1589 results about "Key generation" patented technology

The invention relates to a federated learning system based on multi-key homomorphic encryption and adaptive differential privacy, and belongs to the technical field of privacy computing. According to the system, on the premise that no trusted third party exists, a multi-client collaborative key generation and threshold decryption mechanism is achieved, it is ensured that model parameters are always in an encrypted state in the aggregation process, and leakage of a single node is prevented. By introducing a parameter sensitivity analysis and selective encryption strategy, the system only encrypts high-risk parameters, and the encryption burden is effectively reduced. Meanwhile, in combination with an adaptive privacy budget allocation mechanism, the system dynamically adjusts noise intensity according to a model training state, and model performance and convergence speed are maintained while privacy protection capability is improved. According to the method, high robustness and collusion resistance are realized, stable operation under the condition that part of clients are offline is supported, and the method is suitable for application scenes such as medical treatment and finance with high data sensitivity and strict performance requirements.

The invention relates to the technical field of cores, and discloses a method and a system for realizing USB flash disk equipment interaction based on a flash memory encryption technology, which comprises the following steps of: dividing an encryptable data block of a flash memory controller, and determining a dynamic entropy weight of the encryptable data block by utilizing an equipment interaction instruction and a random noise characteristic signal; generating a self-adaptive key generation sequence capable of encrypting data blocks through an address allocation mode and a dynamic entropy weight of a flash memory controller; calculating a side channel leakage risk index of the flash memory controller, and setting a security level label of an encryptable data block in combination with a self-adaptive key generation sequence; the method comprises the following steps: setting a differentiated security protection mechanism of an encipherable data block by constructing an access control matrix of the encipherable data block and an encryption risk area of a flash memory controller; and generating a secure interaction scheme of the USB flash disk equipment based on the self-adaptive key generation sequence in combination with the differential security protection mechanism and the access control matrix. According to the invention, the interaction safety and reliability of the USB flash disk equipment can be improved.

The invention relates to the technical field of network security, in particular to a cloud data secure transmission system and method based on a quantum encryption technology. Comprising a quantum key generation and management unit used for generating a physical layer security key, realizing key true random generation through a quantum state unclonable principle, and optimizing key negotiation efficiency by adopting an improved adaptive basis vector matching algorithm; a data transmission encryption unit; a physical layer safety monitoring unit; and a channel fusion switching unit. According to the method, the physical layer security key is generated based on the quantum state unclonable principle, the dependency limitation of a traditional encryption algorithm on mathematics is broken through, and the cracking risk of quantum computing on bottom layer encryption logic can be reduced; according to the invention, photon polarization state parameters are collected in real time through the physical layer security monitoring unit, the eavesdropping behavior is detected based on the preset error rate threshold, real-time perception of the eavesdropping behavior in a transmission link is realized, and the defect that the security state of the physical layer cannot be perceived in real time in a traditional scheme is overcome.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

The invention relates to the technical field of data processing, can be applied to business scenes such as financial science and technology and medical health, and discloses a data grouping optimization processing method, device and equipment and a medium. The method comprises the steps that input data are collected, cleaning and format unification are completed, and cleaned data are generated; generating a grouping mark from a condition constraint library based on the data attribute field; dividing the data into a plurality of subsets according to a segmentation strategy and distributing the subsets to a plurality of processing nodes; generating a grouping key in each processing node according to the grouping mark and the data attribute field; grouping identifiers are distributed for the records based on the grouping keys, and a local grouping result table is formed; and finally, collecting all local results, verifying the consistency, and generating a global grouping result table. According to the method, sorting and key generation are performed in combination with the data attribute fields and the grouping marks, high-precision grouping identification is realized, and the accuracy of a global grouping result is guaranteed through an inter-node consistency verification mechanism.

The invention relates to a security authentication method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: receiving a key generation request sent by target equipment; if it is determined that the key generation request is legal, generating a trust identifier and a security certificate of the target device, obtaining an identifier verification request through the trust identifier, and sending the identifier verification request to an authentication server, so that the authentication server verifies the trust identifier to obtain an access token corresponding to the target device; receiving a message returned by the authentication server, and processing an access token carried by the message to obtain a trust identifier; and writing the security certificate into the target protection area, and sending the trust identifier and the security certificate to the target equipment, so that the target equipment is registered in the authentication server. By adopting the method, the identity verification of the equipment and the control of an encryption communication mechanism are realized, and the safety protection performance in a communication system is further improved.

The invention relates to the technical field of quantum cryptography, in particular to a dynamic key generation system and method based on multi-source QRNG and QKD, and the system comprises an interface registration method, a calling method, related equipment and a storage medium, is used for generating a high-security quantum key, and is a quantum key service system with a layered architecture. By abstracting, integrating and managing bottom-layer multi-source QRNG and QKD equipment and fully utilizing the flexible scheduling of quantum equipment, the security of key generation is ensured, so that the key service has higher performance, usability and security, and unified, dynamic and high-security quantum key generation and supply services are provided for various applications of the upper layer. The method is widely applied to the industries and fields of government, finance, energy, traffic, electric power and the like, meets the requirements of quantum key acquisition of various business applications in cloud computing and non-cloud environments, and ensures information security and business continuity.

The invention belongs to the technical field of network security, and particularly relates to a network security protection system and method based on an electric power emergency communication environment, and the system comprises a quantum-classical hybrid encryption system which is used for generating a dynamic key in real time; the biological characteristic driven dynamic trust ring is used for equipment identity authentication; the unmanned aerial vehicle relay network protocol is used for data transmission; the secret key after-reading burn-down protocol is used for information secret key after-reading burn-down; a key output by the quantum-classical hybrid encryption system is used for authentication encryption of a biological characteristic driven dynamic trust ring, an unmanned aerial vehicle relay network protocol transmits data encrypted by the quantum key, and a key burn-down protocol is used for reading encrypted data to trigger a key burn-down mechanism. According to the method, the key security is improved, the network attack difficulty is increased, the communication delay in a disaster is reduced, man-in-the-middle capture and attack can be immunized, and the problem of contradiction between the encryption strength and the real-time performance is solved.

The invention discloses an electric power real-time data dynamic encryption transmission method and system based on a national secret algorithm. According to the method, the real-time updating of the session key is realized by fusing the SM3 Hash algorithm and the multi-dimensional dynamic factor, and the anti-attack capability of data transmission of the power system is improved. A timestamp and data counter double-trigger mechanism is introduced in the key generation process, so that the key is automatically alternated under a fixed time interval or a data volume threshold value, a key exposure window is shortened, and the security risk caused by using the same key for a long time is reduced. Key synchronization is carried out in combination with an SM2 bidirectional authentication channel, the confidentiality of key distribution is ensured, access of unauthorized equipment is avoided through an identity authentication mechanism, full-closed-loop security protection from key generation to transmission is formed, the high-security requirement of the power industry for key data transmission is met, and the security of key data transmission is improved. Through deep combination of a cryptographic algorithm system and a dynamic adaptation mechanism, the high efficiency and compliance of power real-time data transmission are considered while the security is ensured.

The application discloses a session key generation method and related device, and relates to the technical field of quantum encryption; when a first SIM card needs to interact information with a second SIM card, a private key team and a public key team can be generated; since the first SIM card is pre-configured with a hybrid key encapsulation algorithm, the public key team includes a public key that can resist quantum attacks, so after the public key team is sent to the second SIM card, the second SIM card can generate key generation information by using an encapsulation algorithm in the hybrid key encapsulation algorithm, encrypt the key generation information by using the public key team, obtain ciphertext information, and send the ciphertext information to the first SIM card; in this way, the first SIM card can decrypt the ciphertext information by using the private key team, obtain the key generation information, and thus obtain a session key.

The invention discloses an electric power production management system safety operation and maintenance management method based on a national secret algorithm. According to the method, the key and the real-time running state of the equipment are deeply bound through a dynamic key derivation mechanism, so that the key is dynamically adjusted along with parameters such as the load rate, the temperature and the bit error rate, state change, namely key updating, is realized, and the anti-cracking capability of the key is greatly improved; the SM2, SM3, SM4 and other national cryptographic standards are adopted from root key generation, identity authentication, data transmission encryption and log tampering prevention of the full-link application of the national cryptographic algorithm system, it is ensured that the encryption strength meets the national password management requirement, and the overall encryption protection level of the system is improved. Closed-loop protection is formed through deep linkage among multiple steps, fragmentation of a safety mechanism is avoided, meanwhile, the traceability and the fault recovery efficiency of system operation are further improved through the whole-process encryption archiving and emergency response rapid recovery process of audit logs, and transmission and storage safety of power production core data is guaranteed.

The invention relates to the field of computer security, and discloses a data storage security protection method and system based on a solid-state hard disk, which comprises the following steps: identifying the inherent physical difference of a flash memory chip in the solid-state hard disk so as to calculate the read-write time sequence micro-deviation of the solid-state hard disk; performing hash operation on the device root key and the unique identifier of the controller corresponding to the solid state disk to obtain a bound master control key; generating a temporary encryption key of the write-in operation to encrypt plaintext data of the host system to obtain ciphertext data; writing the ciphertext data into a flash memory physical page corresponding to the physical page address to obtain a ciphertext physical page address; when the access mode is a hostile attack mode, secretly updating the ciphertext physical page address into a new physical page address, and deleting the ciphertext physical page address; and when the access mode is a secure access mode and the verification key is consistent with the bound master control key, normal loading and data access requests of the solid state disk are allowed. According to the invention, the security and integrity of data storage can be improved.

The invention provides an identity authentication method and system for resisting an identity forgery attack, which are used for guaranteeing the safety of cross-domain communication. The method comprises the following steps: firstly, initializing a system, and generating a key pair for an entity based on an elliptic curve; when the user registers in the domain, the authentication center generates a key pair, encryption parameters and an identity certificate and stores the key pair, the encryption parameters and the identity certificate in the slave chain. A key generation center (KGC) pre-generates a factor including a private key and pre-loads the factor to a roadside unit (RSU). When a user initiates a pseudonym generation request, the RSU verifies the request and forwards the request to a nearby base station; and the base station predicts a resource use state by using an AI model, and dynamically assigns a service base station to calculate pseudonym generation parameters in real time. A user generates own pseudonym, verification parameters and a key pair after obtaining the parameters, and generates a unique signature by using the pseudonym key to encrypt a message and send the encrypted message. After the receiver verifies the validity of the message, a verification request is forwarded to the base station through the RSU, the service base station is dynamically assigned to verify the legality of the pseudonym based on the AI strategy, and a user identity certificate is inquired and verified through carrying address information cross-chain (slave chain / main chain cooperation). According to the method, malicious vehicles with fake kana can be effectively identified, dynamic scheduling of resources is realized by using AI, and the low-delay requirement is met.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The invention relates to the technical field of information security, and discloses a handwriting dynamic encryption and electronic signature method based on a national secret algorithm, and the method comprises the steps: obtaining the handwriting data of a user, and carrying out the preprocessing of the data to remove noise and errors; carrying out feature extraction on the preprocessed handwriting data, extracting corresponding track features, speed features and pressure features, and generating a feature hash value of a unique identifier through a cryptographic SM3 hash algorithm; splicing and combining the feature hash value and a user private key, deriving a dynamic key through a national secret SM2 algorithm, and generating an electronic signature by using the dynamic key; an electronic signature is combined with a timestamp to form a structured signature packet, and the signature packet is hierarchically encrypted and stored in a database through a national cryptographic SM4 algorithm. According to the method and the system, the handwritten signature picture, the digital signature technology, the electronic signature technology and the biological recognition and layout file processing technology are fused, so that the safety and the reliability of electronic document signing are improved.

Systems and methods are disclosed for computer attestation by generating, in a software enclave on a native application or browser and from a host device, a key generation request to a secure key client to generate a key pair; performing a multi-party key generation operation between the secure key client on the native application or browser and a secure key server; and storing a first private key share and public key on the secure key client, wherein a second private key share and a public key are stored on the secure key server and wherein the public key is sent from the secure key server to a host server for storage.

The invention relates to the technical field of key generation and distribution, in particular to a multi-device automatic configuration encryption method and system based on Bluetooth. The method comprises the following steps: firstly, acquiring instruction information and attributes, RSSI values and historical pairing information of to-be-distributed network equipment, and providing a data basis for configuration; core equipment is screened through instruction and attribute matching and attribute similarity analysis, and equipment strongly related to user requirements is accurately positioned; historical pairing and RSSI value quantization equipment distance weights are fused, association conditions are analyzed, and a network structure is visually presented; analyzing the path length of the core equipment based on a graph structure, dividing closely associated target equipment groups, and determining the influence range of the core equipment; finally, the differentiated dynamic key is dynamically generated in combination with the equipment attribute, the distance weight and the instruction information in the group, the scheme effectively adapts to the dynamic change scene of the equipment through association analysis and dynamic adaptation, and the communication security and specificity are improved.

The invention discloses a collaborative secret state task matching method based on edge calculation in mobile crowdsourcing. The method comprises the steps of system initialization and key generation, requester-cloud platform registration authentication, worker-edge server registration authentication, login authentication and attribute submission, requester task issuing, cloud platform task delegation, secret state matching, worker task content decryption, worker answer submission, answer forwarding and decryption. According to the invention, cooperative authentication of workers and requesters and precise task matching based on attributes are realized under an edge-cloud architecture. A fuzzy extractor and an authentication encryption method with associated data are introduced, so that low-cost user local authentication and registration and authentication of a joining system are realized, the security is improved, and the calculation cost is reduced. Through function hidden inner product encryption and a Paillier cryptographic algorithm, task-worker matching and task answer submission are realized in a ciphertext state, and the requirements of a mobile crowdsourcing application scene with high safety, high privacy and dispersed cost are met.

The invention provides a key generation and issuing method and device based on a block chain, electronic equipment, a medium and a program product, relates to application of a large model in a financial science and technology scene, and can be applied to the technical field of artificial intelligence and the technical field of block chains. The method comprises the following steps: acquiring key application information, and performing multi-modal analysis on the key application information to obtain key analysis data; submitting a block chain evidence containing the key analysis data to a target block chain network, and obtaining returned evidence reference information; quoting the key analysis data based on the evidence quoting information, performing security policy and environmental risk analysis on the key analysis data, and constructing a target encryption scheme based on an analysis result; and generating target key data by using the target encryption scheme, performing key negotiation with a target terminal based on the target key data, and establishing a secure session key.

The invention discloses a lightweight low-delay quantum key distribution method and system adaptive to an electric power scene, and belongs to the technical field of quantum communication and electric power communication crossing. The method comprises the steps cooperatively executed by a sending end and a receiving end: the sending end determines a basis vector based on a pre-associated quantum fingerprint sequence and a timestamp, sends a key through polarization-phase two-dimensional coding, generates a selection mark and executes privacy amplification; and a receiving end synchronizes a timestamp to determine a basis vector, compares the basis vector with the quantum fingerprint to complete authentication, decodes through an integrated module, performs collaborative error correction and executes privacy amplification. The system comprises functional modules of a sending end and a receiving end, is integrated on a miniaturized board card, and supports common-fiber transmission and protocol conversion. According to the method, the problems of high time delay, high deployment cost and poor adaptability of the traditional QKD are solved, the end-to-end time delay is reduced to 14 microseconds, the deployment cost is reduced by more than 60%, the requirements of high safety, low time delay and lightweight deployment of a power system are met, and the method is suitable for key services such as power dispatching and relay protection.

A method, apparatus and device for determining matching of a vehicle fuse and a wire, and a computer readable storage medium, the method comprising: receiving an input instruction of a user on a database matching interface, and obtaining a load current value, a peak current and duration, an ambient temperature and a loop length carried by the input instruction; when a one-key generation instruction is detected, determining a target fuse model according to the load current value and the environment temperature; determining a wire type selection value according to the load current value and the environment temperature; and when the DV verification instruction is detected, performing short-circuit verification and overload verification, and determining whether the wire type selection value is matched with the target fuse type, thereby solving the technical problems of low accuracy and low efficiency of the fuse and wire diameter type selection mode depending on manual calculation and experience table lookup in the prior art, and improving the accuracy and the efficiency of the fuse and wire diameter type selection mode. The matching accuracy and efficiency of the fuse and the wire are improved.

Disclosed is a reconfigurable module-lattice-based key encapsulation mechanism (ML-KEM) post-quantum cryptography system and method using memory-based numbers theoretic transform (NTT). A post-quantum cryptography method of a post-quantum cryptography system including a plurality of internal submodules includes reconfiguring the plurality of internal submodules by variably selecting one security level from among the plurality of security levels; reconfiguring execution of the plurality of internal submodules to be changed through a main controller; and variably processing data according to the selected security level to perform key generation, encapsulation, and decapsulation through the reconfigured plurality of internal submodules.

A system and method for providing a randomness function to a smart contact on a decentralized network. An oracle receives a request for at least one random value to be supplied to a smart contract executing on a decentralized network, the request including a seed. The oracle generates the at least one random value based on the seed, and a secret key associated with the oracle, wherein the oracle is identified on the decentralized network by a public key associated with the secret key. The oracle generates a cryptographic proof based on the at least one random value and the public key and sends the at least one random value and the cryptographic proof to the decentralized network, whereby the proof, and thus the randomness of the at least one random value, can be verified.

The invention discloses a communication method, system and device of Internet of Things equipment and a medium, and the method is applied to an Internet of Things gateway, carries out the communication strategy generation of configuration parameters and historical transmission data records according to an Internet of Things communication mode set, obtains a parallel communication strategy, and carries out the communication strategy generation of the configuration parameters and the historical transmission data records. The parallel communication strategy comprises a plurality of target communication modes; secret key generation is carried out on the parallel communication strategy to obtain a communication secret key group, the communication secret key group comprises a plurality of mode secret keys, and each mode secret key corresponds to one target communication mode; and transmitting the to-be-transmitted data of the Internet of Things equipment to the Internet of Things server side in parallel according to the communication key group and the parallel communication strategy. According to the method, the communication stability and reliability of the Internet of Things equipment can be effectively improved. The invention relates to the technical field of Internet of Things.

The invention relates to the field of data processing, in particular to an electric energy meter data encryption transmission method and device based on edge computing, and the method comprises the steps: obtaining and preprocessing a historical electric energy meter data sequence of a user and a to-be-transmitted data sequence, presetting a window length range, traversing and analyzing the correlation of adjacent data sequences in each window, and calculating the stability. And selecting the window length corresponding to the maximum stability value as the representative window length, and calculating the deviation degree between the data sequence to be transmitted and the electric energy meter data sequence in the corresponding time period in the window as the sensitivity. And judging whether the key is regenerated or not based on the sensitivity, and encrypting and transmitting the to-be-transmitted data sequence after the key is generated. According to the method, whether the secret key is updated or not is dynamically judged by adaptively selecting the window length, calculating the deviation distance, combining the stability confidence coefficient and the correlation weight and setting the sensitivity threshold value, the efficiency is improved while the data transmission safety is ensured, and the data transmission safety is ensured.

The invention relates to the technical field of near-field communication security, in particular to a hardware-level identity authentication and end-to-end encryption near-field data interaction method and system for an electric red-connected terminal, and the method comprises the steps: a first electric red-connected terminal and a second electric red-connected terminal initiate pairing based on a Bluetooth secure connection pairing protocol, and negotiate to generate a long-term key through an ECDH algorithm; performing bidirectional identity verification by adopting an application layer authentication protocol; activating AES-CCM encryption by using a session key derived from a long-term key; bluetooth signal strength and a connection state are monitored in real time, and a negotiation key is automatically paired again when abnormity occurs; generating an interaction log, digitally signing the log by using a locally stored private key, and securely storing the signed log in a local secure storage area of the terminal; the digital signature of the latest log is verified, and if interaction abnormity is found, the local security module of the terminal recovers the local data to the pre-interaction state according to the last credible log record. The problem that traditional Bluetooth communication is prone to eavesdropping and tampering can be solved.

The invention provides a 2.4 GHz wireless remote control method and device based on hardware code matching, and relates to the technical field of wireless remote control. The present invention is applied to control communication between at least one transmitting end and at least one receiving end. The group identifier and the role information are analyzed by reading the hardware address setter to realize rapid networking; generating a session key and establishing a secure session according to the pre-shared root key in a handshake stage; a sending end collects man-machine input data to form a control frame, and the control frame is sent according to a token rotation or time slice distribution mechanism after encryption and message authentication; and the receiving end drives the controlled object and returns feedback data after completing verification and decryption. The system adaptively adjusts communication parameters according to feedback information and a channel state, so that secure, stable and intelligent control of multi-terminal wireless remote control is realized.

The invention provides a data transaction system, and relates to the technical field of block chains, and the data transaction system comprises a data providing device, a data purchasing device, a transaction device, a block chain device and an interstellar file system. The data providing device sends encrypted data to the interstellar file system and issues an intelligent contract to the block chain device; the data purchasing equipment sends a payment request and a payment transaction fund to the transaction equipment; the transaction device generates a payment voucher and sends the payment voucher to the data purchasing device; the data purchasing device generates a payment statement and sends a data access application to the data providing device; the data providing device generates a temporary key, generates a data access credential and sends the data access credential to the transaction device; the transaction device pays transaction money to the data providing device, generates a data access statement and sends the data access statement to the data purchasing device; and the data purchasing device obtains the access token, obtains the encrypted data, and decrypts the encrypted data by using the temporary key to obtain the to-be-transacted data.

The invention provides a centralized quantum key relay network and a key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in a transmission process. Through the quantum digital signature, the quantum security MAC check code and the post quantum cryptography signature mechanism, the security of the system facing the quantum computing threat is greatly improved, and meanwhile, the dynamic path selection combining the aging level, the multi-factor dynamic scoring model and the elastic target time window is adopted; according to the method, the optimal path and the target time can be dynamically adjusted according to the timeliness requirement, the path condition and the network state of the request, the path selection is more flexible, different timeliness requirements are met, the integrity and legality of the secret key are ensured by adopting a three-level verification mode, and meanwhile, when the network has a fault, the safety of the network is ensured. A standby path can be automatically switched and a problem node can be isolated.

The invention discloses a multi-party supply chain sensing data encryption measurement and traceability method based on space-time coupling watermark embedding, which comprises the following steps of: constructing a double-domain coupling model of a time sequence and a space distribution characteristic, and embedding dynamic watermark information into a sensing data stream to realize data source identity identification and tamper-proof protection. A self-adaptive key generation and credible chain verification mechanism is introduced in an encryption metering stage, so that the data integrity and confidentiality can be guaranteed on the premise of not influencing the real-time transmission performance of the data; in the tracing stage, a data transmission path is reconstructed by using the watermark tracing matrix, and data responsibility definition and anomaly detection among multiple nodes are realized. The method is suitable for high-security data management and credible tracking in a supply chain multi-node collaborative environment.