Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

2419 results about "Key generation" patented technology

Key generation is the process of generating keys in cryptography. A key is used to encrypt and decrypt whatever data is being encrypted/decrypted. A device or program used to generate keys is called a key generator or keygen.

Methods and Systems for Privacy-Preserving Location Verification

A computer-implemented method and system for privacy-preserving location verification in distributed networks comprises initializing a multi-modal biometric authentication system on a user device, generating cryptographic keys using a distributed key generation protocol, binding the cryptographic keys to biometric templates using a fuzzy vault scheme, constructing and broadcasting encrypted location beacons, and generating zero-knowledge proofs of location claims. The system includes user devices equipped with biometric sensors and verifier devices configured to validate location claims and maintain consensus in a blockchain network. The method implements real-time liveness detection for multiple biometric input types, executes fault-tolerant consensus algorithms with privacy preservation, and maintains a dual-scoring mechanism comprising device trust scores and user reputation scores. The system enables secure location verification while preserving user privacy through cryptographic protocols and biometric authentication in decentralized environments.
Owner:ABDELSAMIE MAHER A

Big data auxiliary key generation method and system in communication data encryption transmission

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.
Owner:COLLEGE OF MOBILE TELECOMM CHONGQING UNIV OF POSTS & TELECOMM

Data encryption method and device, equipment and medium

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.
Owner:PING AN TECH (SHENZHEN) CO LTD

Sensing data chip-level dynamic key negotiation method

The invention relates to the technical field of sensing data security, and discloses a sensing data chip-level dynamic key negotiation method, which comprises the following steps of: acquiring a unique hardware identifier and key parameters of a sensor node, and generating a dynamic key seed matrix; after acquisition is completed, randomly intercepting data segments, performing median filtering and normalization preprocessing, extracting local statistical features and global features to generate a data feature sequence, and splicing the data feature sequence to a seed matrix to obtain a dynamic key generation matrix; a dynamic negotiation key is generated through standardization and SM3 Hash algorithm encryption, and is stored in a cloud and node security unit; during verification, dual verification is realized through hash comparison and plaintext bit-by-bit matching; and setting an environment parameter exception triggering mechanism, and updating the key if accumulative exception exceeds the limit. According to the method, hardware and dynamic data features are fused, and the key security and adaptability are improved.
Owner:ZHONGYING QINGCHUANG TECH CO LTD

PUF (Physical Unclonable Function) key generation and equipment identity authentication system for cold chain environment

The invention discloses a PUF (Physical Unclonable Function) key generation and equipment identity authentication system for a cold chain environment, and particularly relates to the technical field of information security, comprising temperature change data perception, drift modeling, dynamic error correction and closed-loop optimization, and collecting original response data of PUF hardware and temperature sensor readings by simulating the cold chain environment in a temperature-controllable experiment module; learning a nonlinear mapping relation between the dynamic temperature change and PUF response drift, and outputting a drift compensation matrix; constructing a two-stage error correction mechanism based on the drift compensation matrix; the first-stage error correction unit carries out nonlinear calibration on the original PUF response sequence according to the drift compensation matrix; the second-stage error correction unit adopts a temperature sensing type reconfigurable LDPC coding architecture, an LDPC check matrix is obtained based on a temperature-drift joint constraint model, the error correction performance of a high-drift scene is optimized through the LDPC check matrix, and the problem of key instability caused by PUF hardware response drift in a cold chain environment is solved.
Owner:HUNAN UNIV OF FINANCE & ECONOMICS

Federal learning system based on multi-key homomorphic encryption and adaptive differential privacy

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.
Owner:FUZHOU UNIV

Secret communication system of unmanned aerial vehicle

The invention discloses a secret communication system of an unmanned aerial vehicle, which relates to the technical field of secret communication of the unmanned aerial vehicle and comprises a secret key generation and distributed storage unit, a dynamic secret key updating unit, a secret key destruction and tracing unit, a multi-band sensing and interference identification unit and a combined regulation and control unit. A dynamic key is generated through a chaos algorithm, and the security of the key is ensured in combination with block chain fragmentation storage and GPS binding encryption; updating the key according to the risk level, and transmitting the fragments by using an anti-quantum channel; after the communication is finished, the secret key fragments are invalidated, and anomaly detection and traceability are realized; scanning a multi-band frequency spectrum in real time, identifying an interference type and optimizing the model; and according to the interference intensity and the energy efficiency demand, dynamically switching the frequency bands, adjusting the power and enhancing the anti-interception capability. The problems that an existing unmanned aerial vehicle communication system is insufficient in safety, weak in anti-interference capacity, incomplete in key management mechanism and the like are effectively solved, and the safety, the anti-interference performance and the energy efficiency performance of unmanned aerial vehicle communication are remarkably improved.
Owner:CHINA TOWER CO LTD

Adaptive encryption system based on AI intelligent safety management

The invention discloses a self-adaptive encryption system based on AI intelligent security management, which relates to the technical field of information security, and comprises a data acquisition module, a risk assessment module, an encryption algorithm selection module, a key generation and management module, an encryption execution module and an encryption effect feedback module, the data collection module is used for collecting various data in a system operation environment, including but not limited to network flow data, equipment state data and user behavior data; and the risk assessment module analyzes the collected data based on an AI algorithm and assesses the security risk level faced by the current system. The operation environment data is comprehensively collected through the data acquisition module, the security risk level is evaluated in real time through the risk evaluation module based on the AI algorithm, the adaptive encryption algorithm can be dynamically selected according to the risk, the defect that a traditional encryption system is fixed in strategy is overcome, and encryption pertinence and effectiveness are improved.
Owner:HEBI CRYPTOADVANCED TECH RES INST

Industrial internet data security communication method based on hybrid anti-quantum cryptography

The invention discloses an industrial internet data security communication method based on hybrid anti-quantum cryptography, which relates to the technical field of data communication, and comprises the following steps: acquiring a key pair and an anti-quantum security certificate; sending a connection request to data receiver equipment to complete certificate credibility authentication, and sending an anti-quantum security certificate of the equipment; receiving a shared key seed sent by the data receiver equipment; decrypting the encapsulated ciphertext to obtain a shared key seed, and generating a corresponding shared key according to the same shared key generation algorithm as the data receiver equipment; the method comprises the following steps of: signing original data by using a signature private key, splicing a signature and the original data to obtain spliced data, encrypting the spliced data by using a shared key based on an AES-256-GCM algorithm to obtain an encrypted ciphertext and an ML-DSA signature, and sending the encrypted ciphertext to data receiver equipment. According to the method, the key distribution step is simplified, the signature verification calculation overhead is optimized, and the data communication efficiency is improved.
Owner:SICHUAN UNIV +1

Finance and tax data intelligent management method and system based on encrypted storage

The invention discloses a finance and taxation data intelligent management method and system based on encrypted storage, and relates to the technical field of enterprise finance and taxation management, and the method comprises the steps: collecting finance and taxation related data from a plurality of channels through a data obtaining module, carrying out the sensitivity evaluation of the data, and dividing the sensitivity grade; key generation and encryption strategy setting: making a corresponding encryption scheme according to the sensitivity level of the data, including generation of an encryption key and setting of a dynamic encryption strategy; data encryption and storage: carrying out encryption processing on finance and tax data by utilizing the obtained secret key and the encryption strategy, and safely storing a ciphertext; and data access and dynamic encryption maintenance: providing a controlled encrypted data access service, and executing dynamic security maintenance on the stored data according to a predetermined strategy. According to the invention, the finance level, the intelligent degree and the long-term compliance of finance and tax data protection are effectively improved.
Owner:YONYOU NETWORK TECH CO LTD

Intelligent equipment security networking method and system based on dynamic key

The invention relates to an intelligent device safe networking method and system based on a dynamic secret key, and the method comprises the steps: obtaining a device identifier and an initial secret key of an intelligent device, recording a current timestamp when the intelligent device is started, and generating a dynamic secret key through a Hash algorithm in combination with the device identifier and the initial secret key; generating a corresponding networking request based on the dynamic key, and sending the dynamic key and the networking request to a corresponding gateway; verifying the received networking request and the dynamic key through the gateway to obtain a verification result, and sending the verification result to the intelligent device; and generating a corresponding session key through the intelligent device according to a preset Diffie-Hellman algorithm in combination with the verification result, performing encrypted communication with the gateway based on the session key, and sending corresponding encrypted data to the gateway. According to the invention, flexible key management and efficient encryption communication can be realized.
Owner:SHENZHEN YIBANG SUNSHINE CO LTD

Method and system for realizing USB flash disk equipment interaction based on flash memory encryption technology

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.
Owner:SHENZHEN LINGCHUANG IND CO LTD

Cloud data secure transmission system and method based on quantum encryption technology

The invention relates to the technical field of network security, in particular to a cloud data secure transmission system and method based on a quantum encryption technology. Comprising a quantum key generation and management unit used for generating a physical layer security key, realizing key true random generation through a quantum state unclonable principle, and optimizing key negotiation efficiency by adopting an improved adaptive basis vector matching algorithm; a data transmission encryption unit; a physical layer safety monitoring unit; and a channel fusion switching unit. According to the method, the physical layer security key is generated based on the quantum state unclonable principle, the dependency limitation of a traditional encryption algorithm on mathematics is broken through, and the cracking risk of quantum computing on bottom layer encryption logic can be reduced; according to the invention, photon polarization state parameters are collected in real time through the physical layer security monitoring unit, the eavesdropping behavior is detected based on the preset error rate threshold, real-time perception of the eavesdropping behavior in a transmission link is realized, and the defect that the security state of the physical layer cannot be perceived in real time in a traditional scheme is overcome.
Owner:JIUYILI DIGITAL TECH (SHENZHEN) CO LTD

Image encryption system and method in smart power grid environment

The invention discloses an image encryption system and method in an intelligent power grid environment, and aims to solve the problem that an encryption strategy is static and lacks self-adaptive capability in the prior art. The image encryption system comprises terminal equipment, edge equipment and central equipment, and a dynamic key generation unit on the terminal equipment generates a dynamic key by cooperatively utilizing a physical unclonable feature (PUF) of the equipment and a real-time load of a power grid; the hierarchical encryption unit performs encryption of different intensities based on image content complexity. A topology sensing transmission module of the system analyzes power grid topology by using a graph neural network (GNN) and dynamically optimizes transmission. In addition, the image encryption system further integrates low-density parity check code encoding and decoding and a self-adaptive decryption strategy so as to enhance the anti-interference capability. According to the invention, by constructing a sensing, decision-making and execution integrated adaptive security system, the security, high efficiency and robustness of smart grid image data transmission are significantly improved.
Owner:EASTERN GANSU UNIVERSITY

Identity authentication unloading method and system based on intelligent network card

The invention relates to the field of network security, and discloses an identity authentication unloading method and system based on an intelligent network card. The method comprises the following steps: presetting a master key in an intelligent network card; presetting a master key in the intelligent network card; receiving client request data forwarded by the application layer and extracting a service identifier; generating a private key of the corresponding service through the service identifier and the master key; acquiring a local authentication message, signing the local authentication message by using the private key, generating a server signature value, and sending the server signature value to the client through the application layer to trigger a client authentication process; receiving client certificate data forwarded by the application layer and extracting a certificate signature value; and verifying the certificate signature value by using a preset certificate issuing mechanism public key and generating a verification result, and outputting feedback information based on the verification result. According to the method, a hardware-level unloading function in an identity authentication process is realized through the intelligent network card, and the problems of high calculation overhead and poor expansibility of traditional TLS bidirectional authentication are solved.
Owner:JIHUA LAB

Data protection method fusing quantum key in TLS

The invention discloses a data protection method for fusing a quantum key in a TLS, and relates to the technical field of quantum secret communication. According to the method, a quantum key is combined with a pre-shared key to perform identity authentication, and a pre-shared key database is continuously updated, so that the problem that a public key identity authentication system is easily attacked by quantum computing and the problem that the security is reduced due to repeated use of the pre-shared key in the existing method are solved; meanwhile, according to the method, a session key used in the communication process is generated by taking the quantum key as a key material through a preset key generation algorithm, so that the use of an unsafe traditional key exchange algorithm is avoided, and the security of data transmission is enhanced.
Owner:UNIV OF SCI & TECH OF CHINA +1

Anonymous Internet of Things identity authentication method and device based on anti-quantum computing password

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.
Owner:HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO LTD

Food information tracing method and system based on laser code spraying

The invention relates to the technical field of food information tracing, in particular to a food information tracing method and system based on laser code spraying. The method comprises the following steps: obtaining production related information; the method comprises the following steps: collecting production data in a food production process, and carrying out blockchain up-chain evidence storage to obtain a blockchain up-chain record; carrying out data association and integration on the block chain uplink record and the production related information, and carrying out multi-dimensional data packet generation to obtain a multi-dimensional data packet; performing Hash calculation on the multi-dimensional data packet to obtain a Hash value of the multi-dimensional data packet; obtaining a unique serial number of the product; performing seed key generation on the Hash value of the multi-dimensional data packet and the unique serial number of the product by using a preset master key, and performing key derivation function calculation to obtain a product key; and according to the multi-dimensional data packet and the product key, performing traceability information encryption to obtain encrypted traceability information. The invention provides a safer, more reliable and more convenient food traceability method through a food information traceability technology.
Owner:GOLDEN MILL FOOD CO LTD

Internet-of-things-oriented edge duplicate removal and privacy protection entrusted audit management method and system

The invention relates to an edge duplicate removal and privacy protection entrusted audit management method and system for the Internet of Things. The method comprises the following steps: an Internet of Things device issues an audit task announcement, and a target fog node obtains a delegation key by negotiating with the device; the equipment performs block and partition processing on original data, encrypts the original data by using an AES (Advanced Encryption Standard) by using an MLE key and sends the encrypted data to a target fog The fog node uses the delegation key to generate a block label, and the block label is compared with a storage block label to remove repeated blocks; in the auditing stage, the fog node generates a random challenge and sends the random challenge to the cloud server, the cloud server generates a corresponding integrity proof and sends the integrity proof to the target fog node for validity verification, and the target fog node creates an auditing log and uploads the auditing log to the block chain for the Internet of Things device to view. The original data is encrypted by using the MLE key, so that the data privacy is protected; by entrusting label calculation, deduplication operation and auditing to the fog node, offline auditing of the equipment can be realized, and the calculation burden of the equipment can be reduced.
Owner:SUQIAN COLLEGE

Internet of Things data transmission security enhancement method combined with quantum random number generation

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.
Owner:ZHONGHUITONG ECOLOGICAL TECH (SHANDONG) CO LTD

Configurable number-theory transformation parallel computing acceleration method and device for post quantum cryptography algorithm

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.
Owner:BEIJING INST OF TECH +1

Data packet optimization processing method and device, equipment and medium

The invention relates to the technical field of data processing, can be applied to business scenes such as financial science and technology and medical health, and discloses a data grouping optimization processing method, device and equipment and a medium. The method comprises the steps that input data are collected, cleaning and format unification are completed, and cleaned data are generated; generating a grouping mark from a condition constraint library based on the data attribute field; dividing the data into a plurality of subsets according to a segmentation strategy and distributing the subsets to a plurality of processing nodes; generating a grouping key in each processing node according to the grouping mark and the data attribute field; grouping identifiers are distributed for the records based on the grouping keys, and a local grouping result table is formed; and finally, collecting all local results, verifying the consistency, and generating a global grouping result table. According to the method, sorting and key generation are performed in combination with the data attribute fields and the grouping marks, high-precision grouping identification is realized, and the accuracy of a global grouping result is guaranteed through an inter-node consistency verification mechanism.
Owner:CHINA PING AN LIFE INSURANCE CO LTD

Methods and Apparatuses for Performing Federated Learning

Embodiments described herein provide methods and apparatuses for performing federated learning, FL. A method in a federated learning, FL, server for performing FL with N client nodes, where N is an integer number greater than 1, comprises: receiving (201, 608a) from a first client node, a first message, the first message comprising: a first public key, a first signature, a local model signature, and a local model; verifying (202, 610a), using the first public key and a public verification function, s, that the first signature was generated from a private signature function and the first public key, wherein the public verification function corresponds to the private signature function, s′; verifying (203, 612a), using the local model and the first public key, that the local model signature was generated from a first private key and the local model, wherein the first public key corresponds to the first private key; and responsive to the verifying steps being successful, utilizing (204, 614) the local model to generate an updated global model.
Owner:TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

Data auditing and approving method and device

The invention relates to the technical field of data security, and particularly provides a data auditing and approving method and device, which is applied to a scene that multi-role collaborative decryption is required for multi-level approval, and comprises the following steps: S1, data fragmentation and hybrid encryption; s2, performing dynamic key management; s3, attribute base access control; and S4, block chain evidence storage and auditing. Compared with the prior art, dynamic key generation, hierarchical encryption storage, fine-grained permission control and real-time permission revocation can be realized through a credible key management mechanism, and data whole-process security processing under data privatization data auditing is met.
Owner:SHANDONG INSPUR CLOUD GOVERNMENT INFORMATION TECHNOLOGY CO LTD

System and method for ai-based adaptive security parameter calculation in license key generation with quantum-resistant protections

Systems, computer program products, and methods are described herein for AI-based adaptive security parameter calculation in license key generation with quantum-resistant protections. The present disclosure is configured to utilize advanced cryptographic techniques, including elliptic curve cryptography and SHA-3 hashing, to produce secure digital signatures for license keys. An AI-driven engine analyzes historical security data to adaptively adjust key generation parameters, ensuring enhanced protection against current and emerging threats. This adaptive approach allows for continuous learning and improvement of security measures, making the system robust against both classical and quantum cryptographic attacks. The disclosed methods integrate the generation, assessment, and validation of keys into a streamlined process that promotes high security while maintaining efficiency.
Owner:BANK OF AMERICA CORP

Anti-quantum-attack key generation method, device and equipment and medium

The invention discloses an anti-quantum-attack key generation method and device, equipment and a medium, which are used for improving the key generation efficiency and further improving the digital signature efficiency. The method provided by the invention comprises the following steps: determining a one-time signature type value; and respectively determining a first parameter and a second parameter used for generating a private key, generating a random number of a preset byte number, and taking the random number as a secret seed, further generating a plurality of first messages based on the one-time signature type value, a first parameter, a second parameter and a secret seed; grouping the plurality of first messages according to parameters used for representing the parallel processing capability of a preset hash function; for the first messages in each group, determining hash values corresponding to the first messages in the group in parallel by adopting the preset hash function; then, utilizing a hash value corresponding to each first message to obtain a first secret original image array; and generating a private key by using the first secret original image array.
Owner:BEIJING HAITAI FANGYUAN HIGH TECH

Data security transmission method and system with anti-quantum security

The invention discloses a data security transmission method and system with anti-quantum security, and relates to the technical field of data transmission, and the method comprises the steps: obtaining information which comprises an identity identifier, a temporary public key, a temporary secret value and a validity period demand of a user; generating a public key and a private key of the user based on an ML-DSA signature algorithm; sending an authentication request to a CA authentication center according to the information and a public key of the user, and receiving a certificate authenticated, signed and issued by the CA authentication center; exchanging and verifying the credentials of each other with other users; and after the certificate verification is passed, responding to the data transmission instruction, calling and executing a temporary shared key generation module, outputting a temporary shared key, and then sending data to other users or receiving data from other users based on an SM4 algorithm and an ML-DSA signature algorithm according to the temporary shared key. According to the invention, the cost and risk during upgrading and updating of the system are reduced.
Owner:SICHUAN UNIV

Satellite portable station data encryption authentication method and system

The invention discloses a satellite portable station data encryption authentication method and system, and belongs to the technical field of wireless communication network security, and the method comprises the steps: collecting power amplifier nonlinear harmonic spectrum data and environmental noise frequency domain energy distribution data of a satellite terminal, and carrying out the XOR confusion processing, and generating a dynamic key parameter; generating a cross-network authentication pre-distribution parameter based on a preset satellite link stability threshold and the signal quality parameter of the current satellite network; and when the signal quality parameter of the satellite network is reduced to a preset switching threshold, extracting a target network session key parameter, and encrypting and sending uplink data in combination with the dynamic key parameter and the cross-network authentication pre-distribution parameter. According to the invention, a power amplifier harmonic wave and environmental noise fusion key generation technology and a link stability and space-time parameter linkage pre-distribution mechanism are adopted, so that high-safety and low-delay communication protection can be realized in a complex electromagnetic environment and a multi-satellite network switching scene.
Owner:JIANGSU ANRUIXUN INFORMATION TECH CO LTD

Multi-level access control and authority synchronization method for secure mobile storage

The invention discloses a multi-level access control and authority synchronization method for secure mobile storage, and belongs to the field of mobile storage security. Aiming at the problems of data leakage, poor authority management and the like of the mobile storage device, a multi-level access control framework, a decentralized authority synchronization mechanism and a dynamic token and zero-knowledge proof system are constructed. Generating a plurality of layers of sub-keys from a master key by using a PBKDF2 algorithm through hierarchical key generation, and associating different encryption areas and authority strategies; incremental synchronization is carried out based on a Merkle tree, and data consistency is guaranteed through a consistency verification protocol; a temporary token is generated by using a Schnorr protocol, and the permission is verified in combination with zero-knowledge proof, so that the privacy security is ensured. In scene application of a power grid and the like, a master key is activated through biological recognition, permission is loaded according to a strategy, and permission change is efficiently synchronized. According to the method, the mobile storage security and the management efficiency are improved, and accurate authority control and reliable synchronization are realized.
Owner:GUANGXI POWER GRID CORP

Secure communication method and system based on QRNG and Beidou positioning terminal

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.
Owner:YIXUNTONG TECH CO LTD