5 results about "Operating system security" patented technology

This invention discloses a method for controlling a video transcoding device and a transcoding method. This invention divides read and write commands into Level Analyzers (LBAs), assigning different LBAs to represent different transcoding commands. This allows for the implementation of different transcoding commands through I / O read / write commands, thereby enabling communication between the operating system and the video transcoding device without being limited by the operating system and without requiring administrator privileges. This ensures video transcoding compatibility while maintaining operating system security. In other words, this invention guarantees the compatibility of the video transcoding device on any operating system and addresses permission management issues, and also provides excellent support for virtual machines and containers without requiring additional permission settings.

The application relates to an intelligent password key device based on an operating system security mechanism and belongs to the technical field of computers.The intelligent password key device comprises an application interface layer, a virtual device layer and a security service layer, wherein the application interface layer receives a processing request sent by a request party through an SKF interface, obtains request data in a preset format based on request parameters of the processing request, and sends the request data to a virtual device of the virtual device layer through a system call; the virtual device layer receives the request data through the virtual device, parses the request data by using a protocol processor, and sends the request data to a corresponding request processing module of the security service layer according to a request type of the processing request; and the security service layer executes request processing based on an operating system security mechanism by using the request processing module, and returns preset processing result information to the request party.The intelligent password key device based on the operating system security mechanism solves the problem of hardware dependence of the intelligent password key.

This invention discloses a secure encryption method for the operating system kernel based on the AES algorithm, relating to the fields of operating system security and data encryption technology. The method comprises the following steps: S1, traversing and scanning the data in the operating system kernel, identifying sensitive data, and classifying it according to its sensitivity level; S2, generating an encryption master key and hierarchical subkeys based on the AES algorithm; S3, encrypting data of different sensitivity levels using AES encryption algorithms with different rounds and encryption modes; S4, dynamically updating the key and encrypting and storing the updated key in the kernel secure storage area; S5, adding a checksum to the encrypted sensitive data and verifying data integrity; S6, reading the corresponding key and decrypting the data to complete data access. This invention significantly improves key security and data integrity, effectively balances encryption efficiency and system performance, has strong adaptability and high practicality, and is easy to promote and apply.

The application discloses a kind of based on post-quantum signature operating system security authentication and key management method, belong to operating system security and quantum security technical field, including the following steps, establish the three-layer security architecture model based on hardware trust root-post-quantum signature chain-mixed key management;Operating system security authentication is carried out based on three-layer security architecture model;After security authentication passes, the whole life cycle management of post-quantum key is executed to generate key, and in the process, the way of hardware isolation and encryption protection is used to ensure that key is not leaked, traceable and controllable;Post-quantum signature and the post-quantum key obtained in the above step are deployed to the operating system and terminal equipment that have passed security authentication, the application uses the above method, realizes operating system full-scene anti-quantum security authentication, guarantees the safety of the whole life cycle of key, realizes the smooth compatibility with existing traditional cryptographic system, reduces migration cost, improves the overall security level of operating system.

This application relates to a program execution method, apparatus, computer device, and readable storage medium. The method includes: obtaining signature information corresponding to a target application, wherein the target application is obtained by signing each code section contained in an initial application according to a preset encryption algorithm; loading the signature information and the target application into kernel mode, and verifying the target application in kernel mode based on a preset configuration file and a signature verification mechanism corresponding to the preset encryption algorithm, obtaining a target verification result; and determining the execution control result of the target application based on the target verification result. This method can improve operating system security.