486 results about "Quantum cryptography" patented technology

The invention discloses a big data auxiliary key generation method and system in communication data encryption transmission, and relates to the technical field of big data analysis and processing. The dynamic entropy source processing module is used for generating a high-randomness entropy pool by combining an information entropy quantification model and adopting a Shannon entropy and minimum entropy fusion algorithm; the anti-quantum key generation module is used for generating a dynamic variable-length key seed based on an entropy pool driven post-quantum cryptographic algorithm; the hierarchical key negotiation module adopts a clustering Diffie-Hellman protocol, dynamically divides negotiation according to network topology, and precomputes and reduces the load of a core network through edge nodes; and a lightweight verification and update module. According to the method, high-entropy sources such as environmental noise, user behaviors and equipment hardware fingerprints are fused with low-entropy sources such as network messages and sensor data, and an intelligent acquisition strategy and a nonlinear decorrelation technology are combined, so that the anti-quantum dynamic entropy pool is generated, and the randomness of a secret key and the reliability of the entropy sources are improved.

A distributed intelligent authentication method based on dynamic multi-modal fusion relates to the field of network security, and adopts an alliance chain + DAG hybrid block chain architecture, combines a threshold signature to realize secret key fragment management, and switches among PBFT, Raft and probabilistic algorithms through a dynamic consensus mechanism to improve authentication efficiency. The multi-mode authentication module is based on a dynamic weight distribution algorithm, integrates biological characteristics, behavior analysis, equipment fingerprints and environmental factors, and combines an LSTM-GAN model and a quantum random number driven challenge-response mechanism to realize zero-trust verification under environmental perception. The session management module generates a session key by using a chaotic mapping algorithm. In the aspect of privacy protection, CKKS homomorphic encryption, zero-knowledge proof and attribute-based encryption are fused. According to the method, the block chain technology, the secure multi-party computing technology, the machine learning technology and the quantum cryptography technology are fused, and a high-performance, high-security and strong-privacy-protection distributed authentication solution is provided.

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

Systems, apparatuses, and methods are disclosed for measuring one or more metrics of a cryptographic algorithm in a post-quantum cryptography (PQC) system. An example method includes obtaining a set of operating parameters comprising an algorithm of interest, wherein the algorithm of interest is a PQC algorithm, a legacy algorithm operating in a hybrid PQC system, or a variant thereof, and wherein the algorithm of interest is wrapped to present, via a wrapped algorithm of interest, a standardized interface to a sequence of benchmark operations. The example method further includes observing benchmark values of the one or more metrics, wherein the one or more metrics pertain to a designated benchmark operation from the sequence of benchmark operations. The example method further includes outputting a report comprising the benchmark values of the one or more metrics.

The invention discloses an industrial internet data security communication method based on hybrid anti-quantum cryptography, which relates to the technical field of data communication, and comprises the following steps: acquiring a key pair and an anti-quantum security certificate; sending a connection request to data receiver equipment to complete certificate credibility authentication, and sending an anti-quantum security certificate of the equipment; receiving a shared key seed sent by the data receiver equipment; decrypting the encapsulated ciphertext to obtain a shared key seed, and generating a corresponding shared key according to the same shared key generation algorithm as the data receiver equipment; the method comprises the following steps of: signing original data by using a signature private key, splicing a signature and the original data to obtain spliced data, encrypting the spliced data by using a shared key based on an AES-256-GCM algorithm to obtain an encrypted ciphertext and an ML-DSA signature, and sending the encrypted ciphertext to data receiver equipment. According to the method, the key distribution step is simplified, the signature verification calculation overhead is optimized, and the data communication efficiency is improved.

The invention discloses an Internet of Things test platform adaptation method, system and device based on post quantum cryptography. The method comprises the following steps: constructing a quantum threat perception model; establishing a multi-dimensional adaptive decision matrix, and generating a candidate post-quantum cryptography algorithm set; dynamic injection of a cryptographic protocol is executed, and lossless replacement of a communication layer encryption suite is achieved; deploying a runtime performance monitoring engine, and collecting encryption and decryption delay, memory occupancy rate and electromagnetic radiation characteristic data in real time; and constructing an algorithm switching decision tree based on reinforcement learning, and when a quantum attack feature or an equipment performance threshold is detected to break through, triggering cryptographic algorithm dynamic migration. A quantum threat perception driven Internet of Things security adaptation system is constructed, and by introducing a dynamic password switching mechanism, a hardware acceleration optimization scheme and a trusted execution environment, the security upgrading problem of traditional Internet of Things equipment in the post-quantum era is solved. According to the invention, the execution efficiency of the PQC algorithm of the resource-constrained equipment can be improved, and the key updating delay is reduced.

The invention relates to the technical field of cryptography, and particularly provides a system and method for resisting migration of a quantum cryptographic algorithm, a storage medium, equipment and a product, the system comprises a first end, a second end and a third end, the first end is used for performing cryptographic operation on target data according to an operation configuration strategy to obtain a cryptographic operation result, the operation configuration strategy comprises at least one of traditional cryptographic operation and anti-quantum cryptographic operation, and the cryptographic operation result comprises at least one of a traditional operation result and an anti-quantum operation result; and the second end is used for verifying the password operation result according to a verification configuration strategy to obtain a verification result, and sending the verification result to the first end. According to the system provided by the embodiment of the invention, migration of the quantum cryptography resisting algorithm can be realized, and the transformation cost is relatively low.

The invention discloses an SSL VPN security gateway communication method fused with a post quantum cryptography technology. Comprising the following steps: S1, a client and a server respectively configure a serial hybrid signature digital certificate containing an SM2 algorithm and a serial hybrid encryption digital certificate containing a PQC algorithm, and a corresponding PQC encryption key pair private key, a PQC signature key pair private key, an SM2 encryption key pair private key and an SM2 signature key pair private key; s2, newly adding a hybrid algorithm password suite using an SM2 algorithm and a PQC algorithm in a password suite list of the client, and forcibly jacking the priority of the hybrid algorithm password suite; and S3, a message structure in a handshake protocol is transformed to use a series hybrid encrypted digital certificate to realize that PQC algorithm processing is added on the basis of an original national cryptographic algorithm to realize quantum key negotiation resistance. According to the method, the PQC algorithm is added on the basis of the original national secret algorithm, and the handshake protocol is transformed, so that anti-quantum-attack key agreement and identity authentication can be realized, the communication security is remarkably improved, and meanwhile, the interoperability with the standard SSL VPN is kept.

Techniques and systems can obtain a first private key usable with a classical cryptography algorithm and a second private key usable with a post-quantum cryptography algorithm based on classical and post-quantum public keys hosted by a computer-implemented storage of an online service provider. A plurality of keys to perform a cryptography operation on data hosted by the computer-implemented storage can be generated, the plurality of keys generated based on at least the first and second private keys and a cryptography derivation function identified in the computer-implemented storage. The plurality of keys can be used to perform the cryptography operation on the data hosted by the computer-implemented storage.

A key management device according to an embodiment includes one or more hardware processors configured to function as a determination unit, a generation unit, and a supply unit. The determination unit determines a type of request data requested by a request message transmitted from an application that performs encrypted data communication. The generation unit generates a response message including at least one of a random number and an encryption key shared by quantum key distribution (QKD) via a communication network according to a type of the request data. The supply unit supplies the response message to the application.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

A computing entity accesses one or more blocks of a blockchain, encrypts the content of the one or more blocks using a first cryptographic technique to generate one or more first encrypted block values, and writes a first side chain block comprising the one or more first encrypted block values and a first signature to a first side chain. The computing entity accesses at least one of (a) at least one block of a particular second set of one or more second sets of the plurality of blocks or (b) one or more first side chain blocks corresponding to blocks of the second set, encrypts the content of the accessed block(s) using a second cryptographic technique to generate at least one second encrypted block value, and writes a second side chain block comprising the at least one second encrypted block value and a second signature to a second side chain.

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

The invention belongs to the technical field of network communication, and particularly relates to an SPA single packet authentication method based on quantum cryptography, which comprises the following steps: a client and a server establish a shared quantum key pool, and the quantum key pool comprises a plurality of quantum key segments with different life cycles; the client selects one key segment in the quantum key pool, and generates a dynamic key according to the session ID and the random number seed; acquiring a data abstract according to the single packet data; generating an authentication label containing a quantum watermark according to the data abstract and the quantum random number; the client sends a data packet containing the single packet data, the authentication tag and the key fragment index to the server; the server obtains a local key fragment from a local quantum key pool according to the key fragment index, generates a local dynamic key in combination with the same session ID and the random number seed, and performs hash operation on single packet data to obtain a local authentication tag; and the server carries out authentication comparison on the local authentication tag and the received authentication tag.

The invention discloses an encrypted communication method for a client and a server and a related device. The method comprises the following steps: respectively configuring shared keys for the client and the server based on quantum key distribution equipment; performing key negotiation based on an anti-quantum cryptography algorithm between the client and the server based on the encrypted communication of the shared key to obtain a negotiation session key; and carrying out encrypted communication of service data information between the client and the server based on a shared key before the negotiation session key is obtained, and carrying out encrypted communication of the service data information between the client and the server based on the negotiation session key after the negotiation session key is obtained. Compared with the prior art, communication data are protected by using QKD (quantum key distribution) and PQC (quantum cryptography resisting), and both cost and time are taken into account.

Systems, apparatuses, methods, and computer program products are disclosed for post-quantum cryptography (PQC). An example system includes a PQC smartcard. The smartcard may include a a set of virtual machines (VMs) and each VM of the set of VMs is configured to perform a PQC cryptographic technique. The example system further includes communications circuitry configured to detect an interaction with the PQC smartcard and receive an updated set of PQC cryptographic techniques. The example system further includes processing circuitry configured to update the set of VMs based on the updated set of PQC cryptographic techniques.

The invention relates to the technical field of quantum cryptography, in particular to a dynamic key generation system and method based on multi-source QRNG and QKD, and the system comprises an interface registration method, a calling method, related equipment and a storage medium, is used for generating a high-security quantum key, and is a quantum key service system with a layered architecture. By abstracting, integrating and managing bottom-layer multi-source QRNG and QKD equipment and fully utilizing the flexible scheduling of quantum equipment, the security of key generation is ensured, so that the key service has higher performance, usability and security, and unified, dynamic and high-security quantum key generation and supply services are provided for various applications of the upper layer. The method is widely applied to the industries and fields of government, finance, energy, traffic, electric power and the like, meets the requirements of quantum key acquisition of various business applications in cloud computing and non-cloud environments, and ensures information security and business continuity.

The invention discloses an anti-quantum-attack national secret SSL communication system and method, and belongs to the technical field of information security. The quantum attack resistant national secret SSL communication system of the scheme comprises a traditional SSL client, an anti-quantum SSL client agent and a mixed SSL server. A traditional SSL client does not support an anti-quantum cryptography algorithm, and a mixed SSL server has a traditional cryptography technology and an anti-quantum cryptography technology at the same time. And the anti-quantum SSL client agent performs anti-quantum cryptographic algorithm transformation on a message sent by the traditional SSL client and then sends the message to the mixed SSL server, and performs anti-quantum cryptographic algorithm inverse transformation on a message sent by the mixed SSL server and then sends the message to the traditional SSL client. According to the scheme, the quantum attack resistance of the system is improved in a manner of incrementally deploying the anti-quantum SSL client agent at the SSL client, the transformation period is short, and the transformation cost is low.

The invention provides an Internet of Things communication method, an Internet of Things terminal and a quantum cryptography service platform and system, and relates to the technical field of Internet of Things. According to the scheme, the session key of the current period is distributed to the Internet of Things terminal based on the quantum cryptography service platform, that is, the session key is periodically updated by the quantum cryptography service management platform in a dynamic updating mode; and then, encryption processing or decryption processing is performed on the session key and the target service data of the current period by adopting a security encryption technology based on a security module integrated in the Internet of Things terminal, and the target service data is data to be sent to the Internet of Things platform or data issued by the Internet of Things service platform. According to the technical scheme, the secure communication of the Internet of Things is ensured, and when the secret key is used for encryption, the secret key is periodically updated, so that the problem of leakage of all service data caused by secret key cracking is avoided, and the reliability, the security and the integrity in the data transmission process between the Internet of Things terminal and the Internet of Things service platform are ensured.

A method for secure storage of cybersecurity data in a blockchain includes: identifying, by a processor of a processing server, a device profile for a computing device; encrypting, by the processor of the processing server, the device profile into an encrypted device profile using a public key of a first cryptographic key pair; encrypting, by the processor of the processing server, the encrypted device profile into a converted device profile via quantum cryptography using a first configuration key; and transmitting, by a transmitter of the processing server, the converted device profile to a blockchain node in a blockchain network.

A server and a device can conduct mutually authenticated post-quantum cryptography (PQC) key encapsulation mechanisms (KEM) that also support forward secrecy. The device can store a trusted server public key (PK.server) and the server can store a trusted device public key (PK.device). The device can generate (i) a first KEM ciphertext and (ii) a first key with PK.server and encrypt an ephemeral public key (ePK.device) using the first key. The server can generate (i) a second KEM ciphertext and (ii) a second key with ePK.device. The server can generate (i) a third KEM ciphertext and (ii) a third key with PK.device. The server can encrypt an ephemeral public key (ePK.server) using the first, second, and third keys. The device can generate (i) a fourth KEM ciphertext and (ii) a fourth key with ePK.server. The device can encrypt application data using at least the first, second, third, and fourth keys.

The invention relates to the technical field of data security, in particular to a quantum cryptography migration resisting method and system for a power system, and the method comprises the steps: carrying out the quantum threat risk assessment of a communication link based on the layering and partitioning architecture features of the power system; obtaining attribute data of the encryption component, and performing parallel migration risk analysis on the encryption component in combination with a quantum threat risk assessment result to generate an anti-quantum migration risk matrix; carrying out compatibility evaluation on a traditional public key algorithm and an anti-quantum cryptography algorithm based on algorithm features, and constructing a double-track encryption migration strategy; dynamically adjusting a double-track weight ratio, and constructing a double-track encryption hierarchical migration strategy based on a control hierarchy to which a communication link belongs; and executing the double-track encryption layered migration strategy and monitoring the migration effect, and performing self-adaptive correction on the double-track encryption layered migration strategy based on the migration effect. According to the method, a quantum threat assessment and double-track encryption layered migration mechanism is constructed, so that safe and smooth migration of the power system under the threat of quantum computing is realized.

The invention relates to the technical field of electric power communication security, in particular to a power grid data secure transmission system and method based on quantum cryptography and a medium, comprising: a power grid data access module extracts identities of a power grid data request end and a target response end; the quantum key distribution module obtains an original shared key pre-stored by the two communication parties, and generates a quantum key according to the one-time session password and the original shared key; the communication security management module analyzes the shared key information from the quantum key received by the target response end to obtain analyzed shared key information, and performs communication security verification on the original shared key and the analyzed shared key information; and the power grid security communication module encrypts the to-be-transmitted power grid data when the communication security verification result is that the verification is passed, and transmits the power grid encrypted data to the target response end. Through cooperation mechanisms such as quantum key dynamic distribution and security verification, security protection of power grid data transmission is realized, and power grid data communication security is improved.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

In general, a computing device comprising a secure memory, a storage device, and a processor may be configured to implement the techniques. The secure memory may store a post-quantum cryptographic reference signature (PQCRS). The storage device may store bootloader stages, a list of classical cryptographic reference signatures (CCRS), and a PQC public key (PQCPK). The processor may, prior to executing a first bootloader stage, obtain the list of CCRS, the PQCRS, and the PQCPK. The processor may also apply a PQC algorithm with respect to the PQCRK and the list of CCRS to obtain a PQC verification signature (PQCVS), and responsive to the PQCVS matching the PQCRS, compare a first CCRS in the digitally signed list of CCRS to a first CC verification signature (CCVS) obtained based on the first bootloader stage. The processor may also, responsive to the first CCVS matching the first CCRS, execute the first bootloader stage.

A secure processor for a post-quantum cryptography (PQC) algorithm CRYSTALS-KYBER, includes a communication unit, a management unit, a processing unit, and a storage unit. The communication unit is configured to receive and transmit data for the secure processor; the management unit is configured to control the processing unit according to the data; the processing unit is configured to process the data to form encrypted data, decrypted data and key data; and the storage unit is configured to store all data. The secure processor can efficiently and rapidly realize key generation, encryption and decryption of a KYBER algorithm under KYBER1024, KYBER768 and KYBER512 security levels, makes data encryption more complicated, and ensures security of the data.

The invention relates to an anti-quantum password migration method and system, electronic equipment and a storage medium, and belongs to the technical field of anti-quantum data transmission. The method comprises the following steps: carrying out adaptive expansion on a transport layer security protocol; the encryption end and the decryption end perform secure transmission of the application data based on the expanded transport layer security protocol, and the secure transmission process of the application data comprises the following steps: generating a master key, a multi-level sub-key and a path key chain according to a chain type post-quantum key generation mechanism based on the expanded cipher suite; the encryption end generates an encryption key through a part of the sub-keys, encrypts application data in a symmetric encryption mode to generate a ciphertext, and sends the ciphertext and a path node key at the tail end of the path key chain to a decryption end; and the decryption end verifies the path node key, generates a decryption key by using part of the sub-keys after the verification of the path node key is passed, and decrypts the ciphertext. According to the invention, the security and high efficiency of data transmission in the anti-quantum cryptography migration process are realized.

The invention relates to the technical field of electric power data transmission, and discloses an electric power Internet of Things equipment identity authentication method and system based on quantum cloud codes. The method comprises the following steps: acquiring quantum state information through a quantum random number generator, generating a power authentication seed and converting the power authentication seed into a quantum cloud code initial seed; collecting an electrical equipment identifier and a characteristic parameter to generate a characteristic vector; expanding the initial seed of the quantum cloud code into a sub-key sequence, and generating an authentication quantum cloud code through quantum entanglement coding and error correction; executing quantum evolution in the authentication time window to generate a dynamic authentication code; after the challenge sequence is received, quantum measurement is carried out, and authentication response data is constructed; and finally, determining an authentication state through block chain storage and an intelligent contract. According to the invention, quantum cryptography and a block chain technology are combined, so that a high-security, low-overhead and extensible device identity authentication mechanism is realized.

The invention discloses a lightweight identity authentication method based on a quantum key, relates to the technical field of quantum encryption technologies, and is used for solving the problems that an existing novel power system is large in calculation overhead and insufficient in authentication encryption security coefficient, and the method comprises the following steps: a quantum cryptography service platform charges a plurality of novel power terminals with quantum keys; an identity key pool is shared by charging, and identity authentication is carried out; if the authentication is passed, a shared encryption and decryption key pool is charged, and meanwhile, the novel power terminal initiates dynamic negotiation with encryption service data of the power master control platform to obtain a data encryption key and a data signature key; original data signature is carried out through the data signature key, and encryption transmission is carried out on the original data and the signed original data through the data encryption key. The invention also discloses a lightweight identity authentication system based on the quantum key, electronic equipment and a computer storage medium. According to the invention, the security of data transmission is ensured through dynamic data encryption key negotiation.

The invention relates to the field of secure multi-party communication and quantum cryptography, and provides a dynamic quantum message authentication method capable of identifying suspension. Comprising the following steps: in a stage of screening honest participants by a semi-quantum trusted third party SQ-TTP, dynamically grouping the participants by the SQ-TTP, randomly selecting part of the participants to form a small quantum communication network for message transmission, and screening honest participants not less than the grouping number according to a message authentication result; in a quantum message parallel transmission stage of each group, the SQ-TTP appoints the screened honest participants as receivers of each group, and the participants in the group complete message transmission in a quantum message transmission mode similar to that in the screening stage; in the stage that the SQ-TTP and each packet receiver transmit the received message to the server, the server decrypts the message by using the key sent by the SQ-TTP and authenticates the message by measuring trap quantum bits. The method is suitable for a large-scale quantum communication network, the quantum resource consumption is reduced through dynamic grouping and parallel transmission, and the message transmission efficiency is improved.