91 results about "Key generator" patented technology

The invention discloses a power monitoring system host security micro-isolation method and system, particularly relates to the technical field of power terminal security isolation, and aims to monitor electromagnetic interference and quantum state changes in real time and improve the stability and security of a quantum key distribution process in combination with quantum error correction and dynamic prediction technologies. A high-confidentiality encryption key is generated through the randomness of a quantum key generator, the interference level is monitored in real time in a high electromagnetic interference environment, a security protocol is automatically triggered, and parameters of a quantum system are adjusted through an active feedback mechanism; a dynamic Bayesian network is utilized to predict entanglement attenuation of a quantum state, an information exchange behavior of a quantum system is analyzed through quantum entanglement entropy, the attenuation degree and interaction intensity of the quantum state are comprehensively analyzed, and a dynamic micro-isolation strategy is implemented according to an analysis result; the reliability of quantum key distribution is improved, and the anti-interference capability of a power monitoring system in a complex electromagnetic environment is enhanced.

A trusted communications environment includes a primary participant with a group creator and a distributed ledger, and a secondary participant with communication credentials. An Internet of Things (IoT) network includes a trusted execution environment with a chain history for a blockchain, a root-of-trust for chaining, and a root-of-trust for archives. An IoT network includes an IoT device with a communication system, an onboarding tool, a device discoverer, a trust builder, a shared domain creator, and a shared resource directory. An IoT network includes an IoT device with a communication system, a policy decision engine, a policy repository, a policy enforcement engine, and a peer monitor. An IoT network includes an IoT device with a host environment and a trusted reliability engine to apply a failover action if the host environment fails. An IoT network includes an IoT server including secure booter / measurer, trust anchor, authenticator, key manager, and key generator.

The invention provides a configurable caching method and system for an artificial intelligence reasoning process. According to the method, a cache interface layer is introduced to be integrated with an artificial intelligence framework, flexible cache strategies including a cache key generation method, a storage mode, cache capacity, an elimination strategy and the like are defined by utilizing a user configuration module, and a cache key generator is used for generating cache keys according to the strategies. The cache storage manager is responsible for managing storage, retrieval and updating of cache data and supports various storage rear ends. In the reasoning process, the cache querying and updating module is responsible for querying and updating the cache. The system can also comprise a performance monitor and a data security module which are respectively used for monitoring cache performance indexes and ensuring data security. The corresponding system comprises a cache interface layer, a user configuration module, a cache key generator, a cache storage manager and a cache query and update module. According to the method, the artificial intelligence reasoning efficiency can be improved, the resource utilization is optimized, a flexible and configurable cache solution is provided, and the method is easy to integrate with a mainstream artificial intelligence framework and adapts to different task requirements.

Systems, apparatuses, methods, and computer program products are disclosed for authentication between multiple devices using N-way entangled particles. Any number (N) of entangled particles may be distributed to any number of devices within a distributed system to facilitate authentication between multiple devices. An example authentication method includes: generating, by a secure key generator of a first participating device, a first key based on one or more quantum entangled particles; determining, by communications hardware of the first participating device, that a connection to a second participating device could not be established or maintained; in response to the determining, by the communications hardware, transmitting a first connection request to establish a connection with a third participating device; receiving, by the communications hardware, an acknowledgement to instantiate the connection with the third participating device; and establishing, by the communications hardware, the connection with the third participating device.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

The invention belongs to the technical field of Internet of Things, and particularly relates to an intelligent transportation safety monitoring system and method based on quantum encryption and edge computing, the system comprises a transportation equipment end and a monitoring center, the transportation equipment end is installed on a transportation tool, and the transportation equipment end comprises a quantum encryption unit, an edge computing node and multiple sensors. The multiple sensors acquire multi-source sensor data, the edge computing device is used for performing format conversion, multi-source data fusion and analysis decision on the multi-source sensor data, and the edge computing device performs data interaction with the monitoring center after performing quantum encryption on data needing to be transmitted through the quantum encryption unit. The monitoring center comprises a quantum key management system, a data storage server and a data analysis server, and the quantum key management system comprises a quantum key generator, a quantum encryption unit and a quantum decryption unit. The method better adapts to the resource limitation of the edge computing device, and meets the requirement of intelligent transportation for real-time performance.

Systems and methods for providing multiple key encryption may generate a private key encryption key (KEK) and a corresponding public KEK in a trusted execution environment (TEE); provide the public KEK to a key generator; generate, by the key generator, a data encryption key (DEK) and encrypt the DEK with the public KEK; obtain, by a key processor, an ephemeral public key and the encrypted DEK, and send the ephemeral public key and the encrypted DEK to the TEE; decrypt, by the TEE, the encrypted DEK using the private KEK, and re-encrypt the decrypted DEK with the ephemeral public key; obtain, by the key processor, the re-encrypted DEK from the TEE and pass the re-encrypted DEK to a signing service; decrypt, by the signing service, the re-encrypted DEK using a corresponding ephemeral private key; and encrypt, by the signing service, data using the DEK.

A secure communication system is disclosed for communication between first and second party devices. An input interface is provided for receiving from an external host a unique host factor in addition to a user input interface for receiving from a user a unique PIN for a user and a selection input for selecting one of the plurality of stored entropy stores as a user selected entropy store A first private key generator is operable for generating a private key using a key generation algorithm requiring the selected entropy store, the host factor and the unique user PIN. The second party device includes a second storage device for storing a plurality of entropy stores. An input interface is provided for receiving the same unique host factor as received by the first party device. A communication interface facilitates communication with the first party device to receive from the first party device a user PIN and an indication of the user selected entropy store. A second private key generator is operable for generating a private key using the predetermined key generation algorithm with the received user PIN, the received host factor, and an extracted entropy store corresponding to user selected entropy store, wherein the private key generated by both the first and second private key generators are identical. The session is initiated to cause the generation of the identical private keys at both of the first and second private key generators and allow secure communication between the first and second devices. The private key at least one of the first and second devices is deleted at the end of the session.

The present application provides a homomorphic encryption-based communication method and apparatus. The method comprises: a key generator obtaining a first key parameter, wherein the first key parameter is a key parameter related to an updated root key of a network device accessed by a terminal device; and on the basis of the first key parameter and a homomorphic encryption and decryption algorithm, the key generator deriving a homomorphic encryption and decryption key, wherein the homomorphic encryption and decryption key is used for a homomorphic task in which the terminal device participates. Hence, in the communication system, when information of the homomorphic task in which the terminal device participates changes, the key generator can, on the basis of an updated superior key of a homomorphic key, re-derive the homomorphic key for the homomorphic task, thereby ensuring the continuity of the homomorphic task of the terminal device.

The invention provides a transformer area distributed photovoltaic communication system based on an improved DTLS protocol, and relates to the technical field of electric power and communication, and the system comprises a client and a server; the client and the server establish communication connection based on an improved certificateless DTLS handshake protocol; after communication connection between the client and the server is completed, distributed photovoltaic data interaction is carried out between the client and the server; wherein the improved certificateless DTLS handshake protocol is that a mechanism for allowing public key information exchange between a client and a server is expanded on an original DTLS protocol; the private keys of the client side and the server side comprise two parts, one part is generated by a private key generator according to IDs of the client side and the server side, and the other part is randomly generated by the private key generator according to system parameters. According to the scheme, the complexity of the handshake process can be reduced, and the communication transmission efficiency of the distributed photovoltaic data is improved.

The invention discloses a system with a physical non-replicable function. The system comprises a key generator array module, a confusion interconnection delay module and a response output module, the key generator array module is used for receiving the excitation signal and encrypting the excitation signal to generate a confusion excitation signal; the confusion interconnection delay module comprises a plurality of confusion interconnection delay arrays, and each delay array comprises a first buffer and a first multiplexer; the confusion interconnection delay module is used for receiving the trigger signal and the confusion excitation signal, determining a delay path according to the confusion excitation signal, and generating a delay output path through the delay path based on the trigger signal; and the response output module is used for generating an output response by comparing the delay differences of the signals in the delay output path. According to the embodiment of the invention, the uniqueness of the PUF is improved, the machine learning resistance of the PUF is improved, and the consumption of hardware resources is reduced. The circuit can be widely applied to the technical field of integrated circuits and control.

Cryptographic systems, methods and communication network comprising thereof are disclosed, including numerous industry applications. Embodiments of the present invention can generate and regenerate the same symmetric key. The cryptographic systems and methods include a key generator configured to use two or more inputs to reproducibly generate the symmetric key and a cryptographic engine configured to use the symmetric key for encrypting and decrypting data.

A system for cost management using blockchain and encryption is provided. The system includes an access interface, a recorder, a determinator, a key generator, an encryptor, and a decryptor. The access interface is configured to provide a platform for users to log in. The recorder is for recording cost information. The determinator is configured to determine whether the cost information recorded in the recorder is non-sensitive. When the cost information is determined as being non-sensitive, the cost information is directly uploaded to and recorded on a blockchain network via a smart contractor module. When the cost information is determined as being sensitive, the key generator generates a symmetric key randomly. The encryptor is configure to encrypt the cost information using the symmetric key to obtain ciphertext information and encrypt the symmetric key using public keys to obtain encrypted keys. The encryptor sends the ciphertext information to the blockchain network.

A method of cryptographically binding communication parties includes assigning attributes to parties, and performing a combine operation including creating communication keys. Data is encrypted using a session key. A recombine operation includes receiving output parameters, along with the session key if the parameters are validated. A cryptographic communication binder includes an attribute mixer configured to assign attributes to the parties, and a combiner configured to create communication keys. A communication key generator is configured to combine attributes to create the session key. A first cryptographic engine is configured to encrypt data using the session key and create output parameters. A recombiner is configured to receive the output parameters and identity attribute, validate the parameters, and identify and validate the originator. A second cryptographic engine is configured to receive the encrypted data and session key, if validating and identifying were successful, and to decrypt the encrypted data using the session key.

The invention discloses a secure communication method, a robot, a server and a nonvolatile computer readable storage medium. The method comprises the following steps: generating a certificate signature request according to an identifier of the robot and a key pair generated by a public and private key generator; sending a certificate signature request to a server to obtain a certificate from the server; when a certificate sent by the server is received, storing the certificate into a trusted space of the robot through a preset key management service; and responding to the server, acquiring the certificate from the trusted space through the key management service, and establishing communication connection with the server according to the certificate. According to the technical scheme, the certificate matched with the robot can be requested through the key pair and the identifier of the robot, so that when the robot communicates, the communication connection with the server can be established only when the robot has the certificate issued by the server, and the secure communication between the robot and the server is realized.

The invention discloses a privacy protection and traceable anonymous bidirectional authentication method for heterogeneous Internet of Vehicles, which comprises the following steps: generating public and private keys based on a key generation center, a private key generator and a trusted registration mechanism, and constructing a heterogeneous password system; the vehicle completes key registration by fusing the certificateless public key system, and the roadside unit completes key registration based on the identity public key system; the vehicle registers and uses the pseudonym to communicate with the roadside unit; and the vehicle and roadside unit bidirectional authentication verifies the legality of the opposite side through a hash function and a temporary value, and finally generates a session key. According to the invention, by providing traceable pseudonym and anonymous authentication communication for each vehicle, the privacy of the vehicle can be effectively protected, and an attacker can be prevented from tracking the identity information of the vehicle. Based on various security hypotheses, the method meets various security attributes including anonymity, unlinkability, perfect forward security, security of known temporary information specific to sessions and the like, and the security of data transmission of the Internet of Vehicles can be improved.

The present application discloses a chip encryption method, a decryption method, a device, a storage medium and a chip, wherein the chip encryption method includes obtaining the chip characteristics of the chip when a burner is used to burn the chip; when the number of bits of the program code transmitted by the burner reaches a preset encryption number, the program code reaching the preset encryption number is stored in the original text buffer area as the code to be encrypted; the code characteristics of the code to be encrypted are obtained; the chip characteristics and the code characteristics are input into a key generator to generate a key; the key is used to encrypt the code to be encrypted to obtain the code ciphertext. This scheme can improve the security of the chip.

The present invention discloses a system for secure internal communication within an organization's data sharing comprises of AES 256 key generator module (102), a PQC key generator module (104), an Encapsulator module, a Key Decryptor module (112), a proxy communicator module, and a Key Database module (110). The AES 256 key generator module (102) configured to generate symmetric keys for encrypting exchanged data. The PQC key generator module (104) configured to generate public and private keys using post-quantum cryptography algorithms. The Encapsulator module configured to encrypt the symmetric key using the public key from the PQC key generator module (104) whereas the Key Decryptor module (112) configured to decrypt the PQC-encrypted symmetric key using the private key. A communicator module acting as the gateway for key exchange and data flow control and the Key Database module (110) for storing PQC-encrypted AES keys with associated metadata. This system and method provide organizations with a secure internal communication environment.

An information handling system includes a hardware processor and a memory device to execute code instructions of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, the DICE certificate including a public key. The hardware processor executes computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key. The hardware processor executes the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key. The hardware processor to sends the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device. The hardware processor executes a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

An integrated circuit including: a plurality of physically unclonable function (PUF) cells each configured to generate a cell signal having a unique value; a selector configured to output a first signal obtained by not inverting a cell signal output by a PUF cell selected from the plurality of PUF cells and a second signal obtained by inverting the cell signal; and a key generator configured to generate a security key in response to the first signal or the second signal, wherein the selector includes a first conversion circuit configured to generate the first signal and a second conversion circuit having the same structure as the first conversion circuit and configured to generate the second signal.

A packet verification system includes a key generator, a transmitting end processing device, and a receiving end processing device. The transmitting end processing device modifies a receiving end address of the data packet into a first dynamic media access control address according to the first key and a media access control address of the packet receiving device, so as to transmit the data packet to the receiving end processing device according to the first dynamic media access control address, the receiving end processing device performs address verification processing according to the first key, the media access control address of the packet receiving device and the receiving end address of the data packet, and when the address verification is passed, the receiving end processing device modifies the receiving end address of the data packet into the media access control address of the packet receiving device, and transmitting the data packet to a packet receiving device. The invention also relates to a packet verification method.

The invention discloses computing equipment, and relates to the field of computers, the computing equipment comprises a processor and a memory, the memory comprises a memory controller, a key generator and a memory, the processor is connected with the memory controller, the memory controller is respectively connected with the key generator and the memory, and the processor is used for operating the key generator and the memory in the process of operating processor tasks. Initiating a data access request to a memory controller; the memory controller is used for responding to the data access request and encrypting and decrypting the target task data by using a data key corresponding to the target task data to obtain reference task data; calling a memory to execute a target access operation on the reference task data; the key generator is used for generating a data key; and the memory is used for storing the task data of the processor task for the processor, so that the technical problem that the data security of the computing equipment is insufficient is solved, and the technical effect of improving the data security of the computing equipment is achieved.

The utility model discloses a single-chip integrated encryption card, which comprises a PCB (printed circuit board) carrier plate provided with an FPGA (field programmable gate array) main control chip, an SFP (small form-factor pluggable) interface, a PCIE (peripheral component interface express) interface and an SMBUS (system management bus) interface. The FPGA main control chip is respectively connected with the SFP interface, the PCIE interface and the SMBUS interface; a key generator is arranged in the FPGA main control chip and used for generating a key, and a memory is arranged in the FPGA main control chip and used for storing the key. The utility model discloses a single-chip integrated encryption card which is respectively connected with an SFP interface, a PCIE interface and an SMBUS interface through an FPGA main control chip, so that data transmission and encryption processes are packaged in a single chip, external cracking is avoided, hardware is not easy to tamper, the single-chip integrated encryption card has relatively strong cracking resistance, and the security of data can be effectively improved.

An apparatus comprises an encryption key generator to generate a media encryption key to encrypt data in number of memory components, where the encryption key generator is configured to wrap the media encryption key to generate an encrypted media encryption key, The encrypted media encryption key is stored in a non-volatile memory. The apparatus comprises firmware having instructions to transition the apparatus to and from a secure state using the encrypted media encryption key.

The present invention relates to a method for protecting against cloning attacks a client application comprising a standard implementation of a cryptographic algorithm taking as input a reference cryptographic key, a client device storing instead of said reference cryptographic key and said client application: • a bound whitebox cryptographic key generated by a bound whitebox cryptographic key generator of a server device, from said reference cryptographic key, depending on a reference secret binding parameter, a modified client application comprising aa whitebox-protected implementation of said cryptographic algorithm configured to take as inputs said stored bound whitebox cryptographic key and an input secret binding parameter, and delivering a result equal to the result of the execution of the cryptographic algorithm using as input said reference cryptographic key when said input secret binding parameter used as input is equal to said reference secret binding parameter, and delivering a different result otherwise, said method being performed by the client device when executing the modified client application and comprising: - retrieving (S1 ) a runtime secret binding parameter, - executing (S2) said whitebox-protected implementation of said cryptographic algorithm using as inputs said bound whitebox cryptographic key and said runtime secret binding parameter.

The invention provides a network gray fault detection method and device, a medium and a switch system, the method is applied to a first switch in a message transmission path, the first switch is other switches except a second switch in the message transmission path, and the second switch is an ingress switch; the first switch receives a target message flow sent by a preceding-stage switch, and the target message flow is obtained in the mode that a second switch adds check key values to message headers of all messages in the message flow in sequence based on a self-circulation key generator according to the message arrival sequence; performing XOR accumulation processing on the verification key value carried by each message in the target message flow in sequence, and determining a verification value of the target message flow; and under the condition that the verification value is different from the preset value, determining that the packet loss gray fault event exists in the transmission process of the message flow. According to the embodiment of the invention, the detection efficiency and detection precision of the packet loss gray fault can be improved.

A key generation technology of the present disclosure does not additionally set a combinational logic circuit on an original path of a scanning flip-flop, but utilizes a plurality of existing combinational logic circuits in a circuit system to generate multiple values of a key. Correspondingly, a key generation unit used in the key generation technology has two data flip-flops. One of the data flip-flops is used as a data flip-flop in one of a plurality of scanning flip-flops. The other data flip-flop is to obtain a node data signal of a node in the corresponding combinational logic circuit as one of the values of the key.

A computer-implemented system for generating verifiable physical transaction documents, wherein each physical transaction document comprises transaction information and security information, the system comprising: a key generator configured to generate a plurality of keys; a document generator configured to generate a plurality of physical transaction documents; and a digital counterpart ledger configured to store a respective digital counterpart for each of the plurality of physical transaction documents, wherein the digital counterpart ledger is an immutable ledger, wherein the document generator is configured to generate each physical transaction document by: obtaining a first key from the key generator; obtaining transaction information; obtaining a unique document identifier based on the key; generating a digital counterpart of the physical transaction document, the digital counterpart comprising the unique document identifier and the transaction data; adding the digital counterpart to the digital counterpart ledger; and producing the physical transaction document based on the digital counterpart.

This invention provides a multi-party collaborative data watermarking structure and method, including a key management module comprising a task receiver and a key generator, wherein the task receiver manages the correspondence between keys and tasks; and a watermarking module comprising a root key identification module, a preceding key reading module, and a new watermarking module. The root key identification module identifies the root key of the watermark, i.e., the first key to add the watermark; the preceding key reading module reads the different keys added to this root key sequentially; and the new watermarking module generates a watermark from the key generated by the key management module and adds it to the data. This technical solution is used to mark the multi-party transmission process, forming a parallel, serial watermark chain.

The utility model provides contractor data auditing terminal equipment, which comprises a replaceable scanning module, which is connected by adopting a magnetic type quick release interface, is integrated with an RGB color scanning head and an OCR special inclined scanning head, and is used for digitally collecting multi-form data; an electric lifting support and a gravity sensor are integrated on the back of the self-adaptive touch display screen, and the height and the inclination angle are automatically adjusted according to the height of a user; the intelligent auditing module is used for carrying out OCR (Optical Character Recognition), logic verification and abnormal marking on the digital data; the two-stage data encryption module is arranged in the lower data processing area, is connected with the replaceable scanning module, comprises a hardware-stage key generator and a data encryption chip, and is used for encrypting the data acquired by the replaceable scanning module; and the bill printing module adopts a double-roller paper clamping mechanism and is used for outputting an audit report. According to the utility model, self-service uploading, instant auditing and safe output of contractor data are realized, and the data auditing efficiency and safety are improved.