1321 results about "Plaintext" patented technology

A method of building a privacy-preserving neural network model is provided. The method includes: performing first neural network operations using a non-private neural network of the privacy-preserving neural network model based on first input data in plaintext to produce first output data in plaintext, whereby the non-private neural network is pre-trained and learnable parameters of the non-private neural network are fixed while performing the first neural network operations; encrypting the first output data from the non-private neural network using a homomorphic encryption method to produce first encrypted data; and performing second neural network operations homomorphically using a private neural network of the privacy-preserving neural network model based on the first encrypted data to produce second encrypted data, whereby learnable parameters of the private neural network are trained while performing the second neural network operations. There is also provided a corresponding system for building a privacy-preserving neural network model, as well as method and system for performing privacy-preserving prediction using the privacy-preserving neural network model built.

The invention discloses a data ownership verification and authorization control method based on zero knowledge proof. The method comprises the following steps: constructing a traceable Merk tree structure on a block chain or a distributed account book; a data owner calculates data fingerprints and packages the data fingerprints into declaration nodes to be inserted into the traceable Merk tree; storing the ownership zero knowledge proof and the traceable Merk tree root hash into a block chain together; the verification party executes the zero-knowledge verifier contract on the chain to complete ownership verification without reading original data or identity plaintext; access control is realized after on-chain verification of the service party; triggering local heavy hash to update the traceable Merk tree root hash, and broadcasting a revocation event on a chain; and confirming legality of evolution and authorization change of all nodes. According to the method, the historical traceability and structural consistency of the data ownership and authorization relationship are ensured, and efficient traceability and anomaly detection of the node evolution chain are also realized.

The invention discloses a lightweight hopping key encryption system based on a national cryptographic algorithm, relates to the technical field of data communication encryption, and solves the problem that an initial key and a hopping key are difficult to generate; a key hopping mode is difficult to analyze so as to detect an abnormal state; intelligent contract automatic key management is difficult to carry out; plaintext data is difficult to encrypt according to the analysis security index; the data verification index is difficult to analyze for data verification after the hopping key is decrypted; the operation state is difficult to monitor in real time to detect an attack mode; and the defense capability and the key hopping validity are difficult to assess, and the overall security assessment value is difficult to assess. According to the method, the state cryptographic algorithm is applied, the hopping key mechanism is combined, the key hopping rule is automatically executed by using the intelligent contract, and the overall security assessment value is comprehensively assessed by monitoring the running state.

The invention relates to the technical field of information security, in particular to an anti-quantum computing public key cryptography method and system. The method comprises the following steps: acquiring a large prime number p and constructing a multivariable polynomial ring; randomly generating a group of polynomial coefficients, generating a polynomial embedding rule public key, and generating a multivariable polynomial ring embedding public key; the method comprises the following steps: acquiring a quantum computer message, performing polynomial space mapping conversion and message public key encryption, and meanwhile, generating a quantum message public key encrypted ciphertext by introducing a polynomial perturbation term and a transcendental coding term; the quantum message public key encryption ciphertext and the corresponding polynomial ring embedded public key are transmitted to a quantum message decryption party for inversion decryption processing, and a quantum computer message decryption plaintext is generated; and performing anti-quantum computing security analysis on the encryption and decryption processes, and regenerating a multivariable polynomial ring dynamic public key. According to the method, the attack of quantum computing can be effectively resisted, so that the security of quantum information transmission is guaranteed.

The invention relates to a decentralized information safe and efficient storage and sharing method supporting data verification. The method comprises the following steps: 1) an initialization stage; 2) generating and uploading a ciphertext; 3) evaluating the size of the uploaded ciphertext; if the size of the ciphertext exceeds 256 KB, the IPFS carries out fragmentation processing on the ciphertext, stores the fragments in node servers distributed globally, and generates a unique address identifier at the same time; 4) splicing into a new plaintext; 5) the data provider selects an encryption strategy and performs attribute encryption on the new plaintext; (6) the data requester submits an access application to the Hyperledger Fabric before using the data; 7) verifying the legality of the data request; 8) acquiring a symmetrically encrypted ciphertext; and 9) decrypting to obtain the privacy data of the patient. According to the invention, the paralysis state of the whole system caused by faults of some nodes can be avoided.

The application discloses a ciphertext decryption method and related equipment applied to ciphertext encrypted according to an RSA algorithm, and the method comprises the following steps: acquiring a large number in ciphertext and a public key of the ciphertext; selecting a number smaller than the large number as a base of a discrete logarithm problem, selecting 1 as a modulus power operation result corresponding to the base, and converting the base and the modulus power operation result into an initial quantum state; inputting the initial quantum state into a quantum computing module for solving the discrete logarithm problem to obtain a first target quantum state in which a solution result of the discrete logarithm problem is stored; extracting the solution result from the first target quantum state, and calculating a private key of the ciphertext based on the solution result; and decrypting the ciphertext based on the private key to obtain plaintext of the ciphertext. Through the technical scheme, the private key can be recovered according to the disclosed information in the case that the private key is not disclosed, and then the ciphertext is decrypted, so that the related technical blank is filled.

The invention relates to network information security and cryptography, and provides an AES-based network information data transmission security method, which comprises the following steps of: generating an information key, namely generating a round key through loop iteration; the encryption process of information data transmission comprises the following steps: encrypting a plaintext after preprocessing, and generating an intermediate ciphertext and an integrity verification label; in the information data decryption process, the plaintext is recovered through reverse operation after the label is verified; the data security constraint of the information is carried out, and a multi-level defense system is constructed; aP I mapping for information transmission, and calling an interface to realize encryption, decryption and authentication verification; information data encryption complexity is controlled, complexity is optimized, and big data are encrypted in a blocking mode; the information data security is guaranteed, and the transmission security is ensured. The method significantly enhances data security, improves transmission efficiency, constructs multi-level security defense, provides flexibility and adaptability, simplifies implementation and management, conforms to the future security trend, and provides an efficient, reliable and easy-to-use solution for network information security.

The invention provides an image retrieval method and system supporting sharing of multiple data sources, and relates to the technical field of image retrieval, the method comprises the steps that secret keys are generated and distributed for retrieval members through a trusted third party, a data owner constructs a ciphertext cluster and a ciphertext image set based on a public key in an index secret key pair, an image secret key and an image set, and the ciphertext cluster and the ciphertext image set are stored; uploading to a first cloud server; the cloud server group re-encrypts the ciphertext cluster and constructs a hierarchical index; the query user processes the query image by using a public key in the retrieval key pair to obtain a query trap door, and uploads the query trap door to the first cloud server; the cloud server group re-encrypts the query trap door to obtain a new query trap door, and searches the hierarchical index based on the new query trap door to obtain a search result; and the query user obtains the image under the plaintext based on the search result. According to the method, the security of privacy information during retrieval is ensured, the complete secret culture of calculation in the retrieval process is realized, and the scene of multi-data source sharing is supported.

A method and system to provide secure fine-tune training and inferences for large language models using a Fully Homomorphic Encryption (FHE) process is disclosed. A trained public large language model with a matrix of public weights is stored in plaintext. A private training set of proprietary data is stored as a set of encrypted weights. An encrypted query is received. The encrypted query is processed via an encrypted data path with the set of encrypted weights for trained large language model. The encrypted query is processed via a plaintext data path with the set of public weights in plaintext for the trained large language model. A low rank adaptation (LoRA) approach may be used in fine-tuning the model to reduce computational complexity and memory access. Encrypted results are obtained from the processing via the encrypted data path and the plaintext weight path.

A security verification method, apparatus, medium, device and product for a large model service relate to the technical field of computers, receive an encryption service request, acquire a private key of a client from a key management service running in a trusted execution environment through an encryption and decryption service running in the trusted execution environment, decrypt the encryption service request based on the private key, and verify the security of the encryption service request. The method comprises the following steps: decrypting a service request of a user, sending the decrypted service request to a large model service to obtain a reasoning result of the large model service, encrypting the reasoning result through a public key of a client, and returning the encrypted reasoning result to the client, so that the service request of the user can be visible in a plaintext in a trusted execution environment; the security of the user data is greatly ensured, and the problem of user data leakage can be avoided through the public and private key pair of the user dimension. In addition, the key management service and the encryption and decryption service both run in the trusted execution environment, so that attacks from an IaaS layer can be shielded.

The invention discloses an SSD internal log storage method and system and a storage medium, and belongs to the technical field of solid state disks. The method comprises the following steps: S1, deploying encryption compression operation and decryption operation of an SSD firmware internal log on an upper computer, and standardizing an internal log format; s2, a firmware writing stage: according to a defined standard format, generating a log output code, replacing a character string with a character string ID and updating a character string mapping table; s3, when the SSD firmware runs, the generated standardized log is written into a Flash or a serial port; s4, the upper computer obtains the log; and S5, according to the character string mapping table and the log standard format, the upper computer analyzes the character string needing to be printed and the operation real-time parameters, and outputs the log plaintext according to the needed target format. The occupation of CPU or hardware resources in the log generation and storage stage is reduced; the character string is replaced by the digital ID, and in the compiling stage, the code space occupied by the system character string can be greatly reduced.

The invention relates to the technical field of quantum signature, in particular to a two-party collaborative post-quantum decryption method, which comprises the following steps of: generating a collaborative Aigis-sig signature secret key part; a public key and respective private keys are calculated through interaction of the client and the server, and encryption is carried out through the public key to generate a ciphertext; carrying out two-party collaborative decryption calculation; plaintext recovery is completed through cooperation of the client and the server. According to the invention, a two-party cooperative decryption mode is adopted, that is, the server-side cipher machine firstly performs partial decryption, and then the client-side completes the final decryption process. The decryption process is distributed on two different calculation subjects, so that even if an attacker steals data of one of the calculation subjects, the plaintext cannot be directly recovered, and the anti-attack capability is effectively enhanced.

The invention relates to the technical field of information security, in particular to a forward security policy hidden attribute-based keyword search method, which is used for access control and search of sensitive information and comprises the following steps: acquiring a public parameter and a master key; attribute processing is performed on an attribute set submitted by a data user, a user private key is constructed, and a puncture key is output; the method comprises the following steps: randomly selecting a symmetric key, performing symmetric encryption on a plaintext through the symmetric key to obtain an initial ciphertext, sequentially performing strategy hidden encryption, keyword encryption and label binding on the plaintext to obtain a corresponding output representation, and integrating the initial ciphertext and the output representation to obtain a complete ciphertext; when the constraint condition is met, the puncture key is updated; establishing a keyword set according to the data user demand content, generating a trap door, and initiating a search request; matching the trap door with the complete ciphertext according to the search request to obtain a matching result, and decrypting the initial ciphertext by integrating the updated puncture key and the user private key to obtain a corresponding plaintext; and the forward safety is effectively improved.

The invention discloses a data security encryption method, and belongs to the technical field of image encryption. The method comprises the following steps of: dividing a plaintext image into R, G and B channels, and exchanging adjacent row and column channel values to obtain a scrambling inversion channel image; then extracting local and global feature values of each pixel point in the channel plaintext image and the scrambling inversion channel image, and constructing a feature vector; partitioning the scrambling inversion channel image, and obtaining a first encryption key matrix and a second encryption key matrix of each region according to feature vectors; and finally, each region is encrypted for multiple times by using the key matrix, and the three encryption channels are fused to obtain a fused encrypted image, so that the data encryption security is effectively improved.

The invention discloses an on-cloud semi-homomorphic encryption method capable of resisting private key tracking, which comprises the following steps of: S1, generating a blind identity based on the real identity of a data user, and performing identity de-association processing; s2, the attribute authority generates a binding key pair based on the blind identity and returns the binding key pair; s3, the data user discloses a real identity and a public key to the data owner; s4, the data owner encrypts the plaintext after verifying the public key to form a ciphertext set; s5, uploading the ciphertext set to a cloud service provider, and performing classified storage; s6, the cloud service provider receives the analysis request and performs homomorphic addition aggregation on the ciphertext set to generate an aggregated ciphertext; and S7, the data user uses the private key to decrypt the aggregated ciphertext, and a plaintext analysis result is recovered. According to the method, the identity privacy of the user is protected while encrypted data analysis is realized, and the method has the characteristics of untraceability and lightweight deployment.

The invention relates to the technical field of quantum computers, in particular to a short message secure transmission method and system based on a post-quantum algorithm and electronic equipment, and the method comprises the steps: obtaining short message data with a signature, and carrying out secret key packaging calculation through employing a first mixed public key provided by a second terminal, thereby obtaining a secret key packaging ciphertext and a symmetric secret key; encrypting the short message data with the signature by using the symmetric key to obtain a short message data ciphertext; the key packaging ciphertext and the short message data ciphertext are sent to a second terminal, and the second terminal decrypts the short message data ciphertext to obtain a short message data plaintext; according to the method and the device, a quantum security resisting key negotiation function is provided for the short message by adopting a mixed key encryption mode, quantum attack resisting protection is provided for the content of the short message, information is prevented from being intercepted or tampered in combination with a signature verification mode, and the security of short message transmission is further improved.

The invention relates to the field of computer security, and discloses a data storage security protection method and system based on a solid-state hard disk, which comprises the following steps: identifying the inherent physical difference of a flash memory chip in the solid-state hard disk so as to calculate the read-write time sequence micro-deviation of the solid-state hard disk; performing hash operation on the device root key and the unique identifier of the controller corresponding to the solid state disk to obtain a bound master control key; generating a temporary encryption key of the write-in operation to encrypt plaintext data of the host system to obtain ciphertext data; writing the ciphertext data into a flash memory physical page corresponding to the physical page address to obtain a ciphertext physical page address; when the access mode is a hostile attack mode, secretly updating the ciphertext physical page address into a new physical page address, and deleting the ciphertext physical page address; and when the access mode is a secure access mode and the verification key is consistent with the bound master control key, normal loading and data access requests of the solid state disk are allowed. According to the invention, the security and integrity of data storage can be improved.

The invention belongs to the technical field of image encryption, and discloses a medical image compression and encryption method and system based on a memristor FHN neuron model, and the method comprises the steps: fusing n color or gray medical images of any size into an M * N * 3 fusion image; sparse representation is carried out on the fused medical image in combination with discrete wavelet transform, and redundant data are reduced; initial conditions and control parameters of an m-FHN chaotic system are generated through an SHA-512 hash value of an original image, and strong association of a secret key and a plaintext is ensured; the m-FHN system is iterated to generate three groups of chaos sequences, and the chaos sequences are quantized to obtain a pseudo-random matrix for diffusion and scrambling operation; performing forward diffusion, index scrambling and backward diffusion operation on the sparse image in sequence to obtain a final compressed and encrypted image; a receiving end acquires an initial parameter and a control parameter bound with a plaintext through a secure channel, and then performs inverse backward diffusion, inverse index scrambling, inverse forward diffusion and inverse discrete wavelet transform on a ciphertext image in sequence to obtain a decrypted image.

The invention discloses an access authentication method and device, a satellite network system and a storage medium. The method comprises the following steps: receiving an authentication request containing an access request plaintext of a user terminal sent by at least one first node in a previous layer of a network node through a non-secure channel; performing multiple verification on each received authentication request; wherein the multiple verifications comprise verifying the timeliness and the non-tampering property of the authentication request received by the network node, and verifying the legality of each node in the access request path before the access request plaintext reaches the network node; and aggregating all the authentication requests passing the multiple verifications into a new authentication request, and sending the new authentication request to a second node in the next layer of the network node until the request plaintext reaches the network control center, so that the network control center generates unified authentication response information for all the user terminals corresponding to the authentication requests passing the multiple verifications in the network control center. And the session keys are distributed to the corresponding user terminals, so that the corresponding user terminals generate the session keys.

The embodiment of the invention provides a power encryption database fine-grained access control method based on a quantum key, and relates to the technical field of quantum communication. The access control method comprises the following steps: performing identity authentication on a data user applying for data access; after the data user passes the identity verification, verifying the user attribute of the data user, and issuing a dynamic access token; after identity verification and attribute verification, establishing a QKD channel between the data center and the data user, and generating a quantum key; the data center defines an access strategy according to the user attribute corresponding to the plaintext; encrypting a plaintext and an access strategy through the generated quantum key to obtain a ciphertext; storing the ciphertext in a distributed database of the data center; verifying whether the user attribute of the data user is consistent with the access strategy in the ciphertext according to the access token; under the condition of consistency, the data center distributes the secret key to the data user through the QKD channel; and the data user decrypts the ciphertext according to the distributed key to obtain a plaintext.

The invention is suitable for the field of communication technology improvement, and provides an encryption communication method and system used between EtherCAT slave station nodes, an OTP / nonvolatile storage, an encryption scrambling unit and a decryption descrambling unit are integrated in an EtherCAT slave station chip of a coupler and an I / O module, and encryption / decryption of an EtherCAT message is achieved on the hardware level; xOR operation or an AES algorithm is adopted for encryption, and a secret key is stored in an unmodifiable storage unit; and meanwhile, a parallel architecture of an encrypted network and a standard network is constructed, so that the standard interaction between the slave station node and the master station is not influenced by encrypted communication. The system solves the contradiction of poor real-time performance of a private protocol and easy plaintext communication plagiarism in the prior art, realizes the effects of no real-time performance loss, strong communication exclusiveness and flexible compatibility, and is suitable for an EtherCAT high-speed backplane bus system under industrial 4.0.

A system to output a response to a query via processing a large language model is disclosed. The system includes an array of processing cores arranged in a grid allowing each processing core to communicate directly to a neighboring processing core. An interconnection network is coupled to each of the processing cores allowing communication between the processing cores. A first processing core of the array of processing cores is configured to receive an encrypted query. A second processing core of the array of processing cores is configured to input the encrypted query to a large language model; execute the large language model having general weights in plaintext; and provide an encrypted output of the large language model.

The invention relates to a two-dimensional code decoding method and system based on quantum key encryption and decryption, and the method comprises the steps: obtaining a quantum key generated by a quantum key distribution protocol through a two-dimensional code generation end, generating a first service starting code based on the original data of the two-dimensional code before encoding and the quantum key, and encrypting the original data of the two-dimensional code before encoding by using the quantum key to obtain a ciphertext; the two-dimensional code generation end adds a two-dimensional code ID to the ciphertext at the same time to generate a two-dimensional code image; the two-dimensional code scanning end determines a two-dimensional code ID, inquires a quantum password corresponding to the two-dimensional code ID from a local quantum key machine through the two-dimensional code ID, decrypts the ciphertext to obtain a plaintext, and generates a service starting code for the plaintext and the quantum key to generate a second service starting code; and the two-dimensional code scanning end compares the first service starting code with the second service starting code, and if the first service starting code and the second service starting code are consistent, subsequent service operation is carried out. According to the invention, the problems of low payment environment security and low transaction efficiency can be solved.

The invention discloses a password plaintext risk monitoring system and method based on traffic analysis and a large model. The method comprises the following steps: collecting related basic information based on a traffic background environment to construct a knowledge base; analysis is carried out based on the pre-collected traffic, marking analysis is carried out on field information identified in the traffic, and a prompt word library is generated; the method comprises the following steps: collecting environment traffic, performing traffic analysis on the collected traffic, extracting interaction information in the traffic, performing cleaning and structural processing, and submitting the interaction information to a password plaintext risk identification agent; and the intelligent agent performs analysis through large model capability according to submitted content in combination with a knowledge base and cue words, judges a password plaintext state in the traffic information, and finally generates a risk report and returns the risk report. According to the method, the accuracy of password plaintext risk identification is improved through the intelligent analysis capability of the large model.

The embodiment of the invention provides an encryption service and key authorization method for preventing encrypted data from going out of a domain. The method comprises the following steps: a data owner applies for a key from an encryption service, manages key authorization, and authorizes a corresponding key ID to a data user; during encryption, the data user generates random pseudo data; the encryption service carries out encryption by using the authorization key according to random pseudo data given by a data user and returns a first encryption result; and the data user carries out calculation according to the first encryption result and the plaintext data to generate a corresponding ciphertext and a message identification code. During decryption, the encryption service performs encryption calculation on partial data and random pseudo data of the first encryption result by using the authorization key and returns a second encryption result; the data user performs calculation according to the second encryption result and the ciphertext data to generate an initial plaintext; if the initial plaintext passes the data verification, outputting the plaintext data, otherwise, decrypting mistakenly.

The invention discloses an identity verification method and system based on homomorphic encryption. The method comprises the steps that a server side generates a public key and a private key, during registration, a client side obtains the public key, a unique identifier input by a user and a password, and the public key is used for encrypting the password to obtain a first ciphertext; storing the first ciphertext and the unique identifier in a database of a server; during login, the client obtains a unique identifier and a password input by a user, the server generates a random challenge value and sends the random challenge value to the client, the client encrypts the password by using the public key to obtain a second ciphertext, and a third ciphertext is calculated according to the second ciphertext and the random challenge value; the server obtains the third ciphertext and the unique identifier, and obtains the first ciphertext from the database according to the unique identifier; calculating according to the first ciphertext and the random challenge value to obtain a fourth ciphertext; obtaining a difference ciphertext according to the third ciphertext and the fourth ciphertext; and if the difference ciphertext is 0, the user identity authentication is passed. According to the method, the server side cannot acquire the plaintext, and privacy is guaranteed.

A computer implemented method of applying a unified search for a match of one or more features in a plurality of encrypted records, comprising using one or more processors of a server associated with a database comprising a plurality of encrypted records. The processor(s) is adapted for receiving a query for searching one or more plaintext features in the plurality of encrypted, searching for a match of the one or more plaintext features using a first search methodology and a second search methodology and outputting an indication of matching encrypted records according to the match. Wherein the second search methodology is asymptotically faster than the first search methodology and wherein the first search methodology is used for searching a subset of the plurality of encrypted records selected based on status indication associated with each encrypted record.

The invention relates to the field of data encryption transmission, in particular to a big data network security data transmission method. Setting a plurality of encryption algorithms and corresponding decryption algorithms associated with the data volume interval, the sequence sequence, the time interval and the number sequence, selecting the encryption algorithm to encrypt the plaintext based on the data volume of the plaintext to be sent to obtain an encrypted ciphertext, and splitting the encrypted ciphertext into a plurality of ciphertext segments based on the number sequence associated with the encryption algorithm, and encrypting each ciphertext segment through a public key, sending the encrypted ciphertext segments to a disguise receiving end according to a sequence and a time interval, selecting a decryption algorithm associated with the matched data volume interval, calling the ciphertext segments based on the sequence and the time interval associated with the decryption algorithm, decrypting through a private key, and combining to obtain an encrypted ciphertext, and the plaintext is obtained after the encrypted text is decrypted through the decryption algorithm, so that the security of data transmission in the network is improved.

Disclosed is a server device. The device includes: a communicator; a memory; and a processor, wherein the processor is configured to receive a reference artificial intelligence (AI) model of an external device through the communicator and store the received reference AI model in the memory, acquire a plaintext AI model friendly to homomorphic encryption by performing a knowledge distillation task based on the reference AI model for a lightweight AI model designed to operate homomorphic encryption efficiently compared to the reference AI model, and convert the plaintext AI model into a homomorphic encryption AI model by encrypting data used by the plaintext AI model. Accordingly, the device may easily provide the homomorphic encryption AI model.

The invention discloses a blockchain data security storage method based on verifiable secret sharing. The method comprises the following steps executed by computer hardware: receiving to-be-stored data, performing encryption processing on the to-be-stored data to obtain a ciphertext, storing the ciphertext to a distributed file system, obtaining a storage address, and calculating a hash value of the ciphertext; dividing the encryption key into a plurality of sub-key fragments according to set parameters, and calculating a hash value of each sub-key fragment; packaging the sub-key fragment, the sub-key fragment hash value and the ciphertext hash value into a transaction unit, and writing the transaction unit into the block chain; receiving a decryption request, and reconstructing an encryption key when the number of submitted effective sub-key fragments reaches a threshold value; and acquiring the ciphertext from the distributed file system, verifying the hash value of the ciphertext, and decrypting by using the reconstructed encryption key to obtain the plaintext. According to the invention, the security management and control of the full life cycle of the data are realized, the integrity, confidentiality and authenticability of the data and the secret key are ensured, and the security of the data in the processes of storage, transmission, secret key management and the like is ensured.