36 results about "Key distribution center" patented technology

The invention discloses a remote data rapid transmission system and method based on the Internet, a client initiates a session establishment request containing a session type identifier and a transmission protocol identifier to a server, receives a session response message after transmitting an initial data packet, obtains a temporary session key through verification of a key distribution center, and transmits the session response message to the server; an authorization identifier and a protocol verification symbol are generated through hierarchical decryption, a security enhancement data packet is constructed and sent, an end-to-end encryption transmission channel is further established, and meanwhile, a session maintenance mechanism is provided. And the server verifies a session type identifier and a transmission protocol identifier of the client, generates a session response message containing a dynamic confusion strategy and a trap identifier, submits the session response message to a key distribution center for signature, returns the session response message to the client, activates a secure transmission service instance after verifying a security enhancement data packet, and implements a series of security control strategies. According to the invention, the problems of low transmission efficiency and poor security of the existing remote data transmission system are effectively solved, and efficient and secure data transmission is realized.

The invention discloses an identity authentication method and system, an electronic device, a storage medium and a program product, and relates to the technical field of security. Only when a legal user is determined for the first time, a key distribution center knows a real name corresponding to a client, a subsequent signature, a bill authorization bill generation process and a subsequent anonymous access process to a corresponding server; in the embodiment of the invention, the clients initiate with the artifacts, so that the key distribution center and the corresponding server do not know the association relationship between the artifacts and the clients, and the privacy of the user is guaranteed.

The invention discloses an anti-Byzantine privacy protection federated learning method and system based on a block chain. The anti-Byzantine privacy protection federated learning method is realized through the federated learning system comprising a key distribution center, a plurality of clients, two non-collusion servers and a block chain network. According to the method, the data privacy of a client side is guaranteed through a safety calculation process of cooperation of double servers, attacks caused by malicious client sides are reduced as much as possible through a self-adaptive clustering and robustness aggregation method, and reputation values of the client sides are managed through intelligent contracts. The reputation value is used to set the award and penalty obtained after the client participates in federal learning, and the blockchain increases transparency and reliability for the system. And updating the global model based on a security calculation process under a non-collusion double-server architecture, and finally obtaining a safe and reliable global model after training is finished.

This application discloses a secure communication method based on an unmanned vehicle, comprising: sending control instructions and path planning information to a network control device, which sends forward data to a control center cryptographic device; the control center cryptographic device selects a corresponding key based on the forward data type, encrypts the data, and then sends it to a base station; the base station forwards the data to the unmanned vehicle, and the unmanned vehicle cryptographic module decrypts the data to obtain plaintext data; the return data is encrypted by the unmanned vehicle cryptographic module and decrypted by the control center cryptographic device; the key distribution data from the key distribution center to the unmanned vehicle cryptographic module is encapsulated into a corresponding frame format by the network control device, encrypted by the control center cryptographic device, and then transmitted to the unmanned vehicle cryptographic module via a wireless channel. This method can encrypt and protect the data transmitted by the unmanned vehicle, realize periodic automatic updating of working keys, and solve the key synchronization problem during the key update process.

The application discloses a key filling method for a quantum local area network, the quantum local area network comprising a first control station, a quantum key filling machine and a key distribution center, the first control station and the quantum key filling machine being in communication connection, and the method comprising: the quantum key filling machine sending a key filling request to the first control station. The first control station determines a target distribution strategy from preset distribution strategies according to the type of the key filling request, the preset distribution strategies comprising a first preset key distribution strategy and a second preset key distribution strategy. The first control station distributes the obtained quantum symmetric key to the quantum key filling machine and / or the key distribution center according to the target distribution strategy to perform key filling, wherein the quantum symmetric key distributed based on the first preset key distribution strategy is a directional key, and the quantum symmetric key distributed based on the second preset key distribution strategy is a local area network key. Thus, the problem that the quantum key is single and cannot provide diversified services is solved.

The invention discloses a SecOC vehicle-mounted safety communication method based on dynamic key management enhancement, which realizes on-demand distribution, dynamic updating and full life cycle management of SecOC keys by introducing a key distribution center. The ECU negotiates a unique preset key through the KDC client and the KDC server; the KDC client requests a service bill from the KDC server based on the service identifier of the application; the SecOC key is dynamically distributed by the KDC, and automatic rotation based on a time strategy and emergency update based on a security event are supported. The SecOC message adopts a gPTP timestamp as a freshness value, and after the data unit and the freshness value are spliced, a message authentication code is calculated. According to the invention, the secret key is not statically preset any more, but is dynamically distributed by the KDC and supports online updating, and through combination of bidirectional certificate authentication and timestamp double-factor authentication, full-life-cycle safety management of the vehicle service secret key is realized, and the risk of secret key leakage is effectively coped with.

The application discloses a secure communication method, which comprises the following steps: a terminal device sends a session key request message; a key distribution center receives the session key request message, determines to obtain a key between a second quantum key distribution node and a first quantum key distribution node based on the session key request message, and sends session information to a server; the server receives the session information, and sends a key request message to the first quantum key distribution node; the first quantum key distribution node receives the key request message, obtains a session key, and sends the session key to the server; the session key is used for the server and the terminal device to perform secure communication; and the server receives the session key, and sends the session key to the terminal device. The application also discloses a server, a key distribution center, a terminal device, a key update terminal device, a first quantum key distribution node, a computer readable storage medium and a computer program product.

This application provides an authentication method, apparatus, medium, and electronic device. The method includes: after a client obtains a first ticket through a first key distribution center and first user identity information, obtaining second user identity information corresponding to the first user identity information; obtaining a second ticket from a second key distribution center through the second user identity information; and providing the second ticket to a server, so that the server determines whether it can receive a database access request from the client based on the second ticket. This application provides a dual-KDC authentication method that hides actual user information, thus preventing user information leakage.

An extended Quantum Key Distribution (QKD) network for scalable initial authentication key distribution between entities in the extended QKD network is provided. The extended QKD network comprising at least a first entity, a second entity, and a central Key Distribution Center (KDC). The KDC is configured to: obtain, using organizational security measures, a secret key between the KDC and the first entity, K(KDC,A); obtain, using organizational security measures, a secret key between the KDC and the second entity, K(KDC,B); and receive, from the first entity using information theoretically secure (ITS) communication, a request for starting the initial authentication key distribution between the first entity and the second entity.

The invention provides a cross-KDC key management method and device, electronic equipment and a readable storage medium, and relates to the technical field of information security, and the method comprises the steps: selecting any key distribution center as a key generation center for generating a key; in response to a key acquisition request initiated by an application program of a to-be-acquired key, matching a key sending rule based on an attribute judgment result of whether a key distribution center connected with the application program of the to-be-acquired key is a key generation center or not, and sending the key to the application program of the to-be-acquired key according to the matched key sending rule; sending the latest key generated by the key generation center to the same application program of the to-be-acquired key located in different key distribution centers; and after determining that each application program of the to-be-acquired key successfully acquires the latest key, executing key starting instruction broadcasting, so that the same application program in each key distribution center synchronously starts the latest key. The purpose of key distribution and starting consistency control in the multi-KDC environment is achieved.

The application discloses an identity authentication method and system, an electronic device, a storage medium and a program product, relates to the technical field of security, and only when a legal user is determined for the first time, a key distribution center knows a real name corresponding to a client, a signature, a ticket authorization ticket generation process and a subsequent anonymous access process of a corresponding server are all initiated by the client in a pseudonym, therefore, the key distribution center and the corresponding server do not know the association between the pseudonym and the client, so that the user privacy is protected.

The application discloses a key transfer method, device, equipment, system, storage medium and program product, relates to the technical field of communication, and provides a safe key service for a mobile terminal. The method comprises the following steps: a session key request is sent to a key distribution center, the session key request is used for requesting a session key, the session key is used for communication between the mobile terminal and a server; and the session key sent by the key distribution center is received, the session key is obtained by the key distribution center from a first QKD node connected with the key distribution center, and the session key is generated by negotiation of the first QKD node and a second QKD node connected with the server. The embodiment of the application can provide a safe key service for a mobile terminal.

The invention discloses a federal learning anti-poisoning attack method based on homomorphic encryption, which comprises the following steps of: generating a homomorphic encryption key pair through a key distribution center, distributing a public key, and processing a local data set by a client by utilizing a self-adaptive truncation singular value technology based on meta-learning; training a local data set and calculating a gradient; and then, the client uploads the local gradient subjected to homomorphic encryption to a server. And the server dynamically adjusts the detection intensity of the current round according to the success rate of the poisoning attack of the previous round, scores the clients marked as malicious gradients through a three-stage malicious gradient detection mechanism, and judges the gradients of which the reputation scores are lower than a predetermined threshold value as malicious gradients and eliminates the malicious gradients. In the gradient aggregation process, weighted aggregation is carried out according to the reputation score. According to the method, wide experiments are carried out, the result shows that the model can effectively detect the malicious encryption gradient, and the model is proved to be superior to other existing methods through wide analysis and comparison.

This invention discloses a certificate-free cross-domain authentication method in the cloud, comprising deploying key distribution centers in both the CLC domain and the trusted domain and generating system parameters; the user and the cloud service provider (CSP) each applying for partial private keys and combining them with secret values ​​to generate public-key and private-key pairs; the user calculating authentication information and sending an encrypted request; the CSP verifying the user's legitimacy and returning an encrypted response upon successful verification; the user receiving the response message, verifying the synchronized valid sequence number and the CSP; upon successful verification, saving the legitimate provider information, receiving cloud service resources, and establishing a cross-domain trust relationship and session negotiation key. This invention constructs a certificate-free cross-domain authentication method that abandons the complex certificate chain management of traditional PKI; it adopts a signature and signcryption-based primitive, balancing data confidentiality, integrity, and low computational complexity; and through session key negotiation and a local legitimate user list caching mechanism, it avoids duplicate authentication and improves processing efficiency.

The application discloses a kind of unmanned aerial vehicle cluster data security transmission methods of supporting malicious node detection, solve the problems, such as many in the prior art multi-hop unmanned aerial vehicle network relay node, lack authentication;The method comprises: key distribution center initialization;According to initialization result, respectively to each unmanned aerial vehicle and ground control center completes registration authentication, any first data unmanned aerial vehicle in multi-hop unmanned aerial vehicle network collects transmission data, calculates certificate aggregation signature after data transmission to adjacent second data unmanned aerial vehicle;Second data unmanned aerial vehicle adds the data carried by itself to transmission data, obtains aggregation message, and is transmitted to aggregation unmanned aerial vehicle in multi-hop unmanned aerial vehicle network;Aggregation unmanned aerial vehicle verifies aggregation message, if not passed, then run malicious member detection, obtain the malicious member in link. Otherwise, aggregation unmanned aerial vehicle sends message to ground control center;The method realizes the non-interactive fast negotiation of session key, guarantees the high security in multi-hop transmission.

Disclosed in the present invention are a train-to-ground communication method and apparatus, and a device and a storage medium. The method comprises: acquiring a preset master key and operation-related information of a train, and determining a working key on the basis of the preset master key and the operation-related information; encrypting the working key by means of the preset master key so as to generate working-key ciphertext, and sending the working-key ciphertext to a ground device, so as to acquire, on the basis of the working-key ciphertext, a confirmation message sent by the ground device, and generating a consistency check result on the basis of the confirmation message; and when the consistency check result indicates that the check is successful, communicating with the ground device by means of the working key. A key distribution center is established on the basis of train-to-ground wireless communication, so as to realize key management of the train-to-ground wireless communication; a train acquires a session key from the key distribution center on the basis of operation-related information, and uses the session key to perform encrypted communication; and when the session key is not acquired, a standby key is used for encrypted communication, thereby improving the communication reliability, and ensuring the operation safety of the train.

The application discloses a secure communication method, which comprises the following steps: a terminal device sends a session key request message to a key distribution center; the key distribution center receives the session key request message, and determines to obtain a key between a first quantum key distribution node and a second quantum key distribution node based on the session key request message; the key distribution center sends a key request message to a third quantum key distribution node; the third quantum key distribution node performs a key generation process between the first quantum key distribution node and the second quantum key distribution node, obtains a session key, and sends the session key to the key distribution center; and the key distribution center receives the session key, and sends the session key to the terminal device and a server. The application also discloses a key distribution center, a terminal device, a server, a key updating terminal device, a third quantum key distribution node, a computer readable storage medium and a computer program product.

The invention discloses a key charging method and an authentication method for a quantum local area network. The quantum local area network comprises a quantum key charging machine, a first centralized control station, a first target key distribution center and a second target key distribution center, and the method comprises the steps that the quantum key charging machine sends a key charging request to the first centralized control station, and the key charging request comprises a first key charging request. And under the condition that the key charging request is a first key charging request, the first centralized control station sends a first quantum key in the generated cross-domain authentication key to a second target key distribution center. The second target key distribution center stores the first quantum key. And the first centralized control station sends a second quantum key in the cross-domain authentication key and the cross-domain authentication identification information to the quantum key charging machine. And the quantum key charging machine performs charging processing on the terminal key storage medium according to the second quantum key and the cross-domain authentication identification information. In this way, the preset correspondence of the cross-domain key is realized, so that the cross-domain authentication process is simplified.

The invention discloses an enterprise internal cross-system authentication processing method and system, equipment and a medium, and the method specifically comprises the steps: generating a differential asymmetric encryption key for a system pair with a bidirectional authentication edge in an enterprise through a key distribution center based on the node security level of a system authentication relation graph; when a cross-system access request is detected, generating a temporary token carrying a fine-grained permission tag and failure time according to the differentiated asymmetric encryption key; based on the temporary token, extracting a historical behavior sequence of the associated edge through an anomaly detection model, and when an abnormal mode is detected, triggering permission recovery and freezing the temporary token; and for the temporary token which is not frozen, creating a default role with a time limit for the unregistered user through the target system. According to the invention, safe and flexible enterprise internal cross-system authentication processing with self-adaptive capability is realized, and the safety and system performance of cross-system authentication are effectively guaranteed.

The invention provides a fingerprint activity detection method based on CKKS homomorphic encryption. The fingerprint activity detection method based on CKKS homomorphic encryption comprises the following steps: step 1, establishing a three-party interaction system model composed of a user side, a key distribution center and a cloud server; step 2, after identity verification is completed, the user side encrypts an image by using a public key, and transmits a ciphertext image to the cloud server through a public channel; 3, after the ciphertext image is received, the cloud server uses a second deep learning model to identify the secret state image, and a secret state result is obtained; and the cloud server transmits the secret state result to the user side through a public channel, and the user side decrypts the secret state result by using the held private key to finally obtain a fingerprint activity detection result. According to the method, the activity of the fingerprint can be accurately and effectively judged on the premise that the input fingerprint image information is not exposed. The core goal of adding the homomorphic encryption technology is to ensure the privacy of fingerprint data and effectively distinguish spoofing attacks initiated by living fingerprints and forged fingerprints at the same time.

This application discloses an authentication method, apparatus, first node, key distribution center (KDC), second node, first server, second server, storage medium, and computer program product. The method includes: the first node sending first information to the KDC, the first information requesting service authorization for N service nodes in a first domain; receiving second information sent by the KDC, the second information indicating authorization completion, the second information including a first key and third information, the first key including a session key between the first domain as a first client and a first server, the third information representing authorized access credentials associated with the client and the first server; and sending the first key and the third information to the other N service nodes besides the first node, the third information being used at least for service authentication between the service nodes and the first server.

A data communication system includes a center device that distributes update data to a master device, and a master device that installs the update data in an electronic control unit to be reprogrammed. The center device and the master device exchange random secret information using an algorithm of a Diffie-Hellman key exchange (DHE) or an Elliptic curve Diffie-Hellman key exchange (ECDHE) for key distribution. The center device encrypts an encryption key for encrypting update data based on the exchanged secret information, stores the encrypted encryption key in a campaign notification, places the update data encrypted with the encryption key in a content delivery network, and transmits the campaign notification storing the encrypted encryption key to a vehicle system.

The invention belongs to the technical field of privacy protection, and relates to a user privacy protection method based on privacy enhanced federated learning, which comprises the following steps that: a secret key distribution center generates a public key and a private key and respectively distributes the public key and the private key to participants and a central server; the central server initializes model parameters and transmits the model parameters to all participants, each participant trains a model on a local data set and encrypts the local gradient after calculating a loss function and the local gradient, the central server receives the encryption gradients of all participants, and the encryption gradients are aggregated and decrypted to obtain a global gradient; the participants receive the global gradient and update the local model parameters, and each participant can flexibly select and adjust the implementation mode of each module according to the own data characteristics and business requirements to adapt to different data types and sources, so that the problem of insufficient flexibility in the traditional method is solved.

The application discloses a dynamic searchable encryption method, a decryption method, an encryption device and a decryption device. H 2When updating data, the key distribution center sends system public parameters and keys to a data owner, the data owner uses an anti-collision hash function 2to generate a deduplication verification tag to determine whether a file already exists; a one-time private key generated by using other hash functions is used to encrypt an index, an update token, ciphertext shielding a previous token, encrypted index, encrypted file identifier and file ciphertext are updated to a cloud database, and encrypted database updating is realized.Searching data, the key distribution center sends system public parameters and keys to a data user; after a cloud server receives a search request initiated by the data user, the cloud server searches and matches out results and returns the data user; the user decrypts to obtain plaintext files, and searching of the encrypted database is realized.The application can realize data deduplication and connection keyword search functions while guaranteeing dynamic searchable security.

The application discloses a kind of SecOC vehicle-mounted safety communication methods based on dynamic key management enhancement, by introducing key distribution center, the on-demand distribution of SecOC key, dynamic update and whole life cycle management are realized.ECU is negotiated by KDC client and KDC server Unique preset key;KDC client requests service ticket based on the service identification of application to KDC server;SecOC key is dynamically assigned by KDC, supports automatic rotation based on time strategy and emergency update based on security event.SecOC message uses gPTP timestamp as freshness value, after data unit and freshness value are spliced, message authentication code is calculated.In the application, key is no longer static preset, but is dynamically distributed by KDC and supports online update, combined with two-way certificate authentication and timestamp two-factor authentication, realize the whole life cycle safety management of vehicle service key, effectively deal with key leakage risk.

The present invention relates to a data transmission system between Internet of Things devices based on quantum communication technology in the field of quantum communication. The symmetric quantum key pairs generated by a key distribution center are respectively pre-set in a quantum security service key distribution center and a quantum key update device close to the user. When a mobile terminal user accesses for the first time or the key is exhausted, a certain amount of keys can be charged through the quantum key update device and pre-set in a secure storage medium of the mobile terminal for authentication and session encryption in subsequent communication processes. Taking the data transmission system of enterprise carbon neutrality as an example, the vehicle start-up time is judged by a vibration detection unit, the current carbon dioxide emissions of the vehicle are determined, and the detection data is automatically generated and uploaded, thereby improving data collection efficiency. At the same time, the protection of carbon neutrality system information interaction is realized through quantum communication technology, and personal information is effectively protected.

The application provides a fingerprint activity detection method based on CKKS homomorphic encryption, comprising the following steps: step 1, establishing a three-party interaction system model composed of a user end, a key distribution center and a cloud server; step 2, after completing identity verification, the user end encrypts the image using a public key, and transmits the ciphertext image to the cloud server through a public channel; step 3, after receiving the ciphertext image, the cloud server uses a second deep learning model to identify the ciphertext image and obtains a ciphertext result; the cloud server transmits the ciphertext result to the user end through the public channel, and the user end uses the private key held to decrypt, and finally obtains the fingerprint activity detection result. The method can accurately and effectively distinguish the activity of the fingerprint without exposing the input fingerprint image information. The core goal of adding the homomorphic encryption technology is to ensure the privacy of the fingerprint data, and effectively distinguish the cheating attacks initiated by the living body fingerprint and the fake fingerprint.

The invention provides a registration attribute retrieval encryption method based on cloud edge collaboration, and belongs to the technical field of decentralized attribute-based encryption and searchable encryption. The technical problem that an existing retrieval encryption method based on attributes depends on a single-point fault of a trusted key distribution center is solved. According to the technical scheme, the method comprises the following steps that S10, a system is initialized; s20, the data applicant generates public and private keys; s30, verifying the legality of the public key; s40, aggregating user attributes and public keys; s50, encrypting the data to be shared and the keywords; s60, retrieving the shared ciphertext matched with the keyword; and S70, the data applicant decrypts the authorized ciphertext. A retrieval encryption mechanism based on registration attributes is constructed, the problem that an existing retrieval encryption method based on attributes depends on a single-point fault of a trusted key distribution center is avoided, fine-grained authorization of shared data and fine-grained retrieval in a ciphertext state are achieved on the premise that privacy of retrieval keywords is protected, and decryption efficiency is improved.

This invention discloses a blockchain-based method for secure data sharing and quality assessment in smart grids, belonging to the field of data security sharing technology. The method includes: system initialization and user registration, where a key distribution center distributes keys and blockchain addresses to data owners, researchers, and a quality assessment platform; data collection and uploading, where data owners encrypt datasets, generate content identifiers in blocks, store them in IPFS, and upload the stored information to the blockchain to form trusted evidence; smart contracts and access control, setting access policies and issuing access tokens to verified researchers to obtain the dataset; dataset quality assessment, generating and providing feedback on a quality report by combining label reordering, correlation coefficient testing, and performance evaluation testing; and a reward mechanism, allocating reputation values ​​and rewards to data owners based on dataset quality. This invention achieves secure and trusted data sharing and scientific quality assessment, promoting the continuous provision of high-quality data.

The invention discloses a bill determination method and device, a medium and a program product. The method is applied to a key distribution center. The key distribution center at least comprises a first distribution center; if a first request sent by the client device is received through the first distribution center, determining a first parameter; the first parameter at least comprises a target identifier of a target device associated with the first request and a device key; obtaining a first key of the client device from a storage space of the first distribution center; the first key is generated by the client device based on the first excitation and the physical unclonable function; the first incentive is stored in the client device; determining a second parameter based on the first key and the target identifier; determining a target bill at least based on the device key and the first identifier of the client device; the target bill and the second parameter are sent to the client device, so that the client device executes a business processing process based on the first excitation, the first parameter and the target bill.