25 results about "One-way function" patented technology

Circuits defined by n-state switching tables with n>2 are transformed by at least one n-state inverter which may be a Finite Lab-transform (FLT) into a Finite Lab-transformed (FLTed) n-state switching devices. Computer operations defined by transformed or modified n-state switching tables are applied in cryptographic operations, including one or more message digests or hashing methods or computer one-way functions. A keyword is generated from a public keyword by at least one modified known hashing method. A known hashing method may be selected from the group consisting of SHA-1, SHA-2, SHA-3, MD5, MD6, Blake2, Blake3 and CubeHash. Internal states of known hashing methods are modified to generate unpredictable hash values.

Aspects of the disclosure generate independent encryption keys for objects (e.g., virtual machine disks (VMDKs)) without requiring the management of multiple keys. An encryption manager obtains a primary encryption key, an object identifier (ID) comprising a globally unique ID (GUID) for an object, a data salt comprising the object ID and a data salt string, and a metadata salt comprising the object ID and a metadata salt string. A data encryption key is generated using the primary encryption key, the data salt, and a one-way function. A metadata encryption key is generated using the primary encryption key, the metadata salt, and the one-way function. Because the data salt string and metadata salt string differ, the data encryption and metadata encryption keys differ. Object IDs for different objects differ, so each object and its metadata have globally unique keys. Key generation (other than the primary key) is deterministic, simplifying key management.

Methods, systems, and apparatus for logical reverse computing and circular compression and decompression. In one aspect, a method for compressing a classical binary data input includes obtaining a classical binary data input; performing classical operations on the classical binary data input to obtain metadata for the classical binary data input, the metadata comprising statistical operators, wherein the classical operations are based on the ensemble interpretation of quantum mechanics; applying swap gates to the metadata to compress the metadata, wherein the swap gates swap data as a one-way function and application of the swap gates is defined by values of the statistical operators; and providing the compressed metadata as a compressed classical binary data input.

The present application discloses a method for generating a one-way function, a system, a device, and a storage medium. The method is applied to an electronic device. The electronic device is configured with a preset symmetric encryption algorithm. The method comprises: acquiring the preset symmetric encryption algorithm, zeroth mapping, and first mapping, the zeroth mapping and the first mapping having a single, same independent variable, and the first mapping being a one-to-one mapping; by means of the symmetric encryption algorithm, using a mapping value of the zeroth mapping as an inputted plaintext and a mapping value of the first mapping as an inputted key to perform encryption calculation to obtain a first ciphertext; and using a mapping relationship between the first ciphertext and the independent variable as a generated one-way function.

This invention relates to the field of data encryption technology and provides a user information encryption method and system for cloud platforms, comprising the following steps: collecting multi-dimensional environmental characteristics of the user's current environment, combining the user's login password and a random perturbation factor issued by the server to generate an environmental fingerprint hash value; generating a data encryption key for the user data to be encrypted; determining the dynamic trust level index corresponding to the current environment based on the multi-dimensional environmental characteristics and historical environmental profiles; calculating and generating a packaged key using a one-way function based on the environmental fingerprint hash value, the data encryption key, and the dynamic trust level index; encrypting the user data with the data encryption key to obtain ciphertext, storing the ciphertext and the packaged key together on the cloud platform, and destroying the data encryption key. By dynamically generating the trust level index and embedding it into the key packaging process, decryption is smooth in high-trust environments and impossible in low-trust environments, ensuring security and efficiency.

The invention discloses a method and a system for protecting portrait feature data of multilayer space mapping, which are used for scenes such as user portraits / article portraits and the like. According to the method, a three-layer mapping architecture of a scalar input layer (S)-a middle random layer (R)-a target output layer (C) is adopted, and multi-stage irreversible transformation processing is carried out on original scalar data. The method comprises the following steps: firstly, mapping a scalar into an intermediate vector by utilizing a one-way function of cryptography security and combining a secret key and an offset; secondly, distance features of the intermediate vector are extracted, direction features are discarded, and the distance features are converted into two-dimensional space coordinates through a deterministic mapping algorithm; according to the method, the irreversibility of reversely deducing the scalar quantity from the coordinates is ensured by erasing the angle information of the middle layer; the space isolation in different business scenes is realized by introducing the offset; according to the method, a deterministic rejection sampling algorithm based on HMAC is preferably adopted, the problem of center aggregation existing in a traditional mapping method is solved, uniform distribution of coordinates in a set area is achieved, sensitive feature value scalar quantities of all dimensions in portrait feature vectors are mapped into two-dimensional coordinate points, and the two-dimensional coordinate points are aggregated to form an object portrait feature matrix; the method is used for cross-system analysis, clustering, similar retrieval and visual display, and meanwhile plaintext feature value leakage can be avoided.

For validation of wireless signals, a wireless receiver receives a validation signal that includes information from a target signal. By using digital signature, message authentication code (MAC), and / or hashing, the validation signal is verified to be from a trusted source. By comparing the information from the verified validation signal with the target signal, the target signal is confirmed to be genuine or not a spoofing signal. In one approach, the validation signal is provided from a different transmission source than the target signal. In another approach, modulation estimation rather than known modulation is used as the information for the validation signal for comparison with the target signal despite not knowing the spread pattern of the coding. In yet another approach, a one-way function is used to generate a pseudorandom code to spread a first component of the a first signal below the noise floor. The input to the one-way function is a second component sent at a time later than the time.

Disclosed is a method for granting or denying secure anonymized access to a restricted location, database and / or computer system to an individual, the method comprising: constructing a one-way function for encoding biometric data, the one-way function being in particular constructed using quantum data fitting on the basis of supporting points, wherein the supporting points are obtained by solving an optimization problem, in particular a bin packing optimization problem; adding of entries to a database, the entries comprising hashes of encoded biometric data and PINs; processing an access request from the individual; and based on the result of the processing, granting or denying secure anonymized access to the restricted location, database and / or computer system to the individual.

Aspects of the present invention relate to machines, systems, and methods for using a zero knowledge hash function to verify validity of an ID. Certain configurations may provide machines, systems, and method for proving the ID is genuine, the information on the ID is correct, and the user presenting the ID is the same as the user in the ID. Some configurations may store a hash based on a one-way function of a data string created from information on the ID in a hashed data string database. Certain variations of the invention may query the database to verify the hashed data string exists in the database. Based on the response of the database to the query, a card authenticator may be configured to send a control transmission to an access control device to cause the access control device change from a first state to a second state.

Systems and techniques are provided for a resource transfer system. An instruction to transfer a first quantity of a resource from a first resource pool to a second resource pool may be received. A hold may be placed on a second quantity of the resource in the first resource pool. The held second quantity of the first resource may not be transferred from the first resource pool until the hold is released. Responsive to receiving a message that fulfills a condition on the hold and an instruction to execute the transfer, the hold may be released. A register that is in the first resource pool and is associated with the resource may decremented by the first quantity, and a register that is in the second resource pool and is associated with the resource may be incremented by the first quantity.

A hybrid cryptographic scheme for a network of nodes, in particular an IoT network, composed of a first subset and a second subset of separate nodes, the computing resources of the nodes of the first subset being greater than the computing resources of the nodes of the second subset, the scheme comprising a first functional cryptographic scheme deployed on the first subset of nodes and a second functional cryptographic scheme deployed on the second subset of nodes, a cryptographic primitive at the root of the second cryptographic scheme generating a pair of private and public master keys from a seed, the seed being obtained by a connection cryptographic primitive from at least the private key of an end node of the first subset, the connection cryptographic primitive being a one-way function.

Methods for the encoding an encryption key for secure storage are disclosed. The methods rely on the use of unclonable, one-way functions, such as images of biological objects that may be measured according to challenges to result in responses. A biometric print of a biological object is measured with a set of n challenges resulting in n responses. The responses are an ordered sequence, with each response having a fixed position in the sequence. A key is generated of bit length n. A subset of m responses in the full set of n responses is selected, where the selected responses correspond to positions of 1s in the key. The response subset is stored. The key is then used, and deleted. A party wishing to re-generate the key generates the same set of challenges, measures the same biological object with the challenges a second time, and generates a second set of n responses. Responses in the stored subset of m responses will match responses in the second set of n responses at certain positions in second set of n responses. These matching positions correspond to 1s in the key. The non-matching positions correspond to 0s. Thus, comparison between the response sets recovers the key.

The invention provides a data processing method for an encryption party, a data processing method for a decryption party and a data processing device. The data processing method for the encryption party comprises the following steps: symmetrically encrypting a plaintext by using a first secret value to generate a ciphertext; obfuscating the first secret value based on the second secret value; generating a committed value for the second secret value using a first algorithm based on an algebraic one-way function; and encapsulating the obfuscated first secret value and commitment value to generate a data packet; performing asymmetric encryption on the data packet by using the public key; and packaging and sending the ciphertext and the encrypted data packet.

Systems and methods for conducting composable quantum oblivious transfer over noisy quantum channels are disclosed. Embodiments provide a method for constructing a quantum oblivious transfer (QOT) protocol using noisy quantum channels and devices through the use of a quantum-hard one-way function. This construction allows the construction of QOT protocols that achieve simulator security, allowing them to be used in a black-box fashion as part of other cryptographic constructions, including arbitrary secure multiparty computations.

Methods, systems, and apparatus for logical reverse computing and circular compression and decompression. In one aspect, a method for compressing a classical binary data input includes obtaining a classical binary data input; performing classical operations on the classical binary data input to obtain metadata for the classical binary data input, the metadata comprising statistical operators, wherein the classical operations are based on the ensemble interpretation of quantum mechanics; applying swap gates to the metadata to compress the metadata, wherein the swap gates swap data as a one-way function and application of the swap gates is defined by values of the statistical operators; and providing the compressed metadata as a compressed classical binary data input.

Methods and systems for managing use of inference models are disclosed. To manage use of inference models, transformed input data may be obtained, the transformed input data being generated using input data and a one-way function to reduce a level of sensitivity of the input data and the level of sensitivity indicating a level of impact of unauthorized access to the input data. A reconstruction resistant inference may be generated using the transformed input data and an input data attack resistant inference model. The input data attach resistant inference model may be trained to ingest the transformed input data so that inferences generated by the input data attack resistant inference model have a reduced likelihood of being usable to reconstruct the input data. Computer-implemented services may be provided based on the reconstruction resistant inference.

Methods for the encoding an encryption key for secure storage are disclosed. The methods rely on the use of unclonable, one-way functions, such as images of biological objects that may be measured according to challenges to result in responses. A biometric print of a biological object is measured with a set of n challenges resulting in n responses. The responses are an ordered sequence, with each response having a fixed position in the sequence. A key is generated of bit length n. A subset of m responses in the full set of n responses is selected, where the selected responses correspond to positions of is in the key. The response subset is stored. The key is then used, and deleted. A party wishing to re-generate the key generates the same set of challenges, measures the same biological object with the challenges a second time, and generates a second set of n responses. Responses in the stored subset of m responses will match responses in the second set of n responses at certain positions in second set of n responses. These matching positions correspond to 1s in the key. The non-matching positions correspond to 0s. Thus, comparison between the response sets recovers the key.

The invention discloses a secret sharing method based on a linear code general access structure. The method comprises the following steps: a sender selects and publishes security parameters of a secret sharing scheme; the security parameters comprise a parameter r in a finite field range and a bivariate one-way function, and the secret s is in the finite field range; the distributor selects a linear code, a generation matrix and a check matrix based on the number of users; the distributor randomly selects a vector and multiplies the vector by a generated matrix to obtain a corresponding character code, and the secret is equal to the vector multiplied by the first column of the generated matrix; any user selects a corresponding sub-secret and the sub-secret is checked by the distributor, so that the sub-secrets meet the condition that every two sub-secrets are relatively prime and are larger than the selected finite field; the distributor executes a secret distribution algorithm to calculate and obtain a general solution X meeting the congruence equation set, and the X is disclosed; and the authorized user cooperates with the bivariate one-way function according to the general solution X to reconstruct and recover the secret. According to the method, multiple times of use of the sub-secret is realized, and malicious behaviors of dishonest users are effectively resisted.

A method for verifying the conformity of a NDEF message (MC, MS) based on a processing of a previous NDEF message (MP) sent by a same transponder (2) to an electronic system (3). The method includes: transmitting the NDEF message (MC, MS) by the transponder (2) to the electronic system (3), the NDEF message (MC, MS) being designed (22) by the transponder (2) in generating (23) transponder-defined data constituting this NDEF message (MC, MS), including at least one NDEF Record consisting in generic data (GD) and a token (Ti+1, Ti+a) including data containing a random number (RNi+1, RNi+a) and a one-way function value (Vi+1, Vi+a) computed from a random number (RNi) contained in the previous NDEF message (MP); controlling the regularity of the token; and broadcasting an informative message relating to conformity of the NDEF message (MC, MS) when the regularity of this token (Ti+1, Ti+a) has been controlled.

The invention discloses a secret key traceability verification method and device, equipment and a medium. The method comprises the following steps: in response to updating of an element identifier, obtaining a to-be-verified key and a to-be-verified seed input by a to-be-verified user, and a correct key and a correct seed; the element identifier is an identifier of a version stage where the correct key is located; the correct key is generated through a one-way function according to the correct seed; detecting the to-be-verified key to obtain a key detection result; the key detection result comprises passing and non-passing; in response to the fact that the key detection result is passed, calculating to obtain an intermediate key according to the to-be-verified seed; and according to the intermediate key and the correct key, judging whether the traceability verification of the to-be-verified key and the to-be-verified seed is passed or not. When the secret key is leaked, the verification of distinguishing an attacker and a legal user can be realized by the embodiment of the invention.

The application discloses a kind of based on SIS trapdoor one-way function multi-signature method, comprising the following steps: (1) Setup step: trusted party with security parameter as input, output required public parameter of scheme;(2)KeyGen step: each signer with public parameter as input, output public key pair;(3)Sign step: each signer with private key, public key, public parameter, and message as input, output single signature for message;(4)AggKey step: verifier with the public key set of signer as input, output an aggregate public key;(5)Verify step: verifier with public parameter, aggregate public key, message and multi-signature as input, output a bit 1 or 0, represent verification success or failure.The application utilizes the key homomorphism of SIS trapdoor one-way function, realizes the multi-signature of data;Use the lattice-based cryptography system, can resist quantum algorithm attack;Use the probability verification idea, improve the efficiency of verifying multi-signature.

Systems and methods for conducting composable quantum oblivious transfer over noisy quantum channels are disclosed. Embodiments provide a method for constructing a quantum oblivious transfer (QOT) protocol using noisy quantum channels and devices through the use of a quantum-hard one-way function. This construction allows the construction of QOT protocols that achieve simulator security, allowing them to be used in a black-box fashion as part of other cryptographic constructions, including arbitrary secure multiparty computations.

A method for granting or denying secure anonymized access to a restricted location, database, and / or computer system to a person is disclosed, the method comprising: constructing a one-way function for encoding biometric data, wherein the one-way function is constructed, in particular, using quantum data fitting based on vertices, the vertices being obtained by solving an optimization problem, in particular a bin-packing optimization problem; adding entries to a database, wherein the entries comprise hashes of encoded biometric data and PINs; processing an access request from the person; and, based on the result of the processing, granting or denying secure anonymized access to the restricted location, database, and / or computer system to the person.

The present invention relates to a hybrid cryptographic scheme for a network of nodes, in particular an IoT network, composed of a first subset and a second subset of disjoint nodes, the computing resources of the nodes in the first subset being greater than the computing resources of the nodes in the second subset. The scheme comprises a first functional cryptographic scheme deployed on the first subset of nodes and a second functional cryptographic scheme deployed on the second subset of nodes. A cryptographic primitive at the root of the second cryptographic scheme generates a private and public master key pair from a seed. The seed is obtained by a cryptographic connection primitive from at least the private key of an extremal node in the first subset. The cryptographic connection primitive is a one-way function. Fig. 5

A method of simultaneously or contemporaneously generating at least one encryption compression key, deleting the original database, transferring the encryption compression key, reversing the encryption compression key, decompressing, and recreating the original database. [Solution] The method can be used with any database. Furthermore, the method essentially includes generating at least one encrypted compression organization key that can be combined with the encrypted compression key to add a layer of encryption to the compression and encryption. The double encrypted compression key can be generated from the use of a trapdoor or one-way function in combination with the compression and encryption portions provided by the encrypted compression key and the encrypted compression organization key. The encrypted compression key and the double encrypted compression key include functional parts that accelerate compression and improve compression accuracy. Furthermore, the method can be used with asymmetric or symmetric encryption.