113 results about "Keystream" patented technology

The invention discloses a data encryption method for multilevel key stream control in an industrial gateway, and particularly relates to the technical field of data encryption and network security. The method comprises the steps of obtaining a session identification code and communication context information; generating a first-level basic key based on the session identification code, and generating a multi-level key stream control matrix in combination with communication context information and a multi-source dynamic random factor; according to the hierarchical relationship of the matrix, key stream sequences of corresponding levels are distributed to data packets of different priorities, and the key stream sequences are switched or combined in real time according to data packet types, transmission paths and security policies in the encryption process, and time fragmentation processing and disturbance coding are executed; the encrypted data packet is sent through a multi-protocol forwarding module of the industrial gateway, and the receiving end carries out decryption by using the key stream control matrix; according to the invention, dynamic generation, hierarchical calling and safe switching of the key stream can be realized, and the data confidentiality, integrity and anti-attack capability of the industrial gateway in a complex network environment are remarkably improved.

The invention discloses a signal transmission method and device based on orthogonal matrix precoding. The method comprises the steps that four chaotic sequences X, Y, Z and W are generated through a four-dimensional chaotic model according to a key initial value; performing bit interleaving on the original data by using X and W to obtain first data; performing serial-to-parallel conversion and QPSK mapping to obtain a mapping signal; scrambling the subcarriers and symbols of the mapping signals by using Y and Z to obtain encrypted data; carrying out IFFT (Inverse Fast Fourier Transform) on the encrypted data, adding a cyclic prefix, and carrying out parallel-serial conversion to obtain an encrypted data stream; performing binary conversion and serial-parallel conversion on the key initial value to obtain a square matrix K, and shaping the square matrix K by using a public key to obtain a key matrix; performing serial-to-parallel conversion, QPSK mapping, IFFT, cyclic prefix addition and parallel-to-serial conversion on the key matrix to obtain a key stream; and performing linear superposition on the encrypted data stream and the key stream through power distribution to obtain a power division multiplexing orthogonal frequency division multiplexing signal, and transmitting the power division multiplexing orthogonal frequency division multiplexing signal.

The invention provides an inter-micro-service dynamic secure communication method and device based on chaos cryptography. The method comprises the steps that a service provider instance registers a public key and chaos initial parameters to a service registration center; before calling, the service consumer instance acquires a public key and a chaos initial parameter of a target service provider instance from a service registration center; the service consumer instance performs key negotiation with the acquired public key by using a private key of the service consumer instance to determine a shared key; performing key derivation on the shared key and the chaotic initial parameter to generate an initial key; respectively using the initial keys to initialize the chaotic system so as to generate synchronous encryption key streams; and the two communication parties perform real-time stream encryption and decryption on the communication data between the micro-services by using the encryption key stream. The unpredictability of a chaotic system and modern cryptography can be combined, and a micro-service design mode is deeply integrated, so that a lightweight and high-security communication security mechanism which does not need to share a key in advance and can be adaptive to dynamic change of service is realized.

Technology permitting secure storage and transmission of data stream as well as tiered access to multiple data stream according to permission. Data streams may be encrypted using symmetric encryption performed with varying symmetric keys according to a key stream of symmetric keys. Native data may be discarded for safety. Whole or partial key streams may be encrypted using the public keys of authorized entities having permission to access respective data streams or portions thereof. Only the corresponding private keys can decrypt the encrypted key streams required to decrypt the encrypted data streams. Thus rigorous access control is provided. IT personnel accessing data stream files on a server or intruders maliciously obtaining files will not be able to derive the data stream. Sensitive data streams may be stored using cloud services despite inherent risks.

Examples are described for dynamically encrypting and / or decrypting a file formed of multiple blocks of ordered data. In one example, a method of dynamically encrypting a file to enable partial decryption of the file includes generating, using a secret key and one or more initialization vectors, a keystream for the multiple blocks of ordered data, encrypting the multiple blocks of ordered data of the file by performing a logical operation of the keystream with the multiple blocks of ordered data in a one-to-one correspondence, and building a file index of the file to identify location information of the multiple blocks of ordered data. The method may further include dynamically decrypting at least a portion of the file by decrypting at least one selected block of encrypted data of the file using a portion of the keystream, the portion of the keystream corresponding to the at least one selected block.

The invention relates to the technical field of electric digital data processing, and discloses an intelligent campus network security protection system. A network data acquisition module of the system continuously monitors data transmission flow of a smart campus network environment to obtain an original data packet; the chaotic encryption engine encrypts an original data packet by using a key stream based on dynamic chaotic mapping, wherein the key stream is generated by multi-chaotic system switching and a random parameter distribution mechanism; the security protocol processing module converts the encrypted data packet into a format conforming to a network security protocol standard and transmits the encrypted data packet; the data decryption unit decrypts the received encrypted data packet; the security threat analysis module identifies and estimates potential network attack behaviors according to the decrypted plaintext data; and the protection strategy controller generates and executes a network security protection instruction according to the threat analysis result. The system can effectively protect the network security of the smart campus, resist various network attacks, and ensure the security of data transmission and storage.

The invention relates to the technical field of image encryption, and discloses an image steganography method and system based on dynamic latent variables and frequency domain embedding, and the method comprises the steps: obtaining a hash value and a plurality of secret keys of a to-be-encrypted color plaintext image; constructing a hyperchaotic system, and iteratively generating a plurality of key streams; a to-be-encrypted color plaintext image is decomposed into R, G and B channel matrixes, and three ciphertext sequences are obtained based on the three channel matrixes; the method comprises the following steps: initializing a noise image, determining a time step by using a secret key, and executing reverse denoising of a denoising diffusion implicit model (DDIM) with a fixed step length to obtain an intermediate latent variable; based on the intermediate latent variable and the three ciphertext sequences, obtaining a dense frequency domain-containing sub-band, and performing inverse discrete wavelet transform on the low-frequency sub-band and the dense frequency domain-containing sub-band to obtain a dense latent variable; and executing DDIM denoising of the time step by taking the secret-containing latent variable as a starting point to obtain a secret-containing image. By adopting the method, the security and visual quality of image steganography can be improved, and high embedding capacity is ensured.

The invention belongs to the technical field of embedded system information security, and particularly discloses a program control flow protection system and method based on stack data confidentiality and integrity. According to the method, the key stream is generated and managed during memory access of the special hardware for micro-architecture level design, and quick encryption and decryption calculation of the stack key data is realized through the exclusive-or operation of the key stream and the stack data. The stack data confidentiality protection supports the burst transmission property of an AHB-Lite bus on which stack data transmission depends, and the execution overhead of a program control flow protection method is reduced; on the basis of data encryption, MAC codes are calculated and verified when stack data are written in and read out based on a stack data integrity verification architecture of the MAC codes, real-time detection of tampering of stack key data is achieved, and program control flow abnormity is found in time. Through parallel encryption and decryption and integrity verification of the stack data, protection of the program control flow is realized from the aspect of stack data protection.

In some implementations, an apparatus may receive a first copy of payload data and a corresponding first cyclic redundancy check (CRC) code, and a second copy of the payload data and a corresponding second CRC code. Each of the first copy and the second copy may be encrypted with an identical keystream. The apparatus may decrypt, using the keystream, the first copy to obtain first decrypted data and the second copy to obtain second decrypted data, append the first CRC code to the first decrypted data to form first data, append the second CRC code to the second decrypted data to form second data, determine one or more bit positions, at each of which the first data and the second data have bit values different from each other, and correct, based on the one or more bit positions, an error contained in the first data.

The present application relates to the field of Internet of Things and information technology, and specifically to an artificial intelligence-based Internet of Things information service method and system, the method comprising: collecting monitoring data from the Internet of Things perception layer; encrypting the monitoring data as plaintext data before transmitting it to the Internet of Things application layer, adaptively adjusting the initial vectors for different rounds of plaintext data encryption and decryption by analyzing the characteristics of the plaintext data; encrypting and transmitting each round of plaintext data in the Internet of Things based on the initial vectors for each round of plaintext data encryption and decryption; and during the encrypted transmission process, performing linear regression analysis based on the similarity between any round of key stream and all previous historical rounds of key streams, and re-determining whether the encrypting party updated the original randomly generated initial vector before each round of encryption and decryption. The present application aims to ensure the security and efficiency of Internet of Things information services and improve the quality of Internet of Things information services.

The embodiment of the invention provides an information encryption processing method and device, equipment, a medium and a program product, and the method comprises the steps: carrying out the Hash calculation of the obtained user registration information in an information encryption process, obtaining a Hash value, extracting an encryption key and an authentication key from the Hash value, and performing encryption calculation on the user registration information according to a key stream generated based on the initial encryption parameter and the encryption key to obtain ciphertext information, performing encryption calculation based on the ciphertext information and the authentication key to obtain an encryption authentication tag, and storing the ciphertext information and the encryption authentication tag in a preset storage address. And the storage security of the user registration information is improved.

The present application discloses a method, device, and medium for controlling a drone based on a random key stream, and relates to the field of aircraft control technology. The method includes: presetting a chaotic initial value for the main chaotic system of the encryption end; selecting a switching strategy based on the current state component of the main chaotic system to switch the auxiliary chaotic system; generating a random key stream coefficient through a seed random number generator, combining the random key stream coefficient with the chaotic initial value to obtain a private key; obtaining the plaintext of the aircraft measurement data, injecting the plaintext into the chaotic system, and generating ciphertext in combination with the random key stream coefficient; transmitting the ciphertext to the decryption end, synchronizing the private key and the switching strategy at the decryption end, and restoring the plaintext; inputting the restored plaintext into a state feedback controller to generate an anti-saturation control instruction, and the state feedback controller includes a nonlinear compensation function. The present application uses the above method to implement encryption and decryption of the aircraft's measurement data using the chaotic system key stream, extend the private key length, and improve security.

A quantum method that uses the Mz quantum circuit that receives a given single chaotic value to generate strong quantum key stream of three keys. The method includes encrypting a quantum plain color image; applying set of CNOT gates between qubits of a quantum image and qubits of a quantum key to obtain a quantum encrypted image; generating a new quantum key, applying additional set of CNOT gates between the qubits the quantum color image, and the corresponding qubits of the quantum key as target qubits; performing a quantum plain scrambling (QPS) operation; and applying set of CNOT gates; and obtaining, by the quantum circuit, a quantum ciphered image.

The invention provides an Android APK reinforcement method and system oriented to high-strength code protection, and belongs to the technical field of computer software, and the method comprises the steps: obtaining a resource call chain during the operation of an Android application through a reflection heat loading technology, and generating a dynamic encryption key stream; performing segmented encryption on the key resource according to the dynamic encryption key stream to obtain encrypted resource data; analyzing a bottom-layer instruction sequence of the encrypted resource data by adopting an instruction-level semantic analysis technology, and generating a semantic conversion template; performing dynamic re-signature on the package body according to the verification result to obtain a re-signed application package body; monitoring the re-signed application package body through a runtime reverse protection mechanism, and obtaining an abnormal behavior log; if the dynamic injection attack is detected in the abnormal behavior log, protection logic encryption is activated, and an irreversible protection module is generated; and updating an encryption strategy of the data stream during operation according to the irreversible protection module to obtain an optimized resource protection scheme. According to the method and the device, the resource security during Android application running is remarkably improved.

A system and method are disclosed for securely transferring or storing protected working memory outside an owner thread while maintaining full encryption throughout its lifecycle. The protected working memory has an encrypted data component and a keystream component containing dynamically updated encryption information used for per-cycle decryption and re-encryption. A hardened cryptographic subsystem, such as a Trusted Execution Environment (TEE), Secure Element (SE), TPM, or HSM, performs authenticated encryption using device-bound key material to wrap either (i) the keystream component alone or (ii) the entire protected working memory blob. The wrapped object is suitable for storage or transfer across threads or in external memory, without exposing plaintext or keystream material. When restoring, an authorized owner thread supplies a key handle to the hardened subsystem to securely decrypt and reconstruct the protected working memory only within a guarded heap. At no point are plaintext contents or keystreams available to the operating system or user-accessible memory.

The invention discloses an image encryption method and device, a program product and a medium, relates to the technical field of image processing, and provides an image encryption method aiming at the problem of insufficient security of image encryption by a traditional RNA (Ribonucleic Acid) algorithm to realize image encryption through combination of Arnold transformation and an RNA encryption algorithm. Moreover, in the image encryption process, a chaotic sequence is used to determine control parameters of Arnold transformation and a scrambling rule and a diffusion algorithm of an RNA encryption algorithm, so that the unpredictability of the algorithm is increased, and the encryption effect is improved. The chaotic system is high in key stream generation speed, sensitive to initial conditions and suitable for generating high-complexity keys at low cost. And the RNA encryption algorithm can quickly search the optimal encryption parameter, so that the calculation redundancy is reduced. The image encryption scheme provided by the method is high in complexity, relatively large in key space and good in security, can resist various attacks, and has very considerable application prospect and value for encryption transmission of the image.

This invention relates to the field of communication encryption technology, and more particularly to a communication encryption method based on the EnhancedShockBurst protocol. The method includes the following steps: reading plaintext data to be sent and obtaining the current value of the internally stored packet counter; padding the plaintext data to obtain a plaintext data block; calculating and generating a session key using a preset root key and the current packet counter value as input parameters; performing round key expansion processing on the session key to obtain a round key sequence; generating a key stream with the same length as the plaintext data block using the round key as input; performing an XOR operation between the key stream and the plaintext data block to obtain an encrypted ciphertext data block; and extracting the packet counter value as a key identifier, appending it to the ciphertext data block to form an encrypted payload. This invention achieves real-time security protection of communication data through dynamic round key generation and byte-by-byte XOR encryption.

The invention relates to the technical field of image processing, in particular to an image chaotic encryption method and system based on a magnetic control memristor, and the method comprises the steps: obtaining a to-be-processed image; constructing a fractional order variable parameter hyper-chaos model through a magnetic control memristor; features of an image to be processed are used as initial parameters of the fractional order variable parameter hyper-chaos model, and a multi-dimensional key stream is dynamically generated through the fractional order variable parameter hyper-chaos model; performing preprocessing operation and blocking operation on the to-be-processed image; based on the multi-dimensional key stream, performing dual scrambling on the to-be-processed image after block processing to generate a scrambled image; performing dynamic diffusion and nonlinear confusion on the scrambled image through a fractional order difference feedback mechanism to generate a one-dimensional ciphertext vector; and remodeling the one-dimensional ciphertext vector to generate an encrypted image. According to the method, the security of the key stream can be remarkably improved, and a solid physical layer guarantee is provided for image encryption.

The application discloses an automobile remote control key encryption method based on an AES algorithm, and relates to the technical field of intelligent automobiles, and comprises the following steps: obtaining manufacturer information, wherein the manufacturer information is a manufacturer authentication certificate and a manufacturer code set by a manufacturer; generating a serial number, wherein the serial number is divided into multiple plaintext blocks, and a first encrypted information is preliminarily encrypted by combining the multiple plaintext blocks with the manufacturer information; the first encrypted information is 108 bits; the first encrypted information is subjected to a bit complement encryption to generate second encrypted information, the serial number is combined with the manufacturer code to form the first encrypted information, the first encrypted information is complemented to 128 bits, the same manufacturer can encrypt different ciphertexts, and the third encrypted information is generated by combining a ciphertext stream and a key stream, so that the generation and combination of the third encrypted information can also not be according to fixed bits, the combination mode is more flexible, and statistical analysis attacks are effectively prevented.

The invention discloses a high-dimensional chaotic key stream generation method and device based on closed-loop dynamic parameter control, a storage medium and a data chaotic encryption method. In the key stream generation method, multiple iterative mapping is performed on respective initial values through multi-stage one-dimensional chaotic mapping, and control parameters of next-stage one-dimensional chaotic mapping iteration are formed based on input of each stage of one-dimensional chaotic mapping through transformation operation. And forming a control parameter of the first-stage one-dimensional chaotic mapping iteration based on the input of the last-stage one-dimensional chaotic mapping. The device and the storage medium are used for implementing the key stream generation method. In the data chaotic encryption method, a high-dimensional chaotic key stream is generated based on the high-dimensional chaotic key stream generation method, a key is obtained based on the high-dimensional chaotic key stream, and the key and a plaintext are subjected to XOR operation to obtain chaotic encryption data. According to the method, the high-dimensional chaotic key stream under any-dimensional chaotic mapping can be constructed, the chaotic performance is remarkably improved, and the hardware cost is low.

This invention provides an encrypted retrieval method, system, and storage medium for data privacy protection. The retrieval method includes: dividing document set keywords into low-frequency and high-frequency subsets according to a frequency threshold; generating deterministic tokens for keywords using a key-based pseudo-random function and storing the correspondence between tokens and keyword types; for low-frequency keywords, constructing a static primary index using a minimum perfect hash structure, mapping tokens to hash buckets, and storing pointers to a list of encrypted document identifiers; for high-frequency keywords, constructing a dynamically updated secondary index using encrypted key-value storage, storing the mapping between tokens and encrypted document identifiers; during retrieval, the user generates a deterministic token for the keyword to be searched and uploads it as a trapdoor; the server queries the primary and secondary indexes according to the type; and the document identifiers generate a key stream using a derived symmetric key and an initialization vector, and are then XORed bitwise.

The invention discloses a video region-of-interest encryption method and system based on semantic perception multi-target detection and an enhanced chaotic system in the technical field of video processing and information security. The method comprises the following steps: generating a chaotic sequence as an encryption key stream by using an enhanced coupling chaotic system; according to an input video frame and an interested area text prompt defined by a user, identifying an interested area in the video frame by utilizing a semantic perception target detection network, and outputting coordinates of the interested area; according to the coordinates of the region of interest, performing classification marking on blocks of a video frame by using a video encoder to obtain region of interest blocks; and according to the encryption key stream, encrypting the region-of-interest block by using a zero-bit growth region-of-interest selective encryption strategy. According to the method, the problems that the recognition type of the region of interest is limited and the encryption key space is insufficient in the traditional method are solved, and the security and the flexibility are improved while the video format compatibility is ensured.

The application belongs to the technical field of information security of embedded systems, and specifically discloses a program control flow protection system and method based on stack data confidentiality and integrity. The application generates and manages a key stream while the special hardware is accessing the memory at the micro-architecture level, and realizes the fast encryption and decryption calculation of the key data of the stack through the XOR operation of the key stream and the stack data. The stack data confidentiality protection supports the burst transmission property of the AHB-Lite bus which depends on the stack data transmission, and reduces the execution overhead of the program control flow protection method. On the basis of data encryption, the stack data integrity verification architecture based on the MAC code calculates and checks the MAC code when the stack data is written and read, realizes the real-time detection of the tampering of the key data of the stack, and discovers the program control flow anomaly in time. The application realizes the protection of the program control flow from the perspective of the stack data protection through the parallel encryption and decryption and integrity verification of the stack data.

This invention discloses a stream cipher implementation method based on FSR and fourth-order CA, including designing the stream cipher algorithm structure, component design of LFSR and NFSR, setting CA rules for register updates, designing a keystream generation function, algorithm initialization, keystream generation, and algorithm encryption / decryption. CA rules are used to update registers, and each internal state bit is a bitwise feedback bit at each stage of algorithm execution. In the initial loading stage, the LFSR and NFSR are loaded using an initial key and initial vector, and the remaining bits of the LFSR are padded with the initial key. The keystream initialization stage uses 32 iterations, ensuring the key and vector are fully obfuscated within the register's internal state. This invention uses fourth-order CA rules combined with register design to provide good differential properties and nonlinearity for the cryptographic algorithm. The key expansion used to padded the LFSR during the initialization stage effectively resists differential analysis and fault attacks.

A data transmission method and apparatus are provided. When the data transmission method is applied to a first device, the method includes: when a fresh value corresponding to a message to be sent by the first device is a first fresh value, updating an encryption key from a first key to a second key, and generating a first keystream based on the first fresh value and the second key; encrypting first data based on the first keystream, to obtain the encrypted first data; generating a first message based on the encrypted first data and the first fresh value; and sending the first message to a second device.

The invention relates to a data encryption and compression method and device based on chaotic mapping and compression sparse rows, and the method comprises the steps: encrypting original data through chaotic mapping, so as to generate a data ciphertext of the original data; performing unstructured pruning on the preset neural network model to remove parameters which do not meet preset important conditions, generating at least one target model parameter, and based on the at least one target model parameter, compressing the sparse row to determine a model storage size value which meets a preset reduction condition; and based on the model storage size value, performing an XOR operation on the byte value of the data ciphertext and the key stream so as to obfuscate the data and generate a final encryption compression value. The method and the device are mainly used for performing data encryption compression on the edge device with limited resources, and are used for protecting the security of the neural network model data and reducing the storage size of the data.

The present invention discloses a method, apparatus, device, medium, and product for one-time, one-pad transmission of a hyperchaotic key. The method comprises the following steps: determining a chaotic function based on the chaotic parameters and a large prime number parameter obtained by decrypting a generated symmetric key; generating a key stream based on the generated random number sequence and the large prime number parameter; and transmitting one-time, one-pad data based on the key stream. This application scheme utilizes a symmetric key for preliminary encryption and, in conjunction with chaos theory, generates a one-time, one-pad key stream at each end. The generated key stream is used for one-time, one-pad data transmission, ensuring that the encrypted data can be decrypted while preventing a third party from obtaining the plaintext information. This method avoids security risks arising from key stream sharing and improves the security performance of key transmission.

This disclosure provides a chaotic video encryption method based on a sliding encryption window, comprising: determining the sliding step size and dimensions of the encryption window according to the correlation between the initial value of the key stream and the frame content; dividing the video sequence frame by frame into a sliding encryption window to obtain the encryption region corresponding to each frame; dynamically adjusting the chaotic system parameters based on the pixel information within the encryption window to generate an encryption key stream; and applying the key stream to the pixels within the corresponding encryption window for chaotic scrambling and encryption. The scheme of this disclosure can provide feedback control of the encryption window division strategy based on the correlation between the initial value of the key stream and the frame content, thereby solving the problem of insufficient resistance to brute-force attacks caused by limited key space.

The invention discloses a method and system for fusing quantum key one-time pad in a TLS recording layer, and relates to the technical field of quantum security communication, and the method comprises the steps: a client and a server execute a standard TLS handshake protocol, complete bidirectional identity authentication, negotiate encryption suite parameters, generate a unique session identifier, generate a classic key through a classic key exchange algorithm, and send the classic key to a server; declaring a quantum key enhancement mode in a handshake message extension field; after the handshake is completed, the client and the server are respectively connected with a locally deployed quantum key manager through a secure channel, submit the unique session identifier to carry out session binding, obtain a corresponding quantum key stream identifier, exchange information of the quantum key stream identifiers of the two parties, and carry out one-time pad encryption transmission; according to the method, on the premise of not changing a TLS protocol stack structure, sensitive data leakage and tampering risks are effectively prevented, and the information transmission security strength is improved.