60 results about "Keystream" patented technology

The invention provides an inter-micro-service dynamic secure communication method and device based on chaos cryptography. The method comprises the steps that a service provider instance registers a public key and chaos initial parameters to a service registration center; before calling, the service consumer instance acquires a public key and a chaos initial parameter of a target service provider instance from a service registration center; the service consumer instance performs key negotiation with the acquired public key by using a private key of the service consumer instance to determine a shared key; performing key derivation on the shared key and the chaotic initial parameter to generate an initial key; respectively using the initial keys to initialize the chaotic system so as to generate synchronous encryption key streams; and the two communication parties perform real-time stream encryption and decryption on the communication data between the micro-services by using the encryption key stream. The unpredictability of a chaotic system and modern cryptography can be combined, and a micro-service design mode is deeply integrated, so that a lightweight and high-security communication security mechanism which does not need to share a key in advance and can be adaptive to dynamic change of service is realized.

In some implementations, an apparatus may receive a first copy of payload data and a corresponding first cyclic redundancy check (CRC) code, and a second copy of the payload data and a corresponding second CRC code. Each of the first copy and the second copy may be encrypted with an identical keystream. The apparatus may decrypt, using the keystream, the first copy to obtain first decrypted data and the second copy to obtain second decrypted data, append the first CRC code to the first decrypted data to form first data, append the second CRC code to the second decrypted data to form second data, determine one or more bit positions, at each of which the first data and the second data have bit values different from each other, and correct, based on the one or more bit positions, an error contained in the first data.

A system and method are disclosed for securely transferring or storing protected working memory outside an owner thread while maintaining full encryption throughout its lifecycle. The protected working memory has an encrypted data component and a keystream component containing dynamically updated encryption information used for per-cycle decryption and re-encryption. A hardened cryptographic subsystem, such as a Trusted Execution Environment (TEE), Secure Element (SE), TPM, or HSM, performs authenticated encryption using device-bound key material to wrap either (i) the keystream component alone or (ii) the entire protected working memory blob. The wrapped object is suitable for storage or transfer across threads or in external memory, without exposing plaintext or keystream material. When restoring, an authorized owner thread supplies a key handle to the hardened subsystem to securely decrypt and reconstruct the protected working memory only within a guarded heap. At no point are plaintext contents or keystreams available to the operating system or user-accessible memory.

The invention discloses an image encryption method and device, a program product and a medium, relates to the technical field of image processing, and provides an image encryption method aiming at the problem of insufficient security of image encryption by a traditional RNA (Ribonucleic Acid) algorithm to realize image encryption through combination of Arnold transformation and an RNA encryption algorithm. Moreover, in the image encryption process, a chaotic sequence is used to determine control parameters of Arnold transformation and a scrambling rule and a diffusion algorithm of an RNA encryption algorithm, so that the unpredictability of the algorithm is increased, and the encryption effect is improved. The chaotic system is high in key stream generation speed, sensitive to initial conditions and suitable for generating high-complexity keys at low cost. And the RNA encryption algorithm can quickly search the optimal encryption parameter, so that the calculation redundancy is reduced. The image encryption scheme provided by the method is high in complexity, relatively large in key space and good in security, can resist various attacks, and has very considerable application prospect and value for encryption transmission of the image.

This invention relates to the field of communication encryption technology, and more particularly to a communication encryption method based on the EnhancedShockBurst protocol. The method includes the following steps: reading plaintext data to be sent and obtaining the current value of the internally stored packet counter; padding the plaintext data to obtain a plaintext data block; calculating and generating a session key using a preset root key and the current packet counter value as input parameters; performing round key expansion processing on the session key to obtain a round key sequence; generating a key stream with the same length as the plaintext data block using the round key as input; performing an XOR operation between the key stream and the plaintext data block to obtain an encrypted ciphertext data block; and extracting the packet counter value as a key identifier, appending it to the ciphertext data block to form an encrypted payload. This invention achieves real-time security protection of communication data through dynamic round key generation and byte-by-byte XOR encryption.

The application discloses an automobile remote control key encryption method based on an AES algorithm, and relates to the technical field of intelligent automobiles, and comprises the following steps: obtaining manufacturer information, wherein the manufacturer information is a manufacturer authentication certificate and a manufacturer code set by a manufacturer; generating a serial number, wherein the serial number is divided into multiple plaintext blocks, and a first encrypted information is preliminarily encrypted by combining the multiple plaintext blocks with the manufacturer information; the first encrypted information is 108 bits; the first encrypted information is subjected to a bit complement encryption to generate second encrypted information, the serial number is combined with the manufacturer code to form the first encrypted information, the first encrypted information is complemented to 128 bits, the same manufacturer can encrypt different ciphertexts, and the third encrypted information is generated by combining a ciphertext stream and a key stream, so that the generation and combination of the third encrypted information can also not be according to fixed bits, the combination mode is more flexible, and statistical analysis attacks are effectively prevented.

The invention discloses a high-dimensional chaotic key stream generation method and device based on closed-loop dynamic parameter control, a storage medium and a data chaotic encryption method. In the key stream generation method, multiple iterative mapping is performed on respective initial values through multi-stage one-dimensional chaotic mapping, and control parameters of next-stage one-dimensional chaotic mapping iteration are formed based on input of each stage of one-dimensional chaotic mapping through transformation operation. And forming a control parameter of the first-stage one-dimensional chaotic mapping iteration based on the input of the last-stage one-dimensional chaotic mapping. The device and the storage medium are used for implementing the key stream generation method. In the data chaotic encryption method, a high-dimensional chaotic key stream is generated based on the high-dimensional chaotic key stream generation method, a key is obtained based on the high-dimensional chaotic key stream, and the key and a plaintext are subjected to XOR operation to obtain chaotic encryption data. According to the method, the high-dimensional chaotic key stream under any-dimensional chaotic mapping can be constructed, the chaotic performance is remarkably improved, and the hardware cost is low.

This invention provides an encrypted retrieval method, system, and storage medium for data privacy protection. The retrieval method includes: dividing document set keywords into low-frequency and high-frequency subsets according to a frequency threshold; generating deterministic tokens for keywords using a key-based pseudo-random function and storing the correspondence between tokens and keyword types; for low-frequency keywords, constructing a static primary index using a minimum perfect hash structure, mapping tokens to hash buckets, and storing pointers to a list of encrypted document identifiers; for high-frequency keywords, constructing a dynamically updated secondary index using encrypted key-value storage, storing the mapping between tokens and encrypted document identifiers; during retrieval, the user generates a deterministic token for the keyword to be searched and uploads it as a trapdoor; the server queries the primary and secondary indexes according to the type; and the document identifiers generate a key stream using a derived symmetric key and an initialization vector, and are then XORed bitwise.

The invention discloses a video region-of-interest encryption method and system based on semantic perception multi-target detection and an enhanced chaotic system in the technical field of video processing and information security. The method comprises the following steps: generating a chaotic sequence as an encryption key stream by using an enhanced coupling chaotic system; according to an input video frame and an interested area text prompt defined by a user, identifying an interested area in the video frame by utilizing a semantic perception target detection network, and outputting coordinates of the interested area; according to the coordinates of the region of interest, performing classification marking on blocks of a video frame by using a video encoder to obtain region of interest blocks; and according to the encryption key stream, encrypting the region-of-interest block by using a zero-bit growth region-of-interest selective encryption strategy. According to the method, the problems that the recognition type of the region of interest is limited and the encryption key space is insufficient in the traditional method are solved, and the security and the flexibility are improved while the video format compatibility is ensured.

A data transmission method and apparatus are provided. When the data transmission method is applied to a first device, the method includes: when a fresh value corresponding to a message to be sent by the first device is a first fresh value, updating an encryption key from a first key to a second key, and generating a first keystream based on the first fresh value and the second key; encrypting first data based on the first keystream, to obtain the encrypted first data; generating a first message based on the encrypted first data and the first fresh value; and sending the first message to a second device.

This disclosure provides a chaotic video encryption method based on a sliding encryption window, comprising: determining the sliding step size and dimensions of the encryption window according to the correlation between the initial value of the key stream and the frame content; dividing the video sequence frame by frame into a sliding encryption window to obtain the encryption region corresponding to each frame; dynamically adjusting the chaotic system parameters based on the pixel information within the encryption window to generate an encryption key stream; and applying the key stream to the pixels within the corresponding encryption window for chaotic scrambling and encryption. The scheme of this disclosure can provide feedback control of the encryption window division strategy based on the correlation between the initial value of the key stream and the frame content, thereby solving the problem of insufficient resistance to brute-force attacks caused by limited key space.

The invention provides a chaotic encryption and control method for an aircraft instruction, and relates to the technical field of information security, and the method comprises the steps: receiving plaintext data of an aircraft control instruction, respectively injecting the plaintext data into state equations of a plurality of chaotic systems, and generating a plurality of paths of key streams; performing internal permutation operation on the multiple paths of key streams by using predefined permutation vectors respectively, and performing external interleaving operation on the multiple paths of key streams subjected to internal permutation by using an interleaving sequence specified by predefined interleaving vectors so as to combine and generate a path of composite key stream; encrypting the plaintext data by using the composite key stream to obtain a ciphertext instruction, and sending the ciphertext instruction to an aircraft control end; and at the control end, decrypting the ciphertext instruction based on a preset permutation vector and an interleaving vector, restoring the plaintext data, and generating an aircraft control signal through an output feedback control algorithm according to the decrypted plaintext data.

The application belongs to the technical field of cryptography and data security, and discloses a ciphertext conversion method and system for an Internet of Things scene, which comprises the following steps: a key management end is initialized to generate series parameters; a client encrypts original plaintext data by using a homomorphically friendly symmetric encryption algorithm; a server constructs a homomorphic key stream; the server converts symmetric ciphertext into homomorphic ciphertext; and the server performs subsequent homomorphic calculation. According to the application, direct calculation of encrypted data can be realized without plaintext decryption of data on the server side, so that the risk of data leakage is reduced; meanwhile, the introduction of symmetric encryption reduces the communication overhead of the client, improves the overall efficiency of the system, and is suitable for a multi-party collaborative trusted calculation scene in the Internet of Things scene.

This invention discloses a microwave frequency conversion system based on quantum computing, comprising: a microwave acquisition unit for acquiring multi-beam microwave signals and performing quantum state encoding on the multi-beam microwave signals based on quantum Fourier transform to obtain the quantum spectral tensor space corresponding to the multi-beam microwave signals; a quantum encryption unit for performing quantum parallel processing of the compressed quantum state data and the encryption key stream based on controlled phase rotation gates to obtain encrypted quantum state data; and a frequency conversion unit for adjusting the qubit coupling strength of the encrypted quantum state data based on a quantum-controlled pulse sequence to obtain the multi-beam microwave signals after frequency conversion. This invention achieves more efficient spectral analysis and processing through quantum Fourier transform, thereby improving the speed of signal processing.

The invention belongs to the field of image encryption and privacy protection, particularly relates to a face region selective encryption method based on a CNN and a chaotic system, and aims to realize efficient and safe encryption of a portrait image. The method comprises the following steps: detecting a portrait image by adopting a multi-task cascade convolutional network, obtaining bounding box coordinates of a face region, segmenting the image into the face region and a non-face region according to the bounding box coordinates, and recording position information corresponding to the bounding box coordinates. And extracting a feature vector from the face region obtained by segmentation based on a convolutional neural network to generate a key, and performing multi-level encryption on the face region in combination with a three-dimensional multi-module nonlinear feedback coupling chaotic system. And generating a key stream by adopting a two-dimensional logic mapping model, and encrypting a non-face region through an XOR operation. And according to the position information, backfilling the encrypted face region data and the encrypted non-face region data to corresponding positions, and splicing to form a complete encrypted image and storing the complete encrypted image.

The invention discloses a two-dimensional code generation and recognition method and system based on a user-defined graphic structure, and relates to the technical field of computer data processing. According to the method, feature extraction is carried out on a user-defined graphic structure to generate a high-dimensional feature vector, and an encryption key stream is generated based on the vector and used for encrypting original data. And the encrypted data is mapped to the graphic structure to generate the two-dimensional code. During identification, features are extracted from the scanned graph to regenerate a key stream, and inverse operation is performed on the encrypted data to decrypt the encrypted data. The method has the beneficial effects that the visual features of the graph and data encryption are deeply bound, so that decryption failure is caused by counterfeiting or tampering of the graph, and the security of counterfeiting prevention and tampering prevention is provided. The invention further provides a system for executing the method.

The application discloses a method and system for fusing quantum key one-time pad in a TLS record layer, and relates to the technical field of quantum security communication, which comprises the following steps: a client and a server perform a standard TLS handshake protocol, complete bidirectional identity authentication, negotiate encryption suite parameters, generate a unique session identifier, generate a classical key through a classical key exchange algorithm, and declare a quantum key enhancement mode in a handshake message extension field; after the handshake is completed, the client and the server are connected to a locally deployed quantum key manager through a secure channel respectively, submit the unique session identifier for session binding, obtain corresponding quantum key stream identifiers, exchange information of the quantum key stream identifiers of both parties, and perform one-time pad encryption transmission; the method effectively prevents sensitive data leakage and tampering risks without changing the structure of the TLS protocol stack, and improves the information transmission security strength.

The invention discloses a dynamic spiral and bidirectional diffusion image encryption method based on four-dimensional chaos, and relates to the technical field of information security. Comprising the following steps: generating a high-entropy key stream related to a plaintext image based on SHA-512 Hash and a four-dimensional chaotic system; dynamically controlling the direction, the starting point and the step length of spiral traversal by using the key stream, and carrying out layered spiral scrambling on image pixels so as to damage spatial correlation; and performing forward and backward bidirectional diffusion on the scrambled image by using two independent chaotic key sequences in combination with a nonlinear feedback mechanism so as to realize confusion and diffusion of global pixel values. Through the synergistic effect of the chaotic system, the dynamic scrambling and the bidirectional diffusion, the problems that the randomness of a low-dimensional chaotic system is insufficient and the residual correlation of static scrambling and the avalanche effect of unidirectional diffusion are weak are solved, and the security, the randomness and the anti-attack capability of image encryption are remarkably improved.

The invention provides a data encryption system and method based on microwave transmission, and relates to the technical field of data encryption methods, and the method comprises the steps: constructing a Lorenz chaos model through employing a single-variable time delay method, carrying out the iterative updating of a chaos variable value in the Lorenz chaos model through employing a fourth-order Runge-Kutta method, and simulating and generating an unpredictable continuous chaos trajectory; symbol periods of the chaotic trajectory are set, and a key stream corresponding to each symbol period is generated; and calculating the phase deviation of the current symbol period by adopting modular operation, calculating the frequency deviation of the current symbol period by adopting a dynamic frequency modulation method, and generating a microwave carrier signal. The key stream based on the Lorenz chaos model has initial value sensitivity and long-term unpredictability, and an independent dynamic key is generated in each symbol period, so that the global security is not influenced; through modular operation and dynamic frequency modulation, an encrypted signal has noise-like spectrum characteristics and time-varying characteristics.

The embodiment of the invention provides a data encryption and decryption method and system based on multiple encryption modes of WAPI. The method comprises the following steps: acquiring audio and video data; adding random noise to the audio and video data to obtain target audio and video data; analyzing the target audio and video data to obtain an analysis result; under the condition that the analysis result represents that the secret key and the cache data are updated, obtaining a session secret key at the current moment, generating secret key stream data based on the session secret key at the current moment, and caching the target audio and video data to obtain target cache audio and video data; and through the key stream data, performing symmetric encryption processing on the target cached audio and video data to obtain target encrypted audio and video data, and sending the target encrypted audio and video data to the target device, so that the target device decrypts the target encrypted audio and video data to obtain target decrypted audio data. According to the scheme, the security of data transmission can be improved.

The application discloses a data processing method, which comprises the following steps: generating a plurality of initial matrices with the same size based on a key seed; performing a plurality of rounds of first operation on the plurality of initial matrices respectively through a vector instruction of an assembly language until a preset number of operations is reached, so as to obtain a target matrix corresponding to each initial matrix; generating a key stream corresponding to the key seed based on the plurality of target matrices; and respectively encrypting plaintext data to be encrypted through the key stream, so as to obtain ciphertext data corresponding to the plaintext data, thereby improving the efficiency of generating the key and the efficiency of encryption and decryption.

The invention relates to the technical field of video security, solves the problem that the statistical security of a key stream is affected by periodic degradation of a pseudo-random sequence due to discretization errors in the prior art, and particularly relates to a monitoring video encryption transmission method, which comprises the following steps of: obtaining a monitoring video stream to be transmitted and performing framing processing to obtain an original video frame; the method comprises the following steps: performing block frequency domain transformation processing on an original video frame, generating a frequency domain coefficient matrix containing a plurality of transformation coefficient blocks, extracting an image feature value of the original video frame, mapping the image feature value into an initial state parameter, and initializing a preset high-dimensional hyper-chaotic system model by using the initial state parameter. According to the method, a one-time pad dynamic encryption mechanism is realized by establishing the nonlinear coupling relationship between the video content and the encryption key, so that the encryption process has extremely high sensitivity, the static periodicity of the key stream is fundamentally eliminated, plaintext attacks can be effectively resisted, the anti-attack capability is enhanced, and the security of the key stream is improved.

The application discloses a kind of security storage method and system based on multi-dimension encryption, belong to data security technical field.The application first converts original text into UTF-8 encoding and segmented processing, extracts the segment feature and global feature of each segment, generates label vector according to the proportion of two kinds of features;Determine three kinds of encryption parameters of byte scrambling, diffusion intensity and key shift amount based on label vector, complete segment scrambling by scrambling mapping function to obtain scrambling sequence;Global perturbation key sequence and local perturbation key sequence are generated by global feature and segment feature respectively using SHA-256 hash function, first and second master key stream are obtained after adjusting by key shift amount parameter;Finally, the scrambling sequence is encrypted by double master key stream, and diffusion enhancement is realized by combining diffusion intensity parameter, to obtain encrypted security storage sequence.The application effectively improves the encryption security of data storage.

This application discloses a national cryptographic algorithm core, a data encryption method, an apparatus, and an electronic device, relating to the field of data encryption technology. The method includes: transmitting an initial key and data to be encrypted to a control logic module via an arbitrator based on a preset priority and a first enable signal; generating a key stream corresponding to the initial key via a key protection module; and encrypting the data to be encrypted using the key stream via a data encryption module to obtain ciphertext data. This addresses the problems of low data throughput, low encryption efficiency, and the risk of key leakage during data encryption. The national cryptographic algorithm core utilizes an arbitrator to control and sort the initial key and data to be encrypted, enabling all national cryptographic algorithms in the data encryption module to run simultaneously, thus improving the data throughput and computational efficiency of the algorithm core. The key protection module generates a key stream, which is then used to encrypt the data, preventing the actual key used by the algorithm core from being leaked, thereby enhancing the security of the algorithm core.

The invention provides a small-state stream cipher implementation method based on a conditional selection function, which comprises the following steps of: connecting an LFSR and an NFSR in series, storing an initial key by using a nonvolatile memory, and selecting bits in the nonvolatile memory by using the conditional selection function to be used for a state updating process of the LFSR and the NFSR; partial states of the LFSR and the NFSR are selected to pass through a high-nonlinearity output function, and output bits are obtained; a dynamic initialization technology is adopted in the algorithm initialization process, and meanwhile output of an output function participates in updating of an internal state; and outputting the key stream through iteration, and completing data encryption and decryption. According to the method, through a conditional selection function and a dynamic initialization technology, the algorithm is ensured to be lightweight, and meanwhile, the method has relatively high safety strength.

The invention relates to the technical field of cryptography, and discloses a stream cipher algorithm and device based on a multilayer filter, and the device comprises an initialization algorithm and a key stream generation algorithm. The initialization algorithm fully fuses a seed key and an initial vector through a multiplexing key stream generation algorithm. According to the key stream generation algorithm, the unpredictability of the key stream is increased through an extension-diffusion confusion-compression structure, so that the generated password sequence has an excellent pseudo-random statistical characteristic, and known cryptographic analysis methods such as algebraic attacks and related attacks can be effectively resisted. The algorithm does not depend on special hardware and has the advantage of low use cost; and high-speed encryption and decryption operation can be realized in a lightweight environment, and the requirements of 5G and even 6G times on encryption and decryption speeds can be met.

The invention discloses a secure storage method and system based on multi-dimensional encryption, and belongs to the technical field of data security. The method comprises the following steps: firstly, converting an original text into UTF-8 codes, performing segmentation processing, extracting segment features and global features of each segment, and generating label vectors according to the proportion of the two types of features; determining three types of encryption parameters including byte scrambling, diffusion intensity and key shift amount based on the label vector, and completing segmented scrambling through a scrambling mapping function to obtain a scrambling sequence; generating a global disturbance key sequence and a local disturbance key sequence through the global features and the segment features by using an SHA-256 hash function, and obtaining a first main key stream and a second main key stream after key shift parameter adjustment; and finally, encrypting the scrambling sequence through double master key streams, and realizing diffusion enhancement in combination with diffusion intensity parameters to obtain an encrypted secure storage sequence. According to the invention, the encryption security of data storage is effectively improved.

The application discloses a data encryption method for video communication and relates to the technical field of communication and information security. The application allocates a monotonically increasing FSN for each frame at the sending side, introduces anchor numbering AID and anchor digest AD, embeds a resolvable synchronization mark SM in the encrypted data, enables the receiving side to independently reconstruct the frame sub-key stream at any reachable frame, does not need to depend on the state of the last frame, fundamentally alleviates the decryption out-of-sync and long-time mosaic caused by burst packet loss, ensures the independent decryptability and integrity verification of the slice under disordering and rearrangement based on the packet-level unique counter formed by the FSN and the slice number, avoids the problem that the subsequent packet cannot be decrypted, repeatedly carries the SM across frames and supports interleaving / redundancy configuration, improves the recoverability of the synchronization information in the continuous frame loss scene, and reduces the additional resynchronization signaling and time delay jitter.

The invention discloses a data transmission method and device based on a quantum key, equipment and a medium, relates to the technical field of financial disaster recovery, and is applied to a first gateway corresponding to a production center in a communication management system, and the communication management system further comprises a second gateway corresponding to a disaster recovery center. The method comprises the following steps: determining financial data to be transmitted from a production center, and determining a current key slice from a key management server; the current key slice is a key slice of the quantum key; encrypting the financial data to be transmitted by using the key stream corresponding to the current key slice; and transmitting the corresponding ciphertext data to a second gateway, so that the second gateway decrypts the ciphertext data based on the current key slice, and submits the decrypted data to a disaster recovery center. Therefore, the encryption of financial data can be realized in combination with the key slice of the quantum key and the key stream corresponding to the national secret algorithm in a disaster recovery scene; the ecological fusion of the quantum key and the national secret algorithm is expanded, and the security of financial data can be guaranteed.