236 results about "Key storage" patented technology

The invention provides a chip security key protection method and system capable of resisting side channel attack, and relates to the technical field of chips, which comprises the following steps of: obtaining a key operation request, performing address space mapping based on a dynamic mapping rule to obtain encrypted key data, decrypting the encrypted key data, fragmenting key intermediate data, and allocating an independent processing channel to perform decoupling operation; and injecting a time-varying noise signal to cover the association between the key and the physical characteristics, and finally performing recombination and reverse conversion to generate a final key output. According to the method, side channel attacks such as power consumption analysis and electromagnetic analysis are effectively resisted, and the security of key storage and operation processes is improved.

A system and method provide efficient, secure and highly reliable authentication for transaction processing and / or access control applications in which only biometric input is required from the user. A Personal Digital Key stores a biometric profile that comprises a representation of physical or behavioral characteristics that are uniquely associated with an individual that owns and carries the PDK. The PDK wirelessly transmits the biometric profile over a secure wireless transaction to a Reader for use in a biometric authentication process. The Reader compares the received biometric profile to a biometric input acquired at the point of transaction in order to determine if the transaction should be authorized.

A method includes: receiving, by a computing device of a first vehicle, a command from a host device; in response to receiving the command, storing a new device secret in memory; generating, by the computing device using the new device secret, a triple comprising an identifier, a certificate, and a public key; and sending, by the computing device, the triple to a second vehicle, where the second vehicle is configured to verify an identity of the first vehicle using the triple.

The invention belongs to the technical field of Internet of Things security, and discloses a derivation-based Internet of Things equipment key management method and device, and the method comprises the steps that a server generates a first-level data transmission key, and stores the first-level data transmission key in a cipher machine; the terminal sends a key request to the server; the server generates a second-level data transmission key through a first key derivation algorithm according to the terminal type and the first-level data transmission key; the server generates a third-level data transmission key through a second key derivation algorithm according to the security chip serial number and the data transmission root key, and issues the third-level data transmission key to the terminal; the terminal generates a session key through a third key derivation algorithm based on the three-level data transmission key and the random number during communication; the server side generates the same session key based on the received random number and the data transmission key calculated by the server side, and the server side only needs to store a small number of platform data transmission root keys in the mode, so that the key storage cost and the management cost are greatly reduced.

1. Name of this design product: Main body of key storage buckle accessory. 2. Purpose of this design: The entire product is used in a key storage clip, through which the key can be pulled out, and the protected part is used as the main body of the key storage clip accessory. 3. The key design features of this product are the shape of the part that is to be protected. 4. The image or photograph that best illustrates the design's key points: 3D view 1. 5. Other situations requiring explanation: Other explanation: The dotted lines in the figure represent parts that do not require protection.

The application discloses a system switching method, an electronic device, a storage medium and a program product, and belongs to the technical field of key storage. The method comprises the following steps: in response to the fact that a current system is switched from a first system to a second system, reading a second key file from a secure storage area, wherein the secure storage area stores a first key file which is valid for the first system and a second key file which is valid for the second system; and importing the obtained second key file.

The embodiment of the invention discloses a password information processing method and device, electronic equipment and a storage medium, multiple groups of encryption key pairs are bound with a key effective time interval, a key corresponding to a playing time period is quickly matched in combination with an index mapping table, a user does not need to manually input multiple passwords, and the user experience is improved. The problem that the password needs to be input repeatedly after being replayed after being modified is solved; a key is stored by an asymmetric encryption algorithm, and is transmitted through a secure transmission channel, so that the key storage and transmission security is ensured, and the problem of insufficient security of existing key management is improved; the integrity of the decrypted data is verified by means of the verification key, and the equipment end is triggered to retransmit incomplete data fragments, so that the defects of lack of data integrity guarantee and an exception recovery mechanism are overcome; and meanwhile, the key query efficiency is improved by the index mapping table.

To provide a remote control locking / unlocking key storage box, a remote control locking / unlocking key storage system and a disaster countermeasure support system linked with a simultaneous alarm for realizing the opening of a shelter or the like without delay when a disaster occurs.SOLUTION: In this alarm cooperation remote control locking / unlocking key storage system, a remote control locking / unlocking box 7 incorporates a GPS, and transmits a position coordinate to an alarm cooperation remote control locking / unlocking key storage system management server 3 by an Internet communication service 5. The alarm-associated remote control locking / unlocking key storage system management server has a function of automatically transmitting an unlocking signal to the remote control locking / unlocking key storage box with a simultaneous alarm alert as a trigger through the simultaneous alarm system 2, communicates with the remote control locking / unlocking key storage system terminal 4 accessible from a personal computer of a local government, a rescue support person related to a shelter, or a mobile terminal of a person concerned, and can browse a locking / unlocking state of the remote control locking / unlocking key storage box and remotely control locking / unlocking.SELECTED DRAWING: Figure 2

A method for authentication between a first party and a second party is disclosed. This method comprises generating a current shared key by exchanging one or more messages between the first party and the second party, and authenticating the current shared key based on a previously authenticated shared key. In some examples, the current shared key may be authenticated based on both the previously authenticated shared key and the current shared key, and / or on at least one secret value obtained by the first party and / or the second party. In some examples, authenticating the current shared key comprises exchanging one or more messages between the first party and the second party, at least one of which is generated based on one or more of the current shared key, the previously authenticated shared key, and at least one secret value. In some examples, if it is determined that the current shared key is authenticated, the current shared key may be stored for use as the previously authenticated shared key when authenticating a new current shared key.

The application discloses a transformer substation key intelligent management machine and relates to the technical field of electric power operation and inspection.The machine comprises a device shell, a key storage module and a transformer substation key.The device shell comprises a management machine shell body, the inside of the management machine shell body is provided with a key storage area, and the management machine shell body is provided with a shell panel through a hinge connection.The shell panel is opened and closed with the management machine shell body through a panel handle.The key storage module is uniformly arranged in the key storage area.In the application, the position of the required key can be directly displayed through the key intelligent management machine, the time for searching the key is greatly reduced, the consistency of the key, the storage position and the label can be automatically identified, the return of the key is determined, the correctness is prevented, the state is prompted through a state display lamp, the operation and maintenance personnel and the key taking personnel are effectively prompted to reasonably manage the key, and the standardization of the transformer substation key is ensured.

The invention discloses a server quantum key storage system combined with a trusted computing module, and relates to the technical field of quantum communication network security. The deeply fused trusted computing module is integrated on the server mainboard; the key storage unit is arranged on the server mainboard or is in communication connection with the server mainboard; and a key management engine. According to the server quantum key storage system combined with the trusted computing module, the risk that key data are exposed in an external interface or a system memory in a plaintext form is fundamentally avoided. Meanwhile, multiple independent verification and verification rules are applied to each state transition of generation, storage, use, backup, recovery and destruction of the secret key by a closed-loop management model based on a dynamic security state machine implemented by the system, so that the security constraint of single secret key operation is strengthened, and active and coherent management and control of the full life cycle of the secret key is realized.

This invention discloses a closed-loop management and method for the entire lifecycle of enterprise strategic planning, relating to the fields of enterprise information management and network security technology. It involves acquiring the enterprise strategic plan and creating a separate version after each change; encrypting the version and obtaining a hash fingerprint; storing the hash fingerprint and unique version number in a decentralized manner; storing the encrypted version and key on a cloud server; when a user accesses the platform, network traffic characteristics are collected and input into a network security analysis model trained by a spatially limited multi-stage exploration algorithm to determine the security monitoring results; if secure, the target version data is scheduled and its integrity is verified using the decentralized hash fingerprint; after successful verification, the data and the key encrypted with the user's public key are securely transmitted to the user. This achieves absolute tamper-proof and closed-loop traceability of the strategic planning version, and improves the accuracy of network environment perception through a multi-stage exploration algorithm, constructing a highly secure data access and transmission defense line.

The invention discloses an encrypted information management system based on big data, and relates to the field of big data. Comprising an information acquisition secret-pre-involved matching judgment module, an information multi-section division encryption matching module, an information encryption number segment multi-dimensional combination generation module, a single-day encryption number segment out-of-order processing module, a multi-key storage management control module and an information management control platform. The method comprises the following steps: constructing a multi-time window encrypted information data queue, performing multi-dimensional cryptographic combination on an encrypted number segment allocated to each time window and a characteristic value of collected information in the window, performing strong association on a generated time period key and original data content, and simultaneously performing strong association on the original data content by using a random sequence with the date of the day as a seed, out-of-order combination is carried out on original time sequences of all time windows of the whole day, time period secret keys are randomly confused, and a multi-level cryptographic processing chain including time period feature extraction, encryption number segment binding, information multi-dimensional fusion, time sequence confusion and date synthesis is constructed.

The application provides a chip security key protection method and system against side channel attacks, relates to the technical field of chips, and comprises the following steps: obtaining a key operation request, performing address space mapping based on a dynamic mapping rule to obtain encrypted key data and decryption, fragmenting key intermediate data and allocating independent processing channels for decoupling operation, injecting a time-varying noise signal to mask the association between the key and physical characteristics, and finally recombining and reversely converting to generate a final key output. The application effectively resists side channel attacks such as power analysis and electromagnetic analysis, and improves the security of the key storage and operation process.

A system can store a first encryption key for a first data chunk of a log filesystem in a first virtual chunk extent that comprises first virtual pointers that point to the first data chunk, wherein the first data chunk is encrypted with the first encryption key. The system can, based on performing garbage collection on the first data chunk, to produce surviving data that remains from the first data chunk after the garbage collection, move the surviving data to a second data chunk, wherein the surviving data is encrypted in the second data chunk with a second encryption key, wherein the second encryption key is stored in a second virtual chunk extent corresponds to the second data chunk, and delete the first virtual chunk extent while refraining from deleting the first data chunk, wherein, after the deleting, the first encryption key is deleted.

Method for operating a motor vehicle system (1), comprising at least one motor vehicle (3) and a key arrangement (2), wherein the respective motor vehicle (3) has an air conditioning system (4) for air conditioning the motor vehicle (3), wherein the key arrangement (2) for the respective motor vehicle (3) has an associated vehicle key (7) and at least one key storage compartment (8) for storing at least one of the at least one vehicle key (7) outside the associated motor vehicle (3), wherein the removal of the respective vehicle key (7) from the at least one key storage compartment (8) is detected and subsequently the air conditioning system (4) of the motor vehicle (3) belonging to the removed vehicle key (7) is activated for preconditioning the motor vehicle (3), characterized in that an associated delay duration is specified for at least one of the at least one motor vehicle (3).wherein the air conditioning system (4) of this motor vehicle (3) is activated after the delay period has elapsed when the associated vehicle key (7) has been removed from the key holder (8), and that the delay period is individually changed for at least one of the at least one motor vehicle (3).

1. Name of the product in this design: Intelligent storage cabinet for vehicle keys. 2. Purpose of this design: For storing vehicle keys; the storage cabinet identifies the characteristics of the people storing and retrieving vehicle keys to determine whether they have been drinking alcohol; thus effectively preventing drivers from driving under the influence of alcohol. 3. The key design feature of this product is its shape. 4. The image or photograph that best illustrates the design's key points: a 3D model.

The invention provides a quantum key storage and use method based on a mobile terminal, after a security medium is accessed to a charging terminal, the security medium generates a medium private key and a medium public key, the charging terminal generates a charging request and sends the charging request to a secret service platform, and the secret service platform generates to-be-charged data and sends the to-be-charged data to the charging terminal. The security medium stores a first key ciphertext and a charging key ciphertext, after the security medium accesses the use terminal, the security medium transencrypts the first key ciphertext based on the complete public key to obtain a second key ciphertext, stores the second key ciphertext and the charging key ciphertext in a local database, and after the security medium is moved out, stores the charging key ciphertext in the local database; and the using terminal obtains the first private key, the second key ciphertext and the charging key ciphertext, negotiates with the collaborative server to decrypt the charging key ciphertext to obtain the charging key, and performs session encryption based on the session key and the charging key. According to the application, through key charging, key transmission and key use processes, the user experience is improved while the intrusion risk is prevented.

The present invention relates to an offline mode Near Field Communication (NFC)-based FIDO2 authentication system for door and turnstile access control. This system comprises a FIDO2 security key, an NFC reader, and a door controller. The FIDO2 security key stores user credentials and performs cryptographic operations, while the NFC reader communicates with the key to authenticate users. The door controller, connected to the NFC reader, controls the door lock mechanism based on authentication results. The system operates without continuous network connectivity, providing secure offline authentication. The NFC reader performs several operations: it receives credential data from the FIDO2 security key, generates and transmits a cryptographic challenge, receives and verifies a signed response using a pre-stored public key, extracts a Physical Access Control (PAC) number upon successful authentication, and transmits the PAC number to the door controller to grant or deny access.

1. The name of the design product: key storage rack. 2. The use of the design product: storage rack for storing articles and keys. 3. The design features of the design product: in shape. 4. The picture or photo that best indicates the design features: perspective view.

Disclosed is an encryption and decryption device and method, belonging to the field of data processing, which comprises a cache module, a control module and an AES algorithm module. The cache module comprises a first cache unit and a second cache unit, and the first cache unit stores a first extended key. The control module is connected with the cache module and the AES algorithm module, and is configured to, in the process of the AES algorithm module encrypting or decrypting a first data packet using the first extended key, receive a second data packet, obtain a key corresponding to the second data packet, generate a second extended key based on the key corresponding to the second data packet, store the second extended key in the second cache unit, and send the second data packet to the AES algorithm module. The AES algorithm module is connected with the cache module, and is configured to encrypt or decrypt the second data packet using the second extended key. The device can improve the efficiency of processing data packets.

This application provides a cross-regional key synchronization system and method, electronic device, storage medium, and product, belonging to the field of cloud security. The system includes a first key management device and a first cryptographic device located in a first region, and a second key management device and a second cryptographic device located in a second region. The first key management device controls the first cryptographic device to generate a target device key and device parameter information; it then sends the device parameter information to the second key management device. The second key management device controls the second cryptographic device to generate the target device key based on the device parameter information. The first key management device generates a first domain key for encrypting user keys, calls the first cryptographic device to encrypt the first domain key using the target device key, stores the encrypted first encrypted domain key, and synchronizes the first encrypted domain key to the second cryptographic device. This application enables cross-regional key synchronization.

The application provides a double-key encryption file access control method, system, device and medium, and relates to the technical field of computer information security, and comprises the following steps: a file key generation and encryption step: setting the authority of a file to be controlled, and double-encrypting the file content; a file access control step: double-decrypting the file, controlling the file operation by an encryption and decryption driver, and uploading the corresponding operation to a server; and a file authority and key management step: generating a file random key, and storing file authority data.The application can improve the security of the file itself, and realizes the ability of centralized management of the administrator on the key.

The invention discloses computing equipment, and relates to the field of computers, the computing equipment comprises a processor and a memory, the memory comprises a memory controller, a key generator and a memory, the processor is connected with the memory controller, the memory controller is respectively connected with the key generator and the memory, and the processor is used for operating the key generator and the memory in the process of operating processor tasks. Initiating a data access request to a memory controller; the memory controller is used for responding to the data access request and encrypting and decrypting the target task data by using a data key corresponding to the target task data to obtain reference task data; calling a memory to execute a target access operation on the reference task data; the key generator is used for generating a data key; and the memory is used for storing the task data of the processor task for the processor, so that the technical problem that the data security of the computing equipment is insufficient is solved, and the technical effect of improving the data security of the computing equipment is achieved.

The invention discloses a key storage detection management type intelligent key cabinet and a detection method, and relates to the technical field of key cabinet application. A flat inserting gap is formed between the first plastic plate and the second plastic plate and used for horizontally inserting a key piece. The second plastic plate is provided with a rolling mounting groove and a communicated bottom side mounting notch, a plurality of magnetic rolling assemblies are arranged at the rolling mounting groove and comprise rotationally mounted plastic cylinder parts and radially distributed magnetic sheets embedded in the plastic cylinder parts, and corrugated bulges are arranged on the outer ring sides of the plastic cylinder parts. A bottom plate part is mounted at the bottom side mounting notch, an induction coil is embedded in the upper surface, the coil comprises a plurality of groups of magnetic induction conductors which are parallel to the magnetic sheet and are connected in parallel and a loop main lead, and a group of magnetic induction conductors are correspondingly arranged right below each plastic cylinder part. According to the key cabinet, the phenomenon that key judgment is abnormal due to external environment interference of existing photoelectric monitoring sensors is avoided, key storing and taking signals can be accurately and effectively judged, and intelligent monitoring management of key storing and taking of the key cabinet is facilitated.

It makes it easy to identify who took the keys, and even when multiple keys are being searched, the person who took them can be identified smoothly. [Solution] An RFID tag 12 is attached to the key 11, and an RFID reader 23a is installed in the key storage section 21 of the key management box 2. A face information input device 6 is provided to input a face image in order to enable the removal of the key 11 from the key management box 2. A face authentication server 4 has the face image information of the authorized person that has been input and determines whether the face image input from the face information input device 6 is that of the authorized person. A key management server 5 manages the removal / return of the key based on the reading information from the RFID reader 23a. The key management server 5 has a history storage unit 53 that stores the history of key removals of the key 11, and a display unit 51 that displays the status of the managed key 11. After a predetermined display operation, the display unit 51 displays a list of information on the persons who have removed the key 11 that has not been returned.

The application is suitable for the field of communication technology improvement, and provides an encryption communication method and system between EtherCAT slave nodes, which realizes encryption / decryption of EtherCAT messages at the hardware level by integrating OTP / non-volatile storage, encryption scrambling units and decryption scrambling units in the EtherCAT slave chip of the coupler and the I / O module; the encryption adopts XOR operation or AES algorithm, and the key is stored in the non-modifiable storage unit; meanwhile, an architecture parallel to the standard network is constructed, so as to ensure that the encryption communication does not affect the standard interaction between the slave node and the master station. The system solves the contradiction between "poor real-time performance of the private protocol" and "easy copying of the plaintext communication" in the prior art, realizes the effects of real-time lossless, strong communication exclusivity and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under Industry 4.0.

The invention relates to the technical field of key management, and discloses a key distributed storage and safe calling method and device in an optical fiber communication system, and the method comprises the steps: segmenting a composite key into a plurality of fragments through a threshold secret sharing algorithm, encrypting the fragments through a hardware feature code, storing the index information of the fragments in a block chain alliance chain, and carrying out the encryption through a hardware feature code; storing the encrypted fragments in an IPFS network, and establishing an association relationship between an index and a content addressing identifier; and during calling, identity authentication and permission verification are performed through the smart contract, the encrypted fragments are retrieved from the IPFS network, threshold recombination is performed to restore the key, and integrity is verified through hash comparison. Through a double-layer distributed architecture and a double-protection system, the problems of high single-point fault risk and high key leakage risk of centralized key storage are solved.

This invention discloses a general two-party unintentional signature method and system, belonging to the field of cryptographic protocol technology. The method includes: participants P1 and P2 jointly generating a signature public key; participants P1 and P2 jointly calculating a signature of the message, wherein the signature is known only to participant P1, and participant P1 uses the signature public key to verify the signature. This invention can both distribute key storage to avoid the risk of key leakage and prevent additional participants from obtaining the final signature content.