31 results about "Key generator" patented technology

A system for cost management using blockchain and encryption is provided. The system includes an access interface, a recorder, a determinator, a key generator, an encryptor, and a decryptor. The access interface is configured to provide a platform for users to log in. The recorder is for recording cost information. The determinator is configured to determine whether the cost information recorded in the recorder is non-sensitive. When the cost information is determined as being non-sensitive, the cost information is directly uploaded to and recorded on a blockchain network via a smart contractor module. When the cost information is determined as being sensitive, the key generator generates a symmetric key randomly. The encryptor is configure to encrypt the cost information using the symmetric key to obtain ciphertext information and encrypt the symmetric key using public keys to obtain encrypted keys. The encryptor sends the ciphertext information to the blockchain network.

An information handling system includes a hardware processor and a memory device to execute code instructions of an automatic peripheral device pairing management system pairing agent to receive, via a wireless interface adapter, a device identifier composition engine (DICE) certificate from a wireless peripheral device indicating the identity of the wireless peripheral device, the DICE certificate including a public key. The hardware processor executes computer readable program code of an out-of-band (OOB) temporary key generator agent to generate an OOB temporary key. The hardware processor executes the computer readable program code of the automatic peripheral device pairing management system pairing agent to encrypt the OOB temporary key using the public key. The hardware processor to sends the public key-encrypted OOB temporary key to the wireless peripheral device to be decrypted using a private key at the wireless peripheral device. The hardware processor executes a confirm value generation function to confirm that the OOB temporary key matches the decrypted OOB temporary key at the wireless peripheral device to automatically Bluetooth® (BT) pair the information handling system to the wireless peripheral device.

The invention discloses computing equipment, and relates to the field of computers, the computing equipment comprises a processor and a memory, the memory comprises a memory controller, a key generator and a memory, the processor is connected with the memory controller, the memory controller is respectively connected with the key generator and the memory, and the processor is used for operating the key generator and the memory in the process of operating processor tasks. Initiating a data access request to a memory controller; the memory controller is used for responding to the data access request and encrypting and decrypting the target task data by using a data key corresponding to the target task data to obtain reference task data; calling a memory to execute a target access operation on the reference task data; the key generator is used for generating a data key; and the memory is used for storing the task data of the processor task for the processor, so that the technical problem that the data security of the computing equipment is insufficient is solved, and the technical effect of improving the data security of the computing equipment is achieved.

The present invention relates to a method for protecting against cloning attacks a client application comprising a standard implementation of a cryptographic algorithm taking as input a reference cryptographic key, a client device storing instead of said reference cryptographic key and said client application: • a bound whitebox cryptographic key generated by a bound whitebox cryptographic key generator of a server device, from said reference cryptographic key, depending on a reference secret binding parameter, a modified client application comprising aa whitebox-protected implementation of said cryptographic algorithm configured to take as inputs said stored bound whitebox cryptographic key and an input secret binding parameter, and delivering a result equal to the result of the execution of the cryptographic algorithm using as input said reference cryptographic key when said input secret binding parameter used as input is equal to said reference secret binding parameter, and delivering a different result otherwise, said method being performed by the client device when executing the modified client application and comprising: - retrieving (S1 ) a runtime secret binding parameter, - executing (S2) said whitebox-protected implementation of said cryptographic algorithm using as inputs said bound whitebox cryptographic key and said runtime secret binding parameter.

The invention provides a network gray fault detection method and device, a medium and a switch system, the method is applied to a first switch in a message transmission path, the first switch is other switches except a second switch in the message transmission path, and the second switch is an ingress switch; the first switch receives a target message flow sent by a preceding-stage switch, and the target message flow is obtained in the mode that a second switch adds check key values to message headers of all messages in the message flow in sequence based on a self-circulation key generator according to the message arrival sequence; performing XOR accumulation processing on the verification key value carried by each message in the target message flow in sequence, and determining a verification value of the target message flow; and under the condition that the verification value is different from the preset value, determining that the packet loss gray fault event exists in the transmission process of the message flow. According to the embodiment of the invention, the detection efficiency and detection precision of the packet loss gray fault can be improved.

This invention provides a multi-party collaborative data watermarking structure and method, including a key management module comprising a task receiver and a key generator, wherein the task receiver manages the correspondence between keys and tasks; and a watermarking module comprising a root key identification module, a preceding key reading module, and a new watermarking module. The root key identification module identifies the root key of the watermark, i.e., the first key to add the watermark; the preceding key reading module reads the different keys added to this root key sequentially; and the new watermarking module generates a watermark from the key generated by the key management module and adds it to the data. This technical solution is used to mark the multi-party transmission process, forming a parallel, serial watermark chain.

The utility model provides contractor data auditing terminal equipment, which comprises a replaceable scanning module, which is connected by adopting a magnetic type quick release interface, is integrated with an RGB color scanning head and an OCR special inclined scanning head, and is used for digitally collecting multi-form data; an electric lifting support and a gravity sensor are integrated on the back of the self-adaptive touch display screen, and the height and the inclination angle are automatically adjusted according to the height of a user; the intelligent auditing module is used for carrying out OCR (Optical Character Recognition), logic verification and abnormal marking on the digital data; the two-stage data encryption module is arranged in the lower data processing area, is connected with the replaceable scanning module, comprises a hardware-stage key generator and a data encryption chip, and is used for encrypting the data acquired by the replaceable scanning module; and the bill printing module adopts a double-roller paper clamping mechanism and is used for outputting an audit report. According to the utility model, self-service uploading, instant auditing and safe output of contractor data are realized, and the data auditing efficiency and safety are improved.

The application discloses a public key searchable encryption similarity query method with forward security, belongs to the field of cryptography, and is applied to cloud database retrieval query privacy protection.The application realizes the method as follows: 1, a key generator generates public parameters; 2, the key generator generates keys required in subsequent steps; 3, the key generator judges whether a time stamp meets a condition; if the condition is not met, the key generator repeats step 2; 4, a data owner encrypts data; 5, a mode provider and the key generator interact to generate a trapdoor; and 6, a service provider and the mode provider interact to perform similarity query and return a query result.Compared with the prior art, the application solves the technical problem of improving data security, mode security and forward security by using the public key searchable encryption similarity query in the similarity query scene.

The embodiment of the invention discloses a power supply and distribution mode and a ship. The ship main distribution board in the mode comprises at least two sections of busbars and a control module; each section of busbar in the at least two sections is electrically connected with at least one key generator or / and at least one key operation device; and the control module is used for controlling the on-off of the electric connection and switching the power output supply of the key generator and / or the power input allocation of the key operation equipment when the connected busbar is offline due to a fault (such as a fault). According to the power supply and distribution mode provided by the embodiment of the invention, electrical connection channels with other designated sections of busbars are specially additionally arranged for the key-position generator and the key-position operation equipment, so that disability caused by power supply and distribution failure due to offline connection of the busbar sections can be successfully avoided, continuous output of the power of the key generator can be ensured, and the power supply and distribution efficiency can be improved. And the power utilization of key operation equipment can be continuously allocated, and meanwhile, the load imbalance between different busbar sections on the distribution board can be optimized.

A computing node in the computing cluster includes at least a key generator and an encryption engine. The key generator implements a key derivation function and generates a first data encryption key based on the key derivation key. The key derivation key is a global security association encryption key shared by a plurality of nodes in the computing cluster. The first data encryption key has uniqueness for a node pair of the plurality of nodes including a first node and a second node. The encryption engine encrypts a data packet using the first data encryption key.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

The invention relates to an electric power system stability online monitoring method based on a convolutional neural network, and the method comprises the steps: collecting target data of all generator buses in real time, and carrying out the preprocessing of the target data, and the target data comprise a voltage amplitude, a phase angle and a frequency; generating a thermodynamic diagram according to the pre-processed target data, performing feature extraction and pattern classification on the thermodynamic diagram by using a convolutional neural network to obtain a category prediction result, the convolutional neural network being obtained by training through a training set, the training set being generated by a simulation fault sample, and the training set being obtained by training the simulation fault sample; each sliding window sample is endowed with a category label; according to the category prediction result, judging whether the state is an instability early warning state or not; and after an instability early warning state is determined, identifying a key generator set through a principal component analysis (PCA) method or a double-branch convolutional neural network. According to the invention, the accuracy and timeliness of transient stability prediction are improved.

There is provided mechanisms for generating a cryptographic key for a user. The method is performed by a cryptographic key generator device. The method comprises authenticating the user using biometrics data read from the user using a biometrics reader. The method comprises obtaining, only when having authenticated the user, a PUF response from a PUF entity by providing a challenge based on biometrics response data to the PUF entity. The biometrics response data is a function of the biometrics data. The method comprises generating the cryptographic key using a cryptographic function and by seeding the cryptographic function with the PUF response.

Each computing node in a computing cluster includes at least a key generator and a cryptographic engine. The key generator implements a key derivation function and generates a first data encryption key based on the key derivation key. The key derivation key is a global security association encryption key shared by multiple nodes in the computing cluster. The first data encryption key is unique to a node pair, including a first node and a second node among multiple nodes. The cryptographic engine uses the first data encryption key to encrypt data packets.

There is provided a method for encrypting a message, performed by a computing device. The method may comprise receiving a public signature key and a public mid term key, which are generated in a terminal, from the terminal and storing them; forwarding the stored public signature key and the stored public mid term key to all terminals participating in a chat room; designating a key generator based on a timestamp-based first random number value included in all the terminals; and generating a message encryption key by using a private mid term key of the designated key generator, wherein the message encryption key is shared is all the terminals.

A secret electronic file secret transmission management system, method and application, including a transmission channel connecting a user end and a supervision end, and a secure transmission management software arranged on the user end and the supervision end, belong to the technical field of data security, characterized in that: the user end includes a computing power device, a storage device, an identification password machine, a special secret transmission encryption and decryption computer and a secure transmission management software; the supervision end includes a computing power server, a storage server, an identification password machine, a special secret transmission encryption and decryption computer, a quantum true random key generator and a secure transmission management software. The secret file is encrypted and decrypted and transmitted in a "point-to-point" manner, and is stored safely using lossless storage technology, which can effectively solve the problems of safe and fast transmission and safe storage of secret electronic files, and is applied to government agencies, secret units, military enterprises, military and military-civilian integration units to transmit secret electronic files and improve the high-level data security management of secret electronic files.

The invention provides a communication method and device based on homomorphic encryption, and the method comprises the steps: a secret key generator obtains a first secret key parameter, and the first secret key parameter is a secret key parameter related to a root secret key after network equipment accessed by terminal equipment is updated; and the key generator derives a homomorphic encryption and decryption key according to the first key parameter and a homomorphic encryption and decryption algorithm, wherein the homomorphic encryption and decryption key is used for the homomorphic task participated by the terminal equipment. Therefore, in the communication system, when the information of the homomorphic task in which the terminal equipment participates changes, the key generator can re-derive the homomorphic key for the homomorphic task according to the superior key of the updated homomorphic key, thereby ensuring the continuity of the homomorphic task of the terminal equipment.

A computer-implemented method of generating keys of a hierarchical key structure, wherein the method is performed by a key generator and comprises: obtaining a child key derivation path, wherein the child key derivation path comprises a sequence of elements, wherein the sequence of elements comprises one or more sets of one or more elements, each set of elements being generated based on a respective data item of a data path, and wherein each element in the sequence corresponds to a respective position of key in a respective level of the key structure; and generating one or more child keys based on the child key derivation path, wherein each respective child key is generated based on a respective element in the sequence at the respective position and of the respective level corresponding to that respective element.

A computer-implemented method for generating an identity-based encryption key, the method comprising: obtaining a set of private key shares and a set of corresponding public key shares, wherein each private key share is generated based on a personal identifier, at least one of the set of private key shares is generated by a respective one of a set of key generators; generating an identity-based private key based on each of the one or more private key shares; generating a partially identity-based public key, wherein the partially identity-based public key is generated based on each of the set of corresponding public key shares; transmitting the partially identity-based public key to at least one of the set of key generators to generate the identity-based public key; and / or generating the identity-based public key, wherein the identity-based public key comprises the personal identifier and the partially identity-based public key.

Appliances for use under appliance leasing agreements include a memory that stores a local parameter defining a lockout time at which the appliance will be locked out from performing an appliance leasing function and a controller that is configured to automatically switch the appliance from an operating mode to a locked mode at the stored lockout time. An asset management system for leased refrigeration appliances can include a remote server for sending a command to appliances which changes the lockout time stored in local memory. An encrypted key generator may also be used to enable a user to locally update the lockout time stored in the memory upon entry of an encrypted key.

The application discloses a kind of neural network model encryption and function fine-grained authorization method, based on initial training dataset, corresponding automatic trigger key generator or artificial trigger key dataset is constructed;Initial training dataset is mixed with the trigger key dataset or artificial trigger key dataset generated respectively, and mixed training dataset is obtained by construction: the mode is encrypted using the way of mixed training dataset training neural network model, so that no effective license can use model, more safe and reliable;On the basis of the encryption method, the application proposes a deep neural network dual verification method, which perfectly avoids existing adversarial attacks;In addition, the application also provides a fine-grained authorization method for using neural network function, according to the different functions of neural network, the corresponding trigger key is bound to realize the fine-grained authorization use of neural network, with the characteristics of only permitting users to use part of the function of the model.

An encryption module and the decryption module cooperate with an identity-based key generator of users in a communication system in order to use an identity-based and certificate-based construction using two or more encryption schemes. An encrypted message is communicated between users of the communication system such that the encrypted message received by the device of the user needs keys from each of the two or more encryption schemes to be able to decrypt the encrypted message. The validation module cooperates with a limited-time of validity certificate issued from a certificate authority platform to decrypt the encrypted message via the limited-time of validity certificate. The validation module allows the decryption module to decrypt the encrypted message with the limited-time of validity certificate corresponding to an identity of the user when the user is determined to be actually validated for a period of time specified for the limited-time of validity certificate. The certificate authority platform grants the users validation.

A device for performing multi-key homomorphic encryption includes a public key generator configured to generate a public key by using a secret key for each client, and a multiplication key generator configured to generate a multiplication key by reusing a public key protection error used in the generating of the public key. By reducing the size of the multiplication key by reusing the public key protection error, the operation time and memory may be reduced.

An attribute based encryption system includes a key generator configured to generate a cyclic group (G) having a prime order q; generate an attribute key matrix (M); generate a master public key (MPK) based, at least in part, on the group (G) and (M); generate a master secret key (MSK) based on a first vector s and a second vector t that represent an encryption policy; generate a user secret key based, at least in part, on the MSK and on a set of one or more user attributes; and send the user secret key to a user device, wherein a ciphertext message can be successfully decrypted if a vector y associated with attributes of the user associated with the user secret key is orthogonal to each row of a set of rows of M selected according to a set of authorization attributes used to encrypt the ciphertext message.

The invention discloses a post-quantum identity-based encryption system and a post-quantum identity-based encryption method based on a double trap door normal form. The system comprises a private key generator and a decryption server, and the private key generator and the decryption server respectively hold a key generation trap door and a decryption trap door which are algebraically independent from each other. The private key generator generates a trap door by using the secret key, and calculates a solution vector of a target syndrome corresponding to the user identity as a user private key; and after the decryption server verifies the validity of the private key of the user, the decryption trap door is utilized to assist in completing ciphertext de-encapsulation. According to the invention, through trap door separation of an architecture level, the vulnerability of'master key leakage 'caused by sharing of a trap door in an existing coding-based IBE scheme is fundamentally solved; meanwhile, the user private key is defined as a low-weight solution of a public equation, the extremely small private key size and calculation unloading are achieved, and the method is particularly suitable for post-quantum secure communication in the resource-limited environment such as the Internet of Things.

The invention discloses a movie and television episode digital asset copyright evidence storage method and platform based on a block chain, and the method comprises an asset feature extraction and evidence storage module which carries out the feature extraction of digital assets of movie and television episodes, generates a lightweight asset feature certificate, and carries out the chaining storage of the lightweight asset feature certificate; a multi-private key generator identity base ring signature module; a dynamic credit consensus module; and the ownership management intelligent contract module is deployed on the block chain and automatically executes asset registration, ownership circulation, infringement evidence fixation and income distribution rules. According to the method, lightweight feature fingerprints are extracted from different modal assets such as videos, audios, texts and images, original files are stored in an interstellar file system (IPFS), and only feature certificates are linked, so that the storage load and the data transmission cost of the block chain are reduced on the premise of ensuring that the unique identifier and the content of the assets cannot be tampered, and the data transmission efficiency is improved. And the evidence storage efficiency and the system expandability are improved.

A device may receive input key material, and may process the input key material, with a trained generative adversarial network (GAN) model, to generate an encryption key with a maximized entropy. The trained GAN model may include a key generator network model trained to generate encryption keys that generalize key derivation functions with higher entropy to enhance cryptographic security, and a key discriminator network model trained to predict authenticities of the encryption keys generated by the key generator network model. The device may perform one or more actions based on the encryption key.

To provide a software radio chip and a communication device for improving security in radio communication.SOLUTION: Software-defined radio chips (10, 20) for communication devices include a key generator (120, 220) for generating a shared secret using a physically unclonable function (PUF) that receives a configuration datum (CoD1) as an input and generates outputs that are either a shared secret (ks) or a seed (S) for deriving the shared secret, the outputs of the PUF being the same for all of a plurality of software-defined radio chips sharing the secret, and a memory (122, 222) for storing a configuration datum that is unique to the software-defined radio chip and that the key generator is adapted to generate a predetermined secret in dependence on a physical random factor introduced during manufacture of the software-defined radio chip.SELECTED DRAWING: Figure 2

The invention relates to the technical field of power system dispatching operation control, and discloses a power transmission section identification method and system based on dynamic matching of fragile lines in a power transmission channel. Constructing an improved PageRank algorithm to calculate a key degree index of the node; calculating a transaction volume sequence between a generator and a load node by using the PTDF, screening out a key generator-load node pair, extracting a key line set in a corresponding source-load channel from the updated topological graph by means of network conversion and shortest path search, and giving a vulnerability index of the line in combination with the LODF and the real-time power flow of the line; and matching the highly fragile line identified on line with the minimum cut candidate section obtained by the offline search, and dynamically screening to obtain the optimal power transmission section in the current operation state. The method can adapt to the dynamic change of the operation state of the power grid, quantifies the key of the nodes in real time, has high accuracy and high calculation efficiency, and provides powerful support for safe and stable operation of the power grid.

The invention relates to an anti-stealing-link key management method and system. The method comprises the following steps: a key generator generates a first key in response to a key generation request of a server, and sends the first key to a key accessor; the key accessor stores the first key, generates a query keyword corresponding to the first key based on the first key, and sends the query keyword to the key generator; the key generator sends the first key and the query keyword to the server; the server side sends the query keyword and a domain name corresponding to the server side to the anti-theft link verifier; and the anti-stealing-link verifier stores the mapping relation between the query keyword and the domain name corresponding to the server. By adopting the method, the key exposure risk can be reduced.