48 results about "Key distribution center" patented technology

The invention discloses an anti-quantum security identity authentication method and system, a medium and equipment. The method comprises the following steps: S1, a client, a service server and a key distribution center perform key configuration by adopting a digital signature algorithm; s2, the client sends an authentication request to the authentication server, and receives an authentication response with a bill granted bill returned by the authentication server; s3, the client sends a bill request to the bill issuing server, and receives a bill response with the service bill returned by the bill issuing server; s4, the client generates a client key exchange public key by adopting a first key exchange algorithm and sends an access request, the service server calculates a shared key and a ciphertext after receiving the public key, generates an access response comprising the ciphertext and identity information encrypted by using the shared key, and returns the access response to the client; and S5, the client receives the access response and obtains the shared key, and performs encrypted communication with the service server by using the shared key. The method has forward safe quantum attack resistance and strong identity authentication.

The invention discloses a computer network security situation awareness system and method, and relates to the technical field of computer network security, and the method comprises the steps: generating a dynamic gene pool through an antigen-antibody matching algorithm based on an initial quantum trust vector, and building a mapping relation table of an antigen feature vector and an antibody defense strategy; triggering a quantum alarm according to an entanglement entropy mutation event in the real-time quantum state flow data, matching a biological antibody strategy corresponding to a current network attack feature based on a mapping relation table, and fusing the quantum alarm and the biological alarm to generate an attack path topological graph; the network security situation is perceived by analyzing the quantum state change of the abnormal node ID and combining an attack path topological graph and a dynamic gene pool. Quantum entanglement pairs are distributed to network nodes through the quantum key distribution center, and initial quantum trust vectors are generated, so that the unknown attack resisting capability of the network is remarkably improved, and efficient and accurate network security situation awareness is realized.

The invention discloses a remote data rapid transmission system and method based on the Internet, a client initiates a session establishment request containing a session type identifier and a transmission protocol identifier to a server, receives a session response message after transmitting an initial data packet, obtains a temporary session key through verification of a key distribution center, and transmits the session response message to the server; an authorization identifier and a protocol verification symbol are generated through hierarchical decryption, a security enhancement data packet is constructed and sent, an end-to-end encryption transmission channel is further established, and meanwhile, a session maintenance mechanism is provided. And the server verifies a session type identifier and a transmission protocol identifier of the client, generates a session response message containing a dynamic confusion strategy and a trap identifier, submits the session response message to a key distribution center for signature, returns the session response message to the client, activates a secure transmission service instance after verifying a security enhancement data packet, and implements a series of security control strategies. According to the invention, the problems of low transmission efficiency and poor security of the existing remote data transmission system are effectively solved, and efficient and secure data transmission is realized.

The invention discloses an identity authentication method and system, an electronic device, a storage medium and a program product, and relates to the technical field of security. Only when a legal user is determined for the first time, a key distribution center knows a real name corresponding to a client, a subsequent signature, a bill authorization bill generation process and a subsequent anonymous access process to a corresponding server; in the embodiment of the invention, the clients initiate with the artifacts, so that the key distribution center and the corresponding server do not know the association relationship between the artifacts and the clients, and the privacy of the user is guaranteed.

The invention discloses an anti-Byzantine privacy protection federated learning method and system based on a block chain. The anti-Byzantine privacy protection federated learning method is realized through the federated learning system comprising a key distribution center, a plurality of clients, two non-collusion servers and a block chain network. According to the method, the data privacy of a client side is guaranteed through a safety calculation process of cooperation of double servers, attacks caused by malicious client sides are reduced as much as possible through a self-adaptive clustering and robustness aggregation method, and reputation values of the client sides are managed through intelligent contracts. The reputation value is used to set the award and penalty obtained after the client participates in federal learning, and the blockchain increases transparency and reliability for the system. And updating the global model based on a security calculation process under a non-collusion double-server architecture, and finally obtaining a safe and reliable global model after training is finished.

This application discloses a secure communication method based on an unmanned vehicle, comprising: sending control instructions and path planning information to a network control device, which sends forward data to a control center cryptographic device; the control center cryptographic device selects a corresponding key based on the forward data type, encrypts the data, and then sends it to a base station; the base station forwards the data to the unmanned vehicle, and the unmanned vehicle cryptographic module decrypts the data to obtain plaintext data; the return data is encrypted by the unmanned vehicle cryptographic module and decrypted by the control center cryptographic device; the key distribution data from the key distribution center to the unmanned vehicle cryptographic module is encapsulated into a corresponding frame format by the network control device, encrypted by the control center cryptographic device, and then transmitted to the unmanned vehicle cryptographic module via a wireless channel. This method can encrypt and protect the data transmitted by the unmanned vehicle, realize periodic automatic updating of working keys, and solve the key synchronization problem during the key update process.

The application discloses a key filling method for a quantum local area network, the quantum local area network comprising a first control station, a quantum key filling machine and a key distribution center, the first control station and the quantum key filling machine being in communication connection, and the method comprising: the quantum key filling machine sending a key filling request to the first control station. The first control station determines a target distribution strategy from preset distribution strategies according to the type of the key filling request, the preset distribution strategies comprising a first preset key distribution strategy and a second preset key distribution strategy. The first control station distributes the obtained quantum symmetric key to the quantum key filling machine and / or the key distribution center according to the target distribution strategy to perform key filling, wherein the quantum symmetric key distributed based on the first preset key distribution strategy is a directional key, and the quantum symmetric key distributed based on the second preset key distribution strategy is a local area network key. Thus, the problem that the quantum key is single and cannot provide diversified services is solved.

The invention discloses a SecOC vehicle-mounted safety communication method based on dynamic key management enhancement, which realizes on-demand distribution, dynamic updating and full life cycle management of SecOC keys by introducing a key distribution center. The ECU negotiates a unique preset key through the KDC client and the KDC server; the KDC client requests a service bill from the KDC server based on the service identifier of the application; the SecOC key is dynamically distributed by the KDC, and automatic rotation based on a time strategy and emergency update based on a security event are supported. The SecOC message adopts a gPTP timestamp as a freshness value, and after the data unit and the freshness value are spliced, a message authentication code is calculated. According to the invention, the secret key is not statically preset any more, but is dynamically distributed by the KDC and supports online updating, and through combination of bidirectional certificate authentication and timestamp double-factor authentication, full-life-cycle safety management of the vehicle service secret key is realized, and the risk of secret key leakage is effectively coped with.

The application discloses a secure communication method, which comprises the following steps: a terminal device sends a session key request message; a key distribution center receives the session key request message, determines to obtain a key between a second quantum key distribution node and a first quantum key distribution node based on the session key request message, and sends session information to a server; the server receives the session information, and sends a key request message to the first quantum key distribution node; the first quantum key distribution node receives the key request message, obtains a session key, and sends the session key to the server; the session key is used for the server and the terminal device to perform secure communication; and the server receives the session key, and sends the session key to the terminal device. The application also discloses a server, a key distribution center, a terminal device, a key update terminal device, a first quantum key distribution node, a computer readable storage medium and a computer program product.

The invention discloses a secret communication method based on a pilotless automobile, and the method comprises the steps: transmitting a control instruction and path planning information to network control equipment, and transmitting forward data to control center password equipment through the network control equipment; the control center password device selects a corresponding secret key according to the type of the forward data to encrypt the data and then sends the encrypted data to the base station, the base station forwards the data to the driverless car, and the driverless car password module decrypts the data to obtain plaintext data; the returned data is encrypted by the unmanned automobile password module and decrypted by the control center password device; key distribution data sent by the key distribution center to the unmanned automobile password module is packaged into a corresponding frame format through the network control device, encrypted through the control center password device and then transmitted to the unmanned automobile password module through a wireless channel. According to the method, encryption protection can be carried out on transmission data of the pilotless automobile, periodic automatic updating of a working key is realized, and the key synchronization problem in the key updating process is solved.

This application provides an authentication method, apparatus, medium, and electronic device. The method includes: after a client obtains a first ticket through a first key distribution center and first user identity information, obtaining second user identity information corresponding to the first user identity information; obtaining a second ticket from a second key distribution center through the second user identity information; and providing the second ticket to a server, so that the server determines whether it can receive a database access request from the client based on the second ticket. This application provides a dual-KDC authentication method that hides actual user information, thus preventing user information leakage.

The invention relates to a data transmission system between Internet of Things equipment based on a quantum communication technology in the field of quantum communication, which is characterized in that symmetric quantum key pairs generated by a key distribution center are respectively preset in a quantum security service key distribution center and quantum key updating equipment close to a user, and when a mobile terminal user accesses for the first time or a key is used up, the quantum key pairs are updated. A certain amount of secret keys can be filled through quantum secret key updating equipment, the secret keys are preset in a safety storage medium of a mobile terminal and used for authentication and session encryption in the subsequent communication process, and by taking an enterprise carbon neutralization data transmission system as an example, the vehicle starting time is judged through a vibration detection unit, the carbon dioxide emission of the current vehicle is determined, and the safety of the vehicle is improved. Detection data are automatically generated and uploaded, the data collection efficiency is improved, meanwhile, protection of information interaction of the carbon neutralization system is achieved through the quantum communication technology, and personal information is effectively protected.

An extended Quantum Key Distribution (QKD) network for scalable initial authentication key distribution between entities in the extended QKD network is provided. The extended QKD network comprising at least a first entity, a second entity, and a central Key Distribution Center (KDC). The KDC is configured to: obtain, using organizational security measures, a secret key between the KDC and the first entity, K(KDC,A); obtain, using organizational security measures, a secret key between the KDC and the second entity, K(KDC,B); and receive, from the first entity using information theoretically secure (ITS) communication, a request for starting the initial authentication key distribution between the first entity and the second entity.

The invention provides a cross-KDC key management method and device, electronic equipment and a readable storage medium, and relates to the technical field of information security, and the method comprises the steps: selecting any key distribution center as a key generation center for generating a key; in response to a key acquisition request initiated by an application program of a to-be-acquired key, matching a key sending rule based on an attribute judgment result of whether a key distribution center connected with the application program of the to-be-acquired key is a key generation center or not, and sending the key to the application program of the to-be-acquired key according to the matched key sending rule; sending the latest key generated by the key generation center to the same application program of the to-be-acquired key located in different key distribution centers; and after determining that each application program of the to-be-acquired key successfully acquires the latest key, executing key starting instruction broadcasting, so that the same application program in each key distribution center synchronously starts the latest key. The purpose of key distribution and starting consistency control in the multi-KDC environment is achieved.

The application discloses an identity authentication method and system, an electronic device, a storage medium and a program product, relates to the technical field of security, and only when a legal user is determined for the first time, a key distribution center knows a real name corresponding to a client, a signature, a ticket authorization ticket generation process and a subsequent anonymous access process of a corresponding server are all initiated by the client in a pseudonym, therefore, the key distribution center and the corresponding server do not know the association between the pseudonym and the client, so that the user privacy is protected.

The application discloses a key transfer method, device, equipment, system, storage medium and program product, relates to the technical field of communication, and provides a safe key service for a mobile terminal. The method comprises the following steps: a session key request is sent to a key distribution center, the session key request is used for requesting a session key, the session key is used for communication between the mobile terminal and a server; and the session key sent by the key distribution center is received, the session key is obtained by the key distribution center from a first QKD node connected with the key distribution center, and the session key is generated by negotiation of the first QKD node and a second QKD node connected with the server. The embodiment of the application can provide a safe key service for a mobile terminal.

The invention discloses a federal learning anti-poisoning attack method based on homomorphic encryption, which comprises the following steps of: generating a homomorphic encryption key pair through a key distribution center, distributing a public key, and processing a local data set by a client by utilizing a self-adaptive truncation singular value technology based on meta-learning; training a local data set and calculating a gradient; and then, the client uploads the local gradient subjected to homomorphic encryption to a server. And the server dynamically adjusts the detection intensity of the current round according to the success rate of the poisoning attack of the previous round, scores the clients marked as malicious gradients through a three-stage malicious gradient detection mechanism, and judges the gradients of which the reputation scores are lower than a predetermined threshold value as malicious gradients and eliminates the malicious gradients. In the gradient aggregation process, weighted aggregation is carried out according to the reputation score. According to the method, wide experiments are carried out, the result shows that the model can effectively detect the malicious encryption gradient, and the model is proved to be superior to other existing methods through wide analysis and comparison.

This invention discloses a certificate-free cross-domain authentication method in the cloud, comprising deploying key distribution centers in both the CLC domain and the trusted domain and generating system parameters; the user and the cloud service provider (CSP) each applying for partial private keys and combining them with secret values ​​to generate public-key and private-key pairs; the user calculating authentication information and sending an encrypted request; the CSP verifying the user's legitimacy and returning an encrypted response upon successful verification; the user receiving the response message, verifying the synchronized valid sequence number and the CSP; upon successful verification, saving the legitimate provider information, receiving cloud service resources, and establishing a cross-domain trust relationship and session negotiation key. This invention constructs a certificate-free cross-domain authentication method that abandons the complex certificate chain management of traditional PKI; it adopts a signature and signcryption-based primitive, balancing data confidentiality, integrity, and low computational complexity; and through session key negotiation and a local legitimate user list caching mechanism, it avoids duplicate authentication and improves processing efficiency.

The application discloses a kind of unmanned aerial vehicle cluster data security transmission methods of supporting malicious node detection, solve the problems, such as many in the prior art multi-hop unmanned aerial vehicle network relay node, lack authentication;The method comprises: key distribution center initialization;According to initialization result, respectively to each unmanned aerial vehicle and ground control center completes registration authentication, any first data unmanned aerial vehicle in multi-hop unmanned aerial vehicle network collects transmission data, calculates certificate aggregation signature after data transmission to adjacent second data unmanned aerial vehicle;Second data unmanned aerial vehicle adds the data carried by itself to transmission data, obtains aggregation message, and is transmitted to aggregation unmanned aerial vehicle in multi-hop unmanned aerial vehicle network;Aggregation unmanned aerial vehicle verifies aggregation message, if not passed, then run malicious member detection, obtain the malicious member in link. Otherwise, aggregation unmanned aerial vehicle sends message to ground control center;The method realizes the non-interactive fast negotiation of session key, guarantees the high security in multi-hop transmission.

Disclosed in the present invention are a train-to-ground communication method and apparatus, and a device and a storage medium. The method comprises: acquiring a preset master key and operation-related information of a train, and determining a working key on the basis of the preset master key and the operation-related information; encrypting the working key by means of the preset master key so as to generate working-key ciphertext, and sending the working-key ciphertext to a ground device, so as to acquire, on the basis of the working-key ciphertext, a confirmation message sent by the ground device, and generating a consistency check result on the basis of the confirmation message; and when the consistency check result indicates that the check is successful, communicating with the ground device by means of the working key. A key distribution center is established on the basis of train-to-ground wireless communication, so as to realize key management of the train-to-ground wireless communication; a train acquires a session key from the key distribution center on the basis of operation-related information, and uses the session key to perform encrypted communication; and when the session key is not acquired, a standby key is used for encrypted communication, thereby improving the communication reliability, and ensuring the operation safety of the train.

The application discloses a secure communication method, which comprises the following steps: a terminal device sends a session key request message to a key distribution center; the key distribution center receives the session key request message, and determines to obtain a key between a first quantum key distribution node and a second quantum key distribution node based on the session key request message; the key distribution center sends a key request message to a third quantum key distribution node; the third quantum key distribution node performs a key generation process between the first quantum key distribution node and the second quantum key distribution node, obtains a session key, and sends the session key to the key distribution center; and the key distribution center receives the session key, and sends the session key to the terminal device and a server. The application also discloses a key distribution center, a terminal device, a server, a key updating terminal device, a third quantum key distribution node, a computer readable storage medium and a computer program product.

The invention provides a distributed file system cluster access method, device and equipment and a medium, which are applied to a database, and the database is used for accessing a plurality of distributed file system clusters authenticated by a plurality of sets of key distribution centers. The method comprises the following steps: opening a reading authority to a bill file and a configuration file of a key distribution center for a database user; creating a corresponding secure object for each distributed file system cluster in a database, and setting an access permission for each secure object; the database executes a statement for creating a secure object, and reads a bill file and a configuration file of a key distribution center; creating a data object of each distributed file system cluster in the database, and taking the secure object as an access parameter of the data object; and the data object accesses the distributed file system cluster based on the access parameters. The safe access of the database to different KDC authentication HDFS clusters is realized, and the data security is further improved.

The invention belongs to the field of information security, and discloses an iris security authentication protocol based on inner product function encryption, and entities involved in the scheme comprise a key distribution center KGC, a user, a client and a server. The scheme is mainly divided into a registration stage and a matching stage, and the matching stage generally comprises five processes: 1, initializing an iris recognition system; 2, generating an iris data ciphertext; 3, generating an iris identification key; 4, decrypting and calculating the iris data; and 5, judging an iris recognition result. According to the iris security authentication protocol based on inner product function encryption disclosed by the invention, the original iris data and the matched iris data cannot be leaked, so that the security of iris identification authentication is improved.

The invention discloses an Internet of Things access authentication system capable of bidirectional authentication, which comprises a key distribution center and an authentication information monitoring unit, and is characterized in that a group of output ends of the key distribution center are wirelessly connected with Internet of Things equipment a. According to the Internet of Things access authentication system capable of bidirectional authentication, when the Internet of Things equipment a and the Internet of Things equipment b are accessed, the key distribution center sends verification information and inputs the verification information into the information integration unit for integration, so that waiting time and processing time are reduced, the verification speed is accelerated, the bidirectional authentication platform can accept the verification information, and the verification efficiency is improved. The Internet of Things equipment a and the Internet of Things equipment b establish communication after verification succeeds, the encryption communication unit can encrypt the information during communication, the dynamic firewall can adapt to dynamic address changes in a large-scale network, and the security of the Internet of Things equipment a and the Internet of Things equipment b is improved. And protection is carried out through the API protection module after dangerous information is found.

The present invention relates to a decryption outsourcing Twin-SM9 key encapsulation system that can support batch auditing, including a master key distribution center and n key distribution centers; in the system initialization stage, the master key distribution center divides the system master private key into secret share forms and distributes them to each key distribution center; in the user decryption key generation stage, it is divided into two sub-stages, each key distribution center generates a user decryption key share and sends the generated decryption key share to the user, and the user generates a user decryption key. The present invention effectively solves the single point failure problem caused by the paralysis of a single key distribution center.

The invention discloses a key charging method and an authentication method for a quantum local area network. The quantum local area network comprises a quantum key charging machine, a first centralized control station, a first target key distribution center and a second target key distribution center, and the method comprises the steps that the quantum key charging machine sends a key charging request to the first centralized control station, and the key charging request comprises a first key charging request. And under the condition that the key charging request is a first key charging request, the first centralized control station sends a first quantum key in the generated cross-domain authentication key to a second target key distribution center. The second target key distribution center stores the first quantum key. And the first centralized control station sends a second quantum key in the cross-domain authentication key and the cross-domain authentication identification information to the quantum key charging machine. And the quantum key charging machine performs charging processing on the terminal key storage medium according to the second quantum key and the cross-domain authentication identification information. In this way, the preset correspondence of the cross-domain key is realized, so that the cross-domain authentication process is simplified.

The invention discloses an enterprise internal cross-system authentication processing method and system, equipment and a medium, and the method specifically comprises the steps: generating a differential asymmetric encryption key for a system pair with a bidirectional authentication edge in an enterprise through a key distribution center based on the node security level of a system authentication relation graph; when a cross-system access request is detected, generating a temporary token carrying a fine-grained permission tag and failure time according to the differentiated asymmetric encryption key; based on the temporary token, extracting a historical behavior sequence of the associated edge through an anomaly detection model, and when an abnormal mode is detected, triggering permission recovery and freezing the temporary token; and for the temporary token which is not frozen, creating a default role with a time limit for the unregistered user through the target system. According to the invention, safe and flexible enterprise internal cross-system authentication processing with self-adaptive capability is realized, and the safety and system performance of cross-system authentication are effectively guaranteed.

The invention provides a fingerprint activity detection method based on CKKS homomorphic encryption. The fingerprint activity detection method based on CKKS homomorphic encryption comprises the following steps: step 1, establishing a three-party interaction system model composed of a user side, a key distribution center and a cloud server; step 2, after identity verification is completed, the user side encrypts an image by using a public key, and transmits a ciphertext image to the cloud server through a public channel; 3, after the ciphertext image is received, the cloud server uses a second deep learning model to identify the secret state image, and a secret state result is obtained; and the cloud server transmits the secret state result to the user side through a public channel, and the user side decrypts the secret state result by using the held private key to finally obtain a fingerprint activity detection result. According to the method, the activity of the fingerprint can be accurately and effectively judged on the premise that the input fingerprint image information is not exposed. The core goal of adding the homomorphic encryption technology is to ensure the privacy of fingerprint data and effectively distinguish spoofing attacks initiated by living fingerprints and forged fingerprints at the same time.

The invention provides a quantum session key negotiation method and a quantum key distribution system. The method comprises the steps that first equipment generates N first secret keys which are different from one another, each first secret key has a corresponding serial number, and N is larger than or equal to 2; the first device sends the N first keys to at least one key distribution center, so that the at least one key distribution center forwards the N first keys to a second device; the first equipment receives key serial number notification information from the second equipment, and determines serial numbers of M first keys randomly selected by the second equipment in the received first keys according to the key serial number notification information, and M is greater than or equal to 1 and less than or equal to N; and the first device generates a second key according to the M first keys, and sets the second key as a quantum session key communicating with the second device. According to the embodiment of the invention, the security of the quantum key distribution process can be improved.

This application discloses an authentication method, apparatus, first node, key distribution center (KDC), second node, first server, second server, storage medium, and computer program product. The method includes: the first node sending first information to the KDC, the first information requesting service authorization for N service nodes in a first domain; receiving second information sent by the KDC, the second information indicating authorization completion, the second information including a first key and third information, the first key including a session key between the first domain as a first client and a first server, the third information representing authorized access credentials associated with the client and the first server; and sending the first key and the third information to the other N service nodes besides the first node, the third information being used at least for service authentication between the service nodes and the first server.