796 results about "Master key" patented technology

The invention relates to the technical field of data access security, and discloses a container mirror image security management method and system, and the method comprises the steps: constructing a container mirror image, generating a differential encryption key through a strategy center, carrying out the encryption strategy of a kernel dependence layer, a runtime environment layer, an application code layer and a sensitive configuration layer, and forming a hierarchical protection basis. If an access request is triggered, firstly collecting equipment fingerprints and geofence information and evaluating an environmental risk score, verifying access authority and an access scene matching degree through attribute-based encryption, analyzing operation track characteristics in real time, identifying an abnormal mode, and if the three-layer verification is passed, generating a temporary access token; according to the method, access request authority is verified, a temporary access token is matched, key fragments are synthesized, a master key is only temporarily generated in a memory and encrypted and stored, and through combination of a double-layer encryption channel and inner-layer and outer-layer defense, the anti-attack ability of container mirror image transmission is improved, and man-in-the-middle attack and data tampering are effectively coped with.

The invention discloses a multi-party collaborative signature management method and system based on a key segmentation technology, and relates to the technical field of fragmentation encryption, and the method comprises the steps: initializing data in an encryption system, collecting behavior data when a key anomaly occurs in history, deploying an AI anomaly detection model, generating a master key through a distributed key generation protocol, and generating a multi-party collaborative signature in the encryption system; deriving time by using a hierarchical deterministic algorithm, segmenting a master key to form key fragments, and distributing each fragment to different nodes; formulating a periodic rotation triggering mechanism; calculating an abnormal score of each node, judging whether each node has an abnormal risk or not, and marking the abnormal risk; for the marked nodes with the abnormal risk, fragments are redistributed for alternation; dynamically adjusting the threshold according to the abnormal score; a client initiates a signature request, abnormal nodes are eliminated, fragment node aggregation is screened, and collaborative signature is carried out.

A system includes a plurality of nodes. Each of the plurality of nodes includes memory; a network interface; and a hardware processor coupled with the memory and the network interface. The system further includes a computing device. The computing device includes memory storing a master key, security keys encrypted using the master key, and associations between the security keys and the nodes. The computing device further includes a network interface and a hardware processor coupled with the memory and the network interface. The processor is configured to receive, from a node of the one or more nodes, a request for a security key of the one or more security keys, identify an association between the node and the security key within the associations, decrypt the security key using the master key to generate a decrypted security key, and communicate the decrypted security key to the node.

The invention discloses a post-quantum TLCP protocol design method, device, equipment and medium, and relates to the field of information security, the post-quantum TLCP protocol design method is applied to a client, and the post-quantum TLCP protocol design method comprises the following steps: constructing client handshake information based on an information security technology transport layer cryptographic protocol, and sending the client handshake information to a server to receive returned server handshake information and establish connection; receiving a server-side digital certificate constructed based on the cryptographic algorithm encrypted public key information and the post-quantum key encapsulation algorithm public key information of the server-side and server-side key exchange information constructed based on the post-quantum key encapsulation algorithm and the cryptographic algorithm; and performing identity authentication based on the post-quantum digital signature algorithm public key information and the national cryptographic algorithm signature public key information to construct a pre-master key for data transmission. An active public key cryptographic algorithm and functions are reserved in an information security technology transport layer cryptographic protocol, and a post-quantum public key cryptographic algorithm is put into the protocol, so that the quantum security is realized while the active public key cryptographic security is realized.

The invention discloses a hardware cryptographic module based on a domestic commercial cryptographic algorithm and an implementation method of the hardware cryptographic module. The hardware cryptographic module comprises a security chip, a central control unit, a memory unit, a key management module, an encryption and decryption module, a multi-interface support unit, a bus interface unit and an indicator light module, the implementation method comprises the following steps: activating multi-layer encryption when a module is started, verifying the integrity of a master key through an SM3 algorithm, and ensuring the secure storage and management of the key; generating a session key by using an SM2 algorithm, and distributing the session key through a secure channel; performing multi-level encryption and decryption operation on the data, and introducing multiple authentication in key access; according to the invention, through multilayer encryption and multi-factor authentication, the security of key management is significantly enhanced, and through optimizing encryption and decryption processes and hardware configuration, the problem of performance bottleneck in a high-load environment is effectively solved, and efficient and safe operation of the system in a complex application scene is ensured.

The invention relates to a health data encryption storage method and device, equipment and a storage medium, and the method comprises the steps: obtaining to-be-processed health data, carrying out the sensitivity analysis and grade division of the health data, and obtaining health data sub-blocks; performing encryption preprocessing on the health data sub-blocks, and performing group data protection according to a preset differential privacy algorithm to obtain encrypted data blocks; generating an initial master key through a hardware security module, and performing derived hierarchical encryption on the encrypted data block to obtain a data encryption key; performing fragmentation processing and regular distributed storage on the data encryption key to obtain a dynamic security key; and performing metadata separation storage on the encrypted data according to the dynamic security key, and performing data permission determination according to a preset role-based access control mechanism to obtain an encrypted isolation database. According to the invention, efficient security protection can be maintained under different application scenes and access permissions, and the risk of data leakage is reduced.

The invention provides a data access control method and device based on a block chain and improved CP-ABE, and belongs to the technical field of block chains. The method comprises the following steps: an authority generates key parameters including a system public key and a master key, and uploads the master key to a block chain; the user sends an attribute set and an identity label of the user to an authority, the identity label of the user is hidden, an attribute private key, a search private key, a conversion key and a recovery key are generated for the user, the conversion key is sent to the cloud server, and the attribute private key, the search private key and the recovery key are sent to the user, and the user comprises a data owner and a data visitor; the data owner carries out offline encryption, online encryption and index encryption on the file in sequence, and index information is linked; the data accessor performs data access; and the data accessor decrypts the data. According to the method, the problems in data storage and access control are effectively solved, the integrity of user data is protected, and the calculation burden of a data access user is reduced.

Features for providing a secure method of symmetric encryption for private smart contacts among multiple parties in a private peer-to-peer network. The features include a master key representing a unique blockchain ledger. The master key may be shared among multiple participants in a private peer-to-peer network. Sharing of the master key may include communicating the master key in an encrypted message (e.g., email) using public key infrastructure (PKI). In some implementations, more complex distribution features may be includes such as quantum entanglement. The features support instantiation of a smart contract using a specific master key. The request may be submitted as an entry to the ledger with appropriate metadata and / or payload information for identifying and processing the request.

The invention discloses a revocable attribute-based encryption method with strategy hiding, which is based on ciphertext strategy attribute encryption, solves the problem that user privacy is leaked due to disclosure of an access strategy, realizes revocation of fine-grained user attribute access authority, and is proved to be completely safe. In a system establishment stage, system parameters are disclosed, a public key and a master key are generated, an authoritative authority authorizes a data user, distributes a private key and generates an AGK tree and an attribute group key, a data owner generates a ciphertext according to the public key, an access structure set by the data owner and a selected secret value, and the ciphertext is transmitted to the data owner. And then hiding the mapping function by using a cuckoo filter, positioning the attribute by a data user through the cuckoo filter, updating a private key by using an attribute group key, and finally decrypting the ciphertext to obtain the wanted information.

The invention discloses a data security authentication method and system for smart medical treatment, and relates to the field of data security, and the method comprises the steps: obtaining the identity authentication information of a user, and generating an anti-quantum root key; obtaining operation data and an operation log; according to the operation type, dynamically deriving a temporary sub-key based on the master key, and decomposing the temporary sub-key to obtain m temporary sub-key fragments and n temporary sub-key fragments; transmitting the m temporary sub-key fragments to the client terminal; generating a second signature fragment based on the n temporary sub-key fragments, receiving the first signature fragment, and combining the first signature fragment and the second signature fragment to obtain an operation signature; calculating a hash value of the operation data, and embedding the hash value into the operation signature; and encrypting the operation log based on the embedded operation signature to generate a tamper-resistant log, and marking the temporary sub-key as a failure state. The security of the medical data can be effectively improved.

A system and method for providing credentials device unique credentials to a chip is disclosed. In one embodiment, the method comprises receiving the credentials in credential provisioning server (CPS), the credentials having information encrypted according to a secure server key (SSK) securely stored in a hardware security module (HSM) communicatively coupled to the CPS, the hardware security module also securely storing a master key; receiving a credential request in the CPS, the credential request comprising a chip identifier that identifies the chip; securely decrypting the encrypted information in the HSM according to the SSK; securely computing a chip-unique key in the HSM, according to the chip identifier and the master key; re-encrypting the decrypted information according to the computed chip-unique key; and providing the credentials having the re-encrypted information to the device.

A method including transmitting, by a device to a storage server, a request to receive encrypted content and one or more encrypted keys stored in association with the encrypted content; receiving, by the device from the storage server, the encrypted content and the one or more encrypted keys; receiving, by the device, a master string of alphanumeric characters; determining, by the device, a master key based at least in part on the master string; decrypting, by the device based at least in part on utilizing the master key, an encrypted assigned private key associated with the device to determine an assigned private key, the encrypted assigned private key being included in the one or more encrypted keys; and decrypting, by the device, the encrypted content based at least in part on utilizing the assigned private key is disclosed. Various other aspects are contemplated.

The invention discloses a dynamic NFT-based attribute-based encrypted medical data sharing method, which comprises the following steps that: firstly, a user submits identity authentication information to a trusted digital identity platform, and applies for an attribute certificate from an institution to which the user belongs; secondly, the key management system completes system initialization and generates a master key and a public key, the medical data owner generates an attribute-based encrypted ciphertext according to the access strategy and casts a dynamic NFT according to the smart contract, and when the medical data demander conforms to the access strategy, the medical data owner issues a sub-NFT of the dynamic NFT to the medical data demander through the smart contract; and then the medical data demander applies for a master key from the key management system and decrypts the ciphertext. And finally, the medical data owner changes the access strategy and re-judges whether the medical data demander conforms to the access strategy. According to the invention, the data access control does not depend on a fixed strategy any more, and the controllability and security of the data access control are enhanced.

The invention discloses a stable transmission method for server data encryption and rapid authentication, and belongs to the technical field of data security. The method comprises the following steps: dividing data into three levels of core sensitive data, important data and common data by utilizing a semantic analysis model; performing encryption protection on different levels of data by adopting a hierarchical encryption strategy; a master key is generated based on a chaotic system, a session key is generated in combination with a timestamp and a device fingerprint and is regularly alternated, and secure distribution is performed through a trusted execution environment and a block chain; multi-modal features are fused, the identity is verified through zero-knowledge proof, and the authentication strength is adjusted through dynamic risk assessment. The method is suitable for cloud computing, the Internet of Things and a distributed storage system, through deep fusion of a multi-level hybrid encryption algorithm, a dynamic key management mechanism and a self-adaptive authentication strategy, data security encryption, rapid authentication and stable transmission are achieved, and security, efficiency and adaptability are improved.

The invention relates to an alliance chain identity privacy protection method and system based on multi-level group signature and distributed key management, and belongs to the field of block chain technology, network and information security. According to the method, a multi-level group signature structure is adopted, anonymous identity verification is achieved in the transaction process, privacy protection is further enhanced through zero-knowledge proof, anonymous identity verification is achieved in the transaction process, it is ensured that privacy of participants is not leaked, a homomorphic encryption algorithm is used in the signature and verification process of transaction data, and the transaction data are subjected to identity authentication. And privacy leakage is prevented. And meanwhile, the Shamir secret sharing algorithm divides the master key and stores the master key in a plurality of sub-group members in a distributed manner, so that the anti-attack capability and the key security are enhanced. According to the method, a dynamic group member management and double signature verification mechanism is further introduced, so that the flexibility and the overall security are improved. The method has significant advantages in the aspects of identity anonymity, data integrity and efficiency, and is suitable for alliance chain application scenarios with high privacy and security requirements.

The invention provides a multi-user key management method and a network data transmission method and device based on a DPU (Data Processing Unit), a hardware trust root is configured based on the DPU, a storage root key is generated, a multi-layer key management architecture of the root key, a user master key and a working key is adopted, secure storage and hierarchical calling of keys are realized, and the security of the keys is improved. The encryption and decryption operation follows a strict key hierarchy process; a unique identifier is allocated to each user, a logic partition is divided for each user in a storage medium, and an access control strategy is set, so that physical and logic isolation of a key of each user is realized, and independence and security of user data are ensured. Furthermore, in combination with the LSTM network, the key use mode is analyzed, the optimal key rotation time is predicted, the updating period is automatically adjusted, and the intelligence and automation level of key management is improved.

The invention discloses a multi-level access control and authority synchronization method for secure mobile storage, and belongs to the field of mobile storage security. Aiming at the problems of data leakage, poor authority management and the like of the mobile storage device, a multi-level access control framework, a decentralized authority synchronization mechanism and a dynamic token and zero-knowledge proof system are constructed. Generating a plurality of layers of sub-keys from a master key by using a PBKDF2 algorithm through hierarchical key generation, and associating different encryption areas and authority strategies; incremental synchronization is carried out based on a Merkle tree, and data consistency is guaranteed through a consistency verification protocol; a temporary token is generated by using a Schnorr protocol, and the permission is verified in combination with zero-knowledge proof, so that the privacy security is ensured. In scene application of a power grid and the like, a master key is activated through biological recognition, permission is loaded according to a strategy, and permission change is efficiently synchronized. According to the method, the mobile storage security and the management efficiency are improved, and accurate authority control and reliable synchronization are realized.

The invention discloses a blockchain-based intelligent video monitoring data storage security sharing method for an iron and steel plant. The method comprises the following steps of: generating a public key PKS and a master key TMK based on an attribute encryption algorithm; distributing shares of the shared key S by constructing a matrix and defining a function, wherein the shares are distributed in different rows of the matrix; re-encrypting the data by using a hybrid proxy re-encryption algorithm based on a ciphertext strategy; secure data storage and access control are realized based on a secure storage mode of revocable attribute-based encryption RABE and a block chain; and in combination with a block chain technology, a consensus algorithm is adopted to verify transactions, so that the security and robustness of the system are enhanced. According to the invention, the utilization rate of the data is improved, the cooperation efficiency is enhanced, the security and transparency of the video monitoring data are improved, and the cost of information transmission and storage is reduced. The distributed storage and access control of the data are realized, the confidentiality and integrity of the cloud center data are ensured, and the security and efficiency of the steel plant video monitoring system in the storage and transmission process are enhanced.

The invention discloses a method for applying an anti-quantum certificate to a TLS1.2 handshake process, which realizes the application of an MLDSA anti-quantum signature algorithm and an MLKEM anti-quantum key encapsulation mechanism in the handshake process by expanding a cipher suite and a signature algorithm field of a TLS1.2 protocol. The method specifically comprises the following steps: defining a cipher suite supporting MLKEM and an MLDSA signature algorithm enumeration value; the client declares algorithm support in ClientHello, and the server responds and returns a certificate chain containing the double-antibody quantum certificate; after the client verifies the certificate, the pre-master key is encapsulated by using MLKEM, and the server de-encapsulates the derived session key; and the two parties send Finished messages to each other to complete handshake. According to the scheme, on the premise that a TLS1.2 basic framework is not changed, the communication security is enhanced through double-resistance quantum algorithm integration, international and national cryptographic algorithms are supported, quantum computing attacks can be resisted, meanwhile, adaptation of the international and national cryptographic algorithms is supported, compatibility with an existing system is ensured, the security risk of a traditional cryptographic algorithm in a quantum environment is solved, and the security risk of the traditional cryptographic algorithm in the quantum environment is reduced. And a standardized solution is provided for anti-quantum upgrade of the TLS1.2 protocol.

The invention discloses a method and a device for realizing key import and key use. When a secret key import interface of the SDK is called by an upper-layer application, a certificate chain generated by the secret key library is sent to the push service, and a first encryption result, a first random number, a second encryption result and label data returned by the push service are sent to the secret key library for verification; if the verification is passed, the master key identifier and a master key obtained by decrypting the second encryption result through the key library are correspondingly stored in the key library; when a key encryption interface of the SDK is called by an upper-layer application, encrypting data to be processed by using a first working key returned by a key library to obtain a first data ciphertext to be processed, and sending the first data ciphertext to be processed, preset data and a second random number to a push service; receiving a processing result ciphertext and a third random number returned by the push service; and decrypting the processing result ciphertext by using a fourth working key returned by the key library, and performing subsequent operation according to a processing result obtained by successful decryption.

The invention relates to the technical field of network security, in particular to a distributed key management and encryption communication method oriented to a big data environment. The method comprises the following steps: establishing a system architecture and configuring safety parameters; generating a master key and a session key through the random number; segmenting the master key into a plurality of segments and storing the segments to different nodes; encrypting the session key by using the public key of the receiver, distributing the session key through the secure channel, and decrypting the session key by the receiver to obtain the session key; constructing a Merkle tree through an AES-GCM function, and introducing a network adaptation factor into an encryption process by considering that security requirements and network conditions of data encryption in different environments are different; and regularly updating a secret key, implementing an access control strategy, and recording a log to perform system audit so as to guarantee long-term security. According to the invention, the efficient AES-GCM encryption algorithm is used, so that the speed and security of data encryption are improved. By implementing the access control strategy, only the authorized user can access and operate the key, and the security of the system is improved.

The invention relates to the technical field of information security, in particular to a forward security policy hidden attribute-based keyword search method, which is used for access control and search of sensitive information and comprises the following steps: acquiring a public parameter and a master key; attribute processing is performed on an attribute set submitted by a data user, a user private key is constructed, and a puncture key is output; the method comprises the following steps: randomly selecting a symmetric key, performing symmetric encryption on a plaintext through the symmetric key to obtain an initial ciphertext, sequentially performing strategy hidden encryption, keyword encryption and label binding on the plaintext to obtain a corresponding output representation, and integrating the initial ciphertext and the output representation to obtain a complete ciphertext; when the constraint condition is met, the puncture key is updated; establishing a keyword set according to the data user demand content, generating a trap door, and initiating a search request; matching the trap door with the complete ciphertext according to the search request to obtain a matching result, and decrypting the initial ciphertext by integrating the updated puncture key and the user private key to obtain a corresponding plaintext; and the forward safety is effectively improved.

The invention relates to a dynamic double-layer hidden watermark and encryption binding file protection method and system based on deep learning, and belongs to the technical field of digital content security. The problems of attack resistance, traceability obstruction and key-watermark unhooking in document cross-platform circulation are solved. According to the scheme, the method comprises the following steps of: extracting semantic fingerprints by using a sentence vector model Sentence-BERT; the fuzzy extractor generates a master key and derives a time key chain; the authentication encryption algorithm AEAD encrypts and binds the source and the timestamp load; container layer structure rearrangement and document layer zero-width character double embedding are carried out; the generative adversarial network or diffusion model adversarial training improves the optical character recognition and transcoding resistance; version binding and tracing are achieved through the watermark hash chain. The technical effects cover anti-counterfeiting migration, cross-layer fault-tolerant guarantee recoverability, rearrangement attack resistance, full-period accurate traceability and post-quantum security enhancement.

The invention provides a low-altitude unmanned aerial vehicle operation data security sharing method and system, and the method comprises the steps: initializing a low-altitude unmanned aerial vehicle operation data security sharing system through a low-altitude traffic management platform, and generating a public parameter, a master key and an identity private key of a user; wherein the master key comprises a master public key and a master private key; the unmanned aerial vehicle encrypts the operation data of the unmanned aerial vehicle based on the identity information of the agent side to obtain an initial ciphertext, and uploads the initial ciphertext to the cloud platform; the agent side decrypts the initial ciphertext based on an identity private key of the agent side to obtain operation data of the unmanned aerial vehicle, generates a re-encryption key and uploads the re-encryption key to the cloud platform; the cloud platform re-encrypts the initial ciphertext based on the re-encryption key to generate a re-encrypted ciphertext; and the multi-body sharer end decrypts the re-encrypted ciphertext based on the identity private key of the multi-body sharer end to obtain the operation data of the unmanned aerial vehicle. According to the invention, the sharing security of the operation data of the unmanned aerial vehicle in a dynamic open network environment can be efficiently guaranteed.

The invention discloses a secret key issuing method, system and device, a storage medium and a program product, and relates to the technical field of information security, and the method comprises the steps: transmitting a verification public key certificate and a signature to a server through a WebSocket protocol at a client; receiving and verifying a first signature verification result returned by the server to obtain a second signature verification result; signing the random number in the second signature verification result to obtain a first signature value; and sending the first signature value and the random number to the server. After receiving the first signature value and the random number, the server generates a master key and a verification value, and issues the encrypted master key and verification value to the client; and the client decrypts and stores the master key. According to the scheme, bidirectional authentication is realized through an authentication mechanism of a public key certificate, and the credibility of both parties is ensured. And the random number is subjected to signature verification and signature, so that the replay attack is effectively prevented. In the secret key issuing process, the encryption certificate is used for encrypting the equipment information, the safety of the main secret key is ensured, and good expansibility is achieved.

The invention relates to the field of computer security, and discloses a data storage security protection method and system based on a solid-state hard disk, which comprises the following steps: identifying the inherent physical difference of a flash memory chip in the solid-state hard disk so as to calculate the read-write time sequence micro-deviation of the solid-state hard disk; performing hash operation on the device root key and the unique identifier of the controller corresponding to the solid state disk to obtain a bound master control key; generating a temporary encryption key of the write-in operation to encrypt plaintext data of the host system to obtain ciphertext data; writing the ciphertext data into a flash memory physical page corresponding to the physical page address to obtain a ciphertext physical page address; when the access mode is a hostile attack mode, secretly updating the ciphertext physical page address into a new physical page address, and deleting the ciphertext physical page address; and when the access mode is a secure access mode and the verification key is consistent with the bound master control key, normal loading and data access requests of the solid state disk are allowed. According to the invention, the security and integrity of data storage can be improved.

The invention relates to an encryption method, a decryption method, a word segmentation one-way encryption method, equipment and a medium. The method comprises the following steps: when plaintext service data is obtained, querying whether a memory stores a corresponding local service key or not; if it is queried that the memory does not store the corresponding local service key, signature verification information is generated, and the signature verification information and the master key identifier are sent to the master device; the signature verification information and the master key identifier are used for indicating that the master device generates a first ciphertext key based on a symmetric encryption algorithm and the master key identifier after verification based on the signature verification information and the master key identifier is passed, and generates a second ciphertext key based on an asymmetric encryption algorithm and the signature verification information; receiving a first ciphertext key and a second ciphertext key sent by the master device, and encrypting the plaintext service data by using the second ciphertext key to obtain ciphertext service data; and outputting the ciphertext service data and the first ciphertext key. Therefore, the security level of data encryption storage can be improved, and the availability of a fuzzy query function is guaranteed.

Features for providing a secure method of symmetric encryption for private smart contacts among multiple parties in a private peer-to-peer network. The features include a master key representing a unique blockchain ledger. The master key may be shared among multiple participants in a private peer-to-peer network. Sharing of the master key may include communicating the master key in an encrypted message (e.g., email) using public key infrastructure (PKI). In some implementations, more complex distribution features may be includes such as quantum entanglement. The features support instantiation of a smart contract using a specific master key. The request may be submitted as an entry to the ledger with appropriate metadata and / or payload information for identifying and processing the request.

The invention discloses a city inspection data sharing method and device based on an unmanned aerial vehicle, and the method comprises the steps: firstly determining an inspection time period when the inspection data needs to be shared, and collecting the position, speed, signal and meteorological data set of the unmanned aerial vehicle in the time period according to a preset sampling frequency; after all the data sets are aligned through timestamps, features are extracted respectively to form multi-dimensional feature vectors; converting the multi-dimensional feature vector into a one-dimensional array, and generating a hash feature value through a hash algorithm in combination with a timestamp and a random number; extracting a master key and an authentication key from the hash feature value, generating an initialization vector based on the master key, binding the master key, the authentication key and a timestamp, and then distributing the three to a receiver; inspection data is divided into blocks, a number and a timestamp are added to each block, encryption is performed by using a master key and an initialization vector, an authentication tag is generated in combination with an authentication key, and a data packet is packaged and then transmitted. According to the invention, the problem of low security during routing inspection data sharing of the unmanned aerial vehicle in the prior art is solved.

The invention discloses a rail transit-oriented soft information codeword reconstruction security key extraction method and system, and relates to the field of digital information transmission, in the method, a sending end and a legal receiving end alternately send pilot frequencies to each other through a preset channel, and calculate a channel feature sequence of the preset channel; the sending end generates a master key from a preset random source, and encodes the master key to obtain a code word sequence; the sending end generates an information interaction sequence according to the first feature sequence and the code word sequence, and sends the information interaction sequence to a legal receiving end; after the legal receiving end receives the information interaction sequence, the legal receiving end reconstructs the second feature sequence according to the information interaction sequence to obtain a code word structure sequence; and the legal receiving end decodes the code word structure sequence to obtain a final key. The method and the device are used for improving the consistency rate of the secret keys among the legal users, so that the secret key generation and extraction efficiency is improved, and the safety of a rail transit system is improved.