36 results about "Key sharing" patented technology

The invention discloses a unified password service method and system supporting cross-level sharing. The method comprises the following steps: generating a root key in a hardware security module HSM cluster; generating a key encryption key KEK in the HSM cluster based on the root key; generating a data encryption key DEK based on the KEK; the API gateway receives an encryption request sent by the service application, and performs identity authentication and authority authentication; the cryptographic operation service instance calls a key management service (KMS); the KMS obtains the stored corresponding encrypted DEK and the associated KEKID from a distributed database according to the target key ID; decrypting the encrypted DEK by using the KEK corresponding to the KEKID through the HSM; the KMS encrypts the plaintext data by using the plaintext DEK to obtain ciphertext data; the superior tenant grants the access permission of the target key to the corresponding subordinate tenant through the key sharing interface, and a sharing relation is recorded in a key permission table; according to the invention, key plaintext storage and exposure risks are fundamentally eliminated.

This application provides a dynamic path generation method, relating to the field of information security, and applicable to the fintech field. The dynamic path generation method includes: responding to a connection request initiated by a client, negotiating and generating a shared key with the client; temporarily generating the shared key during each negotiation; performing a hash operation on the shared key to obtain a hash value; truncating a predetermined number of bits from the hash value as a dynamic path identifier; concatenating the dynamic path identifier and a resource base path to obtain a dynamic path; the dynamic path pointing to a specific resource stored on the server. This application also provides a dynamic path generation apparatus, device, and program product, as well as a resource access method and apparatus.

A system for managing and using digital financial assets, such as cryptocurrency uses multiple independent devices that mutually cooperate to control cryptocurrency assets in a secure manner. Each of these devices may store a unique private key associated with the cryptocurrency assets, which may be configured such that a certain minimum number of these private keys are required to transfer the cryptocurrency assets. The use of multiple private keys spread across multiple distinct devices may reduce the likelihood of loss stemming from a hardware failure or reduce the likelihood of an attacker successfully gaining access to the cryptocurrency assets. In addition, selection of the devices to be used for storing these private keys, as well as how many private keys are required to authorize a transaction, may be tailored to balance a user's preferences for reliability of access versus security and for third-party custody versus self-custody.

Disclosed is a digital key sharing method, comprising: requesting a server to create a digital key pre-sharing session, the request comprising location information, a verification code and a timestamp of an intelligent device; in response to the creation of the digital key pre-sharing session, information of matched receiver equipment returned by the server is received, and the matched receiver equipment is the receiver equipment which is detected by the server and inputs the same verification code within a preset range of the intelligent equipment within a preset time period; generating a digital key sharing session in response to the selection of the target recipient device; and in response to the generation of the digital key sharing session, requesting the server to issue the digital key of the vehicle to the target receiver device. The invention further relates to a digital key sharing device, intelligent equipment and a medium.

The vehicle digital key sharing service method according to one embodiment includes a digital registration step in which a management server generates a terminal digital key and a vehicle digital key after user authentication in response to a digital key registration request through a dedicated application of a mobile terminal and the mobile terminal stores the terminal digital key in a secure world that is separated from a normal world and a digital key using step in which an authentication token is generated using the terminal digital key stored in the secure world when the mobile terminal approaches or tags a vehicle and a vehicle device locks or unlocks a door of the vehicle by activating the vehicle digital key, which is registered from the management server, to validate the authentication token.

A system for managing an access to an asset (106, 108) is provided. A digital key to the asset (106, 108) is generated and synchronized between a first user device (104a) of a first user (102a) and an access control device (110a, 110b) that controls the access to the asset (106, 108). A key-sharing request is initiated by the first user device (104a) to grant a second user (102b) the access to the asset (106, 108). Based on the key-sharing request, a server (112) communicates the digital key to a second user device (104b) of the second user (102b). When the second user device (104b) is within a detection range of the access control device (110a, 110b), the access control device (110a, 110b) receives the digital key from the second user device (104b), validates the digital key, and grants the second user (102b) the access to the asset (106, 108) for an access duration defined in the key-sharing request.

The invention provides a digital car key sharing and revocation method, system and device and a computer medium. The method comprises the following steps: establishing a state synchronization channel among a car end, a cloud end and at least two terminal devices; a first terminal device sends a sharing request to a cloud end, and the cloud end generates an intermediate voucher with a first life cycle; the first terminal device calls a vehicle owner private key stored locally to sign the intermediate voucher, and sends the signed intermediate voucher to the cloud; after the cloud verifies that the signed intermediate voucher is valid, a sub-voucher with a second life cycle is signed and issued to the second terminal equipment; when the first terminal device, the second terminal device, the vehicle end or the cloud end triggers a revocation event, the cloud end generates a revocation instruction and broadcasts the revocation instruction to the vehicle end and all the terminal devices through the state synchronization channel, and the vehicle end and all the terminal devices synchronously delete the digital vehicle key object corresponding to the sub-voucher after receiving the revocation instruction. And the respective local digital car key state is updated.

A method for sharing data encryption keys among a plurality of storage systems is disclosed. The method generates, by a first storage system, a data encryption key for encrypting data sent from the first storage system to cloud storage. The method stores the encrypted data in the cloud storage in the form of an encrypted data object. In certain embodiments, the first storage system stores an Internet Protocol (IP) address of a second storage system belonging to a same key sharing network as the first storage system. The method replicates, from the first storage system to the second storage system, the data encryption key. The second storage system retrieves the encrypted data object from the cloud storage and decrypts the encrypted data in the encrypted data object using the data encryption key received from the first storage system.

The application belongs to the field of cloud computing security, and discloses a trajectory data-based outsourcing cloud environment privacy protection infection mode mining method, which is divided into two stages: the first stage: trajectory data preprocessing, encryption and outsourcing, first, the data owner pre-processes the trajectory data set to be uploaded, generates a corresponding encoding matrix for the trajectory data of each object, then generates a secure index matrix for the encoding matrix through a strong anti-collision one-way hash function, and finally uploads the encrypted trajectory data and the generated secure index matrix to a cloud server, and shares the key with authorized users; the second stage: a privacy protection infection mode mining method, first, the authorized user sends the infected object number to the cloud server, the cloud server performs infection mode mining after receiving the infected object number, and returns the mining result to the authorized user. The application can ensure high accuracy of the mining result, improve the mining efficiency, and is easy to implement.

Implementations of the present disclosure are directed to star distributed key generation (SDKG) between computing devices for private key sharing in cryptographic networks, where a computing device is the center of a star graph of multiple computing devices and functions as a 2-out-of-3 DKG protocol that can is robust against multiple types of corruptions.

A method and system for secure multi-party computation reduces the number of parties participating in each partition of a computation circuit from a total party count N to one plus a checkpoint key share count. A controller partitions an overall secure multi-party computation circuit such that parts of the circuit that directly use each private input value are partitioned separately. For each partition, the controller assigns an input-providing computer and a plurality of key holder computers. Within each secure multi-party computation protocol instance, shares of a secret key are generated and distributed among the key holder computers. The partition output is encrypted using the secret key to produce encrypted checkpoint data, which is written to external storage. A subsequent protocol instance decrypts the checkpoint data using the key shares, enabling continued computation with a different input-providing computer while maintaining security through distributed key share custody.

This invention discloses a method and related apparatus for remotely sharing car keys. The method, applied to a borrower's client, includes: upon receiving a master key from a cloud server, generating a session key request, wherein the master key is generated by the cloud server upon receiving a sharing request from the car owner's client; sending the session key request to the vehicle, wherein the session key request instructs the vehicle to generate a session key; upon receiving the session key, generating a security sequence based on the session key and the master key, generating a UWB data frame based on the security sequence, and sending the UWB data frame to the vehicle using UWB ranging, so that the vehicle can verify the UWB data frame based on the master key sent by the cloud server. The remote car key sharing method and related apparatus of this invention improve the security of remote car key sharing.

This reduces the risk of profiles for WD drives being downloaded by other WD drives. [Solution] The management server includes notification means for notifying the WD of first information including access information indicating a storage server that the WD accesses to download a profile, and identification information for identifying the profile in the storage server; generation means for generating a shared value to be shared with the WD using a key sharing algorithm; and configuration means for configuring the storage server so that when the WD accesses the storage server based on the first information, the storage server requests the wireless device to provide the shared value or a value based on the shared value.

A system and method are provided for encryption key management, transparent decryption, and secure key sharing within a secure distributed storage environment. A master encryption key is generated for a user and encrypted using a wrapper key. Database keys are generated and encrypted using the master key, and then stored at a user-associated storage instance. In response to a query, the encrypted database key is decrypted using the master key and used to decrypt encrypted data. Masking policies may determine whether decrypted or encrypted data is returned to the user. Format-preserving encryption may be applied using a tweak value. Encrypted keys may be securely shared across independent encryption domains by re-encrypting under a temporary session master key. At no point is raw key material exposed to untrusted systems. The techniques improve key lifecycle security, enable policy-based access, and support multi-tenant data environments such as cloud-hosted data warehouses.

A method and a system for providing a secure communication are disclosed. The method includes receiving a request to install an application for the secure communication between a first entity and a second entity. Next, the method includes generating a certificate for the secure communication between the first entity and the second entity. Next, the method includes extracting a first key and a second key from the certificate. Next, the method includes sharing the first key with the second entity for encryption of a message in the secure communication. Next, the method includes receiving the encrypted message from the second entity. Next, the method includes decrypting the encrypted message using the second key. Thereafter, the method includes displaying the decrypted message in the application.

The invention discloses an asynchronous Internet of Vehicles authentication and key negotiation method based on a block chain. The method comprises the following steps: selecting related parameters, a key, a hash function and block chain configuration in a network; the vehicle and the cloud server are registered through a registration mechanism, and a public key and registration information are uploaded on the block chain; the vehicle initiates an authentication request to a road side unit (RSU), and the RSU performs identity authentication by using a block chain network and returns a response; after identity verification is passed, session key negotiation is carried out between a vehicle and an RSU through a block chain network, after key negotiation is completed, message authentication and key sharing are carried out through the block chain network, the security of the key negotiation process is ensured, and the security of the key negotiation process is ensured by using the decentration characteristic of the block chain. According to the invention, the single-point fault problem of a traditional centralized system is effectively avoided, and the safety and reliability of the system are improved.

Implementations of the present disclosure are directed to a universal distributed key generation (DKG) between computing devices for private key sharing in cryptographic networks. The universal DKG of the present disclosure overcomes deficiencies of traditional approaches to DKG in generating key pairs. The universal DKG provides time- and resource-efficient generation of cryptographic keys for multiple elliptic curves to enable entities to transact in multiple cryptographic networks. More particularly, the universal DKG simplifies management of cryptographic keys, while accelerating the key generation process without compromising security.

The disclosure relates to a method of updating an immobilizer token. A target device according to various embodiments of the disclosure may generate a first temporary encryption key pair for encryption and decryption of an immobilizer token, may transmit, to an immobilizer token issuance device, an immobilizer token issuance request including a first temporary public encryption key of the generated first temporary encryption key pair, may receive, from the immobilizer token issuance device, an encrypted immobilizer token and a second temporary public encryption key generated by the immobilizer token issuance device, may decrypt the encrypted immobilizer token by using the second temporary public encryption key and a first temporary private encryption key of the first temporary encryption key pair, and may store the decrypted immobilizer token in a confidential mailbox of the digital key in a secure element.

The present disclosure provides a digital vehicle key sharing method and apparatus and a storage medium. The method comprises: sending a request message to a cloud server of a vehicle, wherein the request message is used for requesting to initiate digital vehicle key sharing; receiving a first CSR returned by the cloud server; signing the first CSR on the basis of a private key of a vehicle key certificate of a vehicle owner device to obtain a first certificate, wherein the first certificate comprises digital vehicle key information shared by the vehicle owner device to a friend-end device; and storing the first certificate to the cloud server. According to the present disclosure, the asynchronization of vehicle key certificate sharing is realized, so that the digital vehicle key is asynchronously shared to the friend-end device, thereby increasing the sharing success rate of the digital vehicle key, and achieving high availability.

A sender system is equipped with an optical transmitter that transmits an encoded optical signal at a predetermined strength via an LOS communication channel, and a key distillator that generates a cryptographic key from a random bit sequence of the optical transmitter by a key distillation processing via the authenticated public communication channel. A legitimate receiver is equipped with an optical receiver that receives the optical signal from the optical transmitter via the LOS communication channel, and a key distillator that generates a cryptographic key from the random bit sequence from the optical receiver through a key distillation processing via the authenticated public communication channel.

The application provides a sharing method and system of a digital vehicle key and a readable medium. The method comprises: a first mobile terminal sending a key sharing request to a vehicle server; the vehicle server generating key sharing information according to the key sharing request and sending the key sharing information to the first mobile terminal, so that the first mobile terminal sends the key sharing information to a second mobile terminal; the second mobile terminal sending the key sharing information to a terminal server; and the terminal server requesting a digital vehicle key from the vehicle server according to the key sharing information and sending the digital vehicle key to the second mobile terminal. By connecting the vehicle server and the terminal server, the second mobile terminal communicates with the terminal server to realize sharing of the digital vehicle key, the digital vehicle key and the key function of the terminal manufacturer can be multiplexed, the sharing process of the digital vehicle key is simplified, and the convenience of sharing of the digital vehicle key is improved.

A method of quantum key distribution making use of 2-qubit entanglement, by which one entangled qubit is sent from an operator O to Alice and the other entangled qubit is sent from operator O to Bob, making for key-sharing among three parties (multi-user quantum key distribution, i.e. MU QKD). Alice and Bob each measures a respective sequence of qubits randomly along either one of two states, records the measurements in a respective list, and encodes the bits in an encoded list. The encoded lists are sent to operator O for entanglement to be verified with the CHSH inequality. Bob's verified list is sent to Alice and vice-versa, allowing Alice and Bob to further verify correlation. Non-entangled bits are rejected until Alice and Bob have a similar key, being a reconciled quantum-based key as sought.

The invention provides a digital car key sharing method and device and a storage medium. The method comprises the following steps: determining a target wearable device where an effective digital vehicle key is located; wherein the target wearable device is a wearable device corresponding to the same account as the terminal device; and sending the digital car key to be effective to the target wearable device, so that the digital car key is effective on the target wearable device. The digital car key can take effect on the wearable device, the carrier for storing the digital car key is expanded, the portability of the digital car key is improved, and the usability is higher.

This invention discloses a digital key sharing method, apparatus, smart device, and medium. The method includes: a vehicle owner's device identifying a target friend's device based on an NFC channel and establishing a near-field secure communication channel with the target friend's device; detecting whether preset sharing confirmation conditions are met; and if the preset sharing confirmation conditions are met, sending shared key information to the target friend's device through the near-field secure communication channel; the shared key information carries application information for retrieving the shared key, and the target friend's device executes a preset shared key retrieval process according to the application information. This invention achieves digital key sharing through near-field interaction, offering high security and convenient operation, and can also provide users with a refreshing sharing experience through animated feedback.

Implementations of the present disclosure are directed to star distributed key generation (SDKG) between computing devices for private key sharing in cryptographic networks, where a computing device is the center of a star graph of multiple computing devices and functions as a 2-out-of-3 DKG protocol that can is robust against multiple types of corruptions.

The present disclosure relates to a key exchange method and device based on integrable polynomials. The method comprises: a first terminal acquiring a target prime number, a target simple Lie algebra, and a target array; the first terminal generating a private key of the first terminal; on the basis of the target prime number, the target simple Lie algebra, the target array, and the private key of the first terminal, the first terminal using a polynomial mapping to generate a public key of the first terminal; the first terminal sending the public key of the first terminal to a second terminal; the first terminal receiving a public key of the second terminal; and, on the basis of the public key of the second terminal, the target prime number, the target simple Lie algebra, and the private key of the first terminal, the first terminal using a polynomial mapping to generate a shared key, the shared key being used for communication between the first terminal and the second terminal. In the present disclosure, by using polynomial mappings to construct a high-dimensional key exchange protocol, the advantages of high efficiency, security, and short public keys are achieved.

The embodiment of the application provides a data deletion method, device and equipment and a storage medium. The method first encrypts data and divides the data into blocks, converts the data ciphertext after the division into a binary form, and performs an inversion process, so that the public cloud does not store the real data ciphertext, and the ciphertext key is stored in the private cloud by using a shamir key sharing algorithm, self-key management is realized, a third-party auditing agency is not used, and the risk of data leakage is reduced. When a user wants to delete data, the user only needs to delete the key ciphertext corresponding to the data ciphertext in the main storage node. The application uses the key ciphertext deletion and the special data ciphertext processing mode to realize trusted deletion of cloud data, especially for a hybrid cloud architecture, security access of user data is guaranteed, and the security of data storage is improved.

The invention discloses an unmanned aerial vehicle-based reservoir safety intelligent inspection method and system, and the method comprises the steps: transmitting entangled photons to an unmanned aerial vehicle cluster, generating a shared key and channel quality parameters through quantum state chromatography, and collecting laser point cloud data and visible light image data; encoding the laser point cloud data into a quantum state by using a shared key and a channel quality parameter, converting the visible light image data into a quantum image state, and performing time synchronization through quantum entanglement broadcast to generate an encrypted quantum data stream; calculating an environment interference parameter tensor according to a channel quality parameter, carrying out vortex waveguide error correction coding on the encrypted quantum data stream to generate a redundant coding data packet, extracting a quantum state fidelity parameter, and mapping the quantum state fidelity parameter to a Riemann space to generate a routing decision matrix; according to the method, entangled photons are prepared and transmitted through quantum key distribution, so that secure key sharing among unmanned aerial vehicle clusters is realized, and an encryption basis is provided for quantum communication.

The embodiment of the invention discloses a vehicle control method and device based on a shared vehicle key, equipment and a medium. The method comprises the steps that a vehicle owner device requests an SBFD to pull up a DK Server for vehicle binding authorization, so that the SBFD hosts a key sharing permission, the permission is achieved based on a hosting voucher of the DK Server, the hosting voucher is obtained by the vehicle owner device based on a vehicle owner private key and a hosting public key signature generated for the DK Server, the vehicle owner device initiates a key pre-authorization request to the SBFD through a service cloud, and the SBFD sends a key sharing request to the SBFD through the key sharing request. Generating a temporary sharing key; the temporary key certificate is generated by signing a temporary public key generated by the temporary vehicle control end by the DK Server based on a trusteeship private key; and the vehicle authenticates the temporary vehicle control terminal based on the trusteeship voucher and the temporary key voucher, so that vehicle key sharing based on business requirements can be flexibly realized, and safe and flexible vehicle control experience is realized.