39 results about "Password protection" patented technology

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

An electronic device, a method, and a computer program product assist users in accessing password protected documents by automating password hint generation. The electronic device includes a controller communicatively coupled to input device(s), output device(s) including a display, and memory that stores user information. In response to detecting a password prompt to enter a password to perform one of password-encrypt or password-decrypt the computer-readable file, the controller is configured to cause the device to identify password instruction(s) associated with the password. The controller analyzes the user information for candidate segment(s) that comply with the password instruction(s). The controller assembles password hint(s) mapping the candidate segment(s) according to the password instruction(s). The controller renders a prompt containing the password hint(s) and modifies the output device(s) to present the password prompt containing the password hint(s), wherein the password prompt is associated with the computer-readable file and presented via the output device(s).

Provided is a computer implemented method of authorizing transactions in a blockchain network of participant systems including a first system that sends transaction data to a second system that generates a notary request including the transaction data, at least one notary system and at least one witness system. The method includes the notary system: accepting the notary request from the second system; transmitting the transaction data to the witness systems; determining a subset of responsive witness systems; determining that a required number of affirmative responses has been received from the responsive witness systems; generating a block based on the transaction data; and publishing the block to a ledger of the blockchain network.

The invention discloses a multistage password protection and operation tracing system of an intelligent electric actuating mechanism. The multistage password protection and operation tracing system comprises a multistage authority management module, a password security module, an operation recording module and an authority auditing module, the multi-level permission management module is provided with three levels of permissions and manages distribution, change and switching of the permissions; the password security module manages new establishment, modification, retrieval, storage, error locking and regular replacement of passwords; the operation recording module records all permission-related and equipment control operations; and the permission auditing module retrieves the operation record, generates an auditing report and identifies an abnormal operation behavior. According to the invention, through three-level authority level-to-level management, the operation range is finely divided, and low-authority users are prevented from executing high-risk operations; password cracking and violent attack are resisted through a high-level password security mechanism; through full-operation record coverage and tamper-proof design, operation traceability is realized, and responsibility ownership is clear; and an abnormal behavior analysis and audit report function is realized, and safety risks are actively identified.

In order to carry out a cryptographically secured data transmission, communication participants (101-106) authenticate themselves before establishing a session and together create a cryptographic session key (230) or use a cryptographic session key provided in advance. The session between the communication participants is established so as to be cryptographically secured on the basis of the session key (230) after a successful authentication of the communication participants (101-106). An encryption parameter (232) is compared between the communication participants for an encryption method to be used within the session, said parameter being used to adapt a cryptographic encryption function (222) of the encryption method. The encryption parameter is preconfigured for each communication participant and cannot be changed within the session. When the encryption parameter (232) is compared, it is checked whether the encryption parameter is identically preconfigured for the communication participants (101-106). If the encryption parameter is identically preconfigured, the encryption parameter (232) is adopted in order to adapt the encryption method, and data transmitted between the communication participants (101-106) within the session is cryptographically secured in accordance with the adapted encryption method.

The invention discloses a user password protection method and device based on a white-box algorithm, equipment and a medium, and belongs to the field of data processing. The method comprises the following steps: randomly generating a white box key and a salt value; according to a white-box encryption algorithm, encrypting the salt value by using the white-box key to obtain a salt value ciphertext; and based on the salt value ciphertext, the user password and the salt value, generating a user password ciphertext and a password verification voucher by using a confusion algorithm and a hash algorithm, and storing the user password ciphertext, the password verification voucher and the white-box key, the password verification voucher being used for verifying the to-be-verified password input by the user and the user password. According to the embodiment of the invention, the security of the user password can be improved.

The invention relates to a method for providing and validating cryptographically secured device identity information, in which method an initial device certificate is created as device identity information and stored in a device memory. The initial device certificate comprises device information which is selected and signed by the manufacturer and which comprises at least a device identifier, a device attribute, or a device property, and a specification of a public key assigned to a device by the manufacturer. Only after successful device authentication is an additional device certificate created, on the basis of the initial device certificate, as further device identity information and stored in the device memory. The additional device certificate comprises device information selected and signed by a user or an operator, and forms a certificate chain together with the initial device certificate. Following successful device authentication, it is possible to generate, on the basis of the additional device certificate, at least one further additional device certificate which comprises device information selected and signed by a subsequent user or operator and which can be stored in the device memory. During each identity validation of the device, only the most recently generated device certificate, or a device certificate designated for identity validation, is read out from the device memory and verified.

The present application relates to a kind of electronic tags with infrared remote control with conventional protection function and password protection function and its unlocking method and anti-theft system, including electronic tag body and infrared remote controller, the upper end surface of the shell in the electronic tag body is equipped with infrared remote controller interface and infrared receiving component is equipped in infrared remote controller interface, the lower end surface of the infrared remote controller is equipped with infrared remote controller connector and infrared transmitting component is equipped in infrared remote controller connector, after infrared remote controller connector is inserted into infrared remote controller interface, infrared receiving tube in infrared receiving component and infrared transmitting tube in infrared transmitting component are opposite and the light signal sent by infrared transmitting tube can be received by infrared receiving tube.Optical: one is not only the anti-theft function of the present application with traditional anti-theft tag, also has password unlocking function, prevent illegal unlocking;Two is the present application adopts one-to-one infrared code unlocking, can prevent non-target electronic tag be unlocked by mistake;Three is the present application in password protection, simultaneously, using voltage authentication scheme as the prerequisite of infrared remote control protocol reception, increase the difficulty of cracking, enhance the protection.

A password-protected device may support transformed passwords. In one example, a one-time password (OTP) may have a time-limited validity. The transform may be known to a user, and the transform may include manipulating characters in the OTP, such as by transposing characters, incrementing characters, or the like. The user may enter a transformed password to the system, and the system may reverse the transform and then compare the OTP to a reference OTP. The transform may provide an extra level of security over and above that provided by passwords themselves.

The invention discloses a password protection device. The password protection device comprises a control circuit board and a key connected with the control circuit board, a signal cluster is pre-stored in the control circuit board, a corresponding temporary signal cluster can be output to the control circuit board by operating the key for multiple times, and the control circuit board compares the temporary signal cluster with the signal cluster. And when and only when the two are matched, the locking state is released. According to the password protection device, the purpose of unlocking by inputting a password can be achieved only through one key. According to the device, through unique structural design and advanced technical means, dependence on physical space is effectively reduced, and meanwhile, convenience and safety of password input are improved. The invention further discloses an electronic lock with the device.

An automatic inhalation system which includes a gas supply system which includes a high pressure system and a medium pressure system, a breathing loop; wherein gas enters the breathing loop from the gas supply system; and wherein the breathing loop further comprises an inhale limb and an exhale limb each comprising at least one flow sensor, at least one CO2 sensor, and at least one O2 sensor. The system further includes a controller, wherein the gas supply system and breathing loop are in digital communication with the controller via an I2C bus and a set of analog inputs; and a touchscreen, wherein the touchscreen displays the diagnostic information on a UI accessed through a password-protected user management system; wherein the system is used to administer gas treatments to patients based on a preset protocol that may be started by either an operator or administrator and edited only by an administrator.

A network device is provided configured to support cryptographically protected communication in a multi-execution environment. Some embodiments pertain to a first network device configured to perform cryptographically protected communication with a second network device. This cryptographically protected communication includes at least a handshake protocol, a bulk data cryptographic protection protocol, and a recovery protocol. The session processing system obtains a first bulk cryptographic protection key and a recovery key from the handshake protocol. The first cryptographic protection key, rather than the recovery key, is forwarded to the host system.

This specification discloses a password protection method, password verification method, apparatus, and terminal. In response to a storage request for a correct plaintext password, a slow hash calculation is performed on the correct plaintext password; a first hash value and a second hash value are determined after the first hash calculation of the correct plaintext password; the first hash value and the second hash value are concatenated to obtain the ciphertext data corresponding to the correct plaintext password, and the ciphertext data is stored; wherein, the first hash value is used for a first consistency comparison with the target password; the ciphertext data is used for a second consistency comparison with the target password after the first consistency comparison. While ensuring that the ciphertext data still has a relatively high degree of difficulty in cracking, the two-stage verification comparison reduces the computational resources consumed during password verification.

A computer security method including detecting when a web browser accesses a login form of a website, accessing a credential record associated with the website, where the credential record includes a login and a password, inputting the login into a login field of the login form, inputting a password placeholder value into a password field of the login form, where the password placeholder value differs from the password included in the credential record, detecting an attempt by a user of the web browser to submit a login request to the website, where the login request includes the login and the password placeholder value from the login form, replacing the password placeholder value in the login request with the password included in the credential record, and submitting the login request to the website, where the submitted login request includes the login and the password included in the credential record.

An information handling system operating a security credential retrieval system may comprise a processor executing code instructions for a graphical user interface (GUI) to model, with visual integration elements, a flow diagram of a password protected data integration process for transmitting a keychain password to the security credential management system to retrieve security credentials for password protected data repositories, for supplying the security credentials to the password protected data repositories, and for migrating password protected data sets from the password protected data repositories to destination data repositories. The processor may execute connector code instructions for each of the visual integration elements, including data required for electronic communication in accordance with the security credential management system, the password protected data repositories, and the password protected data repositories, and to display any security credentials in the execution log recording the execution of the connector code instructions in encrypted ciphertext.

A network device in a network (514) can generate a network information container (532) including information to be sent to a communication device (512). The network (514) is a home network of the communication device (512) served by a visited network (516). The network information container (532) can be integrity protected and / or cipher protected. The network device can send a message to the communication device (512) through the visited network (516), the message including the network information container (532) and a credential indicator indicating a type of credential used to protect the network information container (532). The type of credential can be a 3GPP credential or a non-3GPP credential. Based on the type of credential, the communication device (512) can verify the network information container (532) by one or more security parameters and obtain the information in the network information container (532) upon successful verification or discard the network information container (532) upon failed verification.

The invention relates to a password protection method and device for cross-platform data sharing, equipment and a storage medium, and the method comprises the steps: obtaining user data and a target sharing parameter, carrying out the dynamic key generation based on the user data and the target sharing parameter, and obtaining a composite master key; acquiring block chain node information, and performing fragmentation association storage on the composite master key to obtain a distributed key storage group; acquiring protocol information and target transmission data of a target platform, and performing encryption processing to obtain a cross-platform encrypted data packet; verifying and recombining the distributed key storage group, and decrypting the cross-platform encrypted data packet to obtain original data; and performing integrity verification on the original data, triggering a key life cycle management mechanism, and destroying the composite master key to obtain a verification report. According to the invention, the security of the data in the transmission process between different platforms can be ensured.

The invention relates to a multi-source artificial intelligence side channel analysis method for public key password protection, and belongs to the technical field of information security passwords. The method comprises the following steps: firstly, acquiring multi-source side information of asymmetric cryptographic algorithm equipment with public key cryptographic protection, and positioning an area for executing secret information related operation in the side information; side information traces of a secret information operation are analyzed and divided into segments. Multi-dimensional features are extracted from each trace segment of each type of side information, and features and noise are separated by using a principal component analysis method. Then, carrying out clustering analysis on the information on the single source side by using a Fuzzy C-Means algorithm; and multi-source information is fused, and more accurate key recovery is realized through a clustering probability distribution model. According to the method, the operation characteristics of the protection type asymmetric cryptographic algorithm can be effectively distinguished, and efficient key recovery is realized through multi-source information fusion.

A computer security method including detecting when a web browser accesses a login form of a website, accessing a credential record associated with the website, where the credential record includes a login and a password, inputting the login into a login field of the login form, inputting a password placeholder value into a password field of the login form, where the password placeholder value differs from the password included in the credential record, detecting an attempt by a user of the web browser to submit a login request to the website, where the login request includes the login and the password placeholder value from the login form, replacing the password placeholder value in the login request with the password included in the credential record, and submitting the login request to the website, where the submitted login request includes the login and the password included in the credential record.

Aspects of the disclosure relate to a system and method for cryptographically protecting data transferred between spatially distributed computing devices. An intermediary database may be used to facilitate the protected data transfer and / or record the data transfers. A first computing device may transfer, to the intermediary database, encrypted data that may be securely transferred to other computing devices. A second computing device may generate a GUI used to view data available from the intermediary database. Once data is selected by the second device, the second device may transfer a key (or other encryption mechanism) to the first device. The first computing device may encrypt the data using the received key and transmit the encrypted data to the intermediary database. The intermediary database may transmit the encrypted data to the second computing device, and the second computing device may decrypt and use the data.

Embodiments of the invention include systems and methods for transmitting messages related to certain information while maintaining the confidentiality of that information. A potential recipient may register one or more devices for receipt of such messages while specifying rules regarding when different messages may be delivered to the various devices. To keep sensitive information confidential, the messages may include only a link to such sensitive information, but exclude the sensitive information itself. An authorized recipient may then use the link to access the sensitive information via a password-protected Web site.

A cryptographic protection system includes memory hardware configured to store instructions and processing hardware configured to execute the instructions stored by the memory hardware. The instructions include receiving a data package via a networked communications channel. The instructions include, in response to the data package satisfying first criteria, transforming the data package into a transformed package according to transformation rules. The transforming includes identifying a plurality of data elements in the data package as specified by the transformation rules and inserting each of the plurality of data elements into the transformed package. The instructions include executing a cryptographic hash on the transformed package to generate a cryptographic digest. The instructions include obtaining a cryptographic signature based on the cryptographic digest. The instructions include storing the cryptographic signature into a data store.

This application discloses a cryptographic protection method, application method, and device for a spatial coordinate transformation algorithm and interface in a mobile terminal map app, relating to the fields of surveying and mapping geographic information, information security, and cryptography. The method includes jointly compiling the source code of the spatial coordinate transformation algorithm and interface with the source code of a commercial cryptographic algorithm to obtain a binary bound file; encrypting the binary file using the SM2 and SM3 algorithms to obtain a spatial coordinate transformation algorithm result distribution package; encrypting the test and official versions of the geographic control area of ​​the spatial coordinate transformation algorithm interface using the SM4 and SM3 algorithms respectively to obtain two geographic control area distribution packages for the spatial coordinate transformation algorithm interface; and distributing the spatial coordinate transformation algorithm result distribution package and the geographic control area distribution package to the mobile terminal map app. This application improves the efficiency of the bound compilation process and ensures the security of the spatial coordinate transformation algorithm and interface during distribution and use.

The application discloses a software development method and system based on an encryption algorithm, and the method comprises the following steps: S1, initializing a development environment, and distributing a hierarchical code encryption key generated based on a hierarchical deterministic derivation mechanism to a development client; S2, code encryption editing, real-time recording of code changes and generation of a homomorphic hash value and a quantum-resistant signature of the changes, storage of code files in an encrypted form; S3, encrypted version control, verification of the integrity and signature validity of the submitted encrypted code by an encrypted version control system; S4, encrypted building, quantum-resistant signature and white-box password protection of the building product, and generation of an encrypted release package; and S5, key rotation, rotation and update of the key of a specified level according to a security policy by a KMS. The application realizes whole-process encryption protection from local editing of a developer, code submission, building and compilation to final release, and eliminates multiple plaintext exposure points in a traditional development process.

To provide and validate cryptographically secured device identity information, an initial device certificate is created as device identity information and stored in a device memory. This initial device certificate includes manufacturer-selected and signed device information, comprising at least a device identifier, a device attribute or property, and a reference to a manufacturer-assigned public key. Only after successful device authentication is an additional device certificate created based on the initial device certificate as further device identity information and stored in the device memory. This additional device certificate contains user-selected and signed device information and forms a certificate chain with the initial device certificate.After successful device authentication, at least one further additional device certificate can be generated using the additional device certificate. This additional certificate contains device information selected and signed by a subsequent user or processor and can be stored in the device memory. During identity validation of the device, only the most recently generated device certificate or one specified for identity validation is read from the device memory and verified.

The application discloses a PKI-based enterprise strong password management method, system and electronic equipment, and comprises the following steps: obtaining login request data; performing a first operation or a second operation; the first operation comprises the following steps: sending the login request data to a password safe server, sending a first password data packet to a pre-bound Ukey device by the password safe server, decrypting the first password data packet by the pre-bound Ukey device, and displaying the first login password data; the second operation comprises the following steps: generating a dynamic password by a preset sandbox module of a login device, encrypting the dynamic password to obtain a second password data packet, and sending the second password data packet to the pre-bound Ukey device; and the pre-bound Ukey device decrypts the second password data packet and displays the second login password data. Compared with the prior art, the technical scheme disclosed by the application can improve the security of password protection and the efficiency of password batch management.

A password-protected device may support transformed passwords. In one example, a one-time password (OTP) may have a time-limited validity. The transform may be known to a user, and the transform may include manipulating characters in the OTP, such as by transposing characters, incrementing characters, or the like. The user may enter a transformed password to the system, and the system may reverse the transform and then compare the OTP to a reference OTP. The transform may provide an extra level of security over and above that provided by passwords themselves.

Various embodiments of the teachings herein include a method for forming a first cryptographically protected connection of a device to a unit. An example includes: transmitting a connection request from the device, wherein the connection request includes associated cryptographically protected device connection information and device authentication information, wherein the device connection information indicates a second connection of the device to a second device existed at an earlier time, wherein the device authentication information authenticates the device; checking the first device connection information and a second device connection information for a first match; checking the device connection information and the device authentication information for a second match; and forming the first cryptographically protected connection of the device to the unit based on the first match and the second match.

An authentication system comprising an account within an account server, said account being protected by a password. The system further comprising a first communication device, a second communication device and a controlling server controlling a communication between the first device and the second device. Upon receiving, by the account server, a login request from said first device for accessing said account: (a) an encrypted random code is transmitted from the account server, to the second device, and (b) a corresponding decryption key is transmitted from the account server to the first device, wherein upon receiving said encrypted code by the second device and getting authorization for transmitting the encrypted code by the second device to the first device, said encrypted code is transmitted from the second device to the first device, and wherein upon receiving, by the first device, said encrypted code from said second device, said encrypted code is decrypted using said decryption key, and wherein the authentication system further includes a memory medium, separately from the first and the second devices, wherein said medium included a username required for logging into said account.

The invention relates to a method for cryptographic protection of a data exchange between a first entity (A) and a second entity (B), wherein a signing key pair (KPC) belongs to the first entity (A) and a KEM key pair (KPM) belongs to the second entity (B), the method comprising the following steps: a) signing, by the first entity (A), first data (D1) with a private signing key (SKC) resulting in a first signature (SI1); b) providing the first entity (A) with a first symmetric key (K1) and a first ciphertext (CT1) using an encapsulation procedure (Encap) of a key encapsulation mechanism, where the encapsulation procedure (Encap) calculates a first shared secret (SS1) and the first ciphertext (CT1) from the public KEM key (PKM); c) encrypting, by the first entity (A), at least the first signature (SI1) with an encryption procedure (AEAD) which uses the first symmetric key (K1), resulting in a first piece of information (ENC1) comprising the encrypted first signature and data corresponding to the first data (D1); d) transmitting, by the first entity (A), the first ciphertext (CT1) and the first piece of information (ENC1) to the second entity (B); e) providing the second entity (B) with the first symmetric key (K1), using a decapsulation procedure (Decap) of the key encapsulation mechanism, where the decapsulation procedure (Decap) calculates the first shared secret (SS1) from the first ciphertext (CT1) and the private KEM key (SKM); f) decrypting, by the second entity (B), at least the encrypted first signature with a decryption procedure (AEAD-1) which uses the first symmetric key (K1), resulting in the first data (D1) and the first signature (SI1); g) verifying, by the second entity (B), the first signature (SI1) decrypted in step f) with the public signing key (PKC).