133 results about "Key size" patented technology

The invention relates to the technical field of information security, and discloses a data security management system and method in an intelligent power grid, and the system comprises a dynamic encryption and key management module which is used for carrying out the encryption and key management of the data of the intelligent power grid, determining an encryption algorithm according to the sensitivity of the data, and generating a corresponding key, the dynamic encryption and key management module transmits encrypted data and key information to the adaptive access control module so as to ensure the security of data access; and the self-adaptive access control module is used for managing access permissions of the user and the equipment and performing dynamic authorization according to the attribute label and the context information. Through dynamic encryption and adaptive key management, an encryption algorithm and a key length are adjusted in real time according to data sensitivity and a network environment, a quantum key distribution technology is combined, high security and quantum attack resistance of a key are ensured, and then security and real-time performance of data transmission are ensured.

The invention discloses a wireless communication network data secure transmission method and system, and relates to the technical field of secure transmission. During system operation, agricultural monitoring data are collected in real time through various sensor devices arranged in an agricultural environment, encryption processing is performed by using a symmetric encryption algorithm, and a dynamic key length adjustment mechanism is supported; a random number generator is integrated, unified management is performed on key generation, distribution, updating and destruction in a system, a timestamp or a random serial number is embedded into each data packet, the uniqueness of the timestamp or the serial number is verified at a receiving end, so that replay attacks are resisted, and the data are comprehensively analyzed and evaluated according to a set algorithm, so that the replay attack is prevented. The method comprises the following steps: acquiring a security data transmission performance index SDTP through calculation, generating a monitoring report, detecting abnormal conditions in a data transmission process, including channel quality reduction, data loss or verification failure, and providing a visual monitoring result.

The invention relates to an office process automation data analysis method based on a symmetric encryption algorithm, and the technical scheme comprises the following steps: introducing an encryption strategy generator, and dynamically adjusting the parameters of the symmetric encryption algorithm including the key length and the encryption round number through the real-time analysis of the data communication content including the data sensitivity, the frequency and the data volume; constructing a self-adaptive optimization model, and adjusting an encryption strategy according to external conditions such as a network state, equipment computing power and user behaviors; fragmenting the data packet before transmission, and allocating different transmission paths according to current network conditions and security evaluation; constructing a dynamic data recombination module at a data receiving end, and verifying and recombining data when encrypted data packets of different paths arrive; a lightweight key negotiation protocol based on symmetric encryption is adopted, and a key is generated and negotiated immediately when two communication parties initiate data exchange; a secret key life cycle management mechanism is introduced, and the service life and the number of times of limitation are set for each secret key.

The invention relates to the technical field of security auditing, in particular to a security auditing method and system for an industrial control system, and the method comprises the following steps: aiming at a key control task, a communication task and a security task of a real-time operating system, collecting a period, a starting timestamp, a finishing timestamp, a central processing unit occupied time slice and peak memory usage amount data. According to the method, the period, timestamp, central processing unit occupation and memory usage data of a key task of a real-time operating system are collected, a task execution time boundary and a resource consumption envelope are set, and then an expected relation rule set of a task time sequence and resource consumption is constructed by applying historical data statistics and logic rule deduction; and meanwhile, the key length of symmetric and asymmetric encryption, initialization vector generation, hash algorithm selection, key derivation parameters and encryption operation context are stipulated, so that a comprehensive and specific ICS behavior specification baseline is established.

The invention relates to the technical field of data security, in particular to a security protection method and system for electronic archive information and a medium, and the method comprises the steps: dividing archive data, and analyzing the editing condition of data blocks in the archive data to obtain editing parameters of the data blocks, the method comprises the following steps: analyzing the distribution difference of editing clusters to which different data segments belong relative to data segments in all editing clusters in quantity and editing time by utilizing editing clusters obtained by clustering the data segments, and obtaining a differentiation coefficient of the data segments, and based on a data block to which any data segment belongs and the quantity of the data segments in the editing clusters; and carrying out key length evaluation on the data segments in combination with editing parameters and differentiation coefficients, so as to encrypt and store the archive data. According to the method, the encryption strategy of the AES algorithm is dynamically adjusted according to the data segment characteristics and the editing history, so that the performance of the encryption process is optimized while the data protection effect is improved.

The embodiment of the invention provides a data management method and device, computer equipment and a storage medium. The data management method comprises the following steps: obtaining audio and video data to be transmitted and a sensitivity level corresponding to the audio and video data; at least according to the sensitivity level corresponding to the audio and video data, a matched transmission strategy is configured for the audio and video data, and the matched transmission strategy comprises an encrypted transmission strategy or a non-encrypted transmission strategy; the parameters of the encryption transmission strategy comprise at least one of the encryption algorithm type, the encryption algorithm complexity, the encryption key length and the encryption key complexity; and transmitting the audio and video data based on the matched transmission strategy.

The invention provides a key dynamic management method and system, and the method comprises the steps: responding to a communication request sent by a vehicle end, and carrying out the validity verification of a vehicle end certificate through a public key of an intermediate certificate authority; after the verification is passed, according to the current network quality parameter and the communication data sensitivity level, determining the target length of the secret key according to a secret key length modulation strategy; and deriving a shared key with a target length through an encryption algorithm by using the vehicle end public key and the cloud end private key, and sending the shared key and the cloud end certificate to the vehicle end. Therefore, the shared key is dynamically adjusted according to the network quality parameter and the communication data sensitivity level, so that the security and efficiency of data transmission can be effectively ensured, and the management complexity is reduced.

The invention provides a bank data dynamic encryption system based on a self-attention mechanism, and is applied to the technical field of data information security. A data analysis module in the bank data dynamic encryption system calculates association strength among data elements by using a self-attention mechanism, so that a dynamic adjustment module can flexibly adjust encryption parameters, such as key length and encryption rounds, according to strength weights. The dynamic adjustment ensures that the encryption strength is tightly matched with the data characteristics, and the security is optimized. And the encryption execution module is responsible for efficiently carrying out data encryption on the basis, so that the processing speed and the security are ensured to be both considered. In addition, the management module identifies the potential risk of the system by monitoring the performance index of the encryption algorithm in real time, and further ensures the stability and high efficiency of the system. In combination with performance optimization, evaluation of a test module and detailed system document support, the system not only improves the security protection level of data, but also maintains efficient operation performance.

The invention relates to the technical field of CPU card security chips, and discloses a low-power-consumption design method and system for a CPU card security chip, and the method comprises the steps: carrying out the current waveform sampling of a secret key storage region, an encryption operation unit and an identity authentication processor of the CPU card security chip, recording current data when the CPU card security chip executes data encryption, identity authentication and security calculation to obtain a feature parameter set of the security function module; establishing an encryption operation power consumption model and an identity authentication power consumption model, and obtaining power consumption characteristic matrixes under different key lengths through piecewise linear fitting; classifying the security application tasks to obtain a multi-level security task classification table; according to the multi-level security task classification table, a differential power consumption attack protection strategy is executed, the working voltage and frequency configuration sequence of each security function module is calculated, the optimal balance of power consumption and performance is achieved under different key lengths, and the comprehensive performance of the CPU card security chip is improved.

The invention relates to the field of combination of wireless communication and block chain technology, and discloses a wireless communication encryption method combined with block chain technology, comprising the following steps: initializing system parameters including key length, security requirement, delay limit and resource budget; constructing an optimization objective function for optimizing encryption delay, block chain synchronization delay and resource consumption in wireless communication, and improving encryption security at the same time; constructing constraint conditions, wherein the constraint conditions comprise an encryption security lower limit, a delay limit and a resource budget; solving the optimization objective function by using a mathematical optimization model to obtain an optimal encryption and block chain configuration strategy; and establishing a multi-agent game model, and optimizing an interaction strategy of the wireless communication node and the block chain node. According to the method, encryption and block chain parameters are dynamically adjusted, a multi-body interaction strategy is optimized, and a mathematical optimization model is constructed, so that global optimization of security, delay and resource consumption and improvement of balance adaptive capacity are realized.

The invention discloses a secure access method and system for an Internet of Things terminal, and relates to the technical field of information security, and the method comprises the following steps: when the Internet of Things terminal executes a key generation operation, firstly, carrying out the real-time monitoring of a generation environment, so as to capture the data information in a key generation process; according to the method, the generation environment is monitored in real time, the data information is obtained, data preprocessing and feature extraction are combined, the key strength is quantified, and the system can recognize and adjust the key which does not meet the safety requirement in time. And when the evaluation result shows that the key strength is insufficient, the system automatically triggers the key to be regenerated and the key length is expanded to ensure that the security standard is met. According to the scheme, the key generation of the Internet of Things terminal can respond to the environment change in real time, the key security is effectively improved, the limitation of a traditional static generation mechanism is broken through, the system protection capability is enhanced, and the security risk is reduced.

The present invention provides a method and system for encrypting business data using quantum encryption, which relates to the field of banking business data encryption. The method includes: constructing a fixed-time window, obtaining the key metadata and network pulse information of each bank-enterprise business data within the fixed-time window, and generating a point cloud set; generating topological structures of different scales based on the point cloud set, and recording topological feature information at each scale to generate a persistence diagram; extracting statistical quantities from the persistence diagram and calculating the decision factor corresponding to the current fixed-time window; based on the sensitivity coefficients of each bank-enterprise business data, determining the key length of each bank-enterprise business data according to the decision factor, and invoking a quantum random number generator to generate a unique key for each bank-enterprise business data under the current fixed-time window. The present invention can dynamically and flexibly adjust the encryption strategy, realizes the dynamic decoupling of the security strategy and network resources, and avoids service interruption caused by excessive occupation of bandwidth by encryption calculations.

Example embodiments provide systems and methods for increasing the cryptographic strength of an encryption or message-authentication-code-(MAC) generation technique. According to some embodiments, a MAC may be constructed around a shared secret (such as a random initialization number), thereby increasing strength of the MAC against brute force attacks based on the size of the shared secret. The MAC may be combined with randomized data, and may also be encrypted to further bolster the strength of the code. These elements (shared secret, MAC algorithm, and encryption algorithm) may be employed in various combinations and to varying degrees, depending on the application and desired level of security. At each stage, the cryptographic construct operates on the cyptographically modified data from the previous stage. This layering of cryptographic constructs may increase the strength of the group of contrasts more efficiently than applying any one construct with a larger key size or similar increase in complexity.

The invention discloses an Internet of Vehicles security certification and data encryption transmission system integrated with an IPv6 (Internet Protocol Version 6) technology. According to the invention, the key strategy can be automatically optimized according to the dynamic environment in the actual operation of the Internet of Vehicles, and the dynamic balance between the security protection and the communication efficiency is realized. The system can intelligently judge the cracking risk faced by a current key by combining real-time data such as a vehicle driving state and network environment characteristics, so as to flexibly adjust the key length and the updating frequency: when the network environment is safe and the vehicle is in a low-risk area, the key service cycle is properly prolonged, and the basic key length is maintained to reduce the communication overhead; when a potential threat is detected or a vehicle enters a complex road section, the secret key security level is automatically improved, and the rotation period is shortened to enhance the protection capability. The system burden cannot be increased due to excessive encryption, potential safety hazards cannot be left due to insufficient protection, and key management better meets the actual requirements of high-speed movement of vehicles and rapid change of scenes in the Internet of Vehicles.

The invention provides a business data encryption method and system applying quantum encryption, and relates to the field of bank business data encryption, the method comprises the following steps: constructing a fixed time window, obtaining key metadata and network pulse information of business data of each bank enterprise in the fixed time window, and generating a point cloud set; topological structures of different scales are generated according to the point cloud set, topological feature information is recorded under each scale, and a persistent graph is generated; performing statistic extraction on the persistent graph, and calculating a decision factor corresponding to the current fixed time window; and based on the sensitivity coefficient of each bank-enterprise service data, determining the key length of each bank-enterprise service data according to the decision factor, and calling a quantum random number generator to generate a unique key for each bank-enterprise service data under the current fixed time window. According to the invention, the encryption strategy can be dynamically and flexibly adjusted, the dynamic decoupling of the security strategy and the network resources is realized, and the service interruption caused by the excessive occupation of the bandwidth by the encryption calculation is avoided.

The invention relates to the technical field of big data processing, in particular to an energy big data secure storage method, a storage medium and a system.The method comprises the steps that energy data of any type of energy is obtained, the energy data comprises multiple data types, and any group of data in any data type is arranged according to a time sequence to form a data sequence; determining an association value and a data regularity of each type of data; the encryption strength coefficient of each type of data is obtained; determining the local feature approximation degree of each type of data based on the mutation moment difference and the distribution range difference corresponding to the subsequences between each type of data and all other types of data; determining the period approximation degree of each type of data; further obtaining a key length coefficient of each type of data; and when the energy data is stored, encrypting various types of data by adopting an AES encryption algorithm based on the key length coefficient. The invention aims to improve the encryption strength while ensuring the encryption efficiency.

The invention discloses an intelligent electronic information exchange processing method and system, and relates to the technical field of information processing, an anti-attack capability coefficient is calculated by obtaining a key length of a used encryption algorithm, and a network signal value of encrypted electronic information in an exchange processing process is obtained to calculate an exchange network environment fluctuation coefficient; acquiring data exchange quantities at different moments to calculate a data volume exchange stagnation coefficient, calculating an encryption leakage risk coefficient according to the anti-attack capability coefficient, the network environment fluctuation coefficient and the data volume exchange stagnation coefficient, and judging whether an encryption leakage risk exists in an electronic information exchange processing process or not and whether exchange processing needs to be continued or not; whether the encrypted data may be leaked in the information exchange process or not can be detected and prevented in time, it is ensured that the encrypted data cannot be cracked or leaked in the exchange process, and the possibility of safety accidents is reduced.

The invention discloses a computer network security data transmission system, and relates to the technical field of network security, a core architecture of the computer network security data transmission system is formed through mutual cooperation of a plurality of groups of algorithm units, and a plurality of factors such as attack frequency, intensity, fluctuation amplitude and key length are quantized, so that the security of the computer network security data transmission system is improved. And calculating to obtain a data encryption danger value Esv, so that an encryption strategy can be dynamically adjusted to adapt to different security requirements, a self-adaptive and evolvable mathematical framework is provided for a computer network security data transmission system, and the intelligent level of the system is remarkably improved. A data transmission risk value Dtr is calculated through a transmission risk value algorithm unit in combination with a plurality of influence factors such as data transmission time Dtt and network delay Nd, so that the computer network security data transmission system can carry out comprehensive quantitative evaluation on the data transmission risk; and scientific and reliable data support is provided for adjustment of an encryption strategy in subsequent data transmission.

The invention belongs to the technical field of data security and passwords, and provides an information encryption management method and system. After the system receives the access request, calling user historical behaviors, and calculating behavior baseline stability; obtaining a time deviation degree based on the difference between the current access time and the historical time distribution, obtaining a geographic deviation degree based on the difference between the source address and the geographic attribution, combining the time deviation degree and the geographic deviation degree into a comprehensive deviation degree, and modulating according to the behavior baseline stability to obtain a context disturbance factor. Fusing the context disturbance factor with the static risk index of the target data to obtain a session risk calibration value; and mapping the key length to the step set according to the session risk calibration value to obtain a final key length, and performing encryption. According to the method, the encryption strength can be adaptively improved when abnormal access occurs, the performance is kept under normal access, and the method has real-time performance, context sensing and good generalization ability.

A wireless device sends, to a base station, a registration request message comprising one or more first parameters that indicate security algorithms supported by the wireless device, and comprise at least a first security algorithm with a first key length and at least a second security algorithm with a second key length. The wireless device receives, from the base station, a first radio resource control (RRC) message, wherein the first RRC message comprises a message authentication code-integrity (MAC-I), and indicates a selected security algorithm, among the first security algorithm and the second security algorithm. The wireless device sends, to the base station, a second RRC message comprising a second MAC-I, based on the selected security algorithm.

The invention discloses an identity-based signature method supporting multi-message aggregation. The identity-based signature method comprises the steps of system initialization and key generation, user signature key generation, message signature construction, single signature verification, signature aggregation and aggregation signature verification. Due to the fact that the linear homomorphic signature technology is adopted, the identity-based aggregation signature method is provided, and the technical problems of signature after aggregation, key size expansion and the like in the existing aggregation signature technology are solved. Through the method, a verifier can safely and efficiently merge a plurality of signatures into a signature with a compact size, efficient data source authentication can be realized while the data integrity is guaranteed, and the verification efficiency is remarkably improved. The method has the advantages of high security, low communication cost, small calculation overhead and the like, can be applied to the technical fields of large-scale data authentication, distributed system security, lightweight cryptographic protocols and the like, and is particularly suitable for mobile terminals or Internet of Things equipment scenes with limited calculation resources.

The invention relates to the field of business management, in particular to a business data management method and system based on data analysis. The method comprises the following steps: collecting business data in a business database, and dividing each field in a customer data table of each customer; calculating an information chaos coefficient, and calculating a uniqueness ratio; obtaining a sensitivity original score; constructing a field sensitivity score based on the sensitivity original score, calculating a field correlation factor, and obtaining a field coupling coefficient; dividing the encryption strength grade of each field of each user on the basis of the field coupling coefficient, obtaining the key length and the update round number of each field of each customer in the encryption process by combining the field coupling coefficient, encrypting the service data of each field on the basis of the key length and the update round number, and managing the service data; and the refinement, intelligence and security level of business data management is improved.

The embodiment of the application provides a signaling service system and a communication method based on the signaling service system, the method is applied to a first client, a two-way authentication request for a second client is sent to a key management platform, and a session key handle sent by the key management platform after two-way authentication is passed is received, key negotiation is carried out between the key management platform and the second client, and a negotiation key handle and first public key information sent by the key management platform are received; a second key negotiation request is sent to the second client, the second key negotiation request comprises the session key handle, a negotiation key length and the first public key information, a session key sent by the key management platform is received, and communication is carried out with the second client according to the session key. Through the authentication mechanism based on quantum encryption technology, two-way identity authentication and quantum key negotiation are carried out, the security of a signaling channel can be ensured, and the risk of information leakage and malicious attack is reduced.

The invention provides a security method and device based on homomorphic encryption, and belongs to the technical field of communication, and the method comprises the steps: obtaining a level 2 error learning hypothesis LWE ciphertext; converting the LWE ciphertext into a first ring error learning hypothesis RLWE'ciphertext at a level 1 by executing a public key switching algorithm and a splicing operation; and calculating the first RLWE'ciphertext by executing a scheme switching algorithm to obtain a first RGSW ciphertext at the level 1. It can be seen that one RLWE'ciphertext, such as a first RLWE 'ciphertext, is calculated through a public key switching algorithm, then the first RLWE' ciphertext is expanded into an RGSW ciphertext, such as a first RGSW ciphertext, through a scheme switching algorithm, the key size is smaller, and the overhead is smaller than that of calculation of two RLWE 'ciphertexts, so that the overhead of circuit bootstrap in a hierarchical homomorphic calculation mode can be reduced, and the circuit bootstrap efficiency is improved. The operation efficiency is improved.

The present invention relates to the technical field of quantum key distribution, and proposes a data security transmission method and system based on quantum communication, including: obtaining the original keys of both parties in quantum communication; taking each verification of the original key as a matter, constructing an FP tree and obtaining a number of nodes; obtaining the node initial value of each node; obtaining the character security of each unverified position in the original key; obtaining a number of key segments to be verified and their comprehensive security; verifying the key segments to be verified based on the comprehensive security to obtain a cutoff key; replacing the characters in the cutoff key and obtaining a hash value to obtain a replacement hash value group for each position in the cutoff key; obtaining a number of added characters, combining the cutoff key to obtain a final key; and transmitting data based on the final key. The present invention aims to solve the problem that the key length is too short due to the iteration of the quantum key through the hash function, which affects the security.

The present disclosure relates to a method, apparatus, and computer program for setting an encryption key in a wireless communication system; and a recording medium for same. According to one embodiment of the present disclosure, a method for setting an encryption key size in a wireless communication system may comprise: a step in which a first controller of a first device receives a first message containing information on a minimum value of a first encryption key size from a first host of the first device; and a step in which the first controller transmits, to the first host, a second message indicating an encryption change. The second message may contain information on the first encryption key size.

An example computer system for providing countermeasures for a ransomware attack can include: one or more processors; and non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to generate a key by to: create a salt using artificial intelligence; form a data section by the salt and an original key; and form a dummy section to fill out a length of the key.

The invention relates to the technical field of data encryption processing, in particular to a data security encryption method facing mass data distributed storage. Acquiring data importance according to the daily load condition of the storage node in the historical analysis period and the variation trend of the read-write quantity of the disk; determining an ideal key length required by the encryption process of the storage node according to the number of users served by the storage node in the historical analysis period and the data importance; according to the distribution uniformity of data fragments stored by a storage node during real-time data storage, the key complexity of each data fragment on the storage node is obtained, the key complexity is matched with the key length supported by an encryption algorithm, the ideal key length is adjusted, the optimal key length of the data fragments on the storage node is determined, and the optimal key length of the data fragments on the storage node is obtained. And encrypting the data fragments on the storage nodes. According to the method, differential encryption is dynamically performed on each data fragment on different storage nodes through a two-stage adaptive adjustment mechanism, so that the security of distributed storage data encryption is improved.

The application discloses an Internet of Things terminal security access method and system, and relates to the technical field of information security, comprising the following steps: when performing a key generation operation on an Internet of Things terminal, first, the generation environment is monitored in real time to capture data information in the key generation process. The application quantifies the key strength by real-time monitoring of the generation environment and obtaining data information, combining data preprocessing and feature extraction, and the system can timely identify and adjust the key that does not meet the security requirements. When the evaluation result shows that the key strength is insufficient, the system automatically triggers the key regeneration and extends the key length to ensure that the security standard is met. The scheme enables the Internet of Things terminal key generation to respond to environmental changes in real time, effectively improves the key security, breaks through the limitations of the traditional static generation mechanism, enhances the system protection capability and reduces the security risk.

The present invention discloses a security assessment system and method for a cryptographic algorithm, which belongs to the field of information security technology, and includes a cryptographic algorithm import module, a basic test module, a theoretical test module, a practical test module, and a security assessment module. The cryptographic algorithm import module is used to receive the source code of the cryptographic algorithm to be evaluated imported by the user, and to establish an evaluation database to establish an archive for each imported cryptographic algorithm to be evaluated, and to record the basic information of each cryptographic algorithm in the archive, including the name of the cryptographic algorithm, the type of the cryptographic algorithm, and the key length. The security assessment system and method for a cryptographic algorithm of the present invention can evaluate the cryptographic algorithm in multiple dimensions, not only considering the theoretical aspects such as the correctness of encryption and decryption, resource occupation, and mathematical foundation, but also taking into account the actual use environment factors such as encryption speed and side channel attack resistance, comprehensively measuring the security of the algorithm, and avoiding the one-sidedness of single-dimensional evaluation.