103 results about "Key recovery" patented technology

The invention particularly relates to an object storage data encryption method based on a large model. According to the object storage data encryption method based on the large model, user data is partitioned and compressed, and a deep learning large model is trained by using historical data accumulated by a cloud storage provider and known security threats; according to a large model prediction result, selecting an optimal encryption algorithm and a key management strategy; encrypting the preprocessed data, and storing the encrypted data and metadata in a cloud storage system; and when the user needs to access the data, reading the metadata, obtaining the decryption key, and recovering the original data. The object storage data encryption method based on the large model is efficient, safe and flexible, the optimal encryption strategy can be intelligently selected according to changes of data characteristics and the safety environment, dynamic encryption is achieved, therefore, the safety and privacy of data are remarkably improved, and the requirements of a modern object storage system can be met.

The End-to-End Encryption and Hot Wallet Key Recovery Apparatuses, Processes and Systems (“E2EEHWKR”) transforms key backup request, key recovery request datastructure / inputs via E2EEHWKR components into key backup response, key recovery response outputs. A key backup request datastructure specifying a wallet private key, a private key backup server identifier, a PIN shard fracture scheme definition, and a plurality of PIN shard backup devices is obtained. A user security PIN is obtained and utilized to encrypt the wallet private key. A symmetric key is calculated from a public key associated with the private key backup server identifier and an app private key. The encrypted wallet private key is encrypted utilizing the symmetric key. The twice encrypted wallet private key is sent to a private key backup server. The user security PIN is encrypted utilizing an asymmetric keypair. Encrypted user security PIN shards are generated and sent to PIN shard backup devices.

The embodiment of the invention provides a data processing method and device based on a block chain and a readable storage medium. The method comprises the steps that zero-knowledge proof for password information is generated in a resource client; sending a key recovery request to a block chain node in the block chain; the key recovery request comprises a zero knowledge proof and a contract address; generating an update block chain account and update password information corresponding to the update block chain account in the resource client; sending a key modification request to the block chain node according to the updated block chain account and the updated password information; the block chain node is used for verifying the key modification request according to the key recovery request with the recovery permission and the abstract account smart contract to obtain a verification result; and if the verification result indicates that the verification is successful, the block chain node determines that the updated block chain account and the updated password information are successfully recovered. By adopting the method and the device, the recovery of the updated block chain account can be realized, and the security of the block chain account is improved.

Methods for database recovery for encrypted indexes are performed by systems and devices. A query with a decryption key is received from a client device, where the query modifies an encrypted index of a database using a secure enclave. When events requiring remedial actions for the database occur during the querying, some transactions of the query and later queries are deferred, and a remedial action is initiated that includes restarting the database. A determination of the remedial action being unsuccessful in recovering the encrypted index causes the action to be re-performed until another query having the decryption key is received whereupon the action is performed again to recover the encrypted index utilizing the decryption key. Deferred transactions are then performed with the decryption key. When a database restarts for access without secure enclaves, the encrypted index for the database is invalidated, and the remedial actions are otherwise completed or discarded.

The invention relates to a key recovery method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: under the condition that a key recovery request is received, carrying out identity verification on a source party of the key recovery request; under the condition that the identity verification is passed, extracting a confusion key share in the key recovery request for storage; under the condition that the number of the stored confusion key shares reaches a first number, determining a preset decryption mode corresponding to the confusion key shares; decrypting each confusion key share according to the preset decryption mode to obtain a key share; and performing key recovery according to the first number of key shares to obtain a master key. By adopting the method, the key security can be improved.

The invention discloses a mobile phone USIM (Universal Subscriber Identity Module) side channel analysis method based on an outlier. The method comprises the following steps: S1, collecting a power consumption signal generated in the process of executing an AES (Advanced Encryption Standard) algorithm by a USIM card; s2, filtering and aligning the acquired power consumption signal to generate standardized side channel curve data; s3, for each key byte position participating in S box operation in the first round of AES, constructing a candidate key byte value, and calculating an S box output value; s4, recognizing recovered and uncertain key bytes by adopting a correlation energy analysis method; s5, deriving S box output byte positions influenced by the uncertain bytes in the second round; s6, calculating the correlation of the candidate value at the position, and generating a correlation feature vector; s7, inputting a local outlier factor algorithm, and calculating an outlier value; and S8, selecting the key byte with the maximum outlier as a final key byte to form a key byte set. According to the invention, the accuracy and robustness of USIM key recovery are improved in a low signal-to-noise ratio scene.

The invention discloses a multi-user data delivery method for locking an application scene, and the method comprises the steps: firstly segmenting a high-value data set into a plurality of data subsets, then dynamically generating a symmetric secret key, segmenting the secret key into a plurality of share secret keys, encrypting each piece of data by using the secret key, and transmitting the encrypted data to a server; then, an access strategy is made for the share of each data user according to the attribute provided by each data user, a share key distributed to the data user is encrypted, meanwhile, the encrypted share key is uploaded to a server, the data user downloads a ciphertext, the secret key is recovered by utilizing the share key of the data user and the share keys of other data users, and the data user sends the secret key to the server; and all the users decrypt the own data and then complete a specific application scene in a federal learning modeling mode. According to the invention, the problem of security control when the data is delivered to a plurality of data users for use is solved, 'special data and special purpose 'is realized, and the economic benefits of data providers are guaranteed.

The invention relates to a password side channel analysis method based on a secondary start genetic algorithm, and belongs to the technical field of information security passwords. The method comprises the following steps: firstly, constructing a second-order leakage corresponding formula of a cryptographic algorithm intermediate value and a leakage waveform for a first-order mask protection scheme realized by nonlinear layer table look-up; then, aiming at the generated second-order leakage, extracting an intermediate value of bit multiplexing in a register to construct an offset calculation formula of the intermediate value and a typical value; and finally, constructing a genetic algorithm fitness calculation formula for algorithm intermediate value offset, performing key recovery by adopting a secondary start genetic algorithm heuristic learning method for reducing the number of individuals in a dynamic population, and performing side channel analysis on a lightweight cryptographic algorithm for realizing a nonlinear layer by parallel table look-up.

The invention discloses a high-efficiency multi-authority responsibility investigation multi-party authorization method and device based on attribute encryption, and belongs to the technical field of cryptography and information security. A multi-authority attribute-based encryption mechanism is adopted to protect a responsibility investigation private key, a signer encrypts a signature share and generates a zero-knowledge proof; after verification and certification of the combiner, an encrypted share is aggregated in a ciphertext domain to generate an aggregated ciphertext, the block chain stores a hash abstract, and an authorization tracker decrypts the aggregated ciphertext through an attribute key recovery responsibility investigation private key to recover a threshold signature and a participant set, so that cryptology privacy protection, constant-level responsibility investigation efficiency, decentralized governance and reliable auditing are realized.

The present invention discloses a lightweight sensitive data access control method, comprising: a system initialization step, generating public parameters; an encryption step, including two parts, symmetric encryption and attribute-based encryption, generating an access control tree according to an access control policy; embedding key material into the access control tree based on the Shamir secret sharing scheme; wherein the secret value of the root node is used to generate a key and an integrity verification key of a symmetric encryption algorithm, and the password share of the leaf node is used to generate an attribute ciphertext. In a decryption key generation step, a data user applies to an attribute authority for its attribute key, and the attribute authority generates a key for the attribute verified by the data user and sends it to the data user securely; in a decryption step, a user who complies with the access control policy uses its attribute key to recover a symmetric encryption key according to the access control tree, and decrypts and verifies the ciphertext data. The present invention is used for resource-constrained devices in an open network environment to control access to sensitive data.

The invention discloses an optimal impossible Boomerang attack search method based on MILP, and the method aims at a block code algorithm of a 4-bit s box, builds a bit-level differential propagation constraint description for linear and nonlinear components of the block code algorithm, employs a contradiction point in a BCT table as a judgment method, can search an impossible Boomerang discriminator of a plurality of different contradiction points under the same round number, and achieves the optimal search of the optimal impossible Boomerang attack. A key recovery expansion round is further added into the model, plaintext difference and ciphertext difference are taken as objective functions, a complete MILP model impossible to Boomerang attack is constructed, and the minimum number of plaintext and ciphertext active bits can be obtained by solving the model, so that the overall time complexity is reduced, and the probability of the key recovery expansion round is reduced. The method is suitable for searching high-round impossible Boomerang attacks under the condition of related keys or related adjustability.

The application provides a medical information privacy protection method and device based on image double watermarking, and a medium. The method steps include: step S01. obtaining medical information to be protected and preprocessing to form binary ciphertext; step S02. mapping the binary ciphertext to a corresponding medical image to form a medical image with ciphertext, and generating a mapping key; step S03. inputting the medical image with ciphertext into a modal conversion network to convert it into a medical image with ciphertext in another modal, and using a PVT module to align the source domain and target domain semantics through self-attention and cross-modal attention in the modal conversion network; and step S04. in the recovery stage, inputting the medical image into the reverse recovery modal conversion network to recover the medical image, and using the mapping key to recover the medical information. The application can enhance medical information privacy protection based on double watermarking, while improving recovery accuracy, capacity and robustness.

Embodiments of the present application provide a key recovery method, device, system, storage medium and electronic device, wherein the method comprises: obtaining N sub-ciphertexts, wherein the N sub-ciphertexts are ciphertexts obtained by a second object encrypting N sub-keys using a target public key and respectively sending to N third objects, the N sub-keys are keys obtained by the second object fragmenting a target key, and the N sub-ciphertexts are respectively sent to a first object by the N third objects notified by the second object after the first object sends a first target request to the second object to request to recover the target key; and decrypting the N sub-ciphertexts using a target private key to recover the target key, wherein the target public key and the target private key are a key pair generated by the first object using a predetermined algorithm. Through the present application, the problem of low security of the key in the related art is solved, and the effect of improving the security of the key is achieved.

The present invention discloses a key management system based on version management, comprising: a cryptographic device and a key backup central server; the cryptographic device comprises: a key card, which is used to generate keys of different version numbers according to a time baseline in a hardware security environment, and encrypt the keys of different version numbers through a device key; a local key synchronization service module, which is used to detect key changes and synchronize them to a central server; a key backup central server, which stores the key version directory and encrypted key files of all devices; the cryptographic device and the key backup central server communicate via a network to achieve two-way synchronization of key version data, support the selection of multiple version keys for merge recovery, and resolve index conflicts through hash comparison. The present invention manages the key life cycle of the cryptographic device based on the version number, making the management work clearer; multiple version key backups can be used for fusion recovery to meet more key recovery scenarios.

Vehicle-mounted system (1) for communicating with an external tool (2), wherein the vehicle-mounted system (1) comprises: a communication device (16); a tool key recovery device (11, S62-S64); and a communication controller (11, S65), wherein the vehicle-integrated system (1) and an external server (3) provide a vehicle communication system, wherein the external tool (2) stores a secret tool key, where the external server (3) stores information about an external tool, where the information about an external tool provides a public tool key and key identification information that are linked together, wherein the public tool key provides a public key that forms a pair with the secret tool key, wherein the key identification information provides identification information about the public tool key, wherein the communication device (16) communicates with the external server (3), wherein, when the external tool (2) requests a communication connection with the vehicle-bound system (1), the tool key acquisition device (11, S62-S64) sends the key identification information according to the external tool (2), which is a request source, to the external server (3) via the communication device (16), so that the tool key acquisition device (11, S62-S64) obtains the public tool key associated with the key identification information from the external server (3) via the communication device (16), wherein the communication controller (11, S65) performs cryptographic communication with the external tool (2) representing the request source using the public tool key obtained through the tool key acquisition device (11, S62-S64), wherein the communication controller (11, S65) performs the cryptographic communication with the external tool (2) in a public key encryption system using the public tool key, such that the communication controller (11, S65) shares a common key with the external tool (2), where the shared key provides cryptographic communication in a shared key encryption system, wherein the vehicle-mounted system (1) further comprises an update device (11, S67) for updating the common key, and wherein the update device (11, S67) generates an updated common key based on vehicle information.

The invention belongs to the field of power systems, and discloses a power emergency communication recovery method and a related device, and the method comprises the steps: recognizing a communication node corresponding to a power key recovery node based on a node coupling correlation model of a power network and a communication network, and forming a to-be-analyzed node; tracing power service communication links taking the nodes as starting points, and constructing a to-be-recovered communication node set; calculating the recovery importance degree of each node in the set, wherein the importance degree is obtained by weighted superposition of three types of indexes, namely coupling association strength, bearing service value and network hub attribute; and determining the recovery priority of each communication node according to the recovery importance and executing hierarchical recovery. Communication nodes strongly associated with key loads of a power grid are accurately identified, the recovery value of the communication nodes is quantitatively evaluated, a hierarchical recovery strategy with a clear priority is formed, limited emergency resources are guided to be accurately focused to core communication nodes, the problem that resource allocation and recovery effects are disjointed in a traditional strategy is solved, and the recovery efficiency is improved. And the pertinence and the overall efficiency of power emergency communication recovery are improved.

The invention relates to a password side channel analysis method for bit slice structure mask multiplexing, and belongs to the technical field of information security passwords. Firstly, a second-order leakage corresponding formula of a cryptographic algorithm intermediate value and a leakage waveform is constructed for a first-order mask protection scheme realized by logical operation; then, aiming at the generated second-order leakage, extracting byte multiplexing bits to construct an offset calculation formula of the byte multiplexing bits and a typical value; and finally, constructing a genetic algorithm fitness calculation formula for algorithm intermediate value offset, and performing key recovery by adopting a genetic algorithm heuristic learning method to realize side channel analysis on parallel logic operation with first-order mask protection by adopting a lightweight cryptographic algorithm of a bit slicing technology.

The invention discloses a certificate authorization private key recovery method and device, a storage medium and electronic equipment, and the method comprises the steps: sending a fragment obtaining request to a service cluster under the condition that an encryption key of a certificate authorization private key is to be recovered for the service cluster; obtaining multiple pieces of request response information returned by responding to the fragment obtaining request from the service cluster; verifying the request response information by using the public key list; under the condition that the request response information passes verification, key fragments are extracted from the request response information; and recovering the encryption key by using the extracted key fragment. By adopting the technical scheme, the problems of low security and the like in a certificate authorization private key recovery process in related technologies are solved.

This invention relates to the field of computer integrated control technology, specifically an integrated triggering method and system for one-key recovery of a computer in a power-off state. The method involves monitoring user operations under power-off conditions via hardware circuitry. Under the constraint of the Recovery module's anti-accidental touch measures, the method arbitrates and determines user-triggered actions, generating a valid trigger signal and writing it to the wake-up register. Combining an RC delay circuit and trigger sampling analysis of power-on voltage changes, the system automatically enters Recovery mode upon the next power-on without needing to access the operating system or BIOS. After the device is powered off, power data in the power domain is read from the coin cell battery, and the PG distortion signal is reconstructed in the frequency domain. Based on this signal, stable power-on screening and CLRTC physical trigger detection are performed, automatically clearing the real-time clock data when conditions are met. The System Reset module identifies the actual system crash state by constructing a power-on anomaly variable domain and automatically triggers a system restart upon detecting a Reset signal, thus achieving one-key maintenance and recovery of the computer in a crash state.

A private key recovery device uses a parameter, being data obtained by taking a sum of first biometric information and an encoded key obtained by encoding a private key using an encoding scheme having an error correction capability, and second biometric information, to generate data in which data based on the encoded key and a difference obtained by subtracting the second biometric information from the first biometric information is decoded using the encoding scheme.

The present invention presents a key management system for handling cryptographic keys. The key management system comprises a computer device. The key management system is configured to be in data communication with at least one identity provider, IdP, server and at least one group of computing servers. The IdP servers is configured to send an authentication token to the key management system upon an authentication request from the key management system. The key management system is configured to generate an access ID related to said IdP servers. The key management system is configured to perform one or both of following: a) generate an encryption key from said access ID, b) send a decryption request to the group of computing servers, wherein the group of computing servers is configured to generate a decryption key and sending the decryption key or shares of the decryption key to the computer device or a selected device different from the computer device.

The invention discloses a hierarchical retracement processing method and system for security check CT (Computed Tomography) images. The method comprises the following steps: acquiring a security check CT image of a parcel to be checked and responding to user operation; the user performs sectioning, image processing, measuring or marking operations to generate a sequence of images; responding to a user retracement instruction, judging an operation type and executing a corresponding retracement strategy: if the operation type is not the data exchange type, calling screen snapshots in sequence to realize plane layer non-inductive retracement and video memory snapshots to recover real-time imaging; if the type is the data exchange type, quickly reconstructing a target image based on preloaded package data and an intermediate calculation result; and the user can operate again in the state after withdrawing until the result is satisfactory. Through the serialized recording operation process and the multi-level snapshot management, the precise and low-delay withdrawing of the security check CT image operation process is realized, the problems that the intermediate state cannot be backtracked, the withdrawing delay is high and the cross-parcel operation efficiency is low in the traditional one-key restoration are effectively solved, and the security check image discrimination efficiency and the passing experience are remarkably improved.

The invention relates to a key management method based on a KMS technology, and the method is characterized in that the method comprises the following steps: enabling a key management service KMS to generate a CMK key for a user in a client application based on the first login of the user; generating a DEK key in the client application and storing the DEK key in a safe area of a first device based on the first selection service provider point deduction for the first time when a user purchases a commodity for the first time; in the client application, enabling the KMS to encrypt the DEK key by using the CMK key, generating an encrypted DEK key and transmitting the encrypted DEK key to the client application; encrypting transmission data by using the DEK key in the client application; the encrypted DEK key and the encrypted transmission data are transmitted to the server of the service provider in the client application. According to the scheme, a CMK-DEK hierarchical architecture is adopted, a KMS manages a CMK to transmit an ID, and a DEK locally stores a security area to prevent a core key from being leaked; and AES-256-CBC is used for encryption, a server stores a ciphertext, and the DEK is destroyed after decryption. Key recovery, multi-device synchronization, compliance with laws and regulations, operation traceability, safety and experience balance and adaptation to high-safety scenes are supported.

The invention provides a template attack method and a template attack device aiming at a Dillite. The method comprises a modeling stage and a private key recovery stage. The modeling stage comprises the following steps of: acquiring an energy trace generated by the mask Dillite in a signature process, and extracting an energy feature which is generated by the mask Dillite when a sensitive intermediate value is calculated in a number theory transform domain and is related to the mask of a random polynomial from the energy trace; establishing a template for the Hamming weight of the sensitive intermediate value according to the extracted energy features; the private key recovery stage comprises the following steps: acquiring an energy trace and signature information of target equipment; extracting energy characteristics related to calculation of a sensitive intermediate value in a number theory transform domain by using the Dillite mask from the obtained energy trace of the target equipment; calculating mahalanobis distances between the extracted energy features and all templates, and recovering a random polynomial according to the template corresponding to the minimum mahalanobis distance; and according to the linear relationship between the recovered random polynomial and the number-theory transform domain private key of the mask Dillitium and the signature information, recovering the number-theory transform domain private key.

The present invention relates to a one-key recovery device and method for computer system software, comprising: an interface circuit capable of being plugged into and connected to a host, the interface circuit being connected to a storage socket circuit capable of connecting to a storage device for an embedded boot program, data backup and recovery software, and backup data, the interface circuit and the storage socket circuit being connected to a control circuit and a storage power supply circuit, and the control circuit being connected to a control power supply circuit. The device of the present invention is provided with two sets of power supply circuits, one for the control circuit and one for the storage circuit. The purpose of separate power supply is to facilitate power-off when the device is not working, so as to protect the device from attack. At the same time, setting two sets of power supply circuits can make the recovery or reinstallation of the host operating system fully automated. With the conveniently pluggable interface circuit, the operation of recovering the operating system becomes very simple, and users with basic computer knowledge can also easily perform the installation, backup, and recovery operations of the host operating system.

The invention relates to a block cipher side channel analysis method based on experience accumulation and three-dimensional decision, and belongs to the technical field of cipher security analysis and side channel analysis. Aiming at the problems of large search space, low information utilization rate, computing power waste and the like in the traditional correlation coefficient energy analysis, the method provides an analysis framework combining a dynamic hierarchical screening mechanism and a cross validation strategy. The method comprises the following steps: randomly initializing each byte of a key to generate a candidate set; constructing a three-dimensional decision-making structure comprising a data layer, a statistical layer and a decision-making layer so as to record and analyze correlation coefficient distribution; screening conditions are automatically tightened through dynamic threshold attenuation, and the search range is gradually reduced; and adopting a multi-stage single-byte perturbation and cross validation strategy to carry out iterative optimization and ranking on each byte candidate value, and finally selecting an optimal key combination to carry out verification. According to the method, the success rate, robustness and convergence speed of side channel analysis are effectively improved, and the method is suitable for key recovery of block cipher.

The End-to-End Encryption and Hot Wallet Key Recovery Apparatuses, Processes and Systems (“E2EEHWKR”) transforms key backup request, key recovery request datastructure / inputs via E2EEHWKR components into key backup response, key recovery response outputs. A key backup request datastructure specifying a wallet private key, a private key backup server identifier, a PIN shard fracture scheme definition, and a plurality of PIN shard backup devices is obtained. A user security PIN is obtained and utilized to encrypt the wallet private key. A symmetric key is calculated from a public key associated with the private key backup server identifier and an app private key. The encrypted wallet private key is encrypted utilizing the symmetric key. The twice encrypted wallet private key is sent to a private key backup server. The user security PIN is encrypted utilizing an asymmetric keypair. Encrypted user security PIN shards are generated and sent to PIN shard backup devices.

The present invention relates to the fields of cryptography and multi-source side channel analysis, and more specifically, to a multi-source adversarial side channel analysis method for cryptographic algorithms based on random models. By introducing the idea of ​​multi-source adversarial learning into the random model modeling process, the modeling accuracy of the random model is improved, and key recovery is achieved more efficiently. The present invention utilizes a noise source and an energy source for adversarial learning, introduces the conditional probability of the normal distribution and the KS test as a basis for adversarial learning judgment, and independently designs a random model modeling parameter iteration mechanism to improve the accuracy of traditional random model parameters; the method converts it into a more intuitive mathematical formula, which helps to improve the accuracy of various methods related to random models and reduce the difficulty of cryptographic algorithm side channel analysis; the present invention introduces the multi-source adversarial idea, sets a basis for adversarial learning judgment, improves the multi-source modeling accuracy of the random model, and has higher parameter quality and lower cryptographic algorithm key recovery difficulty.

The invention discloses a construction method and device for an input ciphertext structure of a neural network differential divider. The method comprises the following steps of simulating a Speck encryption algorithm, constructing a ciphertext data set and constructing a symmetric cryptographic differential analysis algorithm based on deep learning. And step 2, optimizing the input ciphertext structure of the neural network differential partition device by using methods of random key decryption, key addition and the like. And step 3, carrying out a ciphertext pair distinguishing experiment on the Speck and Simon encryption algorithms by using the new ciphertext structure. According to the method, the ciphertext data structure input into the neural network differential partition device is optimized through the schemes of random key decryption, key addition and the like, high accuracy and high-round ciphertext distinguishing of reduced-round Speck and Simon encryption algorithms are achieved, the distinguishing round is successfully expanded by one round, and the high-quality differential partition device is provided for key recovery attacks. According to the method, the analysis capability of the lightweight symmetric encryption algorithm is greatly improved, and a new improved method and optimization thought are provided for cryptography research.

The invention relates to the field of cryptographic and multi-source side channel analysis, in particular to a cryptographic algorithm multi-source countermeasure side channel analysis method based on a random model. By introducing the thought of multi-source adversarial learning into the modeling process of the random model, the modeling precision of the random model is improved, and key recovery is more efficiently realized. According to the method, adversarial learning is carried out by using a noise source and an energy source, the conditional probability of normal distribution and KS test are introduced as adversarial learning judgment basis, a random model modeling parameter iteration mechanism is designed autonomously, and the parameter precision of a traditional random model is improved; according to the method, the mathematical formula is converted into a more intuitive mathematical formula, so that the precision of various methods related to a random model is improved, and the side channel analysis difficulty of a cryptographic algorithm is reduced; according to the method, the multi-source confrontation thought is introduced, a confrontation learning judgment basis is set, the multi-source modeling precision of the random model is improved, and the method has higher parameter quality and lower cryptographic algorithm key recovery difficulty.