8 results about "Rekeying" patented technology

This invention relates to the field of data encryption transmission technology, specifically disclosing a dynamic encryption method and system for secure transmission. The method includes: first, acquiring input parameters of the data to be transmitted and generating an initial encryption key; processing the data to be transmitted in blocks and determining the importance level of each data block; performing layered initial encryption transmission on each data block according to its importance level; collecting dynamic status parameters of the transmission link to generate key update parameters, adjusting the current encryption key to obtain an updated encryption key; detecting whether there are security risks in the transmission link, and if so, using an upgraded encryption algorithm and an updated encryption key to re-encrypt the incomplete data blocks and continue transmission through a backup encryption link; finally, decrypting the encrypted data blocks to obtain the original data blocks and performing integrity verification. This invention effectively solves the problems of easy key leakage, insufficient security, and low encryption efficiency in traditional static encryption methods.

This invention discloses a method for updating a vehicle-mounted ECU security key and a computer storage medium. The method includes: an upper-level computer using the ECU's public key to perform asymmetric encryption on a business key to obtain ciphertext; signing the ciphertext using the upper-level computer's private key; concatenating and packaging the ciphertext, signature, and upper-level computer public key and sending it to the ECU; the ECU unpacking the received data to obtain the ciphertext, signature, and upper-level computer public key; verifying the upper-level computer public key; if the verification is successful, verifying the signature using the upper-level computer public key; if the signature verification is successful, decrypting the ciphertext using the ECU's private key; updating the vehicle-mounted ECU security key based on the decryption result; if either the upper-level computer public key or signature verification fails, sending a key update failure message to the upper-level computer and ending the ciphertext update. This invention features a simple algorithm and avoids the risk of brute-force key reading at the ECU, thus improving the security of in-vehicle terminal information.

Embodiments of the present application disclose a key updating method and device, equipment and computer readable storage medium. The method is applied to a mobile terminal, and the method comprises the following steps: performing matching operation on a received updating key and an existing key to obtain a matching result; if the matching result indicates that the updating key and the existing key are not the same key, updating the existing key to a history key and updating the updating key to the existing key; and if the matching result indicates that the updating key and the existing key are the same key and the mobile terminal comprises the history key, not updating the existing key and deleting the history key. The history key is updated and stored, so that the mobile terminal can use the history key to decrypt previous encrypted information, thereby ensuring the correctness of the decryption process of the mobile terminal.

The present specification discloses an encryption method, system, device and medium for multi-subsystem data interaction, which encrypts the session key through an asymmetric encryption algorithm, and encrypts the interaction data to be transmitted between two subsystems according to different security levels through a symmetric encryption algorithm; in the process of subsystem data interaction, the life cycle of each current session key is monitored, when the key switching condition is triggered, the existing connection is maintained with the current session key, a candidate session key is generated, and after the current session connection is ended, the candidate session key is switched to, when the update times of the candidate session key reach a preset threshold, the next round of session key is distributed to the subsystem. The method can not only ensure the security of key distribution and the confidentiality of data transmission, but also maintain low delay and high throughput in a high concurrency scenario, and does not need to interrupt the service in the key update process, so that the system runs stably and reliably, and the resource allocation is reasonable and efficient.

The application discloses a kind of unmanned aerial vehicle cluster decentralized inter-group key management method and system based on attribute encryption, which comprises the following steps: S1, initialization and main public key generation;S2, unmanned aerial vehicle attribute private key construction;S3, attribute encryption based on access policy and group session key encapsulation;S4, group session key decryption and recovery based on attribute private key;In addition, when unmanned aerial vehicle joins, exits or is revoked, the method also updates the key through the node revocation and key update steps, so that unauthorized nodes cannot obtain historical keys and cannot decrypt subsequent data, realizing the rapid trusted update of key.The application avoids the single point failure problem through the decentralized key generation and verification mechanism, combines the verifiable and tamper-proof characteristics of blockchain, and the attribute-based access control and dynamic key update strategy, improves the efficiency and credibility of inter-unmanned aerial vehicle cluster cooperative communication, and guarantees the security of data sharing in heterogeneous unmanned aerial vehicle network environment.

This invention discloses a dynamic key negotiation method for UAVs and ground stations, relating to the field of UAV communication security technology. The method includes: establishing an initial communication link by performing two-way authentication between the UAV and the ground station through a preset secure guidance channel; real-time acquisition of link transmission quality parameters and flight status parameters, and hashing the standardized parameters using the SHA-256 algorithm to generate a key generation factor, and collaboratively calculating the session key based on a lightweight algorithm, wherein the number of encryption rounds is dynamically adjusted according to the UAV's remaining battery power; after verifying key consistency through key digest comparison, both parties transmit data through the communication link, monitoring the link security status and flight status in real time during transmission, initiating dynamic key updates when preset trigger conditions are met, and employing a dual-key parallel mechanism to ensure the continuity of critical data transmission. This invention effectively balances encryption strength and UAV resource constraints while ensuring high security.

Communications between computing devices connected via a network can be secured with digital keys (e.g., encryption keys). The key may be updated based on states of a state machine. The computing device may receive a key update command to update a key value. In response to the key update command, the computing device may update the key value upon determining that the computing device is in a first state based on state data defining the first state, the state data including the key value, a machine mode specifying a current operating environment, and a lock value specifying that memory storing the key value is one of locked or unlocked.

The application discloses a multi-party secure electronic signature and certificate authentication method based on key component cooperation, and relates to the technical field of quantum technology.The steps of the method comprise the following steps: according to historical attack modes and key update periods, a prediction learning model containing short, medium and long periods is established, the comprehensive failure probability of each key component is outputted to determine the distribution weight of each key component; a cooperation gateway is deployed through a load balancer, and the distribution weight of each key component is dynamically adjusted in response to a preset instruction, while the identity verification strength in the cooperation signature process is dynamically adjusted in combination with a load parameter; a signature request is initiated by a user, a space index architecture is introduced, the protocol fingerprint of the key component is analyzed, the signature trigger area where each key component is located is identified in real time, and the entropy change rate is obtained, and in combination with the signature rate of each authentication party within a unit time, the encryption mode of the blockchain server for certificate authentication is dynamically adjusted; and the application is suitable for high-complexity business scenarios and improves the success rate of signature.