95 results about "Key sharing" patented technology

Backup and recovery of multi-party computation (MPC) security data utilized to secure digital assets and transactions thereof can enhance user confidence and user experience in digital asset transactions. Example MPC security data can include cryptographic keys and key shares utilized with a N×M MPC signature and validation framework. A computing device participating in generation of MPC secure data can retain a segment of the MPC secure data and can encrypt and store an encrypted segment at a second device. A recovery service or recovery application at the second device can facilitate recovery of the MPC secure data segment at the computing device, or at an additional device not involved in generation of the MPC secure data. The recovery service or application can facilitate recovery of the MPC secure data segment even in the event the computing device is lost.

The invention discloses a key sharing and security detection scheme based on an intelligent electric meter, and aims to solve the problems that an untrusted electric meter in an intelligent power grid is difficult to identify effectively, the detection scale is uncontrollable and the communication security is insufficient. According to the scheme, the elliptic curve cryptography, the threshold secret sharing mechanism and the physical unclonable function are combined, and hardware-level binding of the unique identity of the equipment and the secret key is achieved in the registration stage. Through a threshold password mechanism, a plurality of intelligent electric meters cooperatively participate in key reconstruction and encryption communication, and the intelligent electric meters can still work normally when part of the electric meters fail or are broken through. The center node can actively identify a fault or a malicious ammeter and dynamically adjust a communication strategy according to the integrity and correctness of the feedback information. Meanwhile, the scheme supports dynamic identity updating and integrity verification, and effectively resists modeling attacks, Sybil attacks, replay attacks and DoS / DDoS attacks. According to the invention, secure identity authentication, reliable key distribution and efficient anomaly detection are realized, and the security of smart grid terminal communication is improved.

Techniques and methods are described to generate a shared secret key using channel characteristics between a transmitting device and a receiving device. A public key is transmitted to a communication device over a first wireless channel and a second wireless channel that is different from the first wireless channel. From the communication device, a first signal and a second signal both carrying the public key are received over the first wireless channel and the second wireless channel, respectively. Based on the first signal and the public key, a first channel response is calculated and, based on the second signal and the public key, a second channel response is calculated. The secret key is determined based on the first and second channel response. In this way, the generation of a channel-based shared secret key becomes more secure and robust against eavesdropping of illegitimate users, allowing for secure communication.

Methods, systems, and devices for key management are described. A party having a key share of multiple key shares of a cryptographic key may encrypt a key share via a public threshold encryption key. The party may transmit, in accordance with a multi-party computation (MPC) operation, requests to multiple parties having private key shares of a private threshold decryption key corresponding to the public threshold encryption key. The party may receive multiple partial decryption results from a subset of the parties having the private key shares of the private threshold decryption key. The party may combine the partial decryption results to generate the key share and execute a portion of the MPC operation using the generated key share. Executing the portion of the MPC operation may cause a key share refresh operation for the key share of the cryptographic key.

The present disclosure provides a multi-device assistive identity verification method and system. The method includes: receiving an identity key allocation request and an identity key sharing request of a user; and allocating and storing an identity key, and sending the identity key to the user and a sharer. The method further includes: when a transaction request of the user is received, inviting the user and the sharer to assist in confirmation, and comparing tokens to perform identity verification.

The invention relates to the technical field of near field communication, in particular to an NFC card encryption transaction process based on certificate exchange. The existing NFC card encryption transaction process has the problems of insufficient security, weak tamper-proof capability, limited applicability and the like. According to the invention, by introducing a dynamic key negotiation mechanism based on certificate exchange, the security, flexibility and communication efficiency of NFC card encryption transaction are improved. The technical scheme of the invention mainly comprises the following steps of: using a temporary key pair, generating a pair of new keys in each transaction, and avoiding a fixed key; verifying the identity through a public key certificate based on a secret key exchange mechanism of the certificate; the dynamic generation of the AES session key improves the communication efficiency through a key sharing protocol. Through the technical scheme, the security is remarkably improved, the key management is simplified, the communication efficiency is improved, the identity verification is enhanced, the application range is expanded, the implementation cost is reduced, and a comprehensive security guarantee is provided for the encrypted transaction of the NFC card.

The invention discloses a unified password service method and system supporting cross-level sharing. The method comprises the following steps: generating a root key in a hardware security module HSM cluster; generating a key encryption key KEK in the HSM cluster based on the root key; generating a data encryption key DEK based on the KEK; the API gateway receives an encryption request sent by the service application, and performs identity authentication and authority authentication; the cryptographic operation service instance calls a key management service (KMS); the KMS obtains the stored corresponding encrypted DEK and the associated KEKID from a distributed database according to the target key ID; decrypting the encrypted DEK by using the KEK corresponding to the KEKID through the HSM; the KMS encrypts the plaintext data by using the plaintext DEK to obtain ciphertext data; the superior tenant grants the access permission of the target key to the corresponding subordinate tenant through the key sharing interface, and a sharing relation is recorded in a key permission table; according to the invention, key plaintext storage and exposure risks are fundamentally eliminated.

An apparatus for a digital vehicle key sharing server includes interface circuitry and processing circuitry. The processing circuitry is configured to obtain, via the interface circuitry, a request for sharing a digital vehicle key for one or more vehicles to a second device from a first device. The processing circuitry is further configured to determine whether the second device specified by the request is a user device or a server. The processing circuitry is also configured to process the request for sharing the digital vehicle key based at least in part on whether the second device specified by the request is a user device or a server.

A communication system according to one embodiment is a communication system including a plurality of communication apparatuses, in which each communication apparatus includes: an application program configured to perform encrypted communication with another communication apparatus; a protocol conversion unit configured to transmit a message representing a predetermined procedure when a key request for a shared key to be used in the encrypted communication is received from the application program; a state management unit configured to receive a message from the protocol conversion unit to manage an execution state of the procedure, and to transmit the message to a protocol driver supporting a predetermined key sharing protocol; and a protocol driver configured to request a key sharing system that executes the key sharing protocol, to generate the shared key, when the message is received from the state management unit.

This application provides a dynamic path generation method, relating to the field of information security, and applicable to the fintech field. The dynamic path generation method includes: responding to a connection request initiated by a client, negotiating and generating a shared key with the client; temporarily generating the shared key during each negotiation; performing a hash operation on the shared key to obtain a hash value; truncating a predetermined number of bits from the hash value as a dynamic path identifier; concatenating the dynamic path identifier and a resource base path to obtain a dynamic path; the dynamic path pointing to a specific resource stored on the server. This application also provides a dynamic path generation apparatus, device, and program product, as well as a resource access method and apparatus.

To provide an authentication of a person capable of performing accurate measurement and declaration thereof in a quantum communication network of a quantum entanglement swapping node, etc., a method and a system for performing key sharing with the person by an unprecedented protocol.SOLUTION: In a system which performs a quantum communication, an authentication unit 17 controls a light separation section 21, and a first intra-node user 11 and a second intra-node user 13 respectively output a first photon signal and a second photon signal. A third intra-node user 15 detects the first photon signal and the second photon signal which pass the light separation section 21 and notifies the first intra-node user 11 and the second intra-node user 13 of a detection result. The authentication unit 17 notifies the first intra-node user 11 and the second intra-node user 13 of control information of the light separation section. The first intra-node user 11 and the second intra-node user 13 use the detection result and the control information to authenticate the third intra-node user 15.SELECTED DRAWING: Figure 1

The present disclosure provides methods systems and apparatuses for use in the secure agreement of group keys in which the group key(s) are shared between multiple end-point devices, said multiple-endpoint devices being used to create the group key(s) that is / are distributed in such a manner that no other untrusted part of the system has access to sufficient information to be able to derive or determine the group key(s) and / or portions of said group key(s). This is achieved by pairs of endpoint devices agreeing pairwise keys between themselves, wherein an intermediary device that distributes encryption keys to the endpoint devices over quantum communication channels does not have sufficient information to be able to derive the identity of the pairwise keys.

Provided are a digital key sharing method, a digital key authentication method, and a computing device. The digital key sharing method is executed by a first device and includes: sending to a second device a digital key creation request that includes valid space information for a digital key, so as to generate the digital key at the second device; receiving a digital key signature request from the second device, wherein the digital key signature request includes data to be signed of the digital key, and said data includes the valid space information; and on the basis that the signing of the digital key signature request is completed, sending a digital key import request to the second device, so as to indicate the second device to save the generated digital key. Therefore, the security of a digital key can be improved in a spatial dimension.

The utility model relates to the technical field of conference sound pickups, in particular to an intelligent conference recorder which comprises a conference recorder outer shell. A dual-mode Bluetooth module board, a power supply, a cascade output interface, a cascade input interface, a cascade detection circuit, an IO (input / output) matching circuit, a recording key circuit and a DSP (digital signal processor) module board used for encoding audio signals are mounted in the conference recorder outer shell, and dual-mode Bluetooth and one-key local recording functions are added on the basis of a traditional conference recorder. Meanwhile, the system also supports ultra-long-distance recording, and can be matched with client application software in actual use to simplify related document processing work after a conference, such as conference content arrangement, conference content translation and conference content summarization, so that the workload of personnel can be saved, the conference efficiency can be improved, and the conference cost can be saved; in addition, one-key sharing of conference related content is supported, and the working efficiency is improved. The intelligent conference recorder is simple in structure, low in cost and easy to implement and popularize.

The present invention provides a linear key sharing method for five participants, comprising the following steps: Step 1: Based on the access structure, query the corresponding linear capacity domain; Step 2: Establish a corresponding integer programming model based on the polar direction vector of the linear capacity domain and the input subkey size vector, and determine the combination coefficients used in the final method based on the feasible solution of the integer programming; Step 3: Based on the optimal solution of the integer programming, combine the methods corresponding to the polar direction vectors, and the combined method becomes the final linear key sharing method. The method of the present invention is applicable to any access structure and any integer subkey size vector for the five participants, and can obtain a relatively optimal master key size.

A method for sharing a digital key (116) for a vehicle (102) includes the steps of: providing an assignment instruction (118) to a receiving device (110) to allow the start of key sharing; calling a function (120) for transmitting information related to security for a key sharing sequence; and sending the provided assignment instruction (118) using the called function (120).

To provide a system, method and apparatus for multi-factor authentication of a transaction received at a client device by using a personal identification number (PIN) in combination with a non-contact card.SOLUTION: The system includes a transaction device 222, a non-contact card 205, and an authentication server 223. The transaction device receives an input PIN from a user and transmits it to the non-contact card. The non-contact card performs PIN verification by comparing the received input PIN with a stored PIN. If the comparison result indicates a match, encryption logic generates an encryption code and transmits the encryption code to the transaction device. The transaction device transmits the received encryption code to the authentication server. Upon receiving the encryption code, the authentication server generates an expected encryption code using a counter, key, shared secret and the like associated with the non-contact card, and determines whether the generated encryption code matches a unique digital signature provided by the received encryption code. The authentication server then returns to the transaction device an authentication status indicating whether the transaction is approved or denied.SELECTED DRAWING: Figure 2B

The invention provides a digital key connection method and device, a vehicle and a storage medium, the method is applied to the technical field of digital keys, and in response to an operation triggered by a user for digital keys, the number of current digital keys is judged based on an operation result; a target digital key connection mode corresponding to the vehicle is determined according to the number of the digital keys, the target digital key connection mode is a single connection mode or a multi-connection mode, and different digital key connection modes correspond to broadcast modes of different key connection broadcasts; and judging whether the current digital key connection mode of the vehicle is the target digital key connection mode or not, and adjusting the vehicle into the target digital key connection mode when the current digital key connection mode and the target digital key connection mode are different, so that the vehicle is connected with the digital key according to the target digital key connection mode. Therefore, the digital key connection mode is dynamically regulated and controlled by accurately identifying the key connection demand, and unnecessary power consumption waste is avoided on the premise of guaranteeing the availability and flexibility of the key sharing function.

The application discloses a kind of high-performance blockchain consensus algorithm, the method includes: in current block period, based on preset clustering algorithm, all senior consensus nodes in the senior consensus group to be clustered are clustered to obtain m signature groups;Based on BLS aggregation signature, determine two deputy leader nodes in each signature group and the group signature block corresponding to each deputy leader node, that is, obtain 2m deputy leader nodes and 2m group signature blocks;Based on the coin protocol of verifiable key sharing, the leader node is elected from the deputy leader node and the block corresponding to each leader node, that is, obtain m leader nodes and m blocks;The credit value of each node in the blockchain network is obtained, and the new senior consensus group to be clustered is determined, steps 1 to 4 are continued to be executed, to realize blockchain consensus.The consensus algorithm of the application has high consensus efficiency, high scalability, high block efficiency, high chain quality and other performances.

The present invention relates to the field of information security, and specifically refers to an RSA multiple blind signature method and system based on identity authentication. The method includes RSA initialization, CA public key certificate registration, public key certificate exchange, public key acquisition and verification, information encryption, signature initiation and multiple signatures, signature reception and verification, information sending, and information reception. The present invention uses the RSA algorithm to encrypt information, and at the same time adopts the CA authentication and local public key sharing mechanism to realize the authentication of message signatures, preventing impersonation of signature initiation and impersonation of signatures; the present invention adopts a scatter-type signature and identity authentication mechanism to realize the traceability of incorrect signatures and prevent the overall signature from failing due to a single incorrect signature, which can effectively replace the aggregate signature, and the time complexity only changes from 1 to O(n); the system includes a key generation tool, a data encryption and decryption module, a data signature and verification module, a trusted certification authority CA, an information storage device, and a transaction processor.

A system for managing and using digital financial assets, such as cryptocurrency uses multiple independent devices that mutually cooperate to control cryptocurrency assets in a secure manner. Each of these devices may store a unique private key associated with the cryptocurrency assets, which may be configured such that a certain minimum number of these private keys are required to transfer the cryptocurrency assets. The use of multiple private keys spread across multiple distinct devices may reduce the likelihood of loss stemming from a hardware failure or reduce the likelihood of an attacker successfully gaining access to the cryptocurrency assets. In addition, selection of the devices to be used for storing these private keys, as well as how many private keys are required to authorize a transaction, may be tailored to balance a user's preferences for reliability of access versus security and for third-party custody versus self-custody.

The present invention provides an encoding and decoding method for the distributed multi - user key sharing problem under strong privacy conditions. The method includes the following steps: Step 1: Initialize an N×(∑ k∈[K] R k +N) generating matrix V according to the access structure and the key information rate array; Step 2: Obtain the corresponding K(K - 1) row index sets according to the access structure and the key information rate array, and extract K sub - matrices from the generating matrix V by these sets. The strong privacy condition is equivalent to the full rank of each sub - matrix; Step 3: Calculate the determinants according to each sub - matrix, multiply them to obtain a polynomial, find a set of feasible solutions that make the polynomial not equal to 0, then set the remaining variables in the generating matrix V to 0, then extract the decoding method from the generating matrix V, and finally perform Gaussian elimination on the generating matrix V to obtain the encoding method. The method of the present invention can be applied to any access structure and can achieve the optimal key information rate.

Disclosed is a digital key sharing method, comprising: requesting a server to create a digital key pre-sharing session, the request comprising location information, a verification code and a timestamp of an intelligent device; in response to the creation of the digital key pre-sharing session, information of matched receiver equipment returned by the server is received, and the matched receiver equipment is the receiver equipment which is detected by the server and inputs the same verification code within a preset range of the intelligent equipment within a preset time period; generating a digital key sharing session in response to the selection of the target recipient device; and in response to the generation of the digital key sharing session, requesting the server to issue the digital key of the vehicle to the target receiver device. The invention further relates to a digital key sharing device, intelligent equipment and a medium.

The application discloses a digital key sharing method and device, a terminal device, a vehicle and a storage medium, and belongs to the technical field of vehicle control. The method comprises the following steps: receiving a first message, wherein the first message is used for sharing the control right of a second terminal device to a first vehicle to a first terminal device, and the second terminal device stores a first target certificate used for controlling the first vehicle; in response to the first message, generating a self-signed certificate; sending the self-signed certificate to the second terminal device; and receiving the first target certificate and a second target certificate returned by the second terminal device, wherein the second target certificate is determined by the second terminal device according to the self-signed certificate. The first terminal device can directly receive the second target certificate determined by the second terminal device according to the self-signed certificate of the first terminal device, without the intervention of a server, so that the sharing speed and efficiency of the digital key between the terminal devices are improved.

The present invention relates to a parking space operation method using an ultra-wideband (UWB) system based on digital key sharing, the method comprising steps in which: a parking management application is connected to a parking management device through wireless communication; the parking management device receives digital key generation request information from the parking management application on the basis of the connection between the parking management application and the parking management device; a parking management server and a vehicle server share a digital key on the basis of the received digital key generation request information; the parking management device is connected, on the basis of the shared digital key, to a vehicle through a UWB module and a Bluetooth low energy (BLE) module mounted on the vehicle; and the parking management device transmits position information of the vehicle to the parking management application on the basis of the connection between the parking management device and the vehicle.

The vehicle digital key sharing service method according to one embodiment includes a digital registration step in which a management server generates a terminal digital key and a vehicle digital key after user authentication in response to a digital key registration request through a dedicated application of a mobile terminal and the mobile terminal stores the terminal digital key in a secure world that is separated from a normal world and a digital key using step in which an authentication token is generated using the terminal digital key stored in the secure world when the mobile terminal approaches or tags a vehicle and a vehicle device locks or unlocks a door of the vehicle by activating the vehicle digital key, which is registered from the management server, to validate the authentication token.

The invention provides a digital key management and control method and system. The method comprises the steps that a sharing end sends a key sharing request; the first server side pushes a key sharing notification to a shared end according to the key sharing request; the shared end responds to the key sharing notification to obtain a key sharing result; and the first server opens a new digital key for the shared end through the transportation card service according to the key sharing result, and writes the new digital key into the vehicle. According to the method, multiple terminals are combined, a closed loop is completely formed by purchasing, sharing, friend receiving and the like of the digital key, the digital key can be conveniently shared to friends except a car owner for use, the car using flexibility is improved, and the application range of the key is also expanded; meanwhile, a new digital key is opened for the shared end on the basis of the transportation card service, and the sharing of the digital key can be conveniently completed without authentication and butt joint of mobile phone manufacturers of each brand by vehicle manufacturers.

A system for managing an access to an asset (106, 108) is provided. A digital key to the asset (106, 108) is generated and synchronized between a first user device (104a) of a first user (102a) and an access control device (110a, 110b) that controls the access to the asset (106, 108). A key-sharing request is initiated by the first user device (104a) to grant a second user (102b) the access to the asset (106, 108). Based on the key-sharing request, a server (112) communicates the digital key to a second user device (104b) of the second user (102b). When the second user device (104b) is within a detection range of the access control device (110a, 110b), the access control device (110a, 110b) receives the digital key from the second user device (104b), validates the digital key, and grants the second user (102b) the access to the asset (106, 108) for an access duration defined in the key-sharing request.

According to one embodiment, a first key sharing module outputs a common key, a first cryptographic module encrypts plaintext data and outputs encrypted data. A first transmission system transmits the encrypted data. A second transmission system transmits the common key. A monitor device is disposed in the first transmission system, and receives transmission condition data from a first base and reception condition data from a second base, and performs matching of the transmission condition data and the reception condition data.

According to one embodiment, a user base device A has a cryptographic module a key sharing module. The key sharing module restores and disperses a cryptographic key used to generate the encrypted data. The key sharing module includes a quantum cryptographic communication device applicable to a plurality of front ends. The front ends are used to receive dispersed cryptographic key from different routes, and to output dispersed cryptographic key to different routes.