51 results about "Key recovery" patented technology

Methods for database recovery for encrypted indexes are performed by systems and devices. A query with a decryption key is received from a client device, where the query modifies an encrypted index of a database using a secure enclave. When events requiring remedial actions for the database occur during the querying, some transactions of the query and later queries are deferred, and a remedial action is initiated that includes restarting the database. A determination of the remedial action being unsuccessful in recovering the encrypted index causes the action to be re-performed until another query having the decryption key is received whereupon the action is performed again to recover the encrypted index utilizing the decryption key. Deferred transactions are then performed with the decryption key. When a database restarts for access without secure enclaves, the encrypted index for the database is invalidated, and the remedial actions are otherwise completed or discarded.

The invention discloses a high-efficiency multi-authority responsibility investigation multi-party authorization method and device based on attribute encryption, and belongs to the technical field of cryptography and information security. A multi-authority attribute-based encryption mechanism is adopted to protect a responsibility investigation private key, a signer encrypts a signature share and generates a zero-knowledge proof; after verification and certification of the combiner, an encrypted share is aggregated in a ciphertext domain to generate an aggregated ciphertext, the block chain stores a hash abstract, and an authorization tracker decrypts the aggregated ciphertext through an attribute key recovery responsibility investigation private key to recover a threshold signature and a participant set, so that cryptology privacy protection, constant-level responsibility investigation efficiency, decentralized governance and reliable auditing are realized.

The application provides a medical information privacy protection method and device based on image double watermarking, and a medium. The method steps include: step S01. obtaining medical information to be protected and preprocessing to form binary ciphertext; step S02. mapping the binary ciphertext to a corresponding medical image to form a medical image with ciphertext, and generating a mapping key; step S03. inputting the medical image with ciphertext into a modal conversion network to convert it into a medical image with ciphertext in another modal, and using a PVT module to align the source domain and target domain semantics through self-attention and cross-modal attention in the modal conversion network; and step S04. in the recovery stage, inputting the medical image into the reverse recovery modal conversion network to recover the medical image, and using the mapping key to recover the medical information. The application can enhance medical information privacy protection based on double watermarking, while improving recovery accuracy, capacity and robustness.

Embodiments of the present application provide a key recovery method, device, system, storage medium and electronic device, wherein the method comprises: obtaining N sub-ciphertexts, wherein the N sub-ciphertexts are ciphertexts obtained by a second object encrypting N sub-keys using a target public key and respectively sending to N third objects, the N sub-keys are keys obtained by the second object fragmenting a target key, and the N sub-ciphertexts are respectively sent to a first object by the N third objects notified by the second object after the first object sends a first target request to the second object to request to recover the target key; and decrypting the N sub-ciphertexts using a target private key to recover the target key, wherein the target public key and the target private key are a key pair generated by the first object using a predetermined algorithm. Through the present application, the problem of low security of the key in the related art is solved, and the effect of improving the security of the key is achieved.

Vehicle-mounted system (1) for communicating with an external tool (2), wherein the vehicle-mounted system (1) comprises: a communication device (16); a tool key recovery device (11, S62-S64); and a communication controller (11, S65), wherein the vehicle-integrated system (1) and an external server (3) provide a vehicle communication system, wherein the external tool (2) stores a secret tool key, where the external server (3) stores information about an external tool, where the information about an external tool provides a public tool key and key identification information that are linked together, wherein the public tool key provides a public key that forms a pair with the secret tool key, wherein the key identification information provides identification information about the public tool key, wherein the communication device (16) communicates with the external server (3), wherein, when the external tool (2) requests a communication connection with the vehicle-bound system (1), the tool key acquisition device (11, S62-S64) sends the key identification information according to the external tool (2), which is a request source, to the external server (3) via the communication device (16), so that the tool key acquisition device (11, S62-S64) obtains the public tool key associated with the key identification information from the external server (3) via the communication device (16), wherein the communication controller (11, S65) performs cryptographic communication with the external tool (2) representing the request source using the public tool key obtained through the tool key acquisition device (11, S62-S64), wherein the communication controller (11, S65) performs the cryptographic communication with the external tool (2) in a public key encryption system using the public tool key, such that the communication controller (11, S65) shares a common key with the external tool (2), where the shared key provides cryptographic communication in a shared key encryption system, wherein the vehicle-mounted system (1) further comprises an update device (11, S67) for updating the common key, and wherein the update device (11, S67) generates an updated common key based on vehicle information.

The invention belongs to the field of power systems, and discloses a power emergency communication recovery method and a related device, and the method comprises the steps: recognizing a communication node corresponding to a power key recovery node based on a node coupling correlation model of a power network and a communication network, and forming a to-be-analyzed node; tracing power service communication links taking the nodes as starting points, and constructing a to-be-recovered communication node set; calculating the recovery importance degree of each node in the set, wherein the importance degree is obtained by weighted superposition of three types of indexes, namely coupling association strength, bearing service value and network hub attribute; and determining the recovery priority of each communication node according to the recovery importance and executing hierarchical recovery. Communication nodes strongly associated with key loads of a power grid are accurately identified, the recovery value of the communication nodes is quantitatively evaluated, a hierarchical recovery strategy with a clear priority is formed, limited emergency resources are guided to be accurately focused to core communication nodes, the problem that resource allocation and recovery effects are disjointed in a traditional strategy is solved, and the recovery efficiency is improved. And the pertinence and the overall efficiency of power emergency communication recovery are improved.

The invention discloses a certificate authorization private key recovery method and device, a storage medium and electronic equipment, and the method comprises the steps: sending a fragment obtaining request to a service cluster under the condition that an encryption key of a certificate authorization private key is to be recovered for the service cluster; obtaining multiple pieces of request response information returned by responding to the fragment obtaining request from the service cluster; verifying the request response information by using the public key list; under the condition that the request response information passes verification, key fragments are extracted from the request response information; and recovering the encryption key by using the extracted key fragment. By adopting the technical scheme, the problems of low security and the like in a certificate authorization private key recovery process in related technologies are solved.

This invention relates to the field of computer integrated control technology, specifically an integrated triggering method and system for one-key recovery of a computer in a power-off state. The method involves monitoring user operations under power-off conditions via hardware circuitry. Under the constraint of the Recovery module's anti-accidental touch measures, the method arbitrates and determines user-triggered actions, generating a valid trigger signal and writing it to the wake-up register. Combining an RC delay circuit and trigger sampling analysis of power-on voltage changes, the system automatically enters Recovery mode upon the next power-on without needing to access the operating system or BIOS. After the device is powered off, power data in the power domain is read from the coin cell battery, and the PG distortion signal is reconstructed in the frequency domain. Based on this signal, stable power-on screening and CLRTC physical trigger detection are performed, automatically clearing the real-time clock data when conditions are met. The System Reset module identifies the actual system crash state by constructing a power-on anomaly variable domain and automatically triggers a system restart upon detecting a Reset signal, thus achieving one-key maintenance and recovery of the computer in a crash state.

The present invention presents a key management system for handling cryptographic keys. The key management system comprises a computer device. The key management system is configured to be in data communication with at least one identity provider, IdP, server and at least one group of computing servers. The IdP servers is configured to send an authentication token to the key management system upon an authentication request from the key management system. The key management system is configured to generate an access ID related to said IdP servers. The key management system is configured to perform one or both of following: a) generate an encryption key from said access ID, b) send a decryption request to the group of computing servers, wherein the group of computing servers is configured to generate a decryption key and sending the decryption key or shares of the decryption key to the computer device or a selected device different from the computer device.

The invention discloses a hierarchical retracement processing method and system for security check CT (Computed Tomography) images. The method comprises the following steps: acquiring a security check CT image of a parcel to be checked and responding to user operation; the user performs sectioning, image processing, measuring or marking operations to generate a sequence of images; responding to a user retracement instruction, judging an operation type and executing a corresponding retracement strategy: if the operation type is not the data exchange type, calling screen snapshots in sequence to realize plane layer non-inductive retracement and video memory snapshots to recover real-time imaging; if the type is the data exchange type, quickly reconstructing a target image based on preloaded package data and an intermediate calculation result; and the user can operate again in the state after withdrawing until the result is satisfactory. Through the serialized recording operation process and the multi-level snapshot management, the precise and low-delay withdrawing of the security check CT image operation process is realized, the problems that the intermediate state cannot be backtracked, the withdrawing delay is high and the cross-parcel operation efficiency is low in the traditional one-key restoration are effectively solved, and the security check image discrimination efficiency and the passing experience are remarkably improved.

The invention relates to a key management method based on a KMS technology, and the method is characterized in that the method comprises the following steps: enabling a key management service KMS to generate a CMK key for a user in a client application based on the first login of the user; generating a DEK key in the client application and storing the DEK key in a safe area of a first device based on the first selection service provider point deduction for the first time when a user purchases a commodity for the first time; in the client application, enabling the KMS to encrypt the DEK key by using the CMK key, generating an encrypted DEK key and transmitting the encrypted DEK key to the client application; encrypting transmission data by using the DEK key in the client application; the encrypted DEK key and the encrypted transmission data are transmitted to the server of the service provider in the client application. According to the scheme, a CMK-DEK hierarchical architecture is adopted, a KMS manages a CMK to transmit an ID, and a DEK locally stores a security area to prevent a core key from being leaked; and AES-256-CBC is used for encryption, a server stores a ciphertext, and the DEK is destroyed after decryption. Key recovery, multi-device synchronization, compliance with laws and regulations, operation traceability, safety and experience balance and adaptation to high-safety scenes are supported.

The invention relates to a block cipher side channel analysis method based on experience accumulation and three-dimensional decision, and belongs to the technical field of cipher security analysis and side channel analysis. Aiming at the problems of large search space, low information utilization rate, computing power waste and the like in the traditional correlation coefficient energy analysis, the method provides an analysis framework combining a dynamic hierarchical screening mechanism and a cross validation strategy. The method comprises the following steps: randomly initializing each byte of a key to generate a candidate set; constructing a three-dimensional decision-making structure comprising a data layer, a statistical layer and a decision-making layer so as to record and analyze correlation coefficient distribution; screening conditions are automatically tightened through dynamic threshold attenuation, and the search range is gradually reduced; and adopting a multi-stage single-byte perturbation and cross validation strategy to carry out iterative optimization and ranking on each byte candidate value, and finally selecting an optimal key combination to carry out verification. According to the method, the success rate, robustness and convergence speed of side channel analysis are effectively improved, and the method is suitable for key recovery of block cipher.

The End-to-End Encryption and Hot Wallet Key Recovery Apparatuses, Processes and Systems (“E2EEHWKR”) transforms key backup request, key recovery request datastructure / inputs via E2EEHWKR components into key backup response, key recovery response outputs. A key backup request datastructure specifying a wallet private key, a private key backup server identifier, a PIN shard fracture scheme definition, and a plurality of PIN shard backup devices is obtained. A user security PIN is obtained and utilized to encrypt the wallet private key. A symmetric key is calculated from a public key associated with the private key backup server identifier and an app private key. The encrypted wallet private key is encrypted utilizing the symmetric key. The twice encrypted wallet private key is sent to a private key backup server. The user security PIN is encrypted utilizing an asymmetric keypair. Encrypted user security PIN shards are generated and sent to PIN shard backup devices.

The application relates to an artificial intelligence side channel analysis method and device based on cross-device incremental learning, applied to the field of information security password technology, and comprising the following steps: collecting side information when multiple modeling devices running symmetric password algorithms perform secret information related operations, then constructing a key leakage model, taking the Hamming weight of a secret intermediate value corresponding to each piece of side information as a label to construct a data set, using a memory sample playback strategy to sequentially train multiple data sets, obtaining a final neural network model for predicting corresponding secret intermediate value information according to side information, finally using the trained model to predict the intermediate value information to calculate the key, and completing key recovery; the final model trained by the scheme has stronger generalization ability and robustness when facing new target devices, effectively solves the bottleneck problem of cross-device side channel analysis, reduces the influence of device changes on the performance of the cross-device modeling type password side channel analysis method, and realizes efficient recovery of the key.

A first recovery key acquisition module (302) of a private key recovery system (1) acquires a first recovery key managed by a first service in which a first private key stored in a user terminal of a user is used. A second recovery key acquisition module (303) acquires a second recovery key managed by a second service different from the first service. A private key recovery module (304) recovers the first private key based on the first recovery key and the second recovery key.

The embodiment of the application discloses an IoT device anomaly identification and isolation method and device, electronic equipment and a storage medium, and relates to the technical field of network security and edge computing, wherein the method comprises: when an IoT device accesses a gateway and utilizes edge computing to perform traffic fingerprint analysis, recording communication characteristics and integrating them into a behavior benchmark atlas. In device use, current network traffic data is continuously captured, compared and analyzed with the behavior benchmark atlas in real time, and it is judged whether there is an anomaly. If the device is abnormal, an abnormal traffic threshold is set, an alarm mechanism is triggered, and an isolation instruction is generated and pushed to the underlying router. The router dynamically adjusts network configuration by using micro-isolation technology, and migrates the abnormal device to an isolated VLAN to limit network access. The isolated device information and reasons can be visually displayed through a development management interface. After the user confirms the safety of the device and performs a one-key recovery operation, the device is migrated back to the main network and the permission is restored. The application effectively solves the problem of IoT device anomaly processing in the prior art.

The Computationally Efficient Transfer Processing, Auditing, and Search Apparatuses, Mechanisms, Mediums, Processes and Systems (“SOCOACT”) transforms transfer of assets (TOA) initiation request, brokerage order request, blockchain transaction request, agency action request, borrow transaction request, contract deployment request, transaction signing request, key backup request, key recovery request datastructure / inputs via SOCOACT components into TOA confirm., brokerage order confirm., transaction confirm., agency action notif., borrow transaction init notification, borrow transaction sync notification, contract deployment response, transaction signing resp., key backup resp., key recovery resp. datastructure / outputs. A plurality of transaction record datastructures is received. Transaction amount availability is verified. The transaction record datastructure is cryptographically recorded in a blockchain. Received source address and destination address are hashed. A list representation of the matrix datastructure is generated, where each entry in the list comprises a tuple having the source wallet address, the destination wallet address, the transaction amount and the timestamp.

The application discloses a kind of unmanned aerial vehicle self-organizing network group key management methods supporting member dynamic joining, quitting and key recovery, belongs to unmanned aerial vehicle self-organizing network security communication technical field.The method includes: system initialization;UAV node is registered, and based on physically unclonable function generation and equipment binding key material;Utilize Cuckoo filter to quickly screen legal members;Two-way authentication and key exchange process are executed between adjacent nodes and establish edge session key;Group key derivation is realized based on edge session key;When node is lost, group key recovery is executed;When member dynamic joins, quits or is revoked, group key update is executed.The method can reduce authentication and key management overhead, improve the processing efficiency when node recovery and member change, and ensure the forward security, backward security, integrity and confidentiality of group communication.

Secure AI authentication is implemented for selectable environments with a selectable combination of ML models processing selectable input credentials, e.g., biometric and / or non-biometric credentials, such as a key associated with a secure model, user location information, a user gesture credential, and / or a user movement pattern credential. ML models may be selectively applied in serial or parallel in a selected authorization procedure. ML model applicability may vary based on one or more parameters, such as time of day, or one or more detected input credentials, such as user gestures, secure model keys, or biometric voice or face recognition. For example, AI authorization (e.g., for biometric credentials) augmented with an ultra-wideband (UWB) communication protocol provides robust user authentication via a native cryptographic exchange and accurate user location credentials for proximity and geo-fenced confirmation of other user credentials, such as biometric credentials, thereby preventing false positives by spoofing.

The application discloses a key recovery method and system based on password strength distribution and threshold combination, relates to the password management and cryptography field, and comprises four stages of initialization, recovery password registration, recovery password revocation and key recovery. The initialization stage constructs secret sharing public parameters and a recovery bucket storage structure. In the registration stage, a candidate recovery password is assigned with a corresponding number of real shares according to the strength of the candidate recovery password, random data is filled to form fixed-length recovery data, and the recovery data is stored in a corresponding recovery bucket in an encrypted manner. In the revocation stage, the recovery permission of a specified recovery password can be cleared, and the storage state is synchronously updated. When a user forgets a master password, an effective share is extracted by inputting a registered recovery password, and the password library key is reconstructed after the cumulative threshold is reached, so that the password library access permission is recovered. The application does not require the user to additionally remember a special recovery password, considers the recovery availability and the cryptographic security, and has good cloud observation resistance.

Systems, methods, apparatuses, and computer-readable media for key recovery based on contactless card cryptograms. A server may receive, from an application, a request to recover a private key for a digital wallet, the request includes a first cryptogram generated by a contactless card. The server may decrypt the first cryptogram based on a key for the contactless card. The server may determine, based on the decryption, a unique identifier of the contactless card and a diversification factor associated with the digital wallet. The server may generate the private key based on the unique identifier and the diversification factor. The server may transmit the private key to the application via a network.

The invention discloses a fault-train-based Ascon differential fault analysis method, which comprises the following steps of: when Ascon runs to the last round of p replacement operation of a final determination stage, injecting a five-bit fault into a specified five-bit S box, and acquiring a generated error authentication tag; calculating a difference value between the correct authentication tag and the wrong authentication tag; performing inverse linear transformation operation on the difference value to isolate and extract the output difference of the specified 5-bit S box; establishing a candidate set of input values of a specified 5-bit S box by solving a difference equation with output difference and injection fault values as conditions; on the basis of a fault value in fault-train, the above steps are executed multiple times, the candidate set is shrunk to determine a unique input value, and on the basis of the input values of all the five-bit S boxes and a correct authentication tag, an encryption key is recovered through inverse operation; and designing the Ascon according to an encryption key recovery result.

The invention discloses a one-key recovery method and system for an equipment screen, and relates to the technical field of industrial automation equipment. The system comprises an MCU control module which identifies a one-key recovery signal, issues a shutdown and parameter recovery instruction, and triggers a recovery event when it is detected that a recovery key is pressed for a long time for more than a set time; the electric control module receives an MCU instruction, stops equipment operation, starts data recovery, recovers parameters from different data sources according to hardware differences, and restarts the equipment after recovery is completed; and the data storage module manages the two storage areas of the plug-in memory, and the data of the two storage areas are alternately stored. Data backup is achieved through the two alternately-stored storage areas of the plug-in memory, it is ensured that the last complete data can still be called under the abnormal condition, and the data loss risk caused by a single-point fault is avoided; and in combination with an integrity mark and a CRC verification mechanism, the accuracy and integrity of data are doubly verified, and the problem of parameter abnormity caused by storage errors is effectively prevented.

The application provides a memory key recovery prevention method, and belongs to the field of encryption security technology. The application eliminates historical charges through 5-12 cold start coverings before the key is used. A 30-180 second cycle shift is established to realize dynamic migration. After the key is used, hot area address segments with an access frequency exceeding 50 times per unit time are extracted, fragmented and segmented according to 8B-64B granularity, and a residual minimization mechanism based on the GMRES algorithm is used to calculate the covering sequence. Deep erasing verification is performed to ensure that the similarity of residual data is lower than 5%. An integrity verification report is constructed by changing the tracking sequence, and the technical problem that the residual charge mode of the key data in the memory after use can be recovered by a cold start attack is solved.

The invention relates to the technical field of identity authentication, and relates to an SM9-based traceable blind signature data protection system. And the server initializes and publishes the data protection parameters. And the server determines a private key and a data tracking label of the first terminal according to the data protection parameter, and sends the private key and the data tracking label to the first terminal. And the first terminal blinds the to-be-transacted data according to the data protection parameter, the private key of the first terminal and the data tracking tag to determine blind data. And performing blind signature on the blind data through an SM9 algorithm. And generating a blind solving key of the blind data after blind signature. And sending the blind data after blind signature to a server. And the second terminal purchases the blind data through the server. And the second terminal sends the decryption request and the purchase voucher to the first terminal and receives the blind decryption key sent by the first terminal. And recovering the blind data after blind signature according to the blind resolution key. It can be ensured that the server and the second terminal cannot know the original data content before obtaining the blind decoding key.

The invention provides a medical information privacy protection method and device based on image double watermarks and a medium. The method comprises the steps that S01, medical information to be protected is acquired and preprocessed to form a binary ciphertext; s02, mapping the binary ciphertext into a corresponding medical image to form a medical image with the ciphertext, and generating a mapping key; s03, inputting the medical image with the ciphertext into a mode conversion network, converting the medical image into a medical image with a ciphertext in another mode, and aligning source domain and target domain semantics through self-attention and cross-mode attention by the mode conversion network by using a PVT module; and step S04, in a recovery stage, inputting the medical image into the reverse recovery mode conversion network, recovering the medical image, and recovering the medical information by using the mapping key. According to the invention, medical information privacy protection can be enhanced based on a double-watermark mode, the recovery precision and capacity are improved, and the robustness is enhanced.

The present application relates to the technical field of information security, and particularly relates to a private key recovery method for an NTRU-HRSS key encapsulation mechanism, in a managed device scenario, an authorized party submits an authorization credential to a management party, the management party determines the authorized party as an authorized key encapsulation party, and the authorized key encapsulation party recovers a private key sequence, including: presetting recovery auxiliary information; encrypting the recovery auxiliary information through a public key of a de-encapsulation party device to obtain a first ciphertext, constructing N second ciphertexts based on the first ciphertext and a variable parameter; sending the N second ciphertexts to the de-encapsulation party device, so that the de-encapsulation party device outputs corresponding N first session keys based on the N second ciphertexts; determining a value of the variable parameter based on the N first session keys; determining a polynomial; and recovering the private key sequence based on the recovered private key sequence and the updated polynomial, so that the management party performs device takeover, migration or compliance processing through the recovered private key in the managed device scenario.

This invention discloses a group authentication and key negotiation method and system based on PUF, relating to the field of identity authentication technology. The method includes system initialization, drone registration, group authentication and key negotiation, secret share calculation and verification, key recovery, threshold adjustment, and dynamic group adjustment steps. This invention employs the aforementioned PUF-based group authentication and key negotiation method and system, achieving reliable drone identity authentication and secure negotiation of group session keys without relying on a trusted execution environment or dedicated security hardware modules, by introducing PUF and a verifiable secret sharing mechanism.

In this information processing system, a server set distributes and stores a distributed registration information set that includes a distributed template set generated from biometric information for registration. A key restoration terminal generates certification information by using input information for key restoration, and transmits the certification information to the server set. On the basis of the distributed registration information set and the certification information, the server set determines whether the distributed template set for key restoration determined from the distributed template set can be transmitted to the key restoration terminal, and if the key restoration terminal successfully receives the distributed template set for key restoration, the key restoration terminal restores a private key by using the distributed template set for key restoration and the input information for key restoration.

The application discloses an anonymous broadcast encryption and multi-party authentication transmission method based on an extended chaotic mapping and belongs to the technical field of information security. The method comprises the following steps: 1, system initialization: generating a master key and a corresponding public key; 2, key generation: a node calculates a private key by using an extended Chebyshev polynomial in combination with the master key and identity information of the node; 3, signing and encrypting: constructing broadcast information by using an extended chaotic mapping in combination with a Lagrange interpolation polynomial to generate a signature; 4, decrypting the signature: a receiver calculates relevant parameters and verifies the signature, recovers plaintext by using a self key after verification, and terminates decryption if the verification fails; and 5, building a relay transmission network: guaranteeing the anonymity and untraceability of a sender and a receiver. The method has high calculation efficiency and low communication overhead, meets the anonymity, open verifiability, confidentiality and unforgeability, can effectively resist ciphertext disturbance and provides security guarantee for sensitive information transmission.