221 results about "Rekeying" patented technology

The invention discloses a data encryption and dynamic key management method based on a quantum security protocol, and the method comprises the steps: 1, selecting an initial quantum random seed and a classical entropy source seed, and generating a key at an initial moment; at each moment, forming an update increment through a nonlinear chaos increment and a fractal function, constructing a key update function, and updating the key; 2, preprocessing the original message into an integer vector; constructing a dynamic transformation matrix by using a secret key at the current moment, sampling from multi-dimensional Gaussian distribution to obtain a short vector, and constructing a public random matrix; encrypting the integer vector by combining the dynamic transformation matrix, the short vector and the public random matrix to obtain a ciphertext; and step 3, decrypting by using the secret key at the current moment and the dynamic transformation matrix which are synchronously updated, and recovering the original message. The invention provides a data encryption scheme with high security and quantum attack resistance.

The invention relates to the technical field of intelligent control, in particular to a dynamic encryption-based data link security management and control system and method.The dynamic encryption-based data link security management and control system comprises a dynamic encryption engine, a key management cluster, a link monitoring unit and a security policy execution array, the switching between the SM9 cryptographic algorithm and the quantum resistance NTRU algorithm is supported; the key management cluster realizes distributed key negotiation and storage through a block chain smart contract, and establishes a bidirectional authentication channel with the dynamic encryption engine; the link monitoring unit is integrated with a multi-dimensional flow probe, and continuously collects link delay jitter, data packet entropy characteristics and protocol compliance indexes; the security policy execution array is deployed at a boundary node of a data link, and is configured with a dynamic access control list and a hardware-level data purification module. Therefore, the problems of insufficient encryption algorithm resistance, significant key update delay, multi-dimensional threat sensing blind areas, dynamic strategy response delay and the like in the prior art are solved.

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.

The invention discloses a secret communication system of an unmanned aerial vehicle, which relates to the technical field of secret communication of the unmanned aerial vehicle and comprises a secret key generation and distributed storage unit, a dynamic secret key updating unit, a secret key destruction and tracing unit, a multi-band sensing and interference identification unit and a combined regulation and control unit. A dynamic key is generated through a chaos algorithm, and the security of the key is ensured in combination with block chain fragmentation storage and GPS binding encryption; updating the key according to the risk level, and transmitting the fragments by using an anti-quantum channel; after the communication is finished, the secret key fragments are invalidated, and anomaly detection and traceability are realized; scanning a multi-band frequency spectrum in real time, identifying an interference type and optimizing the model; and according to the interference intensity and the energy efficiency demand, dynamically switching the frequency bands, adjusting the power and enhancing the anti-interception capability. The problems that an existing unmanned aerial vehicle communication system is insufficient in safety, weak in anti-interference capacity, incomplete in key management mechanism and the like are effectively solved, and the safety, the anti-interference performance and the energy efficiency performance of unmanned aerial vehicle communication are remarkably improved.

A rekeyable lock cylinder with a cylinder body and a plug assembly. The lock cylinder includes a plurality of key followers and a corresponding plurality of racks disposed in the plug assembly. Disengaging the racks from the key followers allows rekeying of the lock cylinder.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

The present disclosure provides an information processing apparatus that enables updating of a key for program verification without invalidating a program verification function. An information processing apparatus 1 that calculates a verification value using a key for program verification and that verifies whether the verification value matches a verification expected value stored in advance. The information processing apparatus 1 includes: a key updating control unit 12 that updates the key; a storage unit 100 that stores in advance a verification expected value corresponding to a key updated by the key updating control unit 12; and a verification expected value changing unit 13 that when a verification value calculated based on the updated key is verified, changes the verification expected value in the storage unit, the verification expected value being referred to for verification, to a verification value corresponding to the updated key.

The invention relates to the technical field of data encryption, and discloses an intelligent data security encryption method in an edge computing environment. The method comprises the following steps: acquiring an original data stream, decomposing through discrete wavelet transform, and adding a random disturbance sequence; constructing a dynamic encryption strategy network, generating a dynamic key matrix and distributing an access control strategy; according to the data security level and the node load, adaptively selecting an encryption algorithm and generating an encrypted metadata label; verifying data integrity by using a decentralized consensus mechanism and a zero-knowledge proof algorithm; a key is updated through a key updating model based on a time decay function, and the key is stored in combination with a block chain technology. According to the method, the problems of data encryption, access control, key management and the like in the edge computing environment are solved, the security and integrity of the data are guaranteed, and the security and reliability of data processing in the edge computing environment are improved.

The invention relates to the technical field of data security management, in particular to a charging user portrait data security management system and method, and the system comprises a channel state sensing module, a key updating control module, a behavior sequence evaluation module, a data exception recognition module and a key scheduling encryption module. In the invention, active perception of communication quality change is realized, agility and protection of data transmission are enhanced, and signal attenuation and equipment number labels are extracted for secret key updating judgment by comparing communication link quality with a user positioning data sequence, capturing a hopping trend of signal intensity and a noise ratio and mapping an abnormal fluctuation segment to an equipment identifier. The pertinence and efficiency of an encryption strategy are improved, a portrait feature deviation behavior is recognized by combining a user charging behavior and a frequency sequence, a specific user number is positioned, the anomaly recognition precision is improved, a path encryption strategy is dynamically generated according to behavior deviation and access path information, and a flexible and efficient data protection system is constructed.

The invention discloses a homomorphic encryption-based quantum security key management method and system, and belongs to the technical field of data processing, and the method comprises the following steps: obtaining and evaluating equipment encryption feature parameters and communication environment parameters, and obtaining a quantum encryption demand analysis result; generating a quantum security key and a dynamic storage index; obtaining a performance indication parameter of the quantum security key, performing evaluation to obtain a quantum security key transmission performance demand index, synchronously obtaining a transmission quality parameter of each quantum security key transmission channel, and performing analysis to obtain a key transmission channel corresponding to the quantum security key; based on the dynamic storage index and a key transmission channel corresponding to the quantum security key, the quantum security key is stored to a central processing unit, and a quantum security key hiding risk index is evaluated, so that whether quantum security key updating management needs to be carried out or not is judged; the problem that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements in the prior art is solved.

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.

The invention discloses a novel intelligent networked automobile symmetric encryption method, and belongs to the technical field of automobile data security encryption. In the method, a multi-operator key generation technology is adopted, a plurality of key operators are subjected to combined operation, and a communication key finally used for encryption and decryption is generated, so that the complexity and security of the key are effectively improved; and an attacker is difficult to crack. Besides, a dynamic generation and updating mechanism of the secret key can dynamically generate a new secret key according to information such as the driving mileage, the real-time time and the sensor data of the vehicle, and the secret key is updated when a specific event is triggered, so that the situation that the fixed secret key is cracked by an attacker after being used for a long time is effectively prevented. And meanwhile, a hardware security module or an encryption storage technology is adopted, so that secure storage of the secret key in the vehicle is ensured, illegal reading or tampering is prevented, and a solid foundation is provided for communication security of the intelligent networked vehicle.

The invention discloses an electric power production management system safety operation and maintenance management method based on a national secret algorithm. According to the method, the key and the real-time running state of the equipment are deeply bound through a dynamic key derivation mechanism, so that the key is dynamically adjusted along with parameters such as the load rate, the temperature and the bit error rate, state change, namely key updating, is realized, and the anti-cracking capability of the key is greatly improved; the SM2, SM3, SM4 and other national cryptographic standards are adopted from root key generation, identity authentication, data transmission encryption and log tampering prevention of the full-link application of the national cryptographic algorithm system, it is ensured that the encryption strength meets the national password management requirement, and the overall encryption protection level of the system is improved. Closed-loop protection is formed through deep linkage among multiple steps, fragmentation of a safety mechanism is avoided, meanwhile, the traceability and the fault recovery efficiency of system operation are further improved through the whole-process encryption archiving and emergency response rapid recovery process of audit logs, and transmission and storage safety of power production core data is guaranteed.

The invention relates to the technical field of information security protection of electric power acquisition terminal equipment, and discloses an information security protection method and system for the electric power acquisition terminal equipment. According to the method, the unique identifier is generated by collecting equipment hardware features, and counterfeiting and tampering are prevented. The feature complexity is improved through high-dimensional transformation, and the anti-thrust capability is enhanced. The dynamic perturbation factor causes the device identifier to change over time, preventing replay attacks. The multi-factor key generation is combined with hardware features, environmental parameters and time sequence factors, so that the security of the key is improved, and cracking is avoided. The hierarchical challenge response mechanism enhances the security through multi-level authentication, and prevents an attacker from easily bypassing verification. High-dimensional abnormal behavior detection can dynamically identify potential security threats. A multi-stage key updating mechanism ensures that the equipment keeps encryption protection for a long time, and risks caused by key leakage are avoided. The whole system works cooperatively, and the safety of equipment authentication, data encryption and communication is effectively improved.

Rekeying an Information Handling System (IHS) network End-to-End Efficient Encryption (E2EEE) with security chaining includes locking an encrypted data volume, preventing reading of, and writing to, the encrypted data volume by applications. A data source IHS may request a new key from a key management system and write new metadata in a trailer of the encrypted data block using a different key slot than a currently used and active metadata key slot, wherein the different key slot is updated with the with the new key. The data source IHS then sends an out-of-data signal to change the use key slot from the currently used key slot to the different key slot. Thereafter, the data source IHS unlocks the encrypted data volume, enabling writing and / or reading user data by the data source IHS and encryption and decryption in all IHS E2EEE data connection segment interfaces.

The invention discloses an identity authentication method and system for a vehicle electronic controller and a vehicle, and the method comprises the steps: a central gateway sends a key updating request to a cloud key management system under the condition of power-on, so that the cloud key management system generates a new key; under the condition that a new key is received, encrypting the new key by using the original key to obtain an encrypted key, and sending the encrypted key to the target electronic controller, so that the target electronic controller updates the original key into the new key; sending an identity authentication request to the target electronic controller under the condition that the key update success message is received, so that the target electronic controller generates an identity authentication message; and under the condition that the identity authentication message is received, verifying the identity authentication message by using the new key. The identity authentication of the target electronic controller is carried out by using the new key dynamically generated by the cloud key management system, so that the security of the identity authentication of the electronic controller is improved.

The invention relates to the technical field of data processing, and discloses a key dynamic updating method and device, equipment and a storage medium, and the method comprises the steps: detecting a triggering mode triggered by an event; when the trigger mode is a preset event trigger mode, generating a trigger signal; and updating the key in parallel according to the trigger signal. An event triggering mechanism is introduced, and when a specific event occurs, key updating is automatically triggered; meanwhile, a multi-key parallel updating mechanism is adopted, that is, in the key updating process, multiple keys are used at the same time for encryption and decryption operation, the smooth key updating process is achieved, and the problems of interruption and unavailability of data are avoided. The multi-key parallel updating also increases the security of key updating, and even if a certain key is leaked, the security of the whole system is not damaged.

A rekeyable lock cylinder with a cylinder body, an inner sleeve, and a plug assembly is provided. The plug assembly includes a plurality of key followers and a corresponding plurality of first racks and second racks disposed in carriers. The first racks correspond to operation of a user key and the second racks correspond to operation of a master key. As such, the lock cylinder is usable in a user / master key system. Disengaging either of the first or second racks from the key followers allows rekeying of the lock cylinder for the user key or the master key.

The invention discloses a dynamic encryption and security level adaptive adjustment method for flight data, particularly relates to the field of data security, and is used for solving the security and integrity problems of the flight data in an unstable network environment. According to the method, the mass of random seeds is quantified in real time in the mixing process, incremental seeds are added once the dispersion is reduced, and weak random source transmission is blocked; the historical track continuously provides threshold correction, so that the secret key updating rhythm and the link fluctuation are kept at the same frequency; a new secret key with sufficient safety margin is output by depending on a structured spin mixing and real-time source supplementing mechanism, and a secret key material keeps double characteristics of high discretization and high independence, so that randomness attenuation caused by packet missing, retransmission or node out-of-step is avoided; meanwhile, security level adjustment logic is deeply coupled with a key generation process, so that adaptive balance of encryption strength and operation load is realized, and the flight data is enabled to maintain collaborative excellent performance of confidentiality, integrity and real-time performance in a complex environment.

The invention relates to an access control attendance system and an access control attendance method based on biological recognition, which solve the problems of accuracy and reliability of identity recognition through a palm print and palm vein recognition technology and effectively avoid potential safety hazards caused by identity misjudgment. And the national secret CPU unit prevents data transmission from being stolen or tampered in a data transmission process through dynamic password authentication and an encrypted communication protocol, so that the safety of the access control system is guaranteed. In terms of key management, a key updating mechanism solves the problem of security risks caused by increase of the number of times of use of the key, and security threats caused by key leakage are prevented. The key backup mechanism ensures the recoverability of the key, and avoids the situation that the system cannot operate normally due to the loss or damage of the key. According to the access control system, transaction records are stored and managed through the block chain technology, the problems of data integrity, traceability and high efficiency in the management process of the access control system are solved, automatic management is achieved, and the safety and stability of the whole access control system are improved.

The invention belongs to the technical field of integrated circuit hardware security, and discloses a double-dynamic key encryption circuit and method for dynamically changing dynamic keys after interpretation, and the circuit comprises an external dynamic key module, an internal dynamic key module and a circuit original logic module. And the external dynamic key module generates a dynamic key signal through the linear feedback shift register unit, and the internal dynamic key module generates a D / T selection signal according to a parity check result of the dynamic key signal to dynamically change the type of a trigger in the state machine. The state machine is divided into a group A and a group B, key updating is triggered at an entrance state through a state detection unit, and it is ensured that the key is still dynamically changed after being interpreted. Through a double-dynamic key mechanism and state machine jump confusion, probe detection and bypass attacks are effectively resisted, and the safety of the circuit is remarkably improved. And when the initial key is wrong, circuit jump is abnormal, so that IP protection is realized. The method has the advantages of high attack resistance, dynamic key change, high security and the like.

The sender stores a pair of sender's public and private keys and a public key of the receiver, and carries out the steps of:A—generating a master key, that is a secret shared with the receiver, by key derivation from a current root key and using the sender's private key and the receiver's public key, and updating the root key with the generated master key;B—generating, by key derivation from said master key, a chain of message keys for securing messages to communicate to the receiver;C—generating a next pair of sender's public and private keys, sending the next sender's public key to the receiver and executing again the steps A andB using the next sender's private key and the same receiver's public key;wherein the current root key used in the step A isat a first iteration of step A, an initial root key prestored in the sender, said initial root key being a secret shared with the receiver, andat each subsequent iteration of the step A, the root key that has been updated at the preceding iteration of step A.

The application provides a new physical layer encryption and authentication cooperation security method, solves the problem that the ability of encryption technology to resist differential attack depends on the rapid update of a key; at a sending end, a hash function is used to generate an encryption sequence by using the key and the digital features of information, and the information is subjected to the action of the encryption sequence; the encryption sequence will greatly change when the key is unchanged and the information changes, and the digital features of the information before and after encryption remain unchanged; at a receiving end, the received information can be used to regenerate a decryption sequence by using the digital features of the information and the key before decryption, and the decryption sequence is used for decryption; the requirement of key update is greatly reduced, and the rate requirement and the cost of key generation and distribution are reduced. The generation of the digital label required by the authentication does not depend on the ciphertext itself or the plaintext itself, but uses the same signal digital features, the key and the hash function as when the encryption sequence is generated, and better cooperation is achieved, that is, the cooperation realizes the physical layer security, prevents eavesdropping and attack.

Systems and methods are provided herein for providing privacy while allowing interactions with virtual representations of sensitive objects. This may be accomplished by an extended reality (XR) system receiving information associated with a real-world environment of a user. The XR system may transmit the received information to one or more devices (e.g., server, XR device, etc.) for processing. Before transmitting the received information, the XR system can use the received information to identify and categorize objects in the real-world environment to identify sensitive objects. To protect the privacy of the sensitive objects, the XR system transforms features of the sensitive objects using one or more transform keys prior to transmitting the information to the one or more devices. The XR system may also update the transform keys after a first time period to further protect the privacy of the sensitive objects.

The invention discloses a computer network data storage encryption method and system based on artificial intelligence, and relates to the technical field of computer data storage, the system comprises an acquisition component, a processing component, a calculation component and an encryption management component, the calculation component comprises a data risk assessment unit, a key update adjustment unit and a dynamic key encryption unit, the security of the storage system is improved through the three core units, the data risk assessment unit integrates multi-dimensional parameters and fuses hardware features, AI anomaly confidence and the like, the blank of hidden anomaly perception is filled up, the security of the storage system is improved, the security of the storage system is improved, the security of the storage system is improved, and the security of the storage system is improved. The key updating and adjusting unit is coupled with physical space abnormity, authentication strength and performance risks, a self-adaptive period is achieved to balance safety and efficiency, the dynamic key encryption unit fuses hardware fingerprints, data versions and AI disturbance, a scenarized anti-attack key is generated, and the anti-cracking capacity is improved.

The invention relates to the field of data encryption, in particular to a manipulator and injection molding machine collaborative parameter encryption method, which comprises the following steps: collecting monitoring data of an edge gateway, a manipulator control unit, an injection molding machine control unit and a cloud platform; collaborative parameter encryption and key updating period optimization based on AES-GCM; obtaining a secret key updating period optimization factor through self-adaptive optimization analysis of secret key updating; obtaining a process smoothing factor through key pre-distribution and new and old key coexistence analysis; the AES-GCM encryption process is optimized through the secret key updating period optimization factor and the process smoothing optimization factor; and through the optimized AES-GCM encryption process, the cooperation parameters of the manipulator and the injection molding machine are encrypted, so that the problems of performance reduction, communication interruption and difficult synchronization in the cooperation parameter encryption process of the manipulator and the injection molding machine in the cloud edge cooperation scene are solved.

The invention discloses an Internet of Vehicles heterogeneous signcryption communication system and method based on a double-layer block chain, relates to the technical field of Internet of Vehicles, and solves the technical problems that the Internet of Vehicles technology is insufficient in expansibility and poor in compatibility, safety and efficiency are difficult to consider, and use requirements are difficult to meet. The system comprises a private key generation center PKG, a secret key generation center KGC, an on-board unit OBU, a roadside unit RSU and a double-layer block chain device. The private key generation center PKG is used for generating and distributing a public key and private key pair of the identity signcryption IBC; the key generation center KGC is used for key updating and management of the certificateless signcryption CLC; the OBU is used for performing communication between the vehicle and other vehicles or the road side unit; the roadside unit RSU is used for communication support and data forwarding; and the double-layer block chain equipment is used for carrying out data storage and security verification in the communication system. According to the invention, the calculation overhead and communication cost of the system are obviously reduced, and safe, efficient and extensible authentication and data transmission in a high-dynamic and large-scale V2X environment is realized.

The invention relates to a zone area safety communication and key updating method based on quantum communication. The method comprises the following steps: S1, a quantum key management platform charges a quantum protection key Kc and a certificate to a main control board of edge equipment; s2, the end device S performs identity authentication on the main control board of the side device C; s3, the main control board of the side equipment C performs identity authentication on the end equipment S; s4, the side equipment C generates a session key Kh and sends the session key Kh to the end equipment; s5, encryption and decryption of downlink data; s6, encryption and decryption of uplink data; and S7, updating the session key. The security, efficiency and reliability of data transmission are improved.

The invention belongs to the technical field of information security, and discloses an encryption method for generating a key based on chip power consumption, and the encryption method of the key comprises the following steps: 1, sampling a power consumption track; step 2, data processing; step 3, feature extraction; step 4, generating a key; step 5, presetting ID comparison judgment; step 6, variance judgment of the initial secret key ID; step 7, judging consistency; step 8, judging inconsistency; and step 9, comparing inconsistency. According to the method, the encryption key is generated by using the random variable, namely the power consumption during chip operation, so that the safety is remarkably improved, and even if an encryption algorithm and a communication protocol are mastered, the encryption algorithm and the communication protocol are difficult to crack; meanwhile, secret key generation and management can be achieved only through a conventional current measuring circuit, cost is remarkably reduced, and the risk that external storage depends on is reduced; in addition, the method also supports customized design and dynamic key updating, shows extremely high flexibility, and ensures the security and reliability of an encryption system.

Communications between computing devices connected via a network can be secured with digital keys (e.g., encryption keys). The key may be updated based on states of a state machine. The computing device may receive a key update command to update a key value. In response to the key update command, the computing device may update the key value upon determining that the computing device is in a first state based on state data defining the first state, the state data including the key value, a machine mode specifying a current operating environment, and a lock value specifying that memory storing the key value is one of locked or unlocked.