7 results about "Key tree" patented technology

This invention discloses a multi-agent communication key management method and system adapted to dynamic topologies, relating to the field of multi-agent communication security technology. It addresses the problems of low scalability and high failure risk in the existing centralized key generation and distribution processes of agent keys. The invention includes: the role of the GC can be elected and rotated among multiple agents, avoiding physical single points of failure; and it establishes a multi-agent group key system based on a logical key tree. When an agent joins or leaves, only logarithmic-level key updates are required, reducing the communication overhead of key distribution from O(N) to O(logN), significantly improving the system's efficiency and scalability when handling large-scale, highly dynamic groups.

The invention relates to the technical field of network communication security, in particular to a hierarchical broadcast key management method and system applied to the Internet of Things, an intelligent sensor network and a distributed system. Comprising a root node, an intermediate node and a leaf node, the system collects network state parameters such as network density and node average energy, calculates a tree balance factor and dynamically adjusts a key tree structure, the network is divided into a plurality of security domains, each domain has an independent key system and comprises a broadcast key, a forward key and a communication key, a domain key is decomposed into a plurality of key components, and the key components are distributed in the security domains. According to the method, a subtree key is generated in a sectional type combined key derivation mode, a node state is monitored in cooperation with a self-repairing mechanism, key fragment reconstruction is triggered when a failure or key leakage occurs, the expandability of the system is remarkably improved, the network capacity is increased in an exponential level, and the network communication safety performance is effectively improved.

The invention discloses a stateless anti-quantum signature method based on a hash function, and the method comprises the steps: obtaining a to-be-signed message M and a preset key tree which corresponds to a private key set {sk1, sk2,..., sk2h}; performing hash operation on the message M to be signed to obtain a message hash value m = H (M); calculating a key index value i based on the message hash value m and the height value h of the key tree; and in a private key set corresponding to the key tree, calling a leaf node private key ski corresponding to the key index value i to sign the message to obtain a signature result. A hash value of a to-be-signed message is calculated, a key index value is calculated in combination with a key tree height, and a private key of a corresponding leaf node is called to complete signature, so that stateless operation is realized, and private key leakage caused by non-updated state or repeated use is avoided; and the calculation logic is simple, the key state does not need to be managed, and the implementation complexity and resource occupation are reduced.

The application discloses a kind of student intelligence mental monitoring and protection system, it is related to data transmission field.The system, including psychological monitoring data collection module, key distribution module, key distribution optimization module, key configuration management module, key configuration management optimization module and secondary encryption module: the student psychological monitoring data collected is pre-stored to key configuration attribution, is configured with the student psychological monitoring data pre-stored in key configuration attribution, after configuration is completed, student psychological monitoring data is transmitted to cloud storage server and is stored.The application is by the distribution of key according to key distribution quantization value to carry out real-time optimization, the relevant parameter of key tree is dynamically adjusted by the configuration management quantization value of key, and the student psychological monitoring data of secondary encryption protection is carried out to easy leak, and then the effect of improving the privacy protection of student psychological monitoring data is realized, solve the problem of insufficient privacy protection of student psychological monitoring data in prior art.

The invention discloses a secure communication authentication method for an electric energy meter, and aims to solve the problems that only link encryption is carried out in a multi-level network from an electric meter to a collector to a master station, the collector is visible and changeable, and packets are easy to lose in small-frame fragmentation. According to the method, the entity proof token and the mixed public key are packaged and bound in a hard manner, the key tree is constructed from the object level to the fragment level, the Merkel fragment commitment is used for generating the fragment level initialization parameter and the authentication related data, and the authentication encryption algorithm with the synthesis initialization vector characteristic is used for encryption and integrity protection. And meanwhile, a trusted execution environment monotonic counter is used for preventing rollback, and a system type forward error correction enhancement recovery capability is introduced, so that the technical effects of real end-to-end authentication and encryption, fragment-level insertion modification prevention, rearrangement prevention, truncation prevention, whole message consistency verification and adaptation to out-of-order and packet loss scenes are realized.

The application relates to a cross-modal retrieval method supporting authorized access, and relates to the field of cloud computing security. A vector inner product encryption scheme FBIPE realizes the privacy of data and query requests, and an authorized key tree guarantees low-interactive authorized access. First, text / images in a database / query request are converted into text / image vectors by using a cross-modal hashing technology, and all the vectors are encrypted by using the FBIPE. Then, an independent key is generated for each vector in the database by using the authorized key tree, and the corresponding text / image vector ciphertext is re-encrypted by using the key. Finally, in the cross-modal retrieval process, authorized access is completed because the authorized key corresponding to unauthorized access data cannot be restored. The whole authorized cross-modal retrieval method is based on lightweight cryptography primitives, and the designed authorized key tree can realize low-interactive authorization, and the overall operation efficiency is high.

The invention belongs to the technical field of information security, and particularly discloses a multi-dimensional dynamic encryption and tracing method and system for a collaborative document, and the method comprises the steps: dividing the document into content units, generating a main encryption key and a unit key, and constructing a key tree; generating an authorization voucher in response to the authorization request, and performing cryptographic conversion on a unit key to obtain a re-encrypted authorization voucher; after the verification of the server, decrypting the complete view of the assembled document and embedding the watermark embedded with the encrypted information; when a leaked copy is found, watermark decryption identity and context information are extracted, and a leaked collaborator and an access session are traced; through organic combination of technical links such as multi-dimensional encryption, proxy re-encryption authorization, dynamic watermark rendering by a client, leakage traceability and the like, full-life-cycle closed-loop management from encrypted storage, permission distribution, safe use to leakage responsibility investigation of collaborative documents is realized, and the problem of a security window of permission change delay in a traditional key management scheme is solved.