Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

3299 results about "Key generation" patented technology

Key generation is the process of generating keys in cryptography. A key is used to encrypt and decrypt whatever data is being encrypted/decrypted. A device or program used to generate keys is called a key generator or keygen.

Methods and Systems for Privacy-Preserving Location Verification

A computer-implemented method and system for privacy-preserving location verification in distributed networks comprises initializing a multi-modal biometric authentication system on a user device, generating cryptographic keys using a distributed key generation protocol, binding the cryptographic keys to biometric templates using a fuzzy vault scheme, constructing and broadcasting encrypted location beacons, and generating zero-knowledge proofs of location claims. The system includes user devices equipped with biometric sensors and verifier devices configured to validate location claims and maintain consensus in a blockchain network. The method implements real-time liveness detection for multiple biometric input types, executes fault-tolerant consensus algorithms with privacy preservation, and maintains a dual-scoring mechanism comprising device trust scores and user reputation scores. The system enables secure location verification while preserving user privacy through cryptographic protocols and biometric authentication in decentralized environments.
Owner:ABDELSAMIE MAHER A

Big data auxiliary key generation method and system in communication data encryption transmission

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.
Owner:COLLEGE OF MOBILE TELECOMM CHONGQING UNIV OF POSTS & TELECOMM

Key generation and distribution system based on quantum random number

The invention discloses a key generation and distribution system based on quantum random numbers, and relates to the technical field of quantum key distribution. The system comprises a quantum random number generation module, a light source control module, a quantum key distribution module, a detector module, a data processing module, a communication control module, a network anomaly monitoring module and an identity authentication module. According to the secret key generation and distribution system based on the quantum random number, the quantum random number generator generates a real unpredictable random number sequence by using the randomness principle in quantum mechanics, and the random number sequence is taken as the basis of the secret key, so that the unpredictability and the safety of the secret key are fundamentally improved; compared with a traditional secret key generation method based on a pseudo-random number, the quantum random number has higher randomness and lower predictable risk, various cryptographic analysis attacks can be effectively resisted, the uncrackability of the secret key is ensured, and an unbreakable safety guarantee is provided for information communication.
Owner:BEIJING ORIENTAL SENTAI TECH DEV CO LTD

Data encryption method and device, equipment and medium

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.
Owner:PING AN TECH (SHENZHEN) CO LTD

Sensing data chip-level dynamic key negotiation method

The invention relates to the technical field of sensing data security, and discloses a sensing data chip-level dynamic key negotiation method, which comprises the following steps of: acquiring a unique hardware identifier and key parameters of a sensor node, and generating a dynamic key seed matrix; after acquisition is completed, randomly intercepting data segments, performing median filtering and normalization preprocessing, extracting local statistical features and global features to generate a data feature sequence, and splicing the data feature sequence to a seed matrix to obtain a dynamic key generation matrix; a dynamic negotiation key is generated through standardization and SM3 Hash algorithm encryption, and is stored in a cloud and node security unit; during verification, dual verification is realized through hash comparison and plaintext bit-by-bit matching; and setting an environment parameter exception triggering mechanism, and updating the key if accumulative exception exceeds the limit. According to the method, hardware and dynamic data features are fused, and the key security and adaptability are improved.
Owner:ZHONGYING QINGCHUANG TECH CO LTD

PUF (Physical Unclonable Function) key generation and equipment identity authentication system for cold chain environment

The invention discloses a PUF (Physical Unclonable Function) key generation and equipment identity authentication system for a cold chain environment, and particularly relates to the technical field of information security, comprising temperature change data perception, drift modeling, dynamic error correction and closed-loop optimization, and collecting original response data of PUF hardware and temperature sensor readings by simulating the cold chain environment in a temperature-controllable experiment module; learning a nonlinear mapping relation between the dynamic temperature change and PUF response drift, and outputting a drift compensation matrix; constructing a two-stage error correction mechanism based on the drift compensation matrix; the first-stage error correction unit carries out nonlinear calibration on the original PUF response sequence according to the drift compensation matrix; the second-stage error correction unit adopts a temperature sensing type reconfigurable LDPC coding architecture, an LDPC check matrix is obtained based on a temperature-drift joint constraint model, the error correction performance of a high-drift scene is optimized through the LDPC check matrix, and the problem of key instability caused by PUF hardware response drift in a cold chain environment is solved.
Owner:HUNAN UNIV OF FINANCE & ECONOMICS

Federal learning system based on multi-key homomorphic encryption and adaptive differential privacy

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.
Owner:FUZHOU UNIV

Secret communication system of unmanned aerial vehicle

The invention discloses a secret communication system of an unmanned aerial vehicle, which relates to the technical field of secret communication of the unmanned aerial vehicle and comprises a secret key generation and distributed storage unit, a dynamic secret key updating unit, a secret key destruction and tracing unit, a multi-band sensing and interference identification unit and a combined regulation and control unit. A dynamic key is generated through a chaos algorithm, and the security of the key is ensured in combination with block chain fragmentation storage and GPS binding encryption; updating the key according to the risk level, and transmitting the fragments by using an anti-quantum channel; after the communication is finished, the secret key fragments are invalidated, and anomaly detection and traceability are realized; scanning a multi-band frequency spectrum in real time, identifying an interference type and optimizing the model; and according to the interference intensity and the energy efficiency demand, dynamically switching the frequency bands, adjusting the power and enhancing the anti-interception capability. The problems that an existing unmanned aerial vehicle communication system is insufficient in safety, weak in anti-interference capacity, incomplete in key management mechanism and the like are effectively solved, and the safety, the anti-interference performance and the energy efficiency performance of unmanned aerial vehicle communication are remarkably improved.
Owner:CHINA TOWER CO LTD

Adaptive encryption system based on AI intelligent safety management

The invention discloses a self-adaptive encryption system based on AI intelligent security management, which relates to the technical field of information security, and comprises a data acquisition module, a risk assessment module, an encryption algorithm selection module, a key generation and management module, an encryption execution module and an encryption effect feedback module, the data collection module is used for collecting various data in a system operation environment, including but not limited to network flow data, equipment state data and user behavior data; and the risk assessment module analyzes the collected data based on an AI algorithm and assesses the security risk level faced by the current system. The operation environment data is comprehensively collected through the data acquisition module, the security risk level is evaluated in real time through the risk evaluation module based on the AI algorithm, the adaptive encryption algorithm can be dynamically selected according to the risk, the defect that a traditional encryption system is fixed in strategy is overcome, and encryption pertinence and effectiveness are improved.
Owner:HEBI CRYPTOADVANCED TECH RES INST

Encryption method and related equipment

The invention relates to the technical field of computer storage, in particular to an encryption method and related equipment. The encryption method comprises the following steps: generating a unique device identifier through a polymorphic ring structure, wherein the unique device identifier is used for generating a unique identifier and a key of the solid-state storage device; based on the generated device identifier, a multi-dimensional dynamic key is generated in combination with a multi-dimensional mixed function and is used for data encryption; and encrypting the segmented data by using a multi-dimensional dynamic key, and embedding a progressive vector check code into each data segment to enhance the security of the data segment level. According to the method, the defects of the existing solid-state storage equipment encryption technology in the aspects of key management, encryption mechanism, key irreversibility, real-time monitoring and the like are overcome, and all-around guarantee is provided for data storage security.
Owner:SHENZHEN MICRO INNOVATION IND CO LTD

Industrial internet data security communication method based on hybrid anti-quantum cryptography

The invention discloses an industrial internet data security communication method based on hybrid anti-quantum cryptography, which relates to the technical field of data communication, and comprises the following steps: acquiring a key pair and an anti-quantum security certificate; sending a connection request to data receiver equipment to complete certificate credibility authentication, and sending an anti-quantum security certificate of the equipment; receiving a shared key seed sent by the data receiver equipment; decrypting the encapsulated ciphertext to obtain a shared key seed, and generating a corresponding shared key according to the same shared key generation algorithm as the data receiver equipment; the method comprises the following steps of: signing original data by using a signature private key, splicing a signature and the original data to obtain spliced data, encrypting the spliced data by using a shared key based on an AES-256-GCM algorithm to obtain an encrypted ciphertext and an ML-DSA signature, and sending the encrypted ciphertext to data receiver equipment. According to the method, the key distribution step is simplified, the signature verification calculation overhead is optimized, and the data communication efficiency is improved.
Owner:SICHUAN UNIV +1

Finance and tax data intelligent management method and system based on encrypted storage

The invention discloses a finance and taxation data intelligent management method and system based on encrypted storage, and relates to the technical field of enterprise finance and taxation management, and the method comprises the steps: collecting finance and taxation related data from a plurality of channels through a data obtaining module, carrying out the sensitivity evaluation of the data, and dividing the sensitivity grade; key generation and encryption strategy setting: making a corresponding encryption scheme according to the sensitivity level of the data, including generation of an encryption key and setting of a dynamic encryption strategy; data encryption and storage: carrying out encryption processing on finance and tax data by utilizing the obtained secret key and the encryption strategy, and safely storing a ciphertext; and data access and dynamic encryption maintenance: providing a controlled encrypted data access service, and executing dynamic security maintenance on the stored data according to a predetermined strategy. According to the invention, the finance level, the intelligent degree and the long-term compliance of finance and tax data protection are effectively improved.
Owner:YONYOU NETWORK TECH CO LTD

Intelligent equipment security networking method and system based on dynamic key

The invention relates to an intelligent device safe networking method and system based on a dynamic secret key, and the method comprises the steps: obtaining a device identifier and an initial secret key of an intelligent device, recording a current timestamp when the intelligent device is started, and generating a dynamic secret key through a Hash algorithm in combination with the device identifier and the initial secret key; generating a corresponding networking request based on the dynamic key, and sending the dynamic key and the networking request to a corresponding gateway; verifying the received networking request and the dynamic key through the gateway to obtain a verification result, and sending the verification result to the intelligent device; and generating a corresponding session key through the intelligent device according to a preset Diffie-Hellman algorithm in combination with the verification result, performing encrypted communication with the gateway based on the session key, and sending corresponding encrypted data to the gateway. According to the invention, flexible key management and efficient encryption communication can be realized.
Owner:SHENZHEN YIBANG SUNSHINE CO LTD

Key sharing system, method, program, server device, and terminal device

To share encrypted data more securely. After a pair of an identification token 131 and key disclosure permission information 134 transmitted from a first client terminal 102 is verified by a verification unit 106, a key registration unit 107 registers a record 122 including the key 133 and the key disclosure permission information 134 in a database 121 of a key sharing server 101 and transmits key identification information 135 for identifying the record to the first client terminal 102. The first client terminal 102 transmits data 139 including encrypted data 138 obtained by encrypting transmission data by using a cipher key 136 for data encryption after first processing output by a cipher key first processing unit 109, a cipher key 137 for data decryption after first processing output by the cipher key first processing unit 109, and the key identification information 135 obtained from the key registration unit 107, to a second client terminal 103. The second client terminal 103 makes an inquiry to a key disclosure unit 110 by using the key identification information 135 acquired from the received data 139 and an identification token 132 of the terminal itself. The key disclosure unit 110 acquires the pair of key 133 and key disclosure permission information 134 corresponding to the key identification information 135, from the database 121, and notifies, when the identification token 132 is included in a key disclosure permissible range indicated by the key disclosure permission information 134, the second client terminal of the key 133. The second client terminal 103 uses the notified key 133 to generate a cipher key 140 for data decryption after second processing on the basis of the cipher key 137 for data decryption after first processing acquired from the data 139 and uses the cipher key 140 for data decryption after second processing to execute decryption on the encrypted data 138 in the data 139.
Owner:KAMBAYASHI TORU

Wireless communication network data secure transmission method and system

The invention discloses a wireless communication network data secure transmission method and system, and relates to the technical field of secure transmission. During system operation, agricultural monitoring data are collected in real time through various sensor devices arranged in an agricultural environment, encryption processing is performed by using a symmetric encryption algorithm, and a dynamic key length adjustment mechanism is supported; a random number generator is integrated, unified management is performed on key generation, distribution, updating and destruction in a system, a timestamp or a random serial number is embedded into each data packet, the uniqueness of the timestamp or the serial number is verified at a receiving end, so that replay attacks are resisted, and the data are comprehensively analyzed and evaluated according to a set algorithm, so that the replay attack is prevented. The method comprises the following steps: acquiring a security data transmission performance index SDTP through calculation, generating a monitoring report, detecting abnormal conditions in a data transmission process, including channel quality reduction, data loss or verification failure, and providing a visual monitoring result.
Owner:陕西旭信通网络科技有限公司

Quantum key generation method and system

PendingUS20250023720A1Key distribution for secure communicationQuantum transportParticle physics
A quantum key generation method is disclosed herein. In a specific embodiment, the method comprises receiving a quantum transmission from a quantum transmission device 208, 508, 510, 520, the quantum transmission including quantum bits for obtaining a quantum key, detecting the quantum bits from the quantum transmission to obtain a detected bit-sequence: obtaining a derived value from the detected bit-sequence; and verifying that the derived value is consistent with an expected value of the derived value corresponding to a test value of a same statistical characteristic that is dependent on a statistical property of a key generation bit-sequence 334, 1334 used for encoding or decoding of quantum bits to detect tampering. A quantum key generation system 200 is also disclosed.
Owner:LIM HAN CHUEN +1

Method and system for realizing USB flash disk equipment interaction based on flash memory encryption technology

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.
Owner:SHENZHEN LINGCHUANG IND CO LTD

Cross-domain identity authentication method and system based on quantum key distribution network

Disclosed in the present invention are a cross-domain identity authentication method and system based on a quantum key distribution network. The method comprises: sending a key negotiation request to a corresponding quantum key management system, and forwarding the key negotiation request to a quantum key generation system by means of the quantum key management system, such that the quantum key generation system establishes a relay key negotiation link between quantum key terminals and generates symmetric authentication keys; receiving an authentication request sent by means of a corresponding user-side terminal, and allocating identifiers of the authentication keys to the user-side terminal on the basis of the authentication request; and receiving login request information sent by means of the corresponding user-side terminal, and responding to the user-side terminal with constructed token ciphertext on the basis of the login request information, so as to forward the token ciphertext to a cross-domain identity authentication service system when the user-side terminal accesses the cross-domain identity authentication service system. The present invention solves the centralization problem that is present in cross-domain identity authentication, thus improving the confidentiality and integrity of authentication credential data distribution.
Owner:CHINA TELECOM QUANTUM TECH CO LTD

Cloud data secure transmission system and method based on quantum encryption technology

The invention relates to the technical field of network security, in particular to a cloud data secure transmission system and method based on a quantum encryption technology. Comprising a quantum key generation and management unit used for generating a physical layer security key, realizing key true random generation through a quantum state unclonable principle, and optimizing key negotiation efficiency by adopting an improved adaptive basis vector matching algorithm; a data transmission encryption unit; a physical layer safety monitoring unit; and a channel fusion switching unit. According to the method, the physical layer security key is generated based on the quantum state unclonable principle, the dependency limitation of a traditional encryption algorithm on mathematics is broken through, and the cracking risk of quantum computing on bottom layer encryption logic can be reduced; according to the invention, photon polarization state parameters are collected in real time through the physical layer security monitoring unit, the eavesdropping behavior is detected based on the preset error rate threshold, real-time perception of the eavesdropping behavior in a transmission link is realized, and the defect that the security state of the physical layer cannot be perceived in real time in a traditional scheme is overcome.
Owner:JIUYILI DIGITAL TECH (SHENZHEN) CO LTD

Hybrid encryption method based on industrial bus

The invention discloses a hybrid encryption method based on an industrial bus, and the method comprises the following steps: S1, generating an initial session key through a multiple elliptic curve algorithm, and generating an initial key pair through a pseudo-random number generator; s2, encrypting the control data by using a first-level key; s3, generating a secondary key to encrypt common transmission data; s4, dynamically generating a third-level temporary session key by using a pseudo-random number generator, and encrypting real-time transmission data of a large data volume; s5, realizing collaborative key generation and synchronous updating of a plurality of communication nodes through a distributed key management system; s6, periodically utilizing a probability density regression forest algorithm to dynamically update the key, and triggering key re-negotiation when communication abnormity is detected; and S7, integrating a classifier based on the combination of a deep forest and a gradient boosting decision tree, automatically classifying the data and dynamically adjusting an encryption strategy. According to the method, a multiple elliptic curve algorithm, dynamic key management and the like are combined, and efficient encryption in industrial bus communication is achieved.
Owner:SUZHOU XINWANGFENG INTELLIGENT TECH CO LTD

Image encryption system and method in smart power grid environment

The invention discloses an image encryption system and method in an intelligent power grid environment, and aims to solve the problem that an encryption strategy is static and lacks self-adaptive capability in the prior art. The image encryption system comprises terminal equipment, edge equipment and central equipment, and a dynamic key generation unit on the terminal equipment generates a dynamic key by cooperatively utilizing a physical unclonable feature (PUF) of the equipment and a real-time load of a power grid; the hierarchical encryption unit performs encryption of different intensities based on image content complexity. A topology sensing transmission module of the system analyzes power grid topology by using a graph neural network (GNN) and dynamically optimizes transmission. In addition, the image encryption system further integrates low-density parity check code encoding and decoding and a self-adaptive decryption strategy so as to enhance the anti-interference capability. According to the invention, by constructing a sensing, decision-making and execution integrated adaptive security system, the security, high efficiency and robustness of smart grid image data transmission are significantly improved.
Owner:EASTERN GANSU UNIVERSITY

Identity authentication unloading method and system based on intelligent network card

The invention relates to the field of network security, and discloses an identity authentication unloading method and system based on an intelligent network card. The method comprises the following steps: presetting a master key in an intelligent network card; presetting a master key in the intelligent network card; receiving client request data forwarded by the application layer and extracting a service identifier; generating a private key of the corresponding service through the service identifier and the master key; acquiring a local authentication message, signing the local authentication message by using the private key, generating a server signature value, and sending the server signature value to the client through the application layer to trigger a client authentication process; receiving client certificate data forwarded by the application layer and extracting a certificate signature value; and verifying the certificate signature value by using a preset certificate issuing mechanism public key and generating a verification result, and outputting feedback information based on the verification result. According to the method, a hardware-level unloading function in an identity authentication process is realized through the intelligent network card, and the problems of high calculation overhead and poor expansibility of traditional TLS bidirectional authentication are solved.
Owner:JIHUA LAB

Digital asset decentralized management method and system

The invention provides a digital asset decentralized management method and system, and the method comprises the steps: enabling legal members in a group to jointly participate in the generation of an initial authorization key according to a preset distributed key generation protocol, dividing the key into a plurality of fragments through a threshold key sharing scheme, and storing the fragments in different member nodes; after the consensus is reached, the member node reconstructs a complete authorization key according to the request content, signs the key by adopting an aggregation signature scheme, generates an authorization certificate, and returns the certificate to the request node; a key cache mechanism is introduced, a member node maintains a local cache and stores historical authorization keys in the latest period of time, when a new authorization request is processed, available keys are searched from the local cache, and the available keys are directly used if hit.
Owner:DONGGUAN UNIONPAY TONGGUAN POS LEASING SERVICE

File transmission protection method, system and equipment based on multiple encryption algorithms

The invention discloses a file transmission protection method, system and device based on multiple encryption algorithms, and relates to the technical field of information, and the method comprises the steps: selecting a target file needing to be transmitted, carrying out the preprocessing, and generating file fragments; analyzing the sensitivity of each file fragment, and performing hierarchical encryption processing to obtain an encrypted fragment set; selecting a steganography carrier file, and embedding the encrypted fragments into the carrier file to generate a steganography index table; generating a dynamic session key based on the confusion key pool, encrypting the steganographic file transmission layer and embedding a dynamic key generation parameter; the receiving end generates a session key according to the transmission message header, decrypts the transmission layer data, extracts the steganographic file and decrypts the steganographic file; recombining the decrypted and recovered fragmented data into a complete file according to an identifier sequence; by dynamically matching the steganography carrier file, the efficient embedding of the fragmented data and the generation of the steganography index table are realized, and the concealment and the adaptability in the transmission process are ensured.
Owner:SUZHOU OMEGA NETWORK TECH CO LTD

Session key generation method and related device

The invention discloses a session key generation method and a related device, and relates to the technical field of quantum encryption. When the first SIM card needs to perform information interaction with the second SIM card, a private key team and a public key team can be generated, and the first SIM card is pre-configured with a mixed key encapsulation algorithm, so that the public key team comprises a public key capable of resisting quantum attacks, and after the public key team is sent to the second SIM card, the private key team and the public key team can resist quantum attacks. And the second SIM card can generate key generation information by using an encapsulation algorithm in the mixed key encapsulation algorithm, encrypt the key generation information by using the public key team to obtain ciphertext information, and send the ciphertext information to the first SIM card, so that the first SIM card can decrypt the ciphertext information by using the private key team to obtain the key generation information. Therefore, the session key is obtained.
Owner:ORIGIN QUANTUM COMPUTING TECH (HEFEI) CO LTD

Secure communication method and system based on national cryptographic algorithm and improved Modbus TCP protocol

The invention discloses a secure communication method and system based on a national cryptographic algorithm and an improved Modbus TCP protocol. The secure communication method comprises the steps that a host and a slave share an initial public key; the host and the slave establish TCP connection and generate random numbers based on the password module; signature verification is carried out on the random number by adopting a national cryptographic algorithm, so that security identity authentication between the host and the slave is realized; negotiating an encryption key between the host and the slave based on a national cryptographic algorithm; and the host and the slave perform data transmission based on the encryption key. According to the invention, a standard Modbus TCP protocol is improved, a security check domain is added so as to realize replay attack prevention, the SM2 asymmetric algorithm and the SM4 symmetric algorithm are combined to expand the national secret protocol design so as to ensure the confidentiality of data, and by configuring the cryptographic module for national secret authentication, the security of the Modbus TCP protocol is improved. And the functions of cryptographic operation, key generation, random number generation and the like of the host / slave are supported. Therefore, the safety compliance communication of the industrial system based on the improved Modubs TCP protocol is realized.
Owner:CHINA TRANSPORT INFORMATION TECH GRP CO LTD

Data protection method fusing quantum key in TLS

The invention discloses a data protection method for fusing a quantum key in a TLS, and relates to the technical field of quantum secret communication. According to the method, a quantum key is combined with a pre-shared key to perform identity authentication, and a pre-shared key database is continuously updated, so that the problem that a public key identity authentication system is easily attacked by quantum computing and the problem that the security is reduced due to repeated use of the pre-shared key in the existing method are solved; meanwhile, according to the method, a session key used in the communication process is generated by taking the quantum key as a key material through a preset key generation algorithm, so that the use of an unsafe traditional key exchange algorithm is avoided, and the security of data transmission is enhanced.
Owner:UNIV OF SCI & TECH OF CHINA +1

Encryption communication system and method based on multi-information dynamic key generation

The invention discloses an encryption communication system and method based on multi-information dynamic key generation. The system comprises a sending client, a server and a receiving client, and aims to ensure high security and integrity in data transmission. And the sending client generates a random number seed through the timestamp, the user ID and the position information, and uses a random number generated by the seed as a secret key to symmetrically encrypt the content of the data packet. And the server only serves as a data transfer node, does not have a decryption function, and provides a time service to ensure that the sending and receiving clients generate matched random number sequences. And after the receiving client receives the data packet, a random number seed is generated based on the same timestamp, user ID and position information, and the same random number sequence and decryption key are generated. And verifying the data integrity. The dynamic random number seed and the secret key design ensure that the secret key is unique and unpredictable, the secret key is prevented from being intercepted or reused, and the method is suitable for large-scale data transmission with high safety requirements such as finance and government affairs.
Owner:屈圣桥 +1

Anonymous Internet of Things identity authentication method and device based on anti-quantum computing password

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.
Owner:HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO LTD

Aviation data bus signal encryption method and system based on FPGA

The invention relates to the technical field of signal encryption, in particular to an aviation data bus signal encryption method and system based on a field programmable gate array (FPGA), which comprises the following steps of: based on input three-dimensional tensor signal data, extracting slices from a time index of an aviation data bus according to a fixed interval, progressively sequencing amplitudes of signal channels, and then segmenting; according to the method, through processing logic of matrix decomposition and feature curve generation, the feature extraction and dimension reduction process is optimized, the distinction degree and the expression capacity of feature information are improved, the randomness and the anti-cracking capacity of a key are enhanced through a key generation mode combining a dynamic disturbance factor and an encryption parameter, and the safety of signal transmission is guaranteed; through combination of amplitude superposition and frame-by-frame storage, dynamism and high efficiency of a signal encryption process are realized, signal tampering and eavesdropping risks are reduced, and through feature reconstruction and point-by-point matching processing in a decryption stage, accurate restoration of signal amplitude is ensured, and data integrity and anti-interference capability are guaranteed.
Owner:XIAN JANGHO ELECTRONIC TECH CO LTD