Patents
Literature
Patsnap Eureka AI that helps you search prior art, draft patents, and assess FTO risks, powered by patent and scientific literature data.

876 results about "Number generator" patented technology

Vehicle-mounted ad hoc network security communication system and method based on NTRU lattice cryptosystem

The invention belongs to the technical field of digital information transmission, and relates to a vehicle-mounted ad hoc network security communication system and method based on an NTRU lattice cryptosystem, and the system comprises a message signature module, a message encryption module, a message decryption module, an identity authentication module, and a key exchange module. The message signature module carries out signature by utilizing a private key and a random polynomial dynamically generated by a pseudo-random number generator based on an NTRU lattice cryptosystem; the message encryption module encrypts a to-be-sent message by randomly selecting a temporary polynomial and combining a public key of a receiver; the message decryption module is used for decrypting the received ciphertext # imgabs1 # by using a private key and an inverse element # imgabs0 # of a module p of the private key; the identity authentication module is used for performing identity authentication; the key exchange module realizes secure key exchange between communication nodes in the vehicle-mounted ad hoc network through an improved Blom key distribution protocol. The system improves the security and communication efficiency of the vehicle-mounted network.
Owner:CHANGCHUN UNIV OF TECH

Multi-Pool storage resource adaptive writing method and device, equipment and medium

The invention relates to the technical field of data storage, can be applied to business scenes such as medical health and financial science and technology, and discloses a multi-Pool storage resource adaptive writing method which comprises the following steps: monitoring available storage space, read-write input / output rate, average response time and data access frequency of each Pool; dynamically adjusting the current write-in weight of the Pool according to the monitoring result; converting the current write-in weights of all Pool into probability values, and constructing a discrete probability distribution table; selecting a target Pool through a pseudo-random number generator according to the probability distribution table; and writing the to-be-stored data into the target Pool. According to the method, the running state of each Pool is continuously monitored, and the writing weight is adjusted in real time, so that the problem of resource allocation rigidity under a fixed weight strategy is avoided; in combination with a discrete probability distribution table constructed based on normalized weight and a pseudo-random selection mechanism, selection of the target Pool has certain load balancing elasticity, and data can be more effectively guided to be written into the Pool with light load and excellent performance.
Owner:PING AN TECH (SHENZHEN) CO LTD

Wager-based gaming system with electro-mechanical dice-based RNG mechanism

Various systems and methods are directed to an electro-mechanical dice shaker gaming system designed to enhance fairness, transparency, and security in wager-based gaming environments. The system includes an electro-mechanical random number generator (RNG) assembly that physically isolates the dice shaking mechanism from the player terminal, preventing external interference from affecting game outcomes. The dice shaker mechanism is housed in a transparent enclosure, allowing players and casino operators to visually verify each roll. Integrated sensors, including tilt and vibration detectors, monitor environmental conditions to detect and prevent tampering. A camera-based monitoring system captures images of each dice roll, facilitating automated outcome verification and compliance auditing. The system supports modular configurations for multi-player gaming, real-time streaming for remote participation, and AI-driven fraud detection. Additionally, an adjustable mirror enhances dice visibility, and automated mechanisms allow dynamic control over the number of dice in play, offering a scalable and secure gaming solution.
Owner:TECH (MACAU) LTD

Computer network data secure transmission system and method

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.
Owner:陈俊奕

Encrypted data transmission method based on dynamic key and server

The invention discloses an encrypted data transmission method and server based on a dynamic key, and relates to the field of data transmission security, and the method comprises the steps: generating a first private key through a quantum random number generator; receiving an encrypted public key data packet sent by the client, and decrypting the encrypted public key data packet based on the one-time key to obtain a client public key; performing key operation on the client public key and the first private key to generate a first temporary key; generating a confirmation message based on the one-time key encryption, and establishing an encrypted communication connection with the client based on the first temporary key after the confirmation message is sent to the client; after a preset time interval, generating a second private key through the quantum random number generator, and updating the first temporary key based on the second private key to obtain a second temporary key; and after synchronizing the second temporary key to the client, maintaining encrypted communication connection with the client based on the second temporary key. By implementing the application, the security of data transmission can be improved in a complex network environment.
Owner:北京冠程科技有限公司

Systems and Methods for Performing Secure Transactions on Blockchain

Systems and methods for securing transactions in accordance with various embodiments of the invention are illustrated. One embodiment includes a method for confirming token ownership rights. The method generates a pre-image value using a random number generator. The method generates an action request that corresponds to an action performed cryptographic token(s). The method derives a commit output based on the pre-image value. The method generates a commit request that obfuscates the action request based on the commit output and submits the commit request to an immutable ledger. The method receives a confirmation when the commit request is approved by the ledger. When a reveal request referencing the commit output is published, the method receives a confirmation of at least one of: the reveal request being published, that the reveal request comprises a reference to the commit output, or that the action request has been approved.
Owner:ARTEMA LABS INC

Encrypted enterprise network data security access method and system

The invention belongs to the technical field of network security, and discloses an encrypted enterprise network data security access method and system, and the method comprises the steps: constructing a biological recognition unit and an equipment binding unit, recognizing multi-dimensional biological data through the biological recognition unit, and carrying out the identity authentication of a user through the combination of a dynamic token generation time binding mechanism; the equipment binding unit associates the identity authentication result with the hardware fingerprint of the security access terminal to generate a digital identity certificate; a basic key is generated and updated in a rolling mode through a quantum random number generator; dual protection is carried out on the multi-dimensional biological data through a hierarchical encryption unit, the hierarchical encryption unit comprises an application layer and a transmission layer, the application layer adopts an SM4 algorithm to encrypt service content data in the multi-dimensional biological data, and the transmission layer adopts an SM2 algorithm to generate a session key to carry out forward secrecy; the security access of enterprise network data is ensured, and the security protection capability of the enterprise network is comprehensively enhanced.
Owner:SHENZHEN JIANAN RUNXING SAFETY TECH CO LTD

Electronic seal verification method based on quantum true random number and anti-quantum multi-dimensional dynamic code

The invention relates to the technical field of electronic information technology anti-counterfeiting, in particular to an electronic seal verification method based on a quantum true random number and an anti-quantum multi-dimensional dynamic code, which comprises the following steps of: generating a true random number by introducing a quantum random number generator, constructing a quintuple scene space, and fusing multi-dimensional data of a user, a seal, a file, time and a geographic position; an SPHINCS + anti-quantum signature algorithm is adopted, and block chain evidence storage is combined, so that a four-layer nested dynamic security system of quantum random injection, multi-source data binding, anti-quantum encryption and block chain evidence storage is formed. Meanwhile, a whole-process credible system from application, auditing to stamping and verification is constructed, compared with a traditional electronic seal, the quantum-attack-resistant electronic seal has remarkable breakthrough in the aspects of random number safety, quantum attack resistance, data fusion degree, tampering detection sensitivity and the like, and a credible electronic seal solution in the quantum era is provided for finance and other scenes.
Owner:SICHUAN JISU POWER TECH CO LTD

Education robot-based intelligent system and method for fusing mental health evaluation in interest scene

PendingCN120636769AEnsemble learningDigital data protectionNumber generatorPsychometric testing
The invention discloses an intelligent system and method for fusing mental health evaluation in an interest scene based on an education robot. The system realizes non-intrusive mental health assessment by constructing a technical architecture of'multi-modal biological feature anonymization-quantum hybrid encryption-federated learning privacy protection-dynamic risk assessment '. The method is characterized by comprising the following steps of: (1) generating irreversible biological characteristic codes by adopting a chaos random number generator, and realizing anonymized association by combining a double hash chain technology; (2) designing a quantum enhanced hybrid encryption system, fusing an SM4 algorithm, NTRU post quantum cryptography and quantum key distribution; (3) developing a dynamic scene generator, and naturally fusing psychological test questions into interest topics by using a generative adversarial network (GAN) and a curiosity engine; (4) constructing a multi-modal emotion analysis system, and combining an LSTM + CNN hybrid model to realize physiology-behavior-voice data fusion analysis; and (5) deploying a federated learning framework, and protecting model training data through differential privacy noise injection (epsilon = 0.5).
Owner:张景飞

Gaming Device with Wheels for Awarding Composite Features

An electronic gaming machine comprising a display device, a random number generator, a processor, and a memory storing instructions which, cause the processor to, in response to a feature wheel initiation condition being met: select, based on one or more random numbers dynamically generated by the random number generator, stopping positions for a plurality of feature wheels, each of the feature wheels being associated with a different feature event corresponding to a spinning reel, and each of the feature wheels comprising a plurality of outcomes at different stopping positions, wherein at least one of the different stopping positions corresponds to an outcome; control the display device to display spinning to the stopping positions selected; determine whether to provide an outcome from the plurality of outcomes; and upon determining to provide more than one outcome comprising the feature event, initiate a composite feature event.
Owner:ARISTOCRAT TECH AUSTRALIA PTY LTD

Electronic gaming device and system with random multiple trigger symbol mechanisms for a series of game sequences

A gaming device comprises a display, a random number generator, a memory storing (i) a set of reel strips comprising a plurality of symbols including trigger symbols, and (ii) instructions which, when executed, cause the processor to select, for a first game instance, a plurality of symbols using the random number generator, control the display to display the plurality of symbols at a respective ones of a plurality of symbol positions, upon the displayed symbols of the first game instance comprising at least a threshold number of trigger symbols, initiate a feature game corresponding to the trigger symbols, the feature game comprising at least a second game instance, upon the displayed symbols of the first game instance comprising at least one trigger symbol and less than the threshold number of trigger symbols, randomly determine whether to initiate the feature game, conduct any initiated feature game, and make any award.
Owner:ARISTOCRAT TECH AUSTRALIA PTY LTD

Internet of Things data transmission security enhancement method combined with quantum random number generation

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.
Owner:ZHONGHUITONG ECOLOGICAL TECH (SHANDONG) CO LTD

Systems and methods for changing future game outcomes by delaying the utilization of results of a random number generator

A system and method for operating a game of chance. A gaming system includes one or more game displays, a user interface, at least one processor running executable instructions related to a game of chance and memory in communication with said at least one processor. The game of chance including one or more random number generators in communication with the at least one processor, wherein a player may selectively delay the processor from utilizing results from the at least one RNG to change a future game outcome by interacting with the gaming machine and preventing game play for a delay period.
Owner:GAMING ARTS LLC

Gaming device with wheels for awarding composite features

An electronic gaming machine comprising a display device, a random number generator, a processor, and a memory storing instructions which, cause the processor to, in response to a feature wheel initiation condition being met: select, based on one or more random numbers dynamically generated by the random number generator, stopping positions for a plurality of feature wheels, each of the feature wheels being associated with a different feature event corresponding to a spinning reel, and each of the feature wheels comprising a plurality of outcomes at different stopping positions, wherein at least one of the different stopping positions corresponds to an outcome; control the display device to display spinning to the stopping positions selected; determine whether to provide an outcome from the plurality of outcomes; and upon determining to provide more than one outcome comprising the feature event, initiate a composite feature event.
Owner:ARISTOCRAT TECH AUSTRALIA PTY LTD

Server hardware test terminal and method

The invention discloses a server hardware testing terminal and method, and relates to the technical field of server hardware testing, and the method comprises the steps: obtaining server hardware configuration parameters and storage equipment specification information, collecting the number of processor cores, memory capacity and storage equipment read-write speed reference data through a system monitoring interface, building a hardware performance baseline file, and storing the baseline file in a server; obtaining a complete hardware resource list and a performance index range; the method comprises the following steps: constructing a multi-dimensional workload model according to information retrieval scene features, creating query request sets of different scales by adopting a random number generator, simulating a mixed load mode of full-text retrieval and database query, and determining resource consumption weights and execution time distribution of various query operations; and analyzing query request distribution characteristics in the workload model through a dynamic load balancing algorithm, if query requests are concentrated in a specific time period, adjusting a load distribution strategy, obtaining a uniformly distributed test load sequence, and judging the impact degree of a load peak value on hardware resources.
Owner:BEIJING DISCOVERY INTELLIGENT MFG TECH CO LTD

Audio and video signal fusion transmission method and device, equipment and medium

The invention belongs to the technical field of audio and video fusion transmission, and discloses an audio and video signal fusion transmission method and device, equipment and a medium, and the method comprises the steps: extracting 512-dimensional semantic feature vectors of an audio and a video, and generating a joint feature matrix through a cross-modal attention mechanism; calculating a fusion feature flow based on a coefficient alpha output by the scene classification model; a quantum random number generator is used for generating a session master key Kmain, the session master key Kmain is packaged into an encrypted session key Kenc through a Kyber-768 algorithm, and frame-level dynamic encryption is carried out on the fusion feature flow; and selecting a GPMI Type-B wired protocol or wireless transmission based on QUIC according to the transmission environment. According to the invention, the transmission efficiency, the anti-interference capability and the anti-quantum-attack security are improved, and multi-scene requirements are met.
Owner:JIE XUN TECH (GUANGZHOU) CO LTD

Key establishment and secure communications using satellite-provided random number values

Systems and techniques for secure communications and distribution of random values for cryptographic key generation, coordinated with the use of specific key generation parameters, are described. An example method includes: receiving a first random value and a second random value generated from at least one quantum random number generator (QRNG), with at least one of the first random value and the second random value being provided from a satellite communication; obtaining key generation parameters associated with cryptographic key generation, where the key generation parameters specify a specific combination of the first random value and the second random value; and generating a cryptographic key, using the specific combination of the first random value and the second random value, as a seed to a cryptographic function.
Owner:WELLS FARGO BANK NA

Key establishment and secure communications based on satellite-connected entropy sources

Systems and techniques for secure communications and distribution of random values, provided via satellite communications, are described. These random values are generated from one or more ground-based entropy sources (e.g., quantum random number generators (QRNGs) at terrestrial locations), and optionally combined with values from satellite-based entropy sources (e.g., QRNGs at non-terrestrial locations). An example method includes: receiving a first random value generated by a first QRNG at a terrestrial location; receiving a second random value and a third random value via at least one satellite communication, each additional random value generated by other QRNGs; and generating a cryptographic key based on the first random value, the second random value, and the third random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.
Owner:WELLS FARGO BANK NA

Microcomputer host aging test method and system

The invention discloses a microcomputer host aging test method and system, and relates to the technical field of computer performance tests.The microcomputer host aging test method comprises the steps that to-be-tested equipment is connected to a test system, system standby test is conducted, and initial reference data are collected; constructing an aging prediction model and optimizing a model training strategy in combination with course learning and transfer learning; and performing a host preheating test and a high-load test by using AIDA64 based on a prediction result, synchronously operating a Heven Benchmark tool, and testing the graphic processing capability of the computer. The method combines a radial basis function neural network aging prediction model, carries out model training through curriculum learning and transfer learning, intelligently analyzes the CPU / GPU degradation trend, combines a quantum random number generator to generate a random load mode, simulates load fluctuation in an actual application scene, and improves the test trueness. In addition, a BIOS optimization strategy is provided to realize intelligent aging prediction and optimization regulation and control, so that the long-term stability and the service life of the microcomputer host are improved.
Owner:SHENZHEN MEIGAO ELECTRONICS EQUIP CO LTD

Distributed quantum security encryption method, system and device

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.
Owner:INFORMATION & COMMNUNICATION BRANCH STATE GRID JIANGXI ELECTRIC POWER CO

Improved randomness evaluation method and system for continuous variable source independent quantum random number generator based on heterodyne detection

The invention provides an improved randomness evaluation method and system for a continuous variable source independent quantum random number generator based on heterodyne detection, and relates to the technical field of quantum information communication. According to the method, the influence of non-perfect ideal characteristics of an actual device at a measuring end is considered, and the safety problems of non-equilibrium heterodyne detection and the like caused by non-ideal characteristics of local oscillation light intensity fluctuation, the beam splitting ratio of a beam splitter and the detection efficiency of a detector are solved; the above imperfect characteristics are associated with the estimation of the measurement accuracy of the orthogonal component in the calibration process, and the measurement accuracy estimation formula of the orthogonal component is corrected, so that the randomness evaluation is corrected, the problem of security vulnerabilities introduced by local oscillation light intensity fluctuation under unbalanced heterodyne detection can be solved, and the accuracy of the measurement accuracy of the orthogonal component is improved. And the actual safety of the system is further improved.
Owner:Chinese People's Liberation Army Cyberspace Force Information Engineering University

Electric power Internet of Things equipment identity authentication method and system based on quantum cloud code

The invention relates to the technical field of electric power data transmission, and discloses an electric power Internet of Things equipment identity authentication method and system based on quantum cloud codes. The method comprises the following steps: acquiring quantum state information through a quantum random number generator, generating a power authentication seed and converting the power authentication seed into a quantum cloud code initial seed; collecting an electrical equipment identifier and a characteristic parameter to generate a characteristic vector; expanding the initial seed of the quantum cloud code into a sub-key sequence, and generating an authentication quantum cloud code through quantum entanglement coding and error correction; executing quantum evolution in the authentication time window to generate a dynamic authentication code; after the challenge sequence is received, quantum measurement is carried out, and authentication response data is constructed; and finally, determining an authentication state through block chain storage and an intelligent contract. According to the invention, quantum cryptography and a block chain technology are combined, so that a high-security, low-overhead and extensible device identity authentication mechanism is realized.
Owner:GUO WANG ZHE JIANG SHENG DIAN LI YOU XIAN GONG SI YU YAO SHI GONG DIAN GONG SI +2

Key establishment and secure communications based on satellite entropy sources

Systems and techniques for secure communications and distribution of random values, produced from at least two satellite entropy sources, are described. These random values may be provided by respective quantum random number generators (QRNGs) at separate satellites, and optionally combined with values from ground-based entropy sources (e.g., QRNGs at terrestrial locations). An example method includes: receiving a first random value and a second random value via at least one satellite communication, where the first random value is generated by a first QRNG at a first satellite, and the second random value is generated by a second QRNG at a second satellite; and generating a cryptographic key based on the first random value and the second random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.
Owner:WELLS FARGO BANK NA

Power distribution internet-of-things terminal management method and system based on quantum cloud code, and electronic equipment

The invention relates to the technical field of power data transmission, and discloses a power distribution Internet of Things terminal management method and system based on quantum cloud codes, and electronic equipment. The method comprises the steps of mixing original data through a random number generator to obtain a quantum cloud code seed, obtaining a quantum cloud code sequence through fragmentation encryption, forming a terminal equipment grouping key according to a preset rule, generating an equipment identity feature code in combination with operation state information, and establishing a data transmission channel according to the feature code. A secure communication link is formed through encryption and verification of a session key, operation data in the communication link is collected, a standardized data set is obtained through cleaning and normalization, output equipment behavior characteristics are mapped, operation authority is dynamically adjusted to construct a management system, regular snapshot and distributed backup are performed, and disaster recovery backup data are formed to establish a recovery strategy. According to the invention, security authentication, dynamic permission allocation and intelligent management of the terminal equipment are realized, and the security and management efficiency of the system are remarkably improved.
Owner:STATE GRID ZHEJIANG ELECTRIC POWER CO LTD NINGBO POWER SUPPLY CO

True random number generator circuit based on 1T1R and random number generation method thereof

The invention discloses a true random number generator circuit based on 1T1R and a random number generation method thereof, belongs to the field of information security, and aims to solve the problem that in most true random number generator circuit designs based on volatile memristors, peripheral circuits generally comprise logic gates, triggers and clock signal generators, so that the reliability of the true random number generator circuit is greatly improved. The circuit comprises a memristor, a transistor and a T flip-flop, and the memristor, the transistor and the T flip-flop are connected with the memristor and the T flip-flop respectively. One end of the memristor is connected with an input voltage # imgabs0 #, and the other end of the memristor is connected in series to the drain electrode of the transistor through a first wire; the grid electrode of the transistor is connected to a fixed voltage # imgabs1 #, and the source electrode of the transistor is grounded; a second wire is led out from the first wire connected with the memristor and the transistor and is connected to the clock end of the T trigger, and the cross connection point of the first wire and the second wire is an output node # imgabs2.
Owner:ZHEJIANG UNIV

Modified quantum entangled bit communication

Systems and techniques may generally be used for modifying quantum entangled bit communication. An example technique may include generating, at a first node in a computing network, a random number using a quantum derived seed as input to a random number generator; modifying a program using the random number while maintaining a function output of the program for a given input; receiving, at the first node from a second node, an input based on the random number; and executing the modified program at the first node using the input to obtain an output consistent with the program in an unmodified state.
Owner:WELLS FARGO BANK NA

Laser phase noise quantum random number generator

The invention discloses a laser phase noise quantum random number generator which comprises a light source module, an unequal arm interference light path, a detection module, a sampling module, a control processing module and a driving module. The light source module generates light signals and outputs the light signals to the detection module through the unequal-arm interference light path, the detection module detects the intensity of the interference light signals, the sampling module carries out high-speed sampling on output results of the detection module, and sampling data of the sampling module is calculated and analyzed through the control processing module to obtain the size of phase drift. Then, an electric signal is generated through a driving module to load a compensation phase to the unequal arm interference light path to offset phase drift, so that the laser phase noise quantum random number generator reaches a stable state; and when the laser phase noise quantum random number generator reaches a stable state, the control processing module performs entropy evaluation and randomness extraction on the sampling data to generate a random sequence. Through the structural arrangement, the control precision and the feedback compensation speed are effectively improved.
Owner:NO 30 INST OF CHINA ELECTRONIC TECH GRP CORP

Anti-interference UWB communication system

In one embodiment, an apparatus includes a first radio controller configured to communicate using a first protocol; and a pseudo-random number generator configured to generate a pseudo-random output value based on the input data value. The apparatus includes a processor configured to determine a preamble based on an output of the pseudo-random number generator, and process a data packet received using the first radio controller using the preamble to generate a processed data packet.
Owner:NXP BV

Load control terminal program trusted loading method and electronic equipment

The invention provides a load control terminal program trusted loading method and electronic equipment, and the method comprises the steps: transmitting an operation instruction to a hardware security module through a central processing unit, negotiating a first session key with the hardware security module, and generating an equipment fingerprint through the hardware security module; intercepting a to-be-loaded program by utilizing a linux system kernel interception program calling entry, transmitting a signature original text of the to-be-loaded program to a hardware security module, and checking the signature original text by utilizing the hardware security module; if the signature original text is successfully verified, a random number generated by a true random number generator of the hardware security module is combined with the device fingerprint to generate a second session key; calling a communication interface between the kernel and the hardware security module, sending the sensitive data of the program to the hardware security module, encrypting the sensitive data by using a second session key, and mapping the encrypted sensitive data to an independent address space; and when the operation of the program is finished or interrupted, erasing the second session key and the random number by using the hardware security module.
Owner:BEIJING CHINA POWER INFORMATION TECH

Methods and Systems that Generate Random Numbers Based on Nondeterministic Phenomena that are Computationally Initiated and Computationally Accessed Within a Computer System

The current document is directed to methods and systems that generate sequences of random numbers. Unlike many currently available random-number generators that continuously measures a physical apparatus or other signal source, the currently disclosed methods and systems employ nondeterministic phenomena that are computationally initiated and computationally accessed within a computer system. The nondeterministic phenomena are often a produced by multiple simultaneously executing, asynchronous threads or other computational entities, with the unpredictability arising from multiple different types and sources of nondeterministic behavior within the computer system. Unlike pseudorandom-number generators, statistics and metrics computed from sequences of random numbers produced by the currently disclosed random-number generators have values close to those expected for a random-selection process. Unlike random numbers that depend on specialized circuitry or single signal sources, the currently disclosed random-number generators used standard components and significant redundancy and robustness to single-point failures.
Owner:VMWARE INC