9 results about "Pass the hash" patented technology

The invention provides a high-speed mode matching device and method based on an FPGA, and the device comprises an extraction module which is used for carrying out the multi-dimensional feature extraction of a rule set; the clustering module is used for generating rule categories; the Bloom filtering module is used for screening the input data; the Hash matching module is used for verifying whether the data flow is matched with a known mode or not; the probability verification module is used for calculating and verifying a hash matching passing probability; the regular matching module is used for matching complex modes; the feedback module is used for dynamically adjusting Bloom filter parameters, hash table distribution and probability formula coefficients; and the matching result reporting module is used for reporting the matching information. According to the method, the balance of high efficiency, accuracy and expandability can be realized in a multi-mode matching task, the resource utilization efficiency of an FPGA (Field Programmable Gate Array) is improved, and the matching requirement when a mode matching rule set is relatively large is met.

A system and method for zero-knowledge social graph management with session-revealed identities is disclosed. The system is configured for receiving registration requests comprising user communication addresses. The system is further configured to generate cryptographic hashes of communication addresses without storing plaintext addresses. The system is further configured to generate asymmetric key pairs with private keys stored exclusively on user devices. The system is further configured to generate encrypted identity packets containing personally identifiable information encrypted with recipient public keys and transmit connection requests after verifying target existence through hash comparison. The system is further configured to enable recipient-controlled decryption revealing requester identities only when recipients review requests. The system is further configured to generate real-time social connection hashes from communication address hashes and compare them with stored hashes to verify connections without identity exposure, providing zero-knowledge proof of connection.

The present invention discloses a file data storage and reading method applied to database storage, including file data storage, wherein the file data storage comprises: writing key-value data to a data area of ​​a file, recording an offset and size S[offset+size] in the data area; calculating a hash value hash(key) of a key in the key-value data, and updating a bit value of the hashID position corresponding to the hash value hash(key) in a bitmap; the hashID, key, and S[offset+size] are used as a hash index record when writing key-value data, and the hash index record is written in a file. The file data storage and reading method applied to database storage of the present invention adopts a new file format through a hash index when performing data storage, and the time complexity can reach O(1) when performing key value retrieval, which greatly improves the retrieval efficiency of key-value data.

The invention discloses a key tamper-proofing method based on a block chain, and the method comprises the following steps: S1, encrypting a key, hashing a generated key ciphertext and a decryption permission list, and writing the key ciphertext and the decryption permission list into a block; and S2, comparing the key with a hash value on the block chain after hash calculation when the key is used, so as to verify the integrity and consistency of the key. According to the key tamper-proofing method based on the block chain provided by the invention, the non-tampering characteristic of the block chain is utilized, the generated key ciphertext and the decryption permission list are written into the block after being hashed, and the key is compared with the hash value on the block chain after being subjected to hash calculation when the key is used, so that the key is not tampered; and the use safety of the key is improved.

The present invention provides a technology capable of remotely managing the sale of goods in a vending machine. The present invention relates to a sensor unit (500) assembled in a vending machine and unlocking the vending machine based on encrypted data sent from a terminal device, which includes: an encryption processing unit (501d) that generates a public key and a private key and encrypts an unlocking code with the public key; a hash generation unit (501e) that hashes sensor information including at least a sensor ID and sensor location information through a hash function and outputs a hash value; a management unit (501g) that stores and manages at least the public key and the hash value in a storage unit (503) in a corresponding manner; and an unlocking unit (501f) that determines the correctness of the encrypted data sent from the terminal device and unlocks the vending machine when the encrypted data matches the encrypted data generated by the encryption processing unit.

The application relates to the field of cloud database storage encryption, and discloses a cloud database sharding encryption system for cross-border transactions, which comprises a receiving module that acquires transaction data and jurisdiction constraint tags; a logical mapping module that analyzes the tags to determine logical storage coordinates and extracts storage offset parameters from physical storage nodes; a key derivation module that fuses the coordinates, parameters and root key seeds to generate an encryption key through hash operation; and a storage routing module that routes the ciphertext sharding to the physical storage nodes and writes in. The application limits the key derivation factor by using the storage offset parameters, so that the confidentiality state and the physical addressing characteristics form a causal closed loop; on the premise of not introducing external clock synchronization overhead, the encryption parameters and the storage physical state are deeply coupled, the risk of key collision caused by network clock drift is effectively avoided, and the cross-border distributed storage security is improved.

The present invention discloses a low-redundancy single-round file synchronization method for insertion / deletion scenarios, which mainly solves the problem of large communication volume in existing single-round file synchronization methods. The scheme is: the local node reads a shorter subsequence in each data block as a mark; the VT checksum and hash value of the data block are calculated, and the RS code is used to encode and transmit to the cloud node; the cloud node establishes a grid diagram according to the periodic mark sequence, infers the number of insertions / deletions that occur in each data block, and decodes and restores the VT checksum and hash value of each data block; for multiple consecutive data blocks that fail to pass the hash value check, guess the boundaries and insertion / deletion numbers of the data blocks; the cloud node transmits the index of the data block that has not been successfully synchronized to the local node, and the local node retransmits the data block to the cloud node to complete file synchronization. The present invention reduces the communication volume of single-round file synchronization in the insertion / deletion scenario, and can be used for data transmission between local nodes and cloud nodes.

The present invention provides a data security transmission method and system based on an autonomous security interaction protocol, which relates to the technical field of data transmission, including establishing an identity authentication model for both communicating parties, generating public keys and private keys corresponding to the two communicating parties through an asymmetric encryption algorithm, and performing identity authentication and key exchange through a trusted third party to obtain the session keys of the two communicating parties; generating an encrypted data packet through a symmetric encryption algorithm, and generating a first message authentication code based on the encrypted data packet through a hash function; constructing a complete encrypted message; decrypting the encrypted data packet through a symmetric encryption algorithm to obtain original data, and generating a second message authentication code corresponding to the original data through a hash function based on the original data; performing two rounds of comparison between the first message authentication code and the second message authentication code, and if the two rounds of comparison are consistent, it is confirmed that the data has not been tampered with; if any one of the two rounds of comparison is inconsistent, a security measure is triggered.

The application discloses an anti-replay method based on hidden serial number and hash check, which hides the serial number in the local and does not transmit the serial number with the message, and uses the serial number as an input parameter of hash calculation, so that even if the attacker intercepts the message, the attacker cannot obtain the valid serial number, and thus cannot construct a replay message or a fake message which can pass the hash check; meanwhile, the message integrity verification and the anti-replay verification can be synchronously completed by using one hash check, and additional serial number comparison logic or independent check field is not needed, and the whole scheme does not need clock synchronization and complex negotiation, only needs to locally save eighteen bytes of data, significantly reduces resource consumption, and is particularly suitable for clock synchronization-free and performance-limited embedded systems, and can effectively resist replay attacks and message tampering in a plaintext communication scene.