62 results about "Key generator" patented technology

The invention discloses a power monitoring system host security micro-isolation method and system, particularly relates to the technical field of power terminal security isolation, and aims to monitor electromagnetic interference and quantum state changes in real time and improve the stability and security of a quantum key distribution process in combination with quantum error correction and dynamic prediction technologies. A high-confidentiality encryption key is generated through the randomness of a quantum key generator, the interference level is monitored in real time in a high electromagnetic interference environment, a security protocol is automatically triggered, and parameters of a quantum system are adjusted through an active feedback mechanism; a dynamic Bayesian network is utilized to predict entanglement attenuation of a quantum state, an information exchange behavior of a quantum system is analyzed through quantum entanglement entropy, the attenuation degree and interaction intensity of the quantum state are comprehensively analyzed, and a dynamic micro-isolation strategy is implemented according to an analysis result; the reliability of quantum key distribution is improved, and the anti-interference capability of a power monitoring system in a complex electromagnetic environment is enhanced.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

The invention belongs to the technical field of Internet of Things, and particularly relates to an intelligent transportation safety monitoring system and method based on quantum encryption and edge computing, the system comprises a transportation equipment end and a monitoring center, the transportation equipment end is installed on a transportation tool, and the transportation equipment end comprises a quantum encryption unit, an edge computing node and multiple sensors. The multiple sensors acquire multi-source sensor data, the edge computing device is used for performing format conversion, multi-source data fusion and analysis decision on the multi-source sensor data, and the edge computing device performs data interaction with the monitoring center after performing quantum encryption on data needing to be transmitted through the quantum encryption unit. The monitoring center comprises a quantum key management system, a data storage server and a data analysis server, and the quantum key management system comprises a quantum key generator, a quantum encryption unit and a quantum decryption unit. The method better adapts to the resource limitation of the edge computing device, and meets the requirement of intelligent transportation for real-time performance.

Systems and methods for providing multiple key encryption may generate a private key encryption key (KEK) and a corresponding public KEK in a trusted execution environment (TEE); provide the public KEK to a key generator; generate, by the key generator, a data encryption key (DEK) and encrypt the DEK with the public KEK; obtain, by a key processor, an ephemeral public key and the encrypted DEK, and send the ephemeral public key and the encrypted DEK to the TEE; decrypt, by the TEE, the encrypted DEK using the private KEK, and re-encrypt the decrypted DEK with the ephemeral public key; obtain, by the key processor, the re-encrypted DEK from the TEE and pass the re-encrypted DEK to a signing service; decrypt, by the signing service, the re-encrypted DEK using a corresponding ephemeral private key; and encrypt, by the signing service, data using the DEK.

A secure communication system is disclosed for communication between first and second party devices. An input interface is provided for receiving from an external host a unique host factor in addition to a user input interface for receiving from a user a unique PIN for a user and a selection input for selecting one of the plurality of stored entropy stores as a user selected entropy store A first private key generator is operable for generating a private key using a key generation algorithm requiring the selected entropy store, the host factor and the unique user PIN. The second party device includes a second storage device for storing a plurality of entropy stores. An input interface is provided for receiving the same unique host factor as received by the first party device. A communication interface facilitates communication with the first party device to receive from the first party device a user PIN and an indication of the user selected entropy store. A second private key generator is operable for generating a private key using the predetermined key generation algorithm with the received user PIN, the received host factor, and an extracted entropy store corresponding to user selected entropy store, wherein the private key generated by both the first and second private key generators are identical. The session is initiated to cause the generation of the identical private keys at both of the first and second private key generators and allow secure communication between the first and second devices. The private key at least one of the first and second devices is deleted at the end of the session.

A system for cost management using blockchain and encryption is provided. The system includes an access interface, a recorder, a determinator, a key generator, an encryptor, and a decryptor. The access interface is configured to provide a platform for users to log in. The recorder is for recording cost information. The determinator is configured to determine whether the cost information recorded in the recorder is non-sensitive. When the cost information is determined as being non-sensitive, the cost information is directly uploaded to and recorded on a blockchain network via a smart contractor module. When the cost information is determined as being sensitive, the key generator generates a symmetric key randomly. The encryptor is configure to encrypt the cost information using the symmetric key to obtain ciphertext information and encrypt the symmetric key using public keys to obtain encrypted keys. The encryptor sends the ciphertext information to the blockchain network.

A method of cryptographically binding communication parties includes assigning attributes to parties, and performing a combine operation including creating communication keys. Data is encrypted using a session key. A recombine operation includes receiving output parameters, along with the session key if the parameters are validated. A cryptographic communication binder includes an attribute mixer configured to assign attributes to the parties, and a combiner configured to create communication keys. A communication key generator is configured to combine attributes to create the session key. A first cryptographic engine is configured to encrypt data using the session key and create output parameters. A recombiner is configured to receive the output parameters and identity attribute, validate the parameters, and identify and validate the originator. A second cryptographic engine is configured to receive the encrypted data and session key, if validating and identifying were successful, and to decrypt the encrypted data using the session key.

The invention discloses a privacy protection and traceable anonymous bidirectional authentication method for heterogeneous Internet of Vehicles, which comprises the following steps: generating public and private keys based on a key generation center, a private key generator and a trusted registration mechanism, and constructing a heterogeneous password system; the vehicle completes key registration by fusing the certificateless public key system, and the roadside unit completes key registration based on the identity public key system; the vehicle registers and uses the pseudonym to communicate with the roadside unit; and the vehicle and roadside unit bidirectional authentication verifies the legality of the opposite side through a hash function and a temporary value, and finally generates a session key. According to the invention, by providing traceable pseudonym and anonymous authentication communication for each vehicle, the privacy of the vehicle can be effectively protected, and an attacker can be prevented from tracking the identity information of the vehicle. Based on various security hypotheses, the method meets various security attributes including anonymity, unlinkability, perfect forward security, security of known temporary information specific to sessions and the like, and the security of data transmission of the Internet of Vehicles can be improved.

An information handling system includes a hardware processor and a memory device to execute code instructions of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, the DICE certificate including a public key. The hardware processor executes computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key. The hardware processor executes the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key. The hardware processor to sends the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device. The hardware processor executes a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

The invention discloses computing equipment, and relates to the field of computers, the computing equipment comprises a processor and a memory, the memory comprises a memory controller, a key generator and a memory, the processor is connected with the memory controller, the memory controller is respectively connected with the key generator and the memory, and the processor is used for operating the key generator and the memory in the process of operating processor tasks. Initiating a data access request to a memory controller; the memory controller is used for responding to the data access request and encrypting and decrypting the target task data by using a data key corresponding to the target task data to obtain reference task data; calling a memory to execute a target access operation on the reference task data; the key generator is used for generating a data key; and the memory is used for storing the task data of the processor task for the processor, so that the technical problem that the data security of the computing equipment is insufficient is solved, and the technical effect of improving the data security of the computing equipment is achieved.

The utility model discloses a single-chip integrated encryption card, which comprises a PCB (printed circuit board) carrier plate provided with an FPGA (field programmable gate array) main control chip, an SFP (small form-factor pluggable) interface, a PCIE (peripheral component interface express) interface and an SMBUS (system management bus) interface. The FPGA main control chip is respectively connected with the SFP interface, the PCIE interface and the SMBUS interface; a key generator is arranged in the FPGA main control chip and used for generating a key, and a memory is arranged in the FPGA main control chip and used for storing the key. The utility model discloses a single-chip integrated encryption card which is respectively connected with an SFP interface, a PCIE interface and an SMBUS interface through an FPGA main control chip, so that data transmission and encryption processes are packaged in a single chip, external cracking is avoided, hardware is not easy to tamper, the single-chip integrated encryption card has relatively strong cracking resistance, and the security of data can be effectively improved.

The present invention relates to a method for protecting against cloning attacks a client application comprising a standard implementation of a cryptographic algorithm taking as input a reference cryptographic key, a client device storing instead of said reference cryptographic key and said client application: • a bound whitebox cryptographic key generated by a bound whitebox cryptographic key generator of a server device, from said reference cryptographic key, depending on a reference secret binding parameter, a modified client application comprising aa whitebox-protected implementation of said cryptographic algorithm configured to take as inputs said stored bound whitebox cryptographic key and an input secret binding parameter, and delivering a result equal to the result of the execution of the cryptographic algorithm using as input said reference cryptographic key when said input secret binding parameter used as input is equal to said reference secret binding parameter, and delivering a different result otherwise, said method being performed by the client device when executing the modified client application and comprising: - retrieving (S1 ) a runtime secret binding parameter, - executing (S2) said whitebox-protected implementation of said cryptographic algorithm using as inputs said bound whitebox cryptographic key and said runtime secret binding parameter.

The invention provides a network gray fault detection method and device, a medium and a switch system, the method is applied to a first switch in a message transmission path, the first switch is other switches except a second switch in the message transmission path, and the second switch is an ingress switch; the first switch receives a target message flow sent by a preceding-stage switch, and the target message flow is obtained in the mode that a second switch adds check key values to message headers of all messages in the message flow in sequence based on a self-circulation key generator according to the message arrival sequence; performing XOR accumulation processing on the verification key value carried by each message in the target message flow in sequence, and determining a verification value of the target message flow; and under the condition that the verification value is different from the preset value, determining that the packet loss gray fault event exists in the transmission process of the message flow. According to the embodiment of the invention, the detection efficiency and detection precision of the packet loss gray fault can be improved.

A key generation technology of the present disclosure does not additionally set a combinational logic circuit on an original path of a scanning flip-flop, but utilizes a plurality of existing combinational logic circuits in a circuit system to generate multiple values of a key. Correspondingly, a key generation unit used in the key generation technology has two data flip-flops. One of the data flip-flops is used as a data flip-flop in one of a plurality of scanning flip-flops. The other data flip-flop is to obtain a node data signal of a node in the corresponding combinational logic circuit as one of the values of the key.

A computer-implemented system for generating verifiable physical transaction documents, wherein each physical transaction document comprises transaction information and security information, the system comprising: a key generator configured to generate a plurality of keys; a document generator configured to generate a plurality of physical transaction documents; and a digital counterpart ledger configured to store a respective digital counterpart for each of the plurality of physical transaction documents, wherein the digital counterpart ledger is an immutable ledger, wherein the document generator is configured to generate each physical transaction document by: obtaining a first key from the key generator; obtaining transaction information; obtaining a unique document identifier based on the key; generating a digital counterpart of the physical transaction document, the digital counterpart comprising the unique document identifier and the transaction data; adding the digital counterpart to the digital counterpart ledger; and producing the physical transaction document based on the digital counterpart.

This invention provides a multi-party collaborative data watermarking structure and method, including a key management module comprising a task receiver and a key generator, wherein the task receiver manages the correspondence between keys and tasks; and a watermarking module comprising a root key identification module, a preceding key reading module, and a new watermarking module. The root key identification module identifies the root key of the watermark, i.e., the first key to add the watermark; the preceding key reading module reads the different keys added to this root key sequentially; and the new watermarking module generates a watermark from the key generated by the key management module and adds it to the data. This technical solution is used to mark the multi-party transmission process, forming a parallel, serial watermark chain.

The utility model provides contractor data auditing terminal equipment, which comprises a replaceable scanning module, which is connected by adopting a magnetic type quick release interface, is integrated with an RGB color scanning head and an OCR special inclined scanning head, and is used for digitally collecting multi-form data; an electric lifting support and a gravity sensor are integrated on the back of the self-adaptive touch display screen, and the height and the inclination angle are automatically adjusted according to the height of a user; the intelligent auditing module is used for carrying out OCR (Optical Character Recognition), logic verification and abnormal marking on the digital data; the two-stage data encryption module is arranged in the lower data processing area, is connected with the replaceable scanning module, comprises a hardware-stage key generator and a data encryption chip, and is used for encrypting the data acquired by the replaceable scanning module; and the bill printing module adopts a double-roller paper clamping mechanism and is used for outputting an audit report. According to the utility model, self-service uploading, instant auditing and safe output of contractor data are realized, and the data auditing efficiency and safety are improved.

An integrated circuit is provided which includes a physically unclonable function (PUF). The integrated circuit comprises a PUF block including a plurality of physically unclonable function (PUF) cells configured to output a cell signal having a unique value according to an input, a conversion unit is configured to receive the cell signal as input, convert the cell signal, and output a conversion signal. A select signal generator provides a first selection signal to the conversion unit. A key generator is configured to receive the conversion signal from the conversion unit and generate a security key therefrom, wherein the conversion unit includes a first layer which outputs a second signal obtained by converting a provided first signal on the basis of a bit value of the first selection signal.

The present application discloses a high-security multi-hop power transmission network based on WAPI technology, which relates to the field of multi-level data encrypted transmission. It includes a secret key generation module, a data acquisition module, a multi-level transmission node analysis module, and a multi-level encrypted transmission module. The present invention effectively analyzes the encrypted data received by the power control center in the previous data transmission period, intelligently analyzes and selects each level of power transmission nodes, enhances the randomness of the selection of power transmission nodes, indirectly increases the difficulty of intrusion and locking of power transmission nodes, creates continuous secret keys by using a secret key generator, and obtains highly random secret keys through random matching and data processing, indirectly reducing the probability of secret key leakage, effectively improving the security and reliability of encrypted transmission of power transmission data, and being conducive to ensuring the development and construction of the power system.

The application discloses a public key searchable encryption similarity query method with forward security, belongs to the field of cryptography, and is applied to cloud database retrieval query privacy protection.The application realizes the method as follows: 1, a key generator generates public parameters; 2, the key generator generates keys required in subsequent steps; 3, the key generator judges whether a time stamp meets a condition; if the condition is not met, the key generator repeats step 2; 4, a data owner encrypts data; 5, a mode provider and the key generator interact to generate a trapdoor; and 6, a service provider and the mode provider interact to perform similarity query and return a query result.Compared with the prior art, the application solves the technical problem of improving data security, mode security and forward security by using the public key searchable encryption similarity query in the similarity query scene.

The embodiment of the invention discloses a power supply and distribution mode and a ship. The ship main distribution board in the mode comprises at least two sections of busbars and a control module; each section of busbar in the at least two sections is electrically connected with at least one key generator or / and at least one key operation device; and the control module is used for controlling the on-off of the electric connection and switching the power output supply of the key generator and / or the power input allocation of the key operation equipment when the connected busbar is offline due to a fault (such as a fault). According to the power supply and distribution mode provided by the embodiment of the invention, electrical connection channels with other designated sections of busbars are specially additionally arranged for the key-position generator and the key-position operation equipment, so that disability caused by power supply and distribution failure due to offline connection of the busbar sections can be successfully avoided, continuous output of the power of the key generator can be ensured, and the power supply and distribution efficiency can be improved. And the power utilization of key operation equipment can be continuously allocated, and meanwhile, the load imbalance between different busbar sections on the distribution board can be optimized.

The invention discloses a power transmission high-security multi-hop network based on a wapi technology, which relates to the field of multi-stage data encryption transmission and comprises a secret key generation module, a data acquisition module, a multi-stage transmission node analysis module and a multi-stage encryption transmission module, by effectively analyzing the encrypted data of the last data transmission time period received by the power control center and intelligently analyzing and selecting the power transmission nodes at all levels, the randomness of power transmission node selection is enhanced, the difficulty of intrusion locking of the power transmission nodes is indirectly increased, and the safety of the power transmission nodes is improved. The secret key generator is used for creating the continuous secret keys, and the high-randomness secret keys are obtained through random matching and data processing, so that the probability of secret key leakage is indirectly reduced, the security and credibility of power transmission data encryption transmission are effectively improved, and the development and construction of a power system are guaranteed.

A computing node in the computing cluster includes at least a key generator and an encryption engine. The key generator implements a key derivation function and generates a first data encryption key based on the key derivation key. The key derivation key is a global security association encryption key shared by a plurality of nodes in the computing cluster. The first data encryption key has uniqueness for a node pair of the plurality of nodes including a first node and a second node. The encryption engine encrypts a data packet using the first data encryption key.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

The invention relates to a cloud storage data sharing method and system supporting dynamic user groups and outsourcing decryption, and belongs to the technical field of information security. According to the method, a key generation center selects system security parameters, outputs system public parameters and the number of users at the same time, and generates a system main public key, a main private key, state information and a revocation list; the data user generates a public key and a private key by using a key generator (KeyGen), and sends the public key to the key generation center; the key generation center generates a conversion key according to the public key and the attribute information of the data user, and sends the conversion key to the cloud server through a public channel; meanwhile, a key updating algorithm is operated, and key updating information is broadcasted; the data owner encrypts the data, generates a ciphertext and uploads the ciphertext to the cloud server; the cloud server performs calculation outsourcing processing on the ciphertext by using the conversion key and the key updating information, and outputs the converted ciphertext; and the data user completes final decryption of the converted ciphertext by using the private key.

The invention relates to an electric power system stability online monitoring method based on a convolutional neural network, and the method comprises the steps: collecting target data of all generator buses in real time, and carrying out the preprocessing of the target data, and the target data comprise a voltage amplitude, a phase angle and a frequency; generating a thermodynamic diagram according to the pre-processed target data, performing feature extraction and pattern classification on the thermodynamic diagram by using a convolutional neural network to obtain a category prediction result, the convolutional neural network being obtained by training through a training set, the training set being generated by a simulation fault sample, and the training set being obtained by training the simulation fault sample; each sliding window sample is endowed with a category label; according to the category prediction result, judging whether the state is an instability early warning state or not; and after an instability early warning state is determined, identifying a key generator set through a principal component analysis (PCA) method or a double-branch convolutional neural network. According to the invention, the accuracy and timeliness of transient stability prediction are improved.

The invention discloses a dynamic encryption bus communication method and system for nuclear security level software, and the method comprises the steps: monitoring the operation data of each to-be-monitored part in a nuclear facility through each monitoring sensor in the operation process of the nuclear facility; the key generator generates a real-time key according to a preset dynamic key generation algorithm, and transmits the real-time key to each monitoring sensor and the analysis display unit; each monitoring sensor encrypts each operation data based on the real-time secret key to generate ciphertext data and transmits the ciphertext data to an analysis display unit through a bus; and decrypting by software in the analysis display unit to obtain decrypted data, and analyzing and displaying the nuclear security level of the nuclear facility based on the decrypted data. According to the method, the real-time secret key suitable for running data real-time communication transmission is generated through the preset dynamic secret key generation algorithm, and the real-time secret keys between the monitoring sensors are different, so that the problem that the secret keys are easy to leak and attack is avoided, and the safety and the reliability of communication transmission are integrally improved.

There is provided mechanisms for generating a cryptographic key for a user. The method is performed by a cryptographic key generator device. The method comprises authenticating the user using biometrics data read from the user using a biometrics reader. The method comprises obtaining, only when having authenticated the user, a PUF response from a PUF entity by providing a challenge based on biometrics response data to the PUF entity. The biometrics response data is a function of the biometrics data. The method comprises generating the cryptographic key using a cryptographic function and by seeding the cryptographic function with the PUF response.

The invention discloses a login link encryption processing system and method based on a digital signature, and relates to the technical field of data encryption. When a login system is started, a key generator is used for generating a master key pair in a server, and a master key rotation period of the server is obtained through calculation; calculating to obtain a request threshold value of normal login of the user by using the collected login request times and the interval time; calculating a user normal login index; judging a normal login index by using the request threshold value; constructing a login link by using the digital signature and the user information, and sending the login link to the user; when the user receives the login link, the user clicks the login link to initiate an HTTP request and returns information in the login link to the server, and the server verifies the returned login link information; when the verification is passed, creating a session channel of the user; and when the verification is not passed, refusing the user login, abandoning the existing master key, and executing key alternation.

Each computing node in a computing cluster includes at least a key generator and a cryptographic engine. The key generator implements a key derivation function and generates a first data encryption key based on the key derivation key. The key derivation key is a global security association encryption key shared by multiple nodes in the computing cluster. The first data encryption key is unique to a node pair, including a first node and a second node among multiple nodes. The cryptographic engine uses the first data encryption key to encrypt data packets.