6 results about "Pass the hash" patented technology

The invention provides a high-speed mode matching device and method based on an FPGA, and the device comprises an extraction module which is used for carrying out the multi-dimensional feature extraction of a rule set; the clustering module is used for generating rule categories; the Bloom filtering module is used for screening the input data; the Hash matching module is used for verifying whether the data flow is matched with a known mode or not; the probability verification module is used for calculating and verifying a hash matching passing probability; the regular matching module is used for matching complex modes; the feedback module is used for dynamically adjusting Bloom filter parameters, hash table distribution and probability formula coefficients; and the matching result reporting module is used for reporting the matching information. According to the method, the balance of high efficiency, accuracy and expandability can be realized in a multi-mode matching task, the resource utilization efficiency of an FPGA (Field Programmable Gate Array) is improved, and the matching requirement when a mode matching rule set is relatively large is met.

A system and method for zero-knowledge social graph management with session-revealed identities is disclosed. The system is configured for receiving registration requests comprising user communication addresses. The system is further configured to generate cryptographic hashes of communication addresses without storing plaintext addresses. The system is further configured to generate asymmetric key pairs with private keys stored exclusively on user devices. The system is further configured to generate encrypted identity packets containing personally identifiable information encrypted with recipient public keys and transmit connection requests after verifying target existence through hash comparison. The system is further configured to enable recipient-controlled decryption revealing requester identities only when recipients review requests. The system is further configured to generate real-time social connection hashes from communication address hashes and compare them with stored hashes to verify connections without identity exposure, providing zero-knowledge proof of connection.

The present invention provides a technology capable of remotely managing the sale of goods in a vending machine. The present invention relates to a sensor unit (500) assembled in a vending machine and unlocking the vending machine based on encrypted data sent from a terminal device, which includes: an encryption processing unit (501d) that generates a public key and a private key and encrypts an unlocking code with the public key; a hash generation unit (501e) that hashes sensor information including at least a sensor ID and sensor location information through a hash function and outputs a hash value; a management unit (501g) that stores and manages at least the public key and the hash value in a storage unit (503) in a corresponding manner; and an unlocking unit (501f) that determines the correctness of the encrypted data sent from the terminal device and unlocks the vending machine when the encrypted data matches the encrypted data generated by the encryption processing unit.

The application relates to the field of cloud database storage encryption, and discloses a cloud database sharding encryption system for cross-border transactions, which comprises a receiving module that acquires transaction data and jurisdiction constraint tags; a logical mapping module that analyzes the tags to determine logical storage coordinates and extracts storage offset parameters from physical storage nodes; a key derivation module that fuses the coordinates, parameters and root key seeds to generate an encryption key through hash operation; and a storage routing module that routes the ciphertext sharding to the physical storage nodes and writes in. The application limits the key derivation factor by using the storage offset parameters, so that the confidentiality state and the physical addressing characteristics form a causal closed loop; on the premise of not introducing external clock synchronization overhead, the encryption parameters and the storage physical state are deeply coupled, the risk of key collision caused by network clock drift is effectively avoided, and the cross-border distributed storage security is improved.

The present invention discloses a low-redundancy single-round file synchronization method for insertion / deletion scenarios, which mainly solves the problem of large communication volume in existing single-round file synchronization methods. The scheme is: the local node reads a shorter subsequence in each data block as a mark; the VT checksum and hash value of the data block are calculated, and the RS code is used to encode and transmit to the cloud node; the cloud node establishes a grid diagram according to the periodic mark sequence, infers the number of insertions / deletions that occur in each data block, and decodes and restores the VT checksum and hash value of each data block; for multiple consecutive data blocks that fail to pass the hash value check, guess the boundaries and insertion / deletion numbers of the data blocks; the cloud node transmits the index of the data block that has not been successfully synchronized to the local node, and the local node retransmits the data block to the cloud node to complete file synchronization. The present invention reduces the communication volume of single-round file synchronization in the insertion / deletion scenario, and can be used for data transmission between local nodes and cloud nodes.

The present invention provides a data security transmission method and system based on an autonomous security interaction protocol, which relates to the technical field of data transmission, including establishing an identity authentication model for both communicating parties, generating public keys and private keys corresponding to the two communicating parties through an asymmetric encryption algorithm, and performing identity authentication and key exchange through a trusted third party to obtain the session keys of the two communicating parties; generating an encrypted data packet through a symmetric encryption algorithm, and generating a first message authentication code based on the encrypted data packet through a hash function; constructing a complete encrypted message; decrypting the encrypted data packet through a symmetric encryption algorithm to obtain original data, and generating a second message authentication code corresponding to the original data through a hash function based on the original data; performing two rounds of comparison between the first message authentication code and the second message authentication code, and if the two rounds of comparison are consistent, it is confirmed that the data has not been tampered with; if any one of the two rounds of comparison is inconsistent, a security measure is triggered.