26 results about "Quantum digital signature" patented technology

The invention discloses an anti-quantum-attack smart park data sharing method and device and a medium, and the method comprises the steps: generating a digital signature public key and a digital signature private key through a system administrator according to an anti-quantum digital signature scheme, and generating a homomorphic encryption and decryption public key and a homomorphic encryption and decryption private key according to an anti-quantum homomorphic encryption scheme, an anonymous signature public key and an anonymous signature private key are generated through a certificate authority according to the digital signature scheme for resisting anonymity of the quantum signer; sending an access request message of the user to a system administrator so as to sign the access request message by using a private key with a digital signature and sending the signed access request message to the user; verifying the identity of the administrator based on the digital signature, signing the access request information by using a private key of an anonymous signature, sending the access request information to a system administrator to verify the identity of the user, and allowing the user to access after the identity of the user passes verification; a system administrator selects plaintext data to encrypt and generate a ciphertext, and sends the ciphertext to a data requester, so that the data requester performs homomorphic operation on the ciphertext to complete data security sharing.

The invention provides a verification method and device, and relates to the technical field of security, and the method comprises the steps: verifying a target object based on CMS data corresponding to the target object before the target object runs, and allowing the target object to run only when the verification is passed. The CMS data can comprise post-quantum digital signature information of the target object and corresponding post-quantum public key certificate information, and the post-quantum digital signature information comprises information obtained after the target object is signed by adopting a post-quantum public key algorithm and a post-quantum private key, related to the post-quantum public key algorithm, of the target object. And then, the quantum public key algorithm can resist quantum attacks, and a quantum computer cannot recover a post quantum private key through post quantum public key certificate information in the CMS data, so that post quantum digital signature information in the CMS data cannot be tampered, and tampering of a target object and a post quantum digital signature thereof is avoided. Therefore, unauthorized program codes or software can be prevented from being executed in the safe starting process.

The application provides a centralized quantum key relay network and key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in the transmission process.The application greatly improves the security of the system when facing quantum computing threats through quantum digital signature, quantum secure MAC check code and post-quantum cryptography signature mechanism, simultaneously adopts dynamic path selection combined with time limit level, a multi-factor dynamic scoring model and an elastic target time window, can dynamically adjust the optimal path and the target time according to the timeliness requirement of the request, the path condition and the network state, is more flexible in path selection, meets different timeliness requirements, and further adopts a three-level verification mode to ensure the integrity and legality of the key, and when a network fault occurs, can automatically switch to a standby path and isolate a problem node.

The present invention relates to a method for optimizing the execution of the generation of a crystal-dilithium post-quantum digital signature a for a message M using a private key sk, the digital signature generation comprising: a) generating a polynomial masking vector y having coefficients less than a second predetermined value y1; b) calculating a first polynomial vector w=Ay; c) determining a second polynomial vector w1 and a third polynomial vector w0; d) generating a challenge c based on the message and the second polynomial vector w1; and e) forming a repudiation test comprising testing whether a test vector generated from the vector, the challenge and the private key satisfies a predetermined condition, whereby if the condition is not met, restarting the signature generation from step a); otherwise, generating a signature, wherein steps a), b), c), d), and e) are repeated until the condition is met.

Training an artificial intelligence model to categorize data by sensitivity and for applying the model to selectively protect sensitive portions of multimodal datasets. Sensitive training data can be obfuscated with synthetic noise or randomized errors to preserve confidentiality while enabling the model to learn patterns correlated with sensitivity. The trained model is validated on labeled data and can be refined as classification standards evolve. In operation, the classifier assigns sensitivity levels to data elements and directs tiered protection. Elements assigned to a higher relative sensitivity classification level are protected using post-quantum key establishment, for example a key encapsulation mechanism, combined with symmetric authenticated encryption of payloads, and associated metadata is authenticated using a post-quantum digital signature scheme. Less sensitive elements can be protected using conventional symmetric encryption for efficiency. This approach automates sensitivity classification, optimizes cryptographic resource allocation, and improves confidentiality and integrity for simulation and mission data.

The invention discloses a Falcon anti-quantum signature and block chain-based data security access control method, and relates to the technical field of data security, and the method comprises the following steps: S1, a trusted agent TA issues a global public parameter set Params of a system; s2, an access user Ui joins a system, and obtains a digital certificate Cerdei and a certificate hash through a trusted agent TA; s3, the access user Ui obtains the authorization token through the authorization verification node; s4, the access user Ui accesses and obtains target data in the cloud server through the authorization token, wherein the target data is encrypted data uploaded to the cloud server by the data owner DOj; according to the method, a Falcon anti-quantum digital signature algorithm is adopted in the processes of identity registration, access authorization and access token issuing, and it is ensured that an access control system is still kept safe and reliable in a future quantum computing environment. The token signature cannot be forged, the access process can be verified, and a long-term effective anti-quantum security guarantee is provided for a cross-domain and multi-node access scene.

The invention discloses a quantum digital signature method and system for multi-receiver verification arbitration, and relates to the technical field of quantum digital signatures, secret key consumption is reduced from O (k2) magnitude to O (k) magnitude through a secret key synthesis technology, and under the same security parameter and message length, the secret key consumption of the scheme of the invention is reduced by at least two orders of magnitude compared with the existing scheme; based on the information theory security of the quantum key and the unconditional security of one-time hash / encryption, the scheme of the invention can effectively resist forgery attack and denial attack, and the security is strictly proved; the multiple receivers can interact with the arbiter at the same time and complete verification independently, the whole signature verification time of the system is greatly shortened, and the method is particularly suitable for large-scale quantum network application.

According to the secret key secure storage method, application and system of the HSS post-quantum digital signature algorithm, the combination of the cryptographic device, the high-strength symmetric encryption algorithm and the derivation algorithm is adopted to perform multi-level encryption processing on the secret key, so that the secret key is effectively prevented from being stolen or tampered in the storage and transmission process, and the security of the secret key is improved. LM-OTS and LMS key pair generation and use mechanisms related to a post-quantum algorithm are introduced, a solution is provided for dealing with the threat of future quantum computing to a traditional cryptographic system, a key state management mechanism with atomicity and consistency is used, and the exclusiveness and integrity of key use are guaranteed. A memory LMS key pool is designed, dynamic creation of LMS key pairs is supported, the number of keys can be flexibly adjusted according to actual requirements, and the flexibility of key management and the performance of state updating are improved. Safety management is performed on the state of the secret key, the number of use times of the secret key is judged in real time, the secret key is updated in time, effectiveness and safety of the secret key are ensured, and repeated use and leakage of the secret key are avoided.

The application relates to an identity authentication method and system. In the method, a claiming party determines an asymmetric digital signature algorithm and a post-quantum digital signature algorithm, generates algorithm identifiers corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, acquires a time-varying parameter, generates signature data according to the time-varying parameter and an identifier of a verifying party, signs the signature data by using the asymmetric digital signature algorithm to obtain a first signature, signs the signature data by using the post-quantum digital signature algorithm to obtain a second signature, generates an identity authentication string according to the algorithm identifiers, the signature data, the first signature and the second signature, and sends the identity authentication string to the verifying party to instruct the verifying party to perform identity authentication according to the identity authentication string. The method introduces the post-quantum digital signature algorithm capable of resisting quantum computing on the basis of traditional asymmetric password identity authentication, improves the security of communication parties in the identity authentication process, and can resist quantum threats to a certain extent.

The invention relates to data asset protection, in particular to an anti-quantum computing attack data asset protection system, which comprises a data encryption layer, a dynamic symmetric encryption algorithm pool technology is adopted, symmetric encryption algorithms are added into an algorithm pool, computing resource performance consumption indexes of the algorithms are marked, and corresponding algorithms are matched according to hardware performance of a current operating environment. Dynamically compensating the key length based on the security level coefficient of the algorithm to maintain the security strength, and carrying out encryption and decryption operation on the data block by adopting the matched algorithm; the key management layer is used for carrying out key management based on a complete key life cycle management mechanism, packaging keys by adopting a post quantum cryptographic algorithm, and realizing secure distribution of the keys; the identity authentication layer adopts an anti-quantum digital signature algorithm to realize identity authentication and integrity verification and is matched with a random number synchronization device based on a hardware clock to overlay and authenticate identities of the two parties; the method can effectively overcome the defects that in the prior art, anti-quantum safety is poor, and side channel attacks are difficult to resist.

The present application relates to an identity authentication method and system. The method comprises: a claimant determining an asymmetric digital signature algorithm and a post-quantum digital signature algorithm; generating an algorithm identifier corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; acquiring a time-varying parameter, and generating signature data on the basis of the time-varying parameter and an identifier of a verifier; using the asymmetric digital signature algorithm to perform signing on the signature data, so as to obtain a first signature; using the post-quantum digital signature algorithm to perform signing on the signature data, so as to obtain a second signature; on the basis of the algorithm identifier, the signature data, the first signature and the second signature, generating an identity authentication string; and sending the identity authentication string to the verifier, so as to instruct the verifier to perform identity authentication on the basis of the authentication string. On the basis of conventional asymmetric cryptographic identity authentication, the method introduces a post-quantum digital signature algorithm capable of resisting quantum computation, thereby enhancing the security of two communicating parties during identity authentication and being able to resist quantum threats to a certain extent.

This invention relates to the field of quantum-resistant computing and cryptography, and discloses a hardware-accelerated parallel implementation method and system for quantum-resistant digital signature algorithms. The method includes: mapping a private key matrix to the conductance states of a resistive-switched non-volatile memory array; converting the message to be signed into an input vector and loading it into a row-driven circuit; performing matrix-vector multiplication in situ using the memory array, with the operational current obtained by a column-sensing circuit; performing analog-to-digital conversion, post-processing, and rejection sampling judgment on the current, and outputting the signature result. The system includes a central control module, a resistive-switched memory computing core array, a row-driven circuit module, a column-sensing and conversion module, and a post-processing operator cluster. By adopting the above technical solution, this invention can achieve high-performance, low-power, and low-latency parallel processing of quantum-resistant digital signatures, improving throughput and enhancing deployment feasibility in edge and mobile devices.

The invention discloses an identity authentication method and system based on a quantum cryptography technology, and relates to the technical field of quantum cryptography. Specifically, an identity authentication server verifies identity information of a sending end and generates a random number; encrypting the random number through a private key and then sending to a receiving end; the receiving end verifies the random number through the public key, generates a serial number and sends the serial number to the sending end; the sending end sends the serial number to a receiving end for verification; the transmitting end signs transmission data through a post-quantum digital signature technology, encodes the transmission data in a photon beam and sends the photon beam to the receiving end; the quantum polarization state of each photon is switched along with the change of the serial number; and a receiving end decodes the coded photon beam by using the measurement basis, and obtains transmission data by using the change of the quantum polarization state. According to the invention, the quantum cryptography technology is applied to meet the data transmission of the sending end and the receiving end, and reliable three-party authentication is realized.

The invention provides a safe batch post-quantum digital signature algorithm based on combined use of an arithmetic mask and a Boolean mask, and aims to solve the problems of low operation efficiency and side channel risk existing in a batch signature or parallel computing scene of an existing Dillithium algorithm. According to the algorithm, middle sensitive data and operation are subjected to mask processing, and leakage of side channel information such as power consumption and time sequence is effectively reduced. The algorithm comprises the key steps of generating a user message, processing a private key by using a mask decomposition technology, randomly generating a random vector for enhancing signature unpredictability, multiplying matrix vectors, preventing statistical leakage by using a sampling rejection technology, and carrying out security and efficiency demand optimization on the batch size. According to the method, the calculation efficiency is improved through the fast matrix multiplication algorithm, the zero point test technology is introduced, the safety and correctness of the algorithm in different environments are guaranteed, the signature generation efficiency is remarkably improved, and particularly, higher performance and safety are shown in multi-user and batch signature scenes.

This invention discloses an ultra-high-speed post-quantum cryptographic secure communication method for on-orbit intelligent agents, belonging to the field of communication technology. The method includes: generating an encryption key pair based on a post-quantum cryptographic algorithm and a signature key pair based on a quantum-resistant digital signature algorithm for each on-orbit intelligent agent node; recording the two public key information in a blockchain ledger through consensus; obtaining the receiver's public key information from the blockchain ledger, generating a session seed using a post-quantum key encapsulation method and encapsulating it into ciphertext, digitally signing the ciphertext-containing information using a quantum-resistant signature private key, and then sending it; upon receiving the information, the receiver verifies the signature, confirms the identity's legitimacy, and decrypts to obtain the session seed; based on the session seed, both communicating parties generate a one-time session key and transmit business data with symmetric encryption; after communication ends, a communication audit log is generated based on the transmitted information. This invention improves the security of on-orbit intelligent agent communication using the above method.

The application provides a lattice optimization-based anti-quantum blockchain protection method and system, and belongs to the technical field of blockchain security. In view of the problem of insufficient security of the existing blockchain in a quantum computing environment, the application constructs a lattice mapping system based on an LWE problem, including: S1, setting a lattice space dimension and a modulus, generating a low-norm short vector in a finite field as a user private key vector; S2, obtaining transaction information, dynamically generating a lattice basis matrix corresponding to the transaction uniquely through a hash algorithm, injecting a discrete Gaussian noise vector, and performing lattice encryption operation based on the lattice basis matrix, the user private key and the discrete Gaussian noise vector to generate an anti-quantum digital signature; S3, performing infinite norm verification based on the lattice basis matrix, the user private key and the discrete Gaussian noise vector to determine whether the signature is tampered with. The application realizes one-time password through dynamic lattice basis and adaptive noise, effectively resists quantum attacks and has high calculation efficiency, and is suitable for blockchain transfer and identity authentication.

The application relates to the technical field of distributed machine learning and network security, in particular to a quantum-resistant federated learning framework and a training security processing method. The quantum-resistant federated learning framework comprises at least one server and at least one client corresponding to each server; and a federated training scheduling module, a post-quantum key encapsulation module, a post-quantum digital signature algorithm module, a symmetric encryption protection module and a security verification and aggregation module respectively arranged on each server and each client. The framework can integrate the post-quantum secure communication capability by extending the gRPC transmission layer of Flower, improve the message confidentiality, message integrity, identity authentication and the continuity, security and controllability of the multi-round training process of the federated learning system under the threat of quantum computing, and be suitable for distributed collaborative modeling scenes such as medical treatment, finance, government affairs and industrial internet which have high requirements for communication security and long-term password strength.

The invention relates to a method for protecting the performance of a verification of a post-Crystal-Diithium quantum digital signature [sigma] of a message M, comprising a challenge seed, a test vector z and a polynomial hint vector h, generated using a secret key sk = ([rho], K, tr, s1, s2, t0), said digital signature verification verifying said digital signature [sigma], said message M and a public key pk = ([rho], K, tr, s1, s2, t0), said digital signature verification verifying said digital signature [sigma], said message M and said public key pk = ([rho], K, tr, s1, s2, t0). The invention relates to a method for verifying one of conditions P1, P2 and P3 (t1, t1) as input and comprising the following steps: ensuring that a fault attack intended to verify one of the conditions P1, P2 and P3 does not result in a signature accepting forgery, where: P1: ct1.2 d = 0, and.

Training an artificial intelligence model to categorize data by sensitivity and for applying the model to selectively protect sensitive portions of multimodal datasets. Sensitive training data can be obfuscated with synthetic noise or randomized errors to preserve confidentiality while enabling the model to learn patterns correlated with sensitivity. The trained model is validated on labeled data and can be refined as classification standards evolve. In operation, the classifier assigns sensitivity levels to data elements and directs tiered protection. Elements assigned to a higher relative sensitivity classification level are protected using post-quantum key establishment, for example a key encapsulation mechanism, combined with symmetric authenticated encryption of payloads, and associated metadata is authenticated using a post-quantum digital signature scheme. Less sensitive elements can be protected using conventional symmetric encryption for efficiency. This approach automates sensitivity classification, optimizes cryptographic resource allocation, and improves confidentiality and integrity for simulation and mission data.

The invention discloses a weighted quantum signature method and device, equipment and a medium, and relates to the technical field of information security, and the method comprises the steps: setting a plurality of signature parties participating in signature generation as target signature parties, and obtaining a part of signature values generated by the target signature parties through the processing of a signature message; outputting a weight coefficient, a Huffman tree, a threshold value and a target public key of each target signature party according to each signature party public key and the hash key of the target signature party, so that a combiner judges whether the weight coefficient of each target signature party meets a preset verification condition or not; if yes, constructing a target signature value according to a corresponding authentication path constructed by the Huffman tree, the signature value of each part and the hash key, sending the target signature value, the signature message and the target public key to a verification party, so that the verification party calculates and outputs a to-be-verified public key based on the target signature value and the signature message, and if the to-be-verified public key is consistent with the target public key, sending the to-be-verified public key to the verification party. And the signature verification is passed. And the post-quantum digital signature that a plurality of signers control signature permissions is realized.

The invention provides an efficient batch digital signature hardware acceleration and mask protection method based on a Dillithium algorithm. According to the method, the arithmetic mask technology and the Boolean mask technology are combined, and efficient acceleration of batch digital signatures is achieved on a hardware platform. A multi-state machine parallel control and data scheduling system is constructed for a batch signature scene, so that a signature process simultaneously executes key operations such as sampling, matrix multiplication and sampling rejection on an FPGA hardware platform in an assembly line mode. By introducing a fast matrix operation Rosowsk algorithm and a mask protection mechanism, the signature generation throughput rate and efficiency are improved on the premise of keeping side channel attack resistance security. Compared with traditional serial or embedded software implementation, the method has remarkable advantages in the aspects of performance, energy consumption and safety, and can be widely applied to post quantum cryptography systems, hardware safety modules and information authentication terminals needing batch signature; and a high-performance and extensible implementation scheme is provided for hardware acceleration and security protection of a post-quantum digital signature algorithm.

The invention discloses a hybrid digital certificate generation method and system based on double-algorithm parallel signature, and the method comprises the steps: carrying out the parallel signature of the main data of a same to-be-signed certificate through employing a first-class digital signature algorithm and a second-class digital signature algorithm at the same time under an existing X.509 digital certificate system; and packaging the generated first signature value and the generated second signature value into the same certificate structure to form a hybrid digital certificate. Wherein the first type of digital signature algorithm is a classical calculation digital signature algorithm, and the second type of digital signature algorithm is a post-quantum digital signature algorithm. And in the certificate verification stage, the verification party verifies the two signature values in the mixed signature field according to the signature algorithm identifier contained in the certificate, and outputs a certificate verification result according to a preset joint decision rule. On the premise of keeping the compatibility of the existing digital certificate structure and the verification process, the post-quantum security capability is introduced, and the long-term security and backward compatibility of the digital certificate in the quantum computing environment are improved.

The application provides a one-way quantum attack resistant identity authentication method and device for a smart park and a medium, and belongs to the technical field of smart park safety management and control. The method comprises: based on a system administrator performing a system initialization operation, generating a first public-private key pair corresponding to the system administrator; generating a second public-private key pair corresponding to a park user through a key generation center, and distributing the second public-private key pair to a park user terminal. In response to an access request from the park user terminal, based on a preset quantum-resistant signature generation algorithm and operation intermediate information of the system initialization operation, a quantum-resistant digital signature corresponding to the access request is generated and sent to the park user terminal; after receiving a user verification digital signature from the park user terminal, the user verification digital signature is verified based on a second public key in the corresponding second public-private key pair, to determine whether to allow the park user terminal to access the corresponding smart park system according to a first verification result obtained by the verification.

The present application belongs to the technical field of post-quantum cryptography, and specifically relates to a high-efficiency post-quantum digital signature method based on a prime-order number field. The present application comprises key generation, signature and verification based on the Fiat-Shamir with Aborts paradigm structure, and the underlying algebraic structure is a prime-order number field with the characteristics of high security, prime order, large Galois group and inert modulus. The high-efficiency prime-order number field polynomial multiplication method comprises a prime-order number field NTT polynomial multiplication method and a prime-order number field small polynomial multiplication method. The high-efficiency branchless constant-time implementation method comprises a branchless modulus reduction method and a branchless high-low decomposition method. The present application can resist cryptographic attacks on cyclotomic rings and has higher robust security. The present application overcomes the defects of poor implementation efficiency of existing cryptographic schemes based on prime-order number fields and realizes lattice signatures with high efficiency and security.

The embodiment of the application provides a vehicle control data transmission method and a vehicle, and relates to the technical field of vehicles. The method comprises the following steps: receiving digital key information sent by a terminal through an REE module; receiving an encrypted digital key from the terminal under the condition that the digital key information indicates that the terminal has post-quantum cryptographic encryption capability through a TEE module; decrypting the encrypted digital key through the TEE module to obtain the digital key; verifying the quantum digital signature and the operation permission through the TEE module, and outputting an operation instruction corresponding to an operation request after verification. By adapting the post-quantum cryptographic encryption algorithm to the vehicle processor, the vehicle adopts quantum encryption when transmitting data, thereby achieving the purpose of effectively preventing quantum attacks, and further solving the technical problem of poor security in the vehicle control data transmission process caused by the fact that the traditional public key cryptography cannot effectively prevent quantum attacks in the related art.