42 results about "Quantum digital signature" patented technology

The invention provides a centralized quantum key relay network and a key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in a transmission process. Through the quantum digital signature, the quantum security MAC check code and the post quantum cryptography signature mechanism, the security of the system facing the quantum computing threat is greatly improved, and meanwhile, the dynamic path selection combining the aging level, the multi-factor dynamic scoring model and the elastic target time window is adopted; according to the method, the optimal path and the target time can be dynamically adjusted according to the timeliness requirement, the path condition and the network state of the request, the path selection is more flexible, different timeliness requirements are met, the integrity and legality of the secret key are ensured by adopting a three-level verification mode, and meanwhile, when the network has a fault, the safety of the network is ensured. A standby path can be automatically switched and a problem node can be isolated.

The invention discloses an anti-quantum-attack smart park data sharing method and device and a medium, and the method comprises the steps: generating a digital signature public key and a digital signature private key through a system administrator according to an anti-quantum digital signature scheme, and generating a homomorphic encryption and decryption public key and a homomorphic encryption and decryption private key according to an anti-quantum homomorphic encryption scheme, an anonymous signature public key and an anonymous signature private key are generated through a certificate authority according to the digital signature scheme for resisting anonymity of the quantum signer; sending an access request message of the user to a system administrator so as to sign the access request message by using a private key with a digital signature and sending the signed access request message to the user; verifying the identity of the administrator based on the digital signature, signing the access request information by using a private key of an anonymous signature, sending the access request information to a system administrator to verify the identity of the user, and allowing the user to access after the identity of the user passes verification; a system administrator selects plaintext data to encrypt and generate a ciphertext, and sends the ciphertext to a data requester, so that the data requester performs homomorphic operation on the ciphertext to complete data security sharing.

The invention provides a verification method and device, and relates to the technical field of security, and the method comprises the steps: verifying a target object based on CMS data corresponding to the target object before the target object runs, and allowing the target object to run only when the verification is passed. The CMS data can comprise post-quantum digital signature information of the target object and corresponding post-quantum public key certificate information, and the post-quantum digital signature information comprises information obtained after the target object is signed by adopting a post-quantum public key algorithm and a post-quantum private key, related to the post-quantum public key algorithm, of the target object. And then, the quantum public key algorithm can resist quantum attacks, and a quantum computer cannot recover a post quantum private key through post quantum public key certificate information in the CMS data, so that post quantum digital signature information in the CMS data cannot be tampered, and tampering of a target object and a post quantum digital signature thereof is avoided. Therefore, unauthorized program codes or software can be prevented from being executed in the safe starting process.

The invention discloses an enhanced security digital signature method, system and device based on QC-MDPC and dual Hash, and a storage medium, and relates to the technical field of quantum digital signatures, the method comprises the following steps: based on security requirements and computing resources, selecting parameters to construct a parity check matrix, a disturbance matrix and a reversible permutation matrix, and selecting a Hash function and a decoding algorithm; generating a private key and a public key; carrying out Hash calculation on the message document based on the generated private key, and carrying out operation and decoding operation to generate a digital signature; calculating based on the digital signature and the generated public key, and judging whether the signature is valid or not; according to the method, quantum attacks can be resisted, the security of financial transactions, medical data, Internet of Things equipment communication and government affair information systems can be guaranteed, information is ensured to be real and complete, resources are reasonably utilized, and security support is provided for multi-industry digital transformation.

The application provides a centralized quantum key relay network and key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in the transmission process.The application greatly improves the security of the system when facing quantum computing threats through quantum digital signature, quantum secure MAC check code and post-quantum cryptography signature mechanism, simultaneously adopts dynamic path selection combined with time limit level, a multi-factor dynamic scoring model and an elastic target time window, can dynamically adjust the optimal path and the target time according to the timeliness requirement of the request, the path condition and the network state, is more flexible in path selection, meets different timeliness requirements, and further adopts a three-level verification mode to ensure the integrity and legality of the key, and when a network fault occurs, can automatically switch to a standby path and isolate a problem node.

The present invention relates to a method for optimizing the execution of the generation of a crystal-dilithium post-quantum digital signature a for a message M using a private key sk, the digital signature generation comprising: a) generating a polynomial masking vector y having coefficients less than a second predetermined value y1; b) calculating a first polynomial vector w=Ay; c) determining a second polynomial vector w1 and a third polynomial vector w0; d) generating a challenge c based on the message and the second polynomial vector w1; and e) forming a repudiation test comprising testing whether a test vector generated from the vector, the challenge and the private key satisfies a predetermined condition, whereby if the condition is not met, restarting the signature generation from step a); otherwise, generating a signature, wherein steps a), b), c), d), and e) are repeated until the condition is met.

Training an artificial intelligence model to categorize data by sensitivity and for applying the model to selectively protect sensitive portions of multimodal datasets. Sensitive training data can be obfuscated with synthetic noise or randomized errors to preserve confidentiality while enabling the model to learn patterns correlated with sensitivity. The trained model is validated on labeled data and can be refined as classification standards evolve. In operation, the classifier assigns sensitivity levels to data elements and directs tiered protection. Elements assigned to a higher relative sensitivity classification level are protected using post-quantum key establishment, for example a key encapsulation mechanism, combined with symmetric authenticated encryption of payloads, and associated metadata is authenticated using a post-quantum digital signature scheme. Less sensitive elements can be protected using conventional symmetric encryption for efficiency. This approach automates sensitivity classification, optimizes cryptographic resource allocation, and improves confidentiality and integrity for simulation and mission data.

The invention discloses a Falcon anti-quantum signature and block chain-based data security access control method, and relates to the technical field of data security, and the method comprises the following steps: S1, a trusted agent TA issues a global public parameter set Params of a system; s2, an access user Ui joins a system, and obtains a digital certificate Cerdei and a certificate hash through a trusted agent TA; s3, the access user Ui obtains the authorization token through the authorization verification node; s4, the access user Ui accesses and obtains target data in the cloud server through the authorization token, wherein the target data is encrypted data uploaded to the cloud server by the data owner DOj; according to the method, a Falcon anti-quantum digital signature algorithm is adopted in the processes of identity registration, access authorization and access token issuing, and it is ensured that an access control system is still kept safe and reliable in a future quantum computing environment. The token signature cannot be forged, the access process can be verified, and a long-term effective anti-quantum security guarantee is provided for a cross-domain and multi-node access scene.

The invention relates to the field of quantum computing, in particular to an anti-quantum-attack data protection method. According to the method, a configurable double-layer Hash protocol is provided for data protection, and the configurable double-layer Hash protocol is combined with a post-quantum digital signature algorithm to serve as second-layer Hash on the basis of standard SHA-3 Hash so as to enhance the defense capacity for quantum computing attacks. And dynamic selection can be carried out between a standard SHA-3 Hash layer and a post-quantum digital signature algorithm, so that the method not only can provide rapid Hash calculation in a scene with a low security demand, but also can provide additional anti-quantum attack protection in a scene with a high security demand. According to the method, the quantum attack resistance is improved, the adaptability of the Hash algorithm is enhanced, and a more efficient and safer encryption scheme is provided for practical application.

The invention discloses a quantum digital signature method and system for multi-receiver verification arbitration, and relates to the technical field of quantum digital signatures, secret key consumption is reduced from O (k2) magnitude to O (k) magnitude through a secret key synthesis technology, and under the same security parameter and message length, the secret key consumption of the scheme of the invention is reduced by at least two orders of magnitude compared with the existing scheme; based on the information theory security of the quantum key and the unconditional security of one-time hash / encryption, the scheme of the invention can effectively resist forgery attack and denial attack, and the security is strictly proved; the multiple receivers can interact with the arbiter at the same time and complete verification independently, the whole signature verification time of the system is greatly shortened, and the method is particularly suitable for large-scale quantum network application.

According to the secret key secure storage method, application and system of the HSS post-quantum digital signature algorithm, the combination of the cryptographic device, the high-strength symmetric encryption algorithm and the derivation algorithm is adopted to perform multi-level encryption processing on the secret key, so that the secret key is effectively prevented from being stolen or tampered in the storage and transmission process, and the security of the secret key is improved. LM-OTS and LMS key pair generation and use mechanisms related to a post-quantum algorithm are introduced, a solution is provided for dealing with the threat of future quantum computing to a traditional cryptographic system, a key state management mechanism with atomicity and consistency is used, and the exclusiveness and integrity of key use are guaranteed. A memory LMS key pool is designed, dynamic creation of LMS key pairs is supported, the number of keys can be flexibly adjusted according to actual requirements, and the flexibility of key management and the performance of state updating are improved. Safety management is performed on the state of the secret key, the number of use times of the secret key is judged in real time, the secret key is updated in time, effectiveness and safety of the secret key are ensured, and repeated use and leakage of the secret key are avoided.

The invention provides an identity processing method and device, and relates to the technical field of communication. The method comprises the following steps: receiving an authentication string sent by a first user and used for identity authentication; calculating an identification cryptographic algorithm public key of the first user based on the user identification of the first user; querying a post-quantum digital signature algorithm public key of the first user based on the identification password algorithm public key of the first user; and verifying the first identification signature in the authentication string according to the identification password algorithm public key of the first user, verifying the post-quantum signature in the authentication string according to the post-quantum digital signature algorithm public key of the first user, and determining that the identity authentication of the first user is successful after the two verifications are passed. By means of the technical means, the problem that identity processing safety cannot be guaranteed due to the fact that a quantum algorithm affects identity processing in the prior art is solved.

A blockchain public key storage optimization method based on post-quantum signature is disclosed. For the blockchain system with digital signature as the core, with the development of quantum computing, it is necessary to apply post-quantum digital signature algorithm to the blockchain. However, the current such signature has the problems of long public key and no key derivation function, resulting in redundant storage of the public key. In view of this phenomenon, a blockchain public key storage optimization method based on post-quantum signature is designed for the UTXO-based blockchain. The method is to increase the type field in the output script of the transaction, when the public key starts to be used, the public key registration process is carried out, and a type of Pubkey UTXO is generated. A public key script field is added in the transaction, when the public key needs to be called, the UTXO transaction hash and index of the corresponding public key are stored in the public key script, and then the public key value stored therein is called to perform signature authentication. When the public key is not needed, the Pubkey type UTXO is finally consumed when the public key is in an inactive state.

The application discloses a post-quantum digital signature key generation method based on AVX2 acceleration and matrix multiplication optimization, and comprises the following contents: on the basis of original coding, the parallelization optimization of signature compression and decompression process is realized by using the AVX2 instruction set, the efficiency of coding and decoding is significantly improved, and the method is particularly suitable for large-scale data processing scenes.A matrix multiplication optimization method for the algorithm is proposed, by only performing once matrix blocking, the recursive operation is avoided.Combined with the register optimization technology, the memory access is effectively reduced while the calculation accuracy is ensured, and the calculation efficiency in the signature generation process is significantly improved.The register optimization strategy is introduced in the matrix multiplication and addition operation, the calculation result is saved in the register as much as possible by reducing the memory access operation, so that the number of writing back to the memory is reduced, and the execution efficiency of the matrix operation is further improved, and the method has important significance for the efficient implementation of the post-quantum digital signature scheme.

The application relates to an identity authentication method and system. In the method, a claiming party determines an asymmetric digital signature algorithm and a post-quantum digital signature algorithm, generates algorithm identifiers corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, acquires a time-varying parameter, generates signature data according to the time-varying parameter and an identifier of a verifying party, signs the signature data by using the asymmetric digital signature algorithm to obtain a first signature, signs the signature data by using the post-quantum digital signature algorithm to obtain a second signature, generates an identity authentication string according to the algorithm identifiers, the signature data, the first signature and the second signature, and sends the identity authentication string to the verifying party to instruct the verifying party to perform identity authentication according to the identity authentication string. The method introduces the post-quantum digital signature algorithm capable of resisting quantum computing on the basis of traditional asymmetric password identity authentication, improves the security of communication parties in the identity authentication process, and can resist quantum threats to a certain extent.

The invention relates to data asset protection, in particular to an anti-quantum computing attack data asset protection system, which comprises a data encryption layer, a dynamic symmetric encryption algorithm pool technology is adopted, symmetric encryption algorithms are added into an algorithm pool, computing resource performance consumption indexes of the algorithms are marked, and corresponding algorithms are matched according to hardware performance of a current operating environment. Dynamically compensating the key length based on the security level coefficient of the algorithm to maintain the security strength, and carrying out encryption and decryption operation on the data block by adopting the matched algorithm; the key management layer is used for carrying out key management based on a complete key life cycle management mechanism, packaging keys by adopting a post quantum cryptographic algorithm, and realizing secure distribution of the keys; the identity authentication layer adopts an anti-quantum digital signature algorithm to realize identity authentication and integrity verification and is matched with a random number synchronization device based on a hardware clock to overlay and authenticate identities of the two parties; the method can effectively overcome the defects that in the prior art, anti-quantum safety is poor, and side channel attacks are difficult to resist.

The present application relates to an identity authentication method and system. The method comprises: a claimant determining an asymmetric digital signature algorithm and a post-quantum digital signature algorithm; generating an algorithm identifier corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; acquiring a time-varying parameter, and generating signature data on the basis of the time-varying parameter and an identifier of a verifier; using the asymmetric digital signature algorithm to perform signing on the signature data, so as to obtain a first signature; using the post-quantum digital signature algorithm to perform signing on the signature data, so as to obtain a second signature; on the basis of the algorithm identifier, the signature data, the first signature and the second signature, generating an identity authentication string; and sending the identity authentication string to the verifier, so as to instruct the verifier to perform identity authentication on the basis of the authentication string. On the basis of conventional asymmetric cryptographic identity authentication, the method introduces a post-quantum digital signature algorithm capable of resisting quantum computation, thereby enhancing the security of two communicating parties during identity authentication and being able to resist quantum threats to a certain extent.

Method for confirming ownership of digital assets based on hash algorithm and method for tracing to a source of digital assets based on hash algorithm are provided. Entities involved in confirming the ownership of digital assets include an original user, a CA authentication center and a digital asset authentication center. The process of confirming the ownership includes generating a one-time CA certificate by the original user, authenticating the digital assets by the digital asset authorization center and the original user, generating an ownership confirming document by the original user, creating a quantum digital signature by a three-party, and the like. The method for tracing includes generating subsidiary documents in real time, constructing a unique identity for a digital asset at an accessing moment, traceability analysis, and so on.

This invention relates to the field of quantum-resistant computing and cryptography, and discloses a hardware-accelerated parallel implementation method and system for quantum-resistant digital signature algorithms. The method includes: mapping a private key matrix to the conductance states of a resistive-switched non-volatile memory array; converting the message to be signed into an input vector and loading it into a row-driven circuit; performing matrix-vector multiplication in situ using the memory array, with the operational current obtained by a column-sensing circuit; performing analog-to-digital conversion, post-processing, and rejection sampling judgment on the current, and outputting the signature result. The system includes a central control module, a resistive-switched memory computing core array, a row-driven circuit module, a column-sensing and conversion module, and a post-processing operator cluster. By adopting the above technical solution, this invention can achieve high-performance, low-power, and low-latency parallel processing of quantum-resistant digital signatures, improving throughput and enhancing deployment feasibility in edge and mobile devices.

The invention discloses an identity authentication method and system based on a quantum cryptography technology, and relates to the technical field of quantum cryptography. Specifically, an identity authentication server verifies identity information of a sending end and generates a random number; encrypting the random number through a private key and then sending to a receiving end; the receiving end verifies the random number through the public key, generates a serial number and sends the serial number to the sending end; the sending end sends the serial number to a receiving end for verification; the transmitting end signs transmission data through a post-quantum digital signature technology, encodes the transmission data in a photon beam and sends the photon beam to the receiving end; the quantum polarization state of each photon is switched along with the change of the serial number; and a receiving end decodes the coded photon beam by using the measurement basis, and obtains transmission data by using the change of the quantum polarization state. According to the invention, the quantum cryptography technology is applied to meet the data transmission of the sending end and the receiving end, and reliable three-party authentication is realized.

The invention provides a safe batch post-quantum digital signature algorithm based on combined use of an arithmetic mask and a Boolean mask, and aims to solve the problems of low operation efficiency and side channel risk existing in a batch signature or parallel computing scene of an existing Dillithium algorithm. According to the algorithm, middle sensitive data and operation are subjected to mask processing, and leakage of side channel information such as power consumption and time sequence is effectively reduced. The algorithm comprises the key steps of generating a user message, processing a private key by using a mask decomposition technology, randomly generating a random vector for enhancing signature unpredictability, multiplying matrix vectors, preventing statistical leakage by using a sampling rejection technology, and carrying out security and efficiency demand optimization on the batch size. According to the method, the calculation efficiency is improved through the fast matrix multiplication algorithm, the zero point test technology is introduced, the safety and correctness of the algorithm in different environments are guaranteed, the signature generation efficiency is remarkably improved, and particularly, higher performance and safety are shown in multi-user and batch signature scenes.

The present disclosure according to at least one embodiment provides a quantum key distribution (QKD)-based quantum digital signature method using a trusted node, the QKD-based quantum digital signature method being performed by a trusted node. The method comprises sharing a first secret key with a message-sending node, sharing a second secret key with a message-receiving node, generating a first trusted-node signature by performing a partial QKD process together with the message-sending node, generating a second trusted-node signature by performing a partial QKD process together with the message-receiving node, and verifying a first message with the shared first and second secret keys and with the first and second trusted-node signatures.

The present invention proposes a loss-tolerant reference-frame-independent quantum digital signature method, which is applied to a quantum digital signature system. Quantum digital signatures have three characteristics: anti-forgery, non-repudiation, and transferability. A quantum digital signature scheme includes three parties, namely Alice, Bob, and Charlie. This method is divided into a distribution phase and a message phase. In the key distribution phase, a loss-tolerant reference-frame-independent protocol is used to generate keys, and then in the message phase, digital signatures are completed by using the generated keys. Considering the non-negligible state preparation error problem at the source end, we assume a virtual protocol to define the phase error rate and characterize it as the virtual bit error rate while establishing a realistic protocol. In the presence of state preparation errors, the signature rate of this protocol is less affected, and the performance of the system is better than that of the reference-frame-independent quantum digital signature protocol without using the loss-tolerant method.

This invention discloses an ultra-high-speed post-quantum cryptographic secure communication method for on-orbit intelligent agents, belonging to the field of communication technology. The method includes: generating an encryption key pair based on a post-quantum cryptographic algorithm and a signature key pair based on a quantum-resistant digital signature algorithm for each on-orbit intelligent agent node; recording the two public key information in a blockchain ledger through consensus; obtaining the receiver's public key information from the blockchain ledger, generating a session seed using a post-quantum key encapsulation method and encapsulating it into ciphertext, digitally signing the ciphertext-containing information using a quantum-resistant signature private key, and then sending it; upon receiving the information, the receiver verifies the signature, confirms the identity's legitimacy, and decrypts to obtain the session seed; based on the session seed, both communicating parties generate a one-time session key and transmit business data with symmetric encryption; after communication ends, a communication audit log is generated based on the transmitted information. This invention improves the security of on-orbit intelligent agent communication using the above method.

The application provides a lattice optimization-based anti-quantum blockchain protection method and system, and belongs to the technical field of blockchain security. In view of the problem of insufficient security of the existing blockchain in a quantum computing environment, the application constructs a lattice mapping system based on an LWE problem, including: S1, setting a lattice space dimension and a modulus, generating a low-norm short vector in a finite field as a user private key vector; S2, obtaining transaction information, dynamically generating a lattice basis matrix corresponding to the transaction uniquely through a hash algorithm, injecting a discrete Gaussian noise vector, and performing lattice encryption operation based on the lattice basis matrix, the user private key and the discrete Gaussian noise vector to generate an anti-quantum digital signature; S3, performing infinite norm verification based on the lattice basis matrix, the user private key and the discrete Gaussian noise vector to determine whether the signature is tampered with. The application realizes one-time password through dynamic lattice basis and adaptive noise, effectively resists quantum attacks and has high calculation efficiency, and is suitable for blockchain transfer and identity authentication.

The application relates to the technical field of distributed machine learning and network security, in particular to a quantum-resistant federated learning framework and a training security processing method. The quantum-resistant federated learning framework comprises at least one server and at least one client corresponding to each server; and a federated training scheduling module, a post-quantum key encapsulation module, a post-quantum digital signature algorithm module, a symmetric encryption protection module and a security verification and aggregation module respectively arranged on each server and each client. The framework can integrate the post-quantum secure communication capability by extending the gRPC transmission layer of Flower, improve the message confidentiality, message integrity, identity authentication and the continuity, security and controllability of the multi-round training process of the federated learning system under the threat of quantum computing, and be suitable for distributed collaborative modeling scenes such as medical treatment, finance, government affairs and industrial internet which have high requirements for communication security and long-term password strength.

The invention relates to a method for protecting the performance of a verification of a post-Crystal-Diithium quantum digital signature [sigma] of a message M, comprising a challenge seed, a test vector z and a polynomial hint vector h, generated using a secret key sk = ([rho], K, tr, s1, s2, t0), said digital signature verification verifying said digital signature [sigma], said message M and a public key pk = ([rho], K, tr, s1, s2, t0), said digital signature verification verifying said digital signature [sigma], said message M and said public key pk = ([rho], K, tr, s1, s2, t0). The invention relates to a method for verifying one of conditions P1, P2 and P3 (t1, t1) as input and comprising the following steps: ensuring that a fault attack intended to verify one of the conditions P1, P2 and P3 does not result in a signature accepting forgery, where: P1: ct1.2 d = 0, and.

The invention discloses a block chain public key storage optimization method based on post-quantum signature. For a block chain system taking a digital signature as a core, along with the development of quantum computing, it is necessary to apply a post-quantum digital signature algorithm to a block chain. However, in the current signature, the public key is too long and does not have a key derivation function, so that the public key can be subjected to redundant storage. For the phenomenon, the block chain public key storage optimization method based on the post quantum signature is designed for the block chain based on the UTXO class. According to the method, a type field is added in an output script of a transaction, when a public key starts to be used, a public key registration process is carried out, and a class of UTXO of which the type is Pubkey is generated. A public key script field is added in a transaction, when a public key needs to be called, UTXO transaction hash and an index corresponding to the public key are stored in a public key script, and then a public key value stored in the public key script is called for signature authentication. And when the public key is not needed and enters an inactive state, finally consuming the UTXO of the Pubkey type.

Training an artificial intelligence model to categorize data by sensitivity and for applying the model to selectively protect sensitive portions of multimodal datasets. Sensitive training data can be obfuscated with synthetic noise or randomized errors to preserve confidentiality while enabling the model to learn patterns correlated with sensitivity. The trained model is validated on labeled data and can be refined as classification standards evolve. In operation, the classifier assigns sensitivity levels to data elements and directs tiered protection. Elements assigned to a higher relative sensitivity classification level are protected using post-quantum key establishment, for example a key encapsulation mechanism, combined with symmetric authenticated encryption of payloads, and associated metadata is authenticated using a post-quantum digital signature scheme. Less sensitive elements can be protected using conventional symmetric encryption for efficiency. This approach automates sensitivity classification, optimizes cryptographic resource allocation, and improves confidentiality and integrity for simulation and mission data.