and third DCNs operating in the public datacenter. The method requests a first key from a secure key storage. Upon receipt of the first key, the method uses the first key and additional parameters to generate second and third keys. The method distributes the second key to the second DCN and the third key to the third DCN in the public datacenter.

The invention discloses an electric power real-time data dynamic encryption transmission method and system based on a national secret algorithm. According to the method, the real-time updating of the session key is realized by fusing the SM3 Hash algorithm and the multi-dimensional dynamic factor, and the anti-attack capability of data transmission of the power system is improved. A timestamp and data counter double-trigger mechanism is introduced in the key generation process, so that the key is automatically alternated under a fixed time interval or a data volume threshold value, a key exposure window is shortened, and the security risk caused by using the same key for a long time is reduced. Key synchronization is carried out in combination with an SM2 bidirectional authentication channel, the confidentiality of key distribution is ensured, access of unauthorized equipment is avoided through an identity authentication mechanism, full-closed-loop security protection from key generation to transmission is formed, the high-security requirement of the power industry for key data transmission is met, and the security of key data transmission is improved. Through deep combination of a cryptographic algorithm system and a dynamic adaptation mechanism, the high efficiency and compliance of power real-time data transmission are considered while the security is ensured.

The invention discloses a key sharing and security detection scheme based on an intelligent electric meter, and aims to solve the problems that an untrusted electric meter in an intelligent power grid is difficult to identify effectively, the detection scale is uncontrollable and the communication security is insufficient. According to the scheme, the elliptic curve cryptography, the threshold secret sharing mechanism and the physical unclonable function are combined, and hardware-level binding of the unique identity of the equipment and the secret key is achieved in the registration stage. Through a threshold password mechanism, a plurality of intelligent electric meters cooperatively participate in key reconstruction and encryption communication, and the intelligent electric meters can still work normally when part of the electric meters fail or are broken through. The center node can actively identify a fault or a malicious ammeter and dynamically adjust a communication strategy according to the integrity and correctness of the feedback information. Meanwhile, the scheme supports dynamic identity updating and integrity verification, and effectively resists modeling attacks, Sybil attacks, replay attacks and DoS / DDoS attacks. According to the invention, secure identity authentication, reliable key distribution and efficient anomaly detection are realized, and the security of smart grid terminal communication is improved.

Embodiments of the present disclosure provide a quantum key distribution method, a gateway device, a terminal device, and a storage medium. The method is applied to the gateway device. The gateway device comprises a first distribution system, a first encryption and decryption module, and a first password module. The method comprises: the first encryption and decryption module sends a wireless key acquisition request to the first password module; the first password module sends wireless key acquisition response information to the first encryption and decryption module, wherein the wireless key acquisition response information comprises a wireless key and a serial number corresponding to the wireless key; the first encryption and decryption module performs encryption processing on a quantum key on the basis of the wireless key to obtain an encrypted quantum key; and the first distribution system sends a data transmission request to the terminal device, wherein the data transmission request comprises the encrypted quantum key and the serial number corresponding to the wireless key, so that the terminal device obtains an original quantum key on the basis of the encrypted quantum key and the serial number corresponding to the wireless key.

The invention relates to the technical field of communication transmission, and particularly discloses an all-in-one machine encryption communication transmission method and system based on a dynamic strategy, and the method comprises the steps: collecting hardware state parameters, network environment parameters and communication content characteristics of an all-in-one machine and a target communication opposite end in real time; calculating a risk index of the current communication process based on the network environment parameters of the all-in-one machine and the target communication opposite terminal; matching an encryption algorithm sequence, a key updating frequency and a transmission protocol according to hardware state parameters, risk indexes and communication content characteristics of the all-in-one machine and a target communication opposite end, performing segmented encryption and multi-channel parallel transmission on communication data of the all-in-one machine, and performing security key distribution in combination with a distributed key management mechanism to obtain a security key; performing encrypted communication security verification based on the security key to obtain communication verification data; the security of the communication process of the all-in-one machine is improved, and the risks of data leakage and man-in-the-middle attack are prevented.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The invention relates to the technical field of 8G, and discloses a nuclear fusion plasma real-time control method and system based on a quantum neural network and 8G communication. The method comprises the following steps: transmitting plasma multi-dimensional electromagnetic parameters at a rate greater than or equal to 1Tbps through an 8G terahertz communication network; quantum dimension reduction (the dimension compression ratio is greater than or equal to 98%) and classical time sequence prediction are executed at the edge quantum computing nodes; a control instruction is transmitted to the superconducting magnet array through the photon integrated interface, so that the adjustment of a magnetic field smaller than or equal to 1nm is realized; physical layer quantum encryption is adopted to guarantee communication security, and the secret key distribution rate is larger than or equal to 20 Mbps.

The invention discloses a network communication dynamic encryption method, an encryption and decryption system, equipment, a medium and a product, and relates to the technical field of communication. The method comprises the steps that a dynamic factor is obtained through a Berkley packet filter function, a key is generated based on the dynamic factor, the key generated based on the dynamic factor has high randomness and unpredictability, and the problem that a fixed key is adopted in a traditional encryption mode, and consequently the key is prone to being cracked can be solved; moreover, by using the execution environment of the Berkley packet filter function in the kernel mode, the risk that the key is stolen in the transmission and storage process is reduced, the influence on the network communication performance is small, and the network communication encryption efficiency and the network communication security are improved. Moreover, the information of network communication is used as the basis of key generation, additional key distribution and storage management processes are not needed, complex key exchange and certificate management mechanisms are not needed, the key management process is simplified, and the operation and maintenance cost of the system is reduced.

The invention discloses a block chain cross-domain service method and system based on sharing verification and a smart contract, and the method comprises the steps: building a cross-domain sharing channel between a first business domain of a first block chain and a second business domain of a second block chain through a main node on a relay chain; performing hash operation on the original data to obtain a data fingerprint, packaging the data fingerprint, the data metadata and the digital signature of the data holding node into a first message, and submitting the first message to a relay chain through a sharing channel; after receiving the first message, performing consensus verification on the data fingerprint based on a threshold signature mechanism, and writing a verification result into a shared state table; querying the verification state of the data fingerprint from the sharing state table through the data use node in the second service domain, and requesting to download the encrypted data from the intelligent contract of the relay chain; executing permission judgment, and triggering a key distribution contract to transmit a decryption key to a data use node; and downloading the encrypted data, and writing the cross-domain data sharing transaction record into a block chain account book of the second business domain.

The invention belongs to the technical field of information retrieval, and particularly relates to an encrypted graph quality constraint shortest path query method and device based on tree decomposition and a computer readable storage medium. The method comprises the following steps: a key distribution mechanism sends a key pair to a data owner and sends a key to a user; the data owner constructs the graph data into a ciphertext index and sends the ciphertext index to the cloud platform; when a user queries the graph data; sending the authorization token to the user through a secure channel; after receiving the authorization token, the user starts to query the graph data; the cloud platform executes a query algorithm; obtaining a queried quality constraint shortest distance and an intermediate node of the shortest path; and after the authorization token reaches the limited time, the user loses the query authority of the graph data G. According to the method, the problems that leakage and security risks are possibly caused when data are stored on a third-party server, and particularly, the privacy and security of a user are threatened due to the fact that a cloud server possibly accesses or steals the data without authorization are solved.

The invention discloses a multi-level security protection method taking a persistent memory as a core level, and relates to the technical field of computer storage security. The method comprises the following steps: constructing a cross-level security abstract model, and implementing NUMA perception encryption on the basis of the cross-level security abstract model, including a localization encryption strategy and an intelligent key distribution system; based on a cross-hierarchy security abstract model and NUMA perception encryption, dynamic key hierarchical derivation is realized, a tree topology structure is adopted in the derivation process, generation of a root key and sub-keys of each hierarchy depends on a hierarchical key derivation engine, and cross-node synchronization is completed through an intelligent key distribution system during key cascade update; a side channel attack resisting system is constructed, support for CXL equipment is matched with establishment of a CXL metadata consistency group in NUMA perception encryption, and the security of data transmission and storage of the CXL equipment is guaranteed. According to the invention, the encryption performance is obviously improved.