120 results about "Key recovery" patented technology

The invention particularly relates to an object storage data encryption method based on a large model. According to the object storage data encryption method based on the large model, user data is partitioned and compressed, and a deep learning large model is trained by using historical data accumulated by a cloud storage provider and known security threats; according to a large model prediction result, selecting an optimal encryption algorithm and a key management strategy; encrypting the preprocessed data, and storing the encrypted data and metadata in a cloud storage system; and when the user needs to access the data, reading the metadata, obtaining the decryption key, and recovering the original data. The object storage data encryption method based on the large model is efficient, safe and flexible, the optimal encryption strategy can be intelligently selected according to changes of data characteristics and the safety environment, dynamic encryption is achieved, therefore, the safety and privacy of data are remarkably improved, and the requirements of a modern object storage system can be met.

The Address Verification, Seed Splitting and Firmware Extension for Secure Cryptocurrency Key Backup, Restore, and Transaction Signing Platform Apparatuses, Methods and Systems (“SFTSP”) transforms contract deployment request, transaction signing request, key backup request, key recovery request inputs via SFTSP components into contract deployment response, transaction signing response, key backup response, key recovery response outputs. A contract deployment request message datastructure is obtained. Owner key identification parameters are determined. An owner public key is determined using the owner key identification parameters. An owner address is generated using the owner public key. A salt value is generated. A contract address for the smart contract is calculated as a function of the deployment factory address, the salt value, the contract code, and the owner address. An owner private key is determined using the owner key identification parameters and used to sign the contract address. A contract deployment data datastructure is provided.

The End-to-End Encryption and Hot Wallet Key Recovery Apparatuses, Processes and Systems (“E2EEHWKR”) transforms key backup request, key recovery request datastructure / inputs via E2EEHWKR components into key backup response, key recovery response outputs. A key backup request datastructure specifying a wallet private key, a private key backup server identifier, a PIN shard fracture scheme definition, and a plurality of PIN shard backup devices is obtained. A user security PIN is obtained and utilized to encrypt the wallet private key. A symmetric key is calculated from a public key associated with the private key backup server identifier and an app private key. The encrypted wallet private key is encrypted utilizing the symmetric key. The twice encrypted wallet private key is sent to a private key backup server. The user security PIN is encrypted utilizing an asymmetric keypair. Encrypted user security PIN shards are generated and sent to PIN shard backup devices.

The invention relates to the technical field of information security, in particular to a deep learning side channel analysis method for efficiently recovering a key, which comprises the following steps: S1, acquiring plaintext, key and encrypted energy leakage information; s2, byte labels set by bytes corresponding to the secret key and energy traces in the interest interval correspondingly form a data set, and the data set is divided into a training set, a verification set and a test set; s3, constructing a single convolutional neural network model according to the relationship between the energy leakage generated in the interest interval and the key, and establishing a side channel analysis deep learning model; s4, inputting the training set into a side channel analysis deep learning model for training to obtain a final model, and collecting training indexes; and S5, evaluating the final model, recovering the byte key by using the final model, and evaluating the attack effect. According to the method, the key of n bytes can be recovered only by training one model, so that the number of models is reduced, the training time is saved, and the efficiency of deep learning side channel analysis is effectively improved.

The embodiment of the invention provides a data processing method and device based on a block chain and a readable storage medium. The method comprises the steps that zero-knowledge proof for password information is generated in a resource client; sending a key recovery request to a block chain node in the block chain; the key recovery request comprises a zero knowledge proof and a contract address; generating an update block chain account and update password information corresponding to the update block chain account in the resource client; sending a key modification request to the block chain node according to the updated block chain account and the updated password information; the block chain node is used for verifying the key modification request according to the key recovery request with the recovery permission and the abstract account smart contract to obtain a verification result; and if the verification result indicates that the verification is successful, the block chain node determines that the updated block chain account and the updated password information are successfully recovered. By adopting the method and the device, the recovery of the updated block chain account can be realized, and the security of the block chain account is improved.

Methods for database recovery for encrypted indexes are performed by systems and devices. A query with a decryption key is received from a client device, where the query modifies an encrypted index of a database using a secure enclave. When events requiring remedial actions for the database occur during the querying, some transactions of the query and later queries are deferred, and a remedial action is initiated that includes restarting the database. A determination of the remedial action being unsuccessful in recovering the encrypted index causes the action to be re-performed until another query having the decryption key is received whereupon the action is performed again to recover the encrypted index utilizing the decryption key. Deferred transactions are then performed with the decryption key. When a database restarts for access without secure enclaves, the encrypted index for the database is invalidated, and the remedial actions are otherwise completed or discarded.

The invention relates to a key recovery method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: under the condition that a key recovery request is received, carrying out identity verification on a source party of the key recovery request; under the condition that the identity verification is passed, extracting a confusion key share in the key recovery request for storage; under the condition that the number of the stored confusion key shares reaches a first number, determining a preset decryption mode corresponding to the confusion key shares; decrypting each confusion key share according to the preset decryption mode to obtain a key share; and performing key recovery according to the first number of key shares to obtain a master key. By adopting the method, the key security can be improved.

A system, method, apparatus, and computer readable medium for key recovery based on contactless card cryptography. A server may receive a request from an application to recover a private key for a digital wallet, the request including a first cryptogram generated by the contactless card. The server may decrypt the first cryptogram based on a key for the contactless card. The server may determine a unique identifier for the contactless card and a diversification factor associated with the digital wallet based on the decryption. The server may generate a private key based on the unique identifier and the diversification factor. The server may transmit the private key to the application over a network.

The invention discloses a mobile phone USIM (Universal Subscriber Identity Module) side channel analysis method based on an outlier. The method comprises the following steps: S1, collecting a power consumption signal generated in the process of executing an AES (Advanced Encryption Standard) algorithm by a USIM card; s2, filtering and aligning the acquired power consumption signal to generate standardized side channel curve data; s3, for each key byte position participating in S box operation in the first round of AES, constructing a candidate key byte value, and calculating an S box output value; s4, recognizing recovered and uncertain key bytes by adopting a correlation energy analysis method; s5, deriving S box output byte positions influenced by the uncertain bytes in the second round; s6, calculating the correlation of the candidate value at the position, and generating a correlation feature vector; s7, inputting a local outlier factor algorithm, and calculating an outlier value; and S8, selecting the key byte with the maximum outlier as a final key byte to form a key byte set. According to the invention, the accuracy and robustness of USIM key recovery are improved in a low signal-to-noise ratio scene.

The invention discloses a multi-user data delivery method for locking an application scene, and the method comprises the steps: firstly segmenting a high-value data set into a plurality of data subsets, then dynamically generating a symmetric secret key, segmenting the secret key into a plurality of share secret keys, encrypting each piece of data by using the secret key, and transmitting the encrypted data to a server; then, an access strategy is made for the share of each data user according to the attribute provided by each data user, a share key distributed to the data user is encrypted, meanwhile, the encrypted share key is uploaded to a server, the data user downloads a ciphertext, the secret key is recovered by utilizing the share key of the data user and the share keys of other data users, and the data user sends the secret key to the server; and all the users decrypt the own data and then complete a specific application scene in a federal learning modeling mode. According to the invention, the problem of security control when the data is delivered to a plurality of data users for use is solved, 'special data and special purpose 'is realized, and the economic benefits of data providers are guaranteed.

The invention relates to a password side channel analysis method based on a secondary start genetic algorithm, and belongs to the technical field of information security passwords. The method comprises the following steps: firstly, constructing a second-order leakage corresponding formula of a cryptographic algorithm intermediate value and a leakage waveform for a first-order mask protection scheme realized by nonlinear layer table look-up; then, aiming at the generated second-order leakage, extracting an intermediate value of bit multiplexing in a register to construct an offset calculation formula of the intermediate value and a typical value; and finally, constructing a genetic algorithm fitness calculation formula for algorithm intermediate value offset, performing key recovery by adopting a secondary start genetic algorithm heuristic learning method for reducing the number of individuals in a dynamic population, and performing side channel analysis on a lightweight cryptographic algorithm for realizing a nonlinear layer by parallel table look-up.

The invention discloses a high-efficiency multi-authority responsibility investigation multi-party authorization method and device based on attribute encryption, and belongs to the technical field of cryptography and information security. A multi-authority attribute-based encryption mechanism is adopted to protect a responsibility investigation private key, a signer encrypts a signature share and generates a zero-knowledge proof; after verification and certification of the combiner, an encrypted share is aggregated in a ciphertext domain to generate an aggregated ciphertext, the block chain stores a hash abstract, and an authorization tracker decrypts the aggregated ciphertext through an attribute key recovery responsibility investigation private key to recover a threshold signature and a participant set, so that cryptology privacy protection, constant-level responsibility investigation efficiency, decentralized governance and reliable auditing are realized.

The invention discloses a symbol synchronization and frequency offset estimation method and system for a quantum noise stream encryption system, and the method comprises the steps: generating a conjugate symmetric sequence U based on a PN sequence, and generating a conjugate antisymmetric training sequence based on U; a sending end encrypts a training sequence by adopting a pre-shared key, the encrypted training sequence is added into a data frame, a receiving end receives a data signal comprising the encrypted training sequence, and sequence signals in training sequence positions corresponding to different data positions are recovered based on the key; calculating an autocorrelation value and a timing metric value of the corresponding recovered sequence based on different strategies; and averaging the timing metric values of different strategies to obtain a comprehensive timing metric value, performing symbol synchronization of the quantum noise stream encryption system based on the comprehensive timing metric value, and performing frequency offset estimation based on an autocorrelation value of a symbol synchronization position. The symbol synchronization accuracy and the frequency offset estimation precision in the quantum noise stream encryption system can be improved, and the safety of symbol frequency synchronization is improved.

The present invention discloses a lightweight sensitive data access control method, comprising: a system initialization step, generating public parameters; an encryption step, including two parts, symmetric encryption and attribute-based encryption, generating an access control tree according to an access control policy; embedding key material into the access control tree based on the Shamir secret sharing scheme; wherein the secret value of the root node is used to generate a key and an integrity verification key of a symmetric encryption algorithm, and the password share of the leaf node is used to generate an attribute ciphertext. In a decryption key generation step, a data user applies to an attribute authority for its attribute key, and the attribute authority generates a key for the attribute verified by the data user and sends it to the data user securely; in a decryption step, a user who complies with the access control policy uses its attribute key to recover a symmetric encryption key according to the access control tree, and decrypts and verifies the ciphertext data. The present invention is used for resource-constrained devices in an open network environment to control access to sensitive data.

The invention discloses an optimal impossible Boomerang attack search method based on MILP, and the method aims at a block code algorithm of a 4-bit s box, builds a bit-level differential propagation constraint description for linear and nonlinear components of the block code algorithm, employs a contradiction point in a BCT table as a judgment method, can search an impossible Boomerang discriminator of a plurality of different contradiction points under the same round number, and achieves the optimal search of the optimal impossible Boomerang attack. A key recovery expansion round is further added into the model, plaintext difference and ciphertext difference are taken as objective functions, a complete MILP model impossible to Boomerang attack is constructed, and the minimum number of plaintext and ciphertext active bits can be obtained by solving the model, so that the overall time complexity is reduced, and the probability of the key recovery expansion round is reduced. The method is suitable for searching high-round impossible Boomerang attacks under the condition of related keys or related adjustability.

The application provides a medical information privacy protection method and device based on image double watermarking, and a medium. The method steps include: step S01. obtaining medical information to be protected and preprocessing to form binary ciphertext; step S02. mapping the binary ciphertext to a corresponding medical image to form a medical image with ciphertext, and generating a mapping key; step S03. inputting the medical image with ciphertext into a modal conversion network to convert it into a medical image with ciphertext in another modal, and using a PVT module to align the source domain and target domain semantics through self-attention and cross-modal attention in the modal conversion network; and step S04. in the recovery stage, inputting the medical image into the reverse recovery modal conversion network to recover the medical image, and using the mapping key to recover the medical information. The application can enhance medical information privacy protection based on double watermarking, while improving recovery accuracy, capacity and robustness.

Embodiments of the present application provide a key recovery method, device, system, storage medium and electronic device, wherein the method comprises: obtaining N sub-ciphertexts, wherein the N sub-ciphertexts are ciphertexts obtained by a second object encrypting N sub-keys using a target public key and respectively sending to N third objects, the N sub-keys are keys obtained by the second object fragmenting a target key, and the N sub-ciphertexts are respectively sent to a first object by the N third objects notified by the second object after the first object sends a first target request to the second object to request to recover the target key; and decrypting the N sub-ciphertexts using a target private key to recover the target key, wherein the target public key and the target private key are a key pair generated by the first object using a predetermined algorithm. Through the present application, the problem of low security of the key in the related art is solved, and the effect of improving the security of the key is achieved.

The present invention discloses a key management system based on version management, comprising: a cryptographic device and a key backup central server; the cryptographic device comprises: a key card, which is used to generate keys of different version numbers according to a time baseline in a hardware security environment, and encrypt the keys of different version numbers through a device key; a local key synchronization service module, which is used to detect key changes and synchronize them to a central server; a key backup central server, which stores the key version directory and encrypted key files of all devices; the cryptographic device and the key backup central server communicate via a network to achieve two-way synchronization of key version data, support the selection of multiple version keys for merge recovery, and resolve index conflicts through hash comparison. The present invention manages the key life cycle of the cryptographic device based on the version number, making the management work clearer; multiple version key backups can be used for fusion recovery to meet more key recovery scenarios.

Vehicle-mounted system (1) for communicating with an external tool (2), wherein the vehicle-mounted system (1) comprises: a communication device (16); a tool key recovery device (11, S62-S64); and a communication controller (11, S65), wherein the vehicle-integrated system (1) and an external server (3) provide a vehicle communication system, wherein the external tool (2) stores a secret tool key, where the external server (3) stores information about an external tool, where the information about an external tool provides a public tool key and key identification information that are linked together, wherein the public tool key provides a public key that forms a pair with the secret tool key, wherein the key identification information provides identification information about the public tool key, wherein the communication device (16) communicates with the external server (3), wherein, when the external tool (2) requests a communication connection with the vehicle-bound system (1), the tool key acquisition device (11, S62-S64) sends the key identification information according to the external tool (2), which is a request source, to the external server (3) via the communication device (16), so that the tool key acquisition device (11, S62-S64) obtains the public tool key associated with the key identification information from the external server (3) via the communication device (16), wherein the communication controller (11, S65) performs cryptographic communication with the external tool (2) representing the request source using the public tool key obtained through the tool key acquisition device (11, S62-S64), wherein the communication controller (11, S65) performs the cryptographic communication with the external tool (2) in a public key encryption system using the public tool key, such that the communication controller (11, S65) shares a common key with the external tool (2), where the shared key provides cryptographic communication in a shared key encryption system, wherein the vehicle-mounted system (1) further comprises an update device (11, S67) for updating the common key, and wherein the update device (11, S67) generates an updated common key based on vehicle information.

The invention belongs to the field of power systems, and discloses a power emergency communication recovery method and a related device, and the method comprises the steps: recognizing a communication node corresponding to a power key recovery node based on a node coupling correlation model of a power network and a communication network, and forming a to-be-analyzed node; tracing power service communication links taking the nodes as starting points, and constructing a to-be-recovered communication node set; calculating the recovery importance degree of each node in the set, wherein the importance degree is obtained by weighted superposition of three types of indexes, namely coupling association strength, bearing service value and network hub attribute; and determining the recovery priority of each communication node according to the recovery importance and executing hierarchical recovery. Communication nodes strongly associated with key loads of a power grid are accurately identified, the recovery value of the communication nodes is quantitatively evaluated, a hierarchical recovery strategy with a clear priority is formed, limited emergency resources are guided to be accurately focused to core communication nodes, the problem that resource allocation and recovery effects are disjointed in a traditional strategy is solved, and the recovery efficiency is improved. And the pertinence and the overall efficiency of power emergency communication recovery are improved.

The invention relates to a password side channel analysis method for bit slice structure mask multiplexing, and belongs to the technical field of information security passwords. Firstly, a second-order leakage corresponding formula of a cryptographic algorithm intermediate value and a leakage waveform is constructed for a first-order mask protection scheme realized by logical operation; then, aiming at the generated second-order leakage, extracting byte multiplexing bits to construct an offset calculation formula of the byte multiplexing bits and a typical value; and finally, constructing a genetic algorithm fitness calculation formula for algorithm intermediate value offset, and performing key recovery by adopting a genetic algorithm heuristic learning method to realize side channel analysis on parallel logic operation with first-order mask protection by adopting a lightweight cryptographic algorithm of a bit slicing technology.

The invention discloses a certificate authorization private key recovery method and device, a storage medium and electronic equipment, and the method comprises the steps: sending a fragment obtaining request to a service cluster under the condition that an encryption key of a certificate authorization private key is to be recovered for the service cluster; obtaining multiple pieces of request response information returned by responding to the fragment obtaining request from the service cluster; verifying the request response information by using the public key list; under the condition that the request response information passes verification, key fragments are extracted from the request response information; and recovering the encryption key by using the extracted key fragment. By adopting the technical scheme, the problems of low security and the like in a certificate authorization private key recovery process in related technologies are solved.

This invention relates to the field of computer integrated control technology, specifically an integrated triggering method and system for one-key recovery of a computer in a power-off state. The method involves monitoring user operations under power-off conditions via hardware circuitry. Under the constraint of the Recovery module's anti-accidental touch measures, the method arbitrates and determines user-triggered actions, generating a valid trigger signal and writing it to the wake-up register. Combining an RC delay circuit and trigger sampling analysis of power-on voltage changes, the system automatically enters Recovery mode upon the next power-on without needing to access the operating system or BIOS. After the device is powered off, power data in the power domain is read from the coin cell battery, and the PG distortion signal is reconstructed in the frequency domain. Based on this signal, stable power-on screening and CLRTC physical trigger detection are performed, automatically clearing the real-time clock data when conditions are met. The System Reset module identifies the actual system crash state by constructing a power-on anomaly variable domain and automatically triggers a system restart upon detecting a Reset signal, thus achieving one-key maintenance and recovery of the computer in a crash state.

A private key recovery device uses a parameter, being data obtained by taking a sum of first biometric information and an encoded key obtained by encoding a private key using an encoding scheme having an error correction capability, and second biometric information, to generate data in which data based on the encoded key and a difference obtained by subtracting the second biometric information from the first biometric information is decoded using the encoding scheme.

The present invention presents a key management system for handling cryptographic keys. The key management system comprises a computer device. The key management system is configured to be in data communication with at least one identity provider, IdP, server and at least one group of computing servers. The IdP servers is configured to send an authentication token to the key management system upon an authentication request from the key management system. The key management system is configured to generate an access ID related to said IdP servers. The key management system is configured to perform one or both of following: a) generate an encryption key from said access ID, b) send a decryption request to the group of computing servers, wherein the group of computing servers is configured to generate a decryption key and sending the decryption key or shares of the decryption key to the computer device or a selected device different from the computer device.

The invention discloses a hierarchical retracement processing method and system for security check CT (Computed Tomography) images. The method comprises the following steps: acquiring a security check CT image of a parcel to be checked and responding to user operation; the user performs sectioning, image processing, measuring or marking operations to generate a sequence of images; responding to a user retracement instruction, judging an operation type and executing a corresponding retracement strategy: if the operation type is not the data exchange type, calling screen snapshots in sequence to realize plane layer non-inductive retracement and video memory snapshots to recover real-time imaging; if the type is the data exchange type, quickly reconstructing a target image based on preloaded package data and an intermediate calculation result; and the user can operate again in the state after withdrawing until the result is satisfactory. Through the serialized recording operation process and the multi-level snapshot management, the precise and low-delay withdrawing of the security check CT image operation process is realized, the problems that the intermediate state cannot be backtracked, the withdrawing delay is high and the cross-parcel operation efficiency is low in the traditional one-key restoration are effectively solved, and the security check image discrimination efficiency and the passing experience are remarkably improved.

The invention relates to a directed acyclic graph-based efficient and reliable attribute-based proxy re-encryption method, which belongs to the technical field of information security, and comprises the following steps: a trusted authority initializes system parameters and generates a system master key and user public and private keys; the edge node generates a symmetric key and encrypts data, and generates a re-encryption key for data sharing; the cloud server converts the ciphertext into a ciphertext meeting a sharing strategy by using the re-encryption key; the directed acyclic graph records system parameters, a ciphertext hash value and a public key of a key holder; and the data sharer decrypts the ciphertext after matching the access strategy, and completes data integrity verification and symmetric key recovery through signature and subkey verification.

The present invention provides a key splitting detection method, which relates to the field of cryptographic security detection. The present invention performs key splitting scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection and key component storage detection on the key splitting technology used by the detection object, and judges whether there is an abnormality in the key splitting according to the situation of each detection step, and outputs corresponding error, insecurity or warning information when an abnormality occurs; the present invention aims to design a complete set of detection processes for the full-stage process of key splitting, so as to realize a comprehensive and multi-dimensional evaluation of various aspects of the key splitting technology, so as to solve the problem that there is no systematic detection process in the key splitting technology in the prior art.

The invention relates to a key management method based on a KMS technology, and the method is characterized in that the method comprises the following steps: enabling a key management service KMS to generate a CMK key for a user in a client application based on the first login of the user; generating a DEK key in the client application and storing the DEK key in a safe area of a first device based on the first selection service provider point deduction for the first time when a user purchases a commodity for the first time; in the client application, enabling the KMS to encrypt the DEK key by using the CMK key, generating an encrypted DEK key and transmitting the encrypted DEK key to the client application; encrypting transmission data by using the DEK key in the client application; the encrypted DEK key and the encrypted transmission data are transmitted to the server of the service provider in the client application. According to the scheme, a CMK-DEK hierarchical architecture is adopted, a KMS manages a CMK to transmit an ID, and a DEK locally stores a security area to prevent a core key from being leaked; and AES-256-CBC is used for encryption, a server stores a ciphertext, and the DEK is destroyed after decryption. Key recovery, multi-device synchronization, compliance with laws and regulations, operation traceability, safety and experience balance and adaptation to high-safety scenes are supported.

The invention provides a template attack method and a template attack device aiming at a Dillite. The method comprises a modeling stage and a private key recovery stage. The modeling stage comprises the following steps of: acquiring an energy trace generated by the mask Dillite in a signature process, and extracting an energy feature which is generated by the mask Dillite when a sensitive intermediate value is calculated in a number theory transform domain and is related to the mask of a random polynomial from the energy trace; establishing a template for the Hamming weight of the sensitive intermediate value according to the extracted energy features; the private key recovery stage comprises the following steps: acquiring an energy trace and signature information of target equipment; extracting energy characteristics related to calculation of a sensitive intermediate value in a number theory transform domain by using the Dillite mask from the obtained energy trace of the target equipment; calculating mahalanobis distances between the extracted energy features and all templates, and recovering a random polynomial according to the template corresponding to the minimum mahalanobis distance; and according to the linear relationship between the recovered random polynomial and the number-theory transform domain private key of the mask Dillitium and the signature information, recovering the number-theory transform domain private key.