79 results about "Quantum signature" patented technology

The invention provides a quantum security signature method which can be applied to the technical field of quantum communication. The quantum security signature method comprises the following steps: in response to a received quantum security signature request for target plaintext data, performing risk assessment on the quantum security signature request according to a preset security policy, and determining a risk level corresponding to the quantum security signature request; determining a target post-quantum signature algorithm and an algorithm parameter set corresponding to the quantum security signature request according to the risk level; according to the algorithm parameter set, performing dynamic function reconstruction on the computing resource for executing the signature operation to obtain the reconstructed computing resource; and performing quantum security signature on the target plaintext data by using the reconstructed computing resources and a target post-quantum signature algorithm to obtain a quantum security signature result. The invention further provides a quantum security signature device and equipment, a storage medium and a program product.

Data compression with quantum-resistant intrusion detection, that measures in real-time the probability distribution of an encoded data stream and analyzes entropy characteristics across multiple bit-scale windows to detect both classical and quantum-generated intrusions. The system compares the probability distribution to a reference probability distribution and uses statistical algorithms to determine divergence between distributions while simultaneously analyzing entropy cascade patterns characteristic of quantum computing sources. When divergence exceeds configured thresholds or quantum-generated characteristics are detected, the system generates intrusion alerts identifying the threat type. The system comprises encoding and decoding machines, an intrusion detection engine that performs multi-scale entropy analysis, a codebook training engine that creates quantum-resistant codebooks using entropy-stratified training algorithms, and databases including a quantum signature database storing compression patterns of known quantum algorithms. The codebook training engine adaptively retrains encoding algorithms upon detecting new quantum patterns, maintaining system effectiveness against evolving quantum threats.

The invention belongs to the technical field of information security, and discloses a hybrid collaborative signature method fusing SM2 and a post-quantum cryptography algorithm, and the method comprises the steps that a client generates a first session key based on a first post-quantum signature key pair and a first post-quantum asymmetric encryption and decryption key pair, generating a first public key ciphertext corresponding to the first public key parameter based on the first session key; the server decrypts the first public key ciphertext based on the first session key, and applies for obtaining a digital signature certificate after generating a common public key through an SM2 algorithm; performing collaborative signature according to a second session key generated by a second post-quantum signature key pair and a second post-quantum asymmetric encryption and decryption key pair, calculating by the server to obtain a first signature component intermediate value, and calculating by the client to obtain a second signature component; the client calculates a target signature value according to the second signature component, the first signature component intermediate value ciphertext and the digital signature certificate; through the method, the safety of the hybrid collaborative signature is improved.

The invention provides an anti-quantum cryptography application method and device based on an FIDO 2.0 standard and a related product, and relates to the technical field of information security. According to the method, on the basis of an FIDO2.0 standard specification, two groups of keys, namely a traditional key and an anti-quantum key, are generated by using cryptographic algorithm key derivation through the same random number seed; the two groups of keys are tightly coupled to serve as a composite key for FIDO authentication to be used for a subsequent authentication signature process, so that the anti-quantum security is enhanced; when the composite signature is used, the anti-quantum signature covers the traditional password signature, so that a strong dependency chain of two password algorithms is formed, and the security authentication strength is enhanced; when the signature is verified, the composite public key is used for verifying the traditional signature and the anti-quantum signature, authentication can be passed only when the traditional signature and the anti-quantum signature pass, double security protection of the traditional password technology and the anti-quantum password technology is achieved, and the attack risk of the traditional password in quantum computing is effectively resisted.

The invention provides a safety analysis method based on a SelfTargetSIS problem. The method comprises the following steps: modeling a solution target of the SelfTargetSIS problem into explicit search on a message set, an allowable vector set and a challenge vector set; estimating a first search complexity in the classic model under a random oracle model; estimating a second search complexity in the quantum model under a random oracle model; and determining the minimum value of the first search complexity and the known classical optimal attack complexity as the effective attack complexity under the classical model, and determining the minimum value of the second search complexity and the known quantum optimal attack complexity as the effective attack complexity under the quantum model, thereby performing security evaluation on the anti-quantum signature. According to the method, an explicit search path based on a message set, an allowable vector set and a challenge vector set is supplemented and quantified, and the attack cost in the real world can be reflected more comprehensively.

The invention relates to the technical field of digital information transmission security, and discloses an embedded firmware PQC and SM2 digital signature hybrid verification method, which comprises the following steps of: analyzing an SM2 public key and a signature value from a message, retrieving a PQC signature data block, constructing a cascade anchoring abstract, responding to the retrieved PQC signature data block, extracting the data block, executing hash operation to generate a PQC abstract, and verifying the PQC abstract. After the load abstract and the PQC abstract are cascaded according to bits, a final verification abstract is calculated; elliptic curve verification is executed based on the SM2 public key, the signature value and the final verification abstract, PQC enhanced verification is executed when verification passes, the integrity of post-quantum signature data is internalized into a mathematical precondition of signature verification of a national cryptographic algorithm through a nested abstract anchoring mechanism, and the risk that a mixed signature protocol is degraded and attacked is avoided.

The invention discloses an anti-quantum-attack smart park data sharing method and device and a medium, and the method comprises the steps: generating a digital signature public key and a digital signature private key through a system administrator according to an anti-quantum digital signature scheme, and generating a homomorphic encryption and decryption public key and a homomorphic encryption and decryption private key according to an anti-quantum homomorphic encryption scheme, an anonymous signature public key and an anonymous signature private key are generated through a certificate authority according to the digital signature scheme for resisting anonymity of the quantum signer; sending an access request message of the user to a system administrator so as to sign the access request message by using a private key with a digital signature and sending the signed access request message to the user; verifying the identity of the administrator based on the digital signature, signing the access request information by using a private key of an anonymous signature, sending the access request information to a system administrator to verify the identity of the user, and allowing the user to access after the identity of the user passes verification; a system administrator selects plaintext data to encrypt and generate a ciphertext, and sends the ciphertext to a data requester, so that the data requester performs homomorphic operation on the ciphertext to complete data security sharing.

The invention discloses a key management method based on an algorithm and a QKD, and relates to the technical field of data security and a system, the method comprises the following steps: a key management center KMC generates global public parameters; after the KMC signs the global public parameters, the global public parameters are published to a block chain network; obtaining an anti-quantum identity certificate sum by a device node; and constructing secure communication; and dynamically updating and generating a session key according to the shared key; and performing communication on the basis; a digital identity certificate signing and issuing mechanism based on a post-quantum signature algorithm ML-DSA is uniformly signed and issued by a key management center, and uplink certificate storage is performed in combination with a block chain network. The mechanism ensures that the certificate cannot be tampered and can be traced, meanwhile, the defense capability for key source counterfeiting and tampering attacks in the quantum computing environment is remarkably improved, the limitation of traditional centralized CA in the aspects of credibility and transparency is broken through, and the mechanism is suitable for a distributed infrastructure environment with high identity management requirements.

The application discloses a key exchange method and device, equipment and storage medium, and relates to the technical field of information security, and comprises the following steps: constructing a notification message and sending the notification message to a message responder, so that the message responder returns a response message according to the notification message; constructing a first post-quantum key exchange notification and sending the first post-quantum key exchange notification to the message responder, so that the message responder constructs a first key exchange response and sends the first key exchange response to the message initiator; generating a first post-quantum signature result, and constructing a second post-quantum key exchange notification and sending the second post-quantum key exchange notification to the message responder, so that the message responder receives the second post-quantum key exchange notification, generates a second post-quantum key ciphertext, and constructs a second key exchange response and sends the second key exchange response to the message initiator; and performing identity authentication between the message initiator and the message responder. The application realizes quantum security of key exchange by constructing a post-quantum key exchange notification by using a post-quantum public key algorithm, and realizes key exchange and identity authentication between the message initiator and the message responder.

This application discloses a method, apparatus, and storage medium for disaster recovery data synchronization verification based on quantum key distribution. The method includes: establishing an initial quantum session key shared by the source and disaster recovery ends through a quantum key distribution channel, and generating a byte offset table; processing the data to be synchronized using a content-driven variable-length block and quantum random mask algorithm to obtain a quantum fingerprint data block and a data digest; performing quantum signature on the data digest using the quantum session key, and embedding the signature value into the data block according to the byte offset table to form a watermarked data block; generating a semantic fingerprint and a two-factor binding credential; constructing a synchronization data packet containing the watermarked data block, semantic fingerprint, binding credential, and historical chain node values, and sending it to the disaster recovery end for verification; and updating the disaster recovery end data, synchronization log chain, and quantum key chain after successful verification. This application ensures the immutability and traceability of the data synchronization process through watermark embedding, semantic fingerprinting, and a two-chain structure, achieving secure transmission of disaster recovery data.

The application discloses a kind of based on file data tamper-proof security management system and method, comprising the following steps: step one: original file data and file access behavior log information are collected, and content fragmentation processing is carried out;Step two: based on file data segment set and file access behavior log information, file access heterogeneous graph is constructed;Step three: file access heterogeneous graph is input to improved GATv2 model, and the final embedding vector of each node is generated;Step four: based on the final embedding vector of each node, generate multiple logic copies, generate corresponding quantum signature value and form chain signature fingerprint record;Step five: record current access track, and based on Soft-DTW, alignment analysis is carried out;Step six: calculate current quantum signature value and compare with chain signature fingerprint record.The application fuses improved GATv2 model and quantum signature technology, realizes file data tamper-proof and trusted audit.

This invention provides a hybrid signature method and system based on quantum key distribution and PUF, belonging to the field of information security technology. The method includes: generating a quantum key through a quantum key distribution protocol and generating a derived key seed based on a physically non-cloning function, while simultaneously configuring a trusted region for location and timing; acquiring location and timing information and generating location and timing data; generating a dynamic root key and deriving classical signature key pairs and post-quantum signature key pairs; preprocessing the message to be signed and the location and timing data, matching hierarchical security policies, and selecting the corresponding signature method to generate a signature data packet; during the signature verification process, verifying the location and timing data for signature validity and legality, and verifying the signature result using the corresponding verification method selected according to the hierarchical security policy. This invention achieves dynamic generation of signature keys and hierarchical security policy scheduling, balancing digital signatures in terms of quantum attack resistance, device binding capability, and computational efficiency.

The invention discloses a virtual computer network switch system, which comprises a physical resource isolation layer, a virtual computer network switch layer and a virtual computer network switch layer, wherein the physical resource isolation layer is used for dividing independent hardware channels through an FPGA (Field Programmable Gate Array) network card, binding tenants, establishing an encryption tunnel by utilizing quantum key distribution, and distributing resources by combining vGPU (Virtual Graphics Processing Unit) photon switching and a dynamic scheduler; after the virtual network abstraction layer undertakes resources, VXLAN and Geneve configuration are generated and verified in a formalized mode through a natural language intention, a neural morphological topology mapping virtual machine is constructed to be a neuron node, minimum permission communication is achieved through synaptic connection, and meanwhile cross-tenant traffic is subjected to quantum encryption; the intelligent layer deploys a GAN simulation attack test and optimizes a defense strategy, and dynamically adjusts a micro-segmentation rule and encryption strength through digital twin rehearsal configuration change and reinforcement learning; and the security service layer stores the configuration as an alliance chain smart contract, realizes change traceability through multi-signature verification, adopts Lattice cryptography and quantum signature to resist quantum attacks, and combines UEBA to continuously evaluate operation risks and dynamically adjust permissions.

The application discloses a property data sharing method and system based on a quantum key AI writing large model, comprising the following steps: S1, collecting property data, generating a dynamic key by quantum key distribution, and performing first encryption on sensitive fields; S2, performing second encryption by combining the dynamic key with the AES-256 algorithm, and storing in the Dream database; S3, constructing a user role key permission level to realize hierarchical permission control; S4, receiving user complaints and service requests, calling an AI writing large model to generate a structured report and performing double encryption; S5, attaching an access boundary token to the encrypted report, generating a shared data digest and uploading to the Dream transmission database; S6, transmitting the shared data digest to the property terminal, calling an AI clustering analysis to generate a credit evaluation; S7, performing quantum signature verification on the evaluation result, and encrypting and distributing to the supervision platform and the property terminal. The application realizes data full-process encryption, intelligent generation and safe sharing, and improves safety, efficiency and collaborative ability.

The invention relates to the technical field of communication security, and discloses an anti-quantum classical channel authentication method, device, equipment and medium, and the method comprises the steps: detecting whether the communication is established for the first time between transmitting end equipment and receiving end equipment which carry out quantum signal transmission; if the communication is established for the first time, authenticating a classical channel between the sending end equipment and the receiving end equipment by using an anti-quantum signature; if the communication is not established for the first time, generating a message verification code based on a key in an authentication quantum key pool, and authenticating a classical channel between the sending end equipment and the receiving end equipment; and after the classical channel authentication is passed, obtaining a quantum key, and storing the quantum key into an encryption quantum key pool and an authentication quantum key pool. Through the method and the device, the technical problems that in the prior art, key management is complex, a traditional signature algorithm is easily cracked by a quantum computer, and the security requirement of future information infrastructure is difficult to meet are solved.

The invention discloses a Falcon anti-quantum signature and block chain-based data security access control method, and relates to the technical field of data security, and the method comprises the following steps: S1, a trusted agent TA issues a global public parameter set Params of a system; s2, an access user Ui joins a system, and obtains a digital certificate Cerdei and a certificate hash through a trusted agent TA; s3, the access user Ui obtains the authorization token through the authorization verification node; s4, the access user Ui accesses and obtains target data in the cloud server through the authorization token, wherein the target data is encrypted data uploaded to the cloud server by the data owner DOj; according to the method, a Falcon anti-quantum digital signature algorithm is adopted in the processes of identity registration, access authorization and access token issuing, and it is ensured that an access control system is still kept safe and reliable in a future quantum computing environment. The token signature cannot be forged, the access process can be verified, and a long-term effective anti-quantum security guarantee is provided for a cross-domain and multi-node access scene.

The embodiment of the application provides a hybrid signature method and system based on quantum keys and PUF, and belongs to the technical field of information security. The method comprises the following steps: generating quantum keys through a quantum key distribution protocol, and generating a derived key seed based on a physically unclonable function, while completing the configuration of a trusted area of positioning and timing; acquiring positioning and timing information and generating positioning and timing data; generating a dynamic root key, and deriving a classical signature key pair and a post-quantum signature key pair; preprocessing the to-be-signed message and the positioning and timing data, matching a hierarchical security strategy, selecting a corresponding signature mode to generate a signature data packet; in the signature verification process, verifying the signature and the legality of the positioning and timing data, and verifying the signature result according to the corresponding signature mode selected according to the hierarchical security strategy. The application realizes dynamic generation of signature keys and scheduling of a hierarchical security strategy, and balances the anti-quantum attack ability, device binding ability and calculation efficiency of digital signature.

This invention relates to a post-quantum identifier signature generation method and system based on symmetric cryptographic primitives. First, based on given security parameters, a master key is obtained, including a master public key and a master private key. Then, based on a given user identity and the master private key, a user private key is generated. Based on the generated user private key and the message, a signature value is obtained. Finally, a verifier performs a zero-knowledge proof on the signature value based on the given message; if successful, the signature is correct; otherwise, the signature is incorrect. Compared with existing technologies, this invention has the following advantages and beneficial effects: With the development of post-quantum signature technology, scholars have proposed lattice-based signature algorithms and homology-based signature algorithms, but no one has yet proposed a post-quantum identifier signature based on symmetric cryptographic primitives. It offers high security, relying on the security of symmetric cryptographic algorithms, without relying on difficult problems such as the RSA problem to construct the signature, requiring fewer cryptographic primitives and offering higher security. The generation of this identifier signature meets post-quantum security requirements.

The invention discloses a charging pile energy storage system multi-device cooperative control method based on edge calculation, and the method comprises the steps: collecting three types of heterogeneous data: high-frequency current, battery expansion force and user behavior interval vector, achieving microsecond clock synchronization through quantum entanglement photon pairs, and obtaining synchronized multi-modal data; generating a differentiable causal mask matrix based on a battery expansion kinetic equation, and driving the graph convolutional network to extract a 128-dimensional causal feature vector of the multi-modal data; according to the multi-modal data and the causal feature vector, adopting zero knowledge range proof and time decay type Shapley value double-layer verification equipment credibility, and generating a 50-byte control instruction with a quantum signature and a causal weight; and selecting an optimal route based on a network fractal dimension, verifying a quantum signature and a causal weight threshold by an equipment end, then executing voltage control, detecting a current deviation in real time, and triggering variational mode decomposition purification and sandbox isolation. According to the scheme, the fault prediction accuracy is improved, and an edge cooperative control normal form is provided for the energy internet.

The invention relates to a certification authority device (22) configured to: receive a public key message from an subject device, the public key message comprising a public key set, comprising a post-quantum public key related to a respective post-quantum cryptographic algorithm, a pre-quantum public key (18) related to a respective pre-quantum cryptographic algorithm, generate a certificate set according to a selected certificate set type of a group of supported certificate set types, the certificate set comprising at least one certificate, wherein the at least one certificate comprises the post-quantum public key and a post-quantum signature and / or the pre-quantum public key (18) and a pre-quantum signature; receive a first certificate request message (24) comprising a first request to provide a first certificate set (26) according to a first certificate set type; send a first certificate response message (34) comprising the first certificate set (26); receive a second certificate request message (36) comprising a second request to provide a second certificate set (30) according to a second certificate set type different from the first certificate set type; and send a second certificate response message comprising the second certificate set (30) according to the second certificate set type.

In a method for securing the authenticity of digital data, data digitally signed with a pre-quantum signature is considered, and the method comprises the steps of generating a timestamp and digitally signing the pre-quantum signature together with the timestamp using a post-quantum signature.

The invention discloses a quantum multi-proxy blind signature method and device capable of achieving disordered signature, and belongs to the technical field of quantum cryptography. The quantum multi-proxy blind signature method capable of achieving disordered signature comprises the steps that a message owner carries out blind processing on a message through a secret key, and a first quantum message sequence is obtained; the message owner carries out interception-avoiding processing on the first quantum message sequence to obtain a new quantum message sequence; the message owner sends the new quantum message sequence to a plurality of proxy signers for signature processing to obtain a quantum signature sequence, and the quantum signature sequence is sent to a message verifier; the message verifier decrypts the quantum signature sequence and compares the quantum signature sequence with the first quantum message sequence; and the message verifier sends the verified message to the message receiver. According to the method, the characteristic of combining multiple proxy signatures and blind signatures is adopted, so that an original signer can entrust multiple proxy signers to sign, and the signature process is safer.

The application discloses a kind of compatible elliptic curve and adaptive transaction processing mechanism of anti-quantum signature, the mechanism is according to the size of transaction data list in transaction request to dynamically select the signature type of transaction, when the size of transaction data list meets the minimum required quantity of elliptic curve, signature information includes V value, R value and S value in elliptic curve signature;When the size of transaction data list meets the minimum required quantity of anti-quantum, signature information includes the public key of anti-quantum signature.The mechanism can be encapsulated according to the signature information of transaction to support the transaction structure of heterogeneous signature, the transaction structure includes signature information and unsigned data, and can select verification algorithm according to the type of heterogeneous signature.The adaptive transaction processing mechanism of the application can be compatible with elliptic curve signature and anti-quantum signature, ensure the forward compatibility with existing blockchain system, support the transition of different types of signature algorithm.

This invention relates to the field of quantum computer technology, specifically to a quantum-resistant signature method, system, and electronic device for communication between two terminals. In this application, the public commitment value is obtained by XORing the initial commitment values ​​to be verified of the two terminals. Each terminal's initial commitment value is obtained by homomorphic hashing the signature calculation result of the public key information stored in the terminal's private key and encryption based on the commitment key. This effectively guarantees the confidentiality and randomness of the public commitment value. The process only requires the two terminals to interact and share the initial commitment value to be verified. Compared to conventional data encryption, transmission, and decryption operations, this reduces the number of data transmissions and improves the effectiveness of signature verification.

The invention relates to a quantum key distribution and anti-quantum signature secure fusion method, which comprises the following steps: two communication parties initialize a system and establish a communication channel, establish a data channel for transmitting public information, and complete physical synchronization of a quantum channel for transmitting quantum states, and the two communication parties distribute the quantum states through the quantum channel, a shared quantum key is obtained on a data channel through basis vector comparison, information coordination and privacy amplification, two communication parties obtain a session working key for data encryption through a key derivation function based on the shared quantum key, a sender encrypts plaintext data by using the session working key and a symmetric encryption algorithm, and the encrypted plaintext data is transmitted to a server. And S105, the ciphertext is transmitted to a receiver through a data channel, the receiver carries out decryption by using the same session working key, and according to a preset strategy, S103 to S105 are repeatedly executed to update the session working key and carry out secure erasure on an invalid old key.

The invention belongs to the technical field of message encryption communication, and discloses a message encryption method and system based on a quantum key, and the method comprises the steps: a sender carries out the quantum signature processing of an information abstract through a first key, obtains signature information, binds the signature information with a message to form an encrypted message, and transmits the encrypted message through an IEC 104 protocol channel; the receiver encrypts the signature information by using the second key to obtain encrypted verification information, and the arbiter obtains an encrypted verification result based on the encrypted verification information; and the receiver verifies the signature information based on the encryption verification result, and if the verification is passed, the encrypted message corresponding to the signature information is valid. Before an IEC 104 protocol message is sent, a sender generates unique signature information by using a quantum signature technology, the signature information is bound with the message so as to ensure the security of the message in a transmission process, a receiver verifies the signature information in combination with an arbiter after obtaining the message so as to verify the identity of the sender and the integrity of the message, and the security of communication is effectively improved.

The present disclosure is for performing an arbitrator-based quantum signature by using a single photon without using a direct connection channel between a transmitter and a receiver in a communication system. The method performed by a first device may comprise the steps of: performing an initial access procedure with a base station; establishing a connection with the base station; transmitting capability information to the base station; establishing a quantum channel with a third device for a quantum signature with a second device; and transmitting, to the third device through the quantum channel, request information including at least one quantum state message encrypted by using a secret symmetric key that is shared between the first device and the third device, as information for requesting generation of signature information for the quantum signature.

The invention discloses a remote access handshake method, device and equipment based on dual anti-quantum protection and a medium, which are applied to a client and relate to the field of encrypted communication, and the method comprises the following steps: sending a connection request to a server, and setting a corresponding authentication protocol according to a quantum authentication identifier fed back by the server and an anti-quantum authentication key exchange suite; performing handshake with the server side based on the authentication protocol and the anti-quantum authentication key exchange suite, if handshake succeeds, sending a certificate anti-quantum authentication protocol request to the server side, and analyzing anti-quantum information fed back by the server side; performing anti-quantum verification on a target certificate fed back by the server for the first time through the obtained preset anti-quantum signature algorithm, the server anti-quantum public key and the certificate signature value, and performing subsequent communication after the verification is passed; and if the handshake fails, ending the communication with the server. Therefore, after conventional anti-quantum key exchange handshake is completed, anti-quantum signature verification can be supplemented in a targeted manner, and double anti-quantum protection is realized.

The present disclosure relates to an apparatus and method for verifying a false disavowal of a recipient on the basis of a judgement of an arbitrator in an arbitrator-based quantum signature technique. Specifically, the present disclosure relates to an apparatus and method for a quantum signature technique using unique properties of quantum mechanics. The present disclosure relates to an apparatus and method wherein, in a quantum signature technique for non-repudiation, authentication, and forgery prevention of message information transmitted between a sender and a recipient, an arbitrator may intervene to determine a false disavowal of the recipient in a dispute situation where even though Bob, who is a verifier of signature information, receives correct message and signature information and no problem occurs in a verification process, Bob falsely claims to have received incorrect message and signature information from the sender and disavows the signature.