173 results about "Rekeying" patented technology

The invention discloses a data encryption and dynamic key management method based on a quantum security protocol, and the method comprises the steps: 1, selecting an initial quantum random seed and a classical entropy source seed, and generating a key at an initial moment; at each moment, forming an update increment through a nonlinear chaos increment and a fractal function, constructing a key update function, and updating the key; 2, preprocessing the original message into an integer vector; constructing a dynamic transformation matrix by using a secret key at the current moment, sampling from multi-dimensional Gaussian distribution to obtain a short vector, and constructing a public random matrix; encrypting the integer vector by combining the dynamic transformation matrix, the short vector and the public random matrix to obtain a ciphertext; and step 3, decrypting by using the secret key at the current moment and the dynamic transformation matrix which are synchronously updated, and recovering the original message. The invention provides a data encryption scheme with high security and quantum attack resistance.

The invention relates to the technical field of intelligent control, in particular to a dynamic encryption-based data link security management and control system and method.The dynamic encryption-based data link security management and control system comprises a dynamic encryption engine, a key management cluster, a link monitoring unit and a security policy execution array, the switching between the SM9 cryptographic algorithm and the quantum resistance NTRU algorithm is supported; the key management cluster realizes distributed key negotiation and storage through a block chain smart contract, and establishes a bidirectional authentication channel with the dynamic encryption engine; the link monitoring unit is integrated with a multi-dimensional flow probe, and continuously collects link delay jitter, data packet entropy characteristics and protocol compliance indexes; the security policy execution array is deployed at a boundary node of a data link, and is configured with a dynamic access control list and a hardware-level data purification module. Therefore, the problems of insufficient encryption algorithm resistance, significant key update delay, multi-dimensional threat sensing blind areas, dynamic strategy response delay and the like in the prior art are solved.

The invention relates to the technical field of data security, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a data encryption method, device, equipment and medium, comprising: acquiring a real-time state vector representing a running state of a chaotic neural network processing unit, monitoring a chaotic characteristic of the real-time state vector to generate a chaotic intensity index, and comparing the chaos intensity index with a preset chaos threshold value, generating an original key based on the real-time state vector when a key updating condition is met, dynamically adjusting a weight matrix of the chaos neural network processing unit according to the chaos intensity index, and performing cryptographic processing on the original key to generate a final key. And performing encryption processing on the target data by using the final key to generate target encrypted data. According to the method, the internal state of the chaotic neural network is used as a dynamic key generation basis, so that the dependence on an external entropy source and fixed parameters is eliminated, and the security and real-time performance of a data encryption process are improved.

The invention discloses a secret communication system of an unmanned aerial vehicle, which relates to the technical field of secret communication of the unmanned aerial vehicle and comprises a secret key generation and distributed storage unit, a dynamic secret key updating unit, a secret key destruction and tracing unit, a multi-band sensing and interference identification unit and a combined regulation and control unit. A dynamic key is generated through a chaos algorithm, and the security of the key is ensured in combination with block chain fragmentation storage and GPS binding encryption; updating the key according to the risk level, and transmitting the fragments by using an anti-quantum channel; after the communication is finished, the secret key fragments are invalidated, and anomaly detection and traceability are realized; scanning a multi-band frequency spectrum in real time, identifying an interference type and optimizing the model; and according to the interference intensity and the energy efficiency demand, dynamically switching the frequency bands, adjusting the power and enhancing the anti-interception capability. The problems that an existing unmanned aerial vehicle communication system is insufficient in safety, weak in anti-interference capacity, incomplete in key management mechanism and the like are effectively solved, and the safety, the anti-interference performance and the energy efficiency performance of unmanned aerial vehicle communication are remarkably improved.

The invention discloses an Internet of Things data transmission security enhancement method combined with quantum random number generation, which comprises the following steps of: generating a high-security and unpredictable random number seed through a quantum random number generator, and generating a dynamic binding key in combination with a unique identifier of equipment and a timestamp, the binding key is used for generating a shared session key between devices through a quantum secure handshake protocol, so that the confidentiality and integrity of data transmission are ensured, a dynamic key updating mechanism is introduced, the binding key and the session key are updated regularly, the security risk caused by long-term use of the same key is avoided, a key destruction mechanism is designed, and the security of data transmission is ensured. A session key is completely destroyed after a session is ended, a malicious attacker is prevented from recovering the key, and a standby key generation and synchronization mechanism ensures that the system can automatically switch to a standby key when key synchronization fails or communication is abnormal, so that data transmission is not affected. The method has the advantages of good expandability and high safety.

The invention relates to the technical field of data encryption, and discloses an intelligent data security encryption method in an edge computing environment. The method comprises the following steps: acquiring an original data stream, decomposing through discrete wavelet transform, and adding a random disturbance sequence; constructing a dynamic encryption strategy network, generating a dynamic key matrix and distributing an access control strategy; according to the data security level and the node load, adaptively selecting an encryption algorithm and generating an encrypted metadata label; verifying data integrity by using a decentralized consensus mechanism and a zero-knowledge proof algorithm; a key is updated through a key updating model based on a time decay function, and the key is stored in combination with a block chain technology. According to the method, the problems of data encryption, access control, key management and the like in the edge computing environment are solved, the security and integrity of the data are guaranteed, and the security and reliability of data processing in the edge computing environment are improved.

The invention relates to the technical field of data security management, in particular to a charging user portrait data security management system and method, and the system comprises a channel state sensing module, a key updating control module, a behavior sequence evaluation module, a data exception recognition module and a key scheduling encryption module. In the invention, active perception of communication quality change is realized, agility and protection of data transmission are enhanced, and signal attenuation and equipment number labels are extracted for secret key updating judgment by comparing communication link quality with a user positioning data sequence, capturing a hopping trend of signal intensity and a noise ratio and mapping an abnormal fluctuation segment to an equipment identifier. The pertinence and efficiency of an encryption strategy are improved, a portrait feature deviation behavior is recognized by combining a user charging behavior and a frequency sequence, a specific user number is positioned, the anomaly recognition precision is improved, a path encryption strategy is dynamically generated according to behavior deviation and access path information, and a flexible and efficient data protection system is constructed.

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.

The invention discloses an electric power production management system safety operation and maintenance management method based on a national secret algorithm. According to the method, the key and the real-time running state of the equipment are deeply bound through a dynamic key derivation mechanism, so that the key is dynamically adjusted along with parameters such as the load rate, the temperature and the bit error rate, state change, namely key updating, is realized, and the anti-cracking capability of the key is greatly improved; the SM2, SM3, SM4 and other national cryptographic standards are adopted from root key generation, identity authentication, data transmission encryption and log tampering prevention of the full-link application of the national cryptographic algorithm system, it is ensured that the encryption strength meets the national password management requirement, and the overall encryption protection level of the system is improved. Closed-loop protection is formed through deep linkage among multiple steps, fragmentation of a safety mechanism is avoided, meanwhile, the traceability and the fault recovery efficiency of system operation are further improved through the whole-process encryption archiving and emergency response rapid recovery process of audit logs, and transmission and storage safety of power production core data is guaranteed.

The invention relates to the technical field of information security protection of electric power acquisition terminal equipment, and discloses an information security protection method and system for the electric power acquisition terminal equipment. According to the method, the unique identifier is generated by collecting equipment hardware features, and counterfeiting and tampering are prevented. The feature complexity is improved through high-dimensional transformation, and the anti-thrust capability is enhanced. The dynamic perturbation factor causes the device identifier to change over time, preventing replay attacks. The multi-factor key generation is combined with hardware features, environmental parameters and time sequence factors, so that the security of the key is improved, and cracking is avoided. The hierarchical challenge response mechanism enhances the security through multi-level authentication, and prevents an attacker from easily bypassing verification. High-dimensional abnormal behavior detection can dynamically identify potential security threats. A multi-stage key updating mechanism ensures that the equipment keeps encryption protection for a long time, and risks caused by key leakage are avoided. The whole system works cooperatively, and the safety of equipment authentication, data encryption and communication is effectively improved.

Rekeying an Information Handling System (IHS) network End-to-End Efficient Encryption (E2EEE) with security chaining includes locking an encrypted data volume, preventing reading of, and writing to, the encrypted data volume by applications. A data source IHS may request a new key from a key management system and write new metadata in a trailer of the encrypted data block using a different key slot than a currently used and active metadata key slot, wherein the different key slot is updated with the with the new key. The data source IHS then sends an out-of-data signal to change the use key slot from the currently used key slot to the different key slot. Thereafter, the data source IHS unlocks the encrypted data volume, enabling writing and / or reading user data by the data source IHS and encryption and decryption in all IHS E2EEE data connection segment interfaces.

A rekeyable lock cylinder with a cylinder body, an inner sleeve, and a plug assembly is provided. The plug assembly includes a plurality of key followers and a corresponding plurality of first racks and second racks disposed in carriers. The first racks correspond to operation of a user key and the second racks correspond to operation of a master key. As such, the lock cylinder is usable in a user / master key system. Disengaging either of the first or second racks from the key followers allows rekeying of the lock cylinder for the user key or the master key.

The invention discloses a dynamic encryption and security level adaptive adjustment method for flight data, particularly relates to the field of data security, and is used for solving the security and integrity problems of the flight data in an unstable network environment. According to the method, the mass of random seeds is quantified in real time in the mixing process, incremental seeds are added once the dispersion is reduced, and weak random source transmission is blocked; the historical track continuously provides threshold correction, so that the secret key updating rhythm and the link fluctuation are kept at the same frequency; a new secret key with sufficient safety margin is output by depending on a structured spin mixing and real-time source supplementing mechanism, and a secret key material keeps double characteristics of high discretization and high independence, so that randomness attenuation caused by packet missing, retransmission or node out-of-step is avoided; meanwhile, security level adjustment logic is deeply coupled with a key generation process, so that adaptive balance of encryption strength and operation load is realized, and the flight data is enabled to maintain collaborative excellent performance of confidentiality, integrity and real-time performance in a complex environment.

The invention relates to an access control attendance system and an access control attendance method based on biological recognition, which solve the problems of accuracy and reliability of identity recognition through a palm print and palm vein recognition technology and effectively avoid potential safety hazards caused by identity misjudgment. And the national secret CPU unit prevents data transmission from being stolen or tampered in a data transmission process through dynamic password authentication and an encrypted communication protocol, so that the safety of the access control system is guaranteed. In terms of key management, a key updating mechanism solves the problem of security risks caused by increase of the number of times of use of the key, and security threats caused by key leakage are prevented. The key backup mechanism ensures the recoverability of the key, and avoids the situation that the system cannot operate normally due to the loss or damage of the key. According to the access control system, transaction records are stored and managed through the block chain technology, the problems of data integrity, traceability and high efficiency in the management process of the access control system are solved, automatic management is achieved, and the safety and stability of the whole access control system are improved.

The invention belongs to the technical field of integrated circuit hardware security, and discloses a double-dynamic key encryption circuit and method for dynamically changing dynamic keys after interpretation, and the circuit comprises an external dynamic key module, an internal dynamic key module and a circuit original logic module. And the external dynamic key module generates a dynamic key signal through the linear feedback shift register unit, and the internal dynamic key module generates a D / T selection signal according to a parity check result of the dynamic key signal to dynamically change the type of a trigger in the state machine. The state machine is divided into a group A and a group B, key updating is triggered at an entrance state through a state detection unit, and it is ensured that the key is still dynamically changed after being interpreted. Through a double-dynamic key mechanism and state machine jump confusion, probe detection and bypass attacks are effectively resisted, and the safety of the circuit is remarkably improved. And when the initial key is wrong, circuit jump is abnormal, so that IP protection is realized. The method has the advantages of high attack resistance, dynamic key change, high security and the like.

The sender stores a pair of sender's public and private keys and a public key of the receiver, and carries out the steps of:A—generating a master key, that is a secret shared with the receiver, by key derivation from a current root key and using the sender's private key and the receiver's public key, and updating the root key with the generated master key;B—generating, by key derivation from said master key, a chain of message keys for securing messages to communicate to the receiver;C—generating a next pair of sender's public and private keys, sending the next sender's public key to the receiver and executing again the steps A andB using the next sender's private key and the same receiver's public key;wherein the current root key used in the step A isat a first iteration of step A, an initial root key prestored in the sender, said initial root key being a secret shared with the receiver, andat each subsequent iteration of the step A, the root key that has been updated at the preceding iteration of step A.

The application provides a new physical layer encryption and authentication cooperation security method, solves the problem that the ability of encryption technology to resist differential attack depends on the rapid update of a key; at a sending end, a hash function is used to generate an encryption sequence by using the key and the digital features of information, and the information is subjected to the action of the encryption sequence; the encryption sequence will greatly change when the key is unchanged and the information changes, and the digital features of the information before and after encryption remain unchanged; at a receiving end, the received information can be used to regenerate a decryption sequence by using the digital features of the information and the key before decryption, and the decryption sequence is used for decryption; the requirement of key update is greatly reduced, and the rate requirement and the cost of key generation and distribution are reduced. The generation of the digital label required by the authentication does not depend on the ciphertext itself or the plaintext itself, but uses the same signal digital features, the key and the hash function as when the encryption sequence is generated, and better cooperation is achieved, that is, the cooperation realizes the physical layer security, prevents eavesdropping and attack.

Systems and methods are provided herein for providing privacy while allowing interactions with virtual representations of sensitive objects. This may be accomplished by an extended reality (XR) system receiving information associated with a real-world environment of a user. The XR system may transmit the received information to one or more devices (e.g., server, XR device, etc.) for processing. Before transmitting the received information, the XR system can use the received information to identify and categorize objects in the real-world environment to identify sensitive objects. To protect the privacy of the sensitive objects, the XR system transforms features of the sensitive objects using one or more transform keys prior to transmitting the information to the one or more devices. The XR system may also update the transform keys after a first time period to further protect the privacy of the sensitive objects.

The invention discloses a computer network data storage encryption method and system based on artificial intelligence, and relates to the technical field of computer data storage, the system comprises an acquisition component, a processing component, a calculation component and an encryption management component, the calculation component comprises a data risk assessment unit, a key update adjustment unit and a dynamic key encryption unit, the security of the storage system is improved through the three core units, the data risk assessment unit integrates multi-dimensional parameters and fuses hardware features, AI anomaly confidence and the like, the blank of hidden anomaly perception is filled up, the security of the storage system is improved, the security of the storage system is improved, the security of the storage system is improved, and the security of the storage system is improved. The key updating and adjusting unit is coupled with physical space abnormity, authentication strength and performance risks, a self-adaptive period is achieved to balance safety and efficiency, the dynamic key encryption unit fuses hardware fingerprints, data versions and AI disturbance, a scenarized anti-attack key is generated, and the anti-cracking capacity is improved.

The invention relates to the field of data encryption, in particular to a manipulator and injection molding machine collaborative parameter encryption method, which comprises the following steps: collecting monitoring data of an edge gateway, a manipulator control unit, an injection molding machine control unit and a cloud platform; collaborative parameter encryption and key updating period optimization based on AES-GCM; obtaining a secret key updating period optimization factor through self-adaptive optimization analysis of secret key updating; obtaining a process smoothing factor through key pre-distribution and new and old key coexistence analysis; the AES-GCM encryption process is optimized through the secret key updating period optimization factor and the process smoothing optimization factor; and through the optimized AES-GCM encryption process, the cooperation parameters of the manipulator and the injection molding machine are encrypted, so that the problems of performance reduction, communication interruption and difficult synchronization in the cooperation parameter encryption process of the manipulator and the injection molding machine in the cloud edge cooperation scene are solved.

The invention discloses an Internet of Vehicles heterogeneous signcryption communication system and method based on a double-layer block chain, relates to the technical field of Internet of Vehicles, and solves the technical problems that the Internet of Vehicles technology is insufficient in expansibility and poor in compatibility, safety and efficiency are difficult to consider, and use requirements are difficult to meet. The system comprises a private key generation center PKG, a secret key generation center KGC, an on-board unit OBU, a roadside unit RSU and a double-layer block chain device. The private key generation center PKG is used for generating and distributing a public key and private key pair of the identity signcryption IBC; the key generation center KGC is used for key updating and management of the certificateless signcryption CLC; the OBU is used for performing communication between the vehicle and other vehicles or the road side unit; the roadside unit RSU is used for communication support and data forwarding; and the double-layer block chain equipment is used for carrying out data storage and security verification in the communication system. According to the invention, the calculation overhead and communication cost of the system are obviously reduced, and safe, efficient and extensible authentication and data transmission in a high-dynamic and large-scale V2X environment is realized.

The invention belongs to the technical field of information security, and discloses an encryption method for generating a key based on chip power consumption, and the encryption method of the key comprises the following steps: 1, sampling a power consumption track; step 2, data processing; step 3, feature extraction; step 4, generating a key; step 5, presetting ID comparison judgment; step 6, variance judgment of the initial secret key ID; step 7, judging consistency; step 8, judging inconsistency; and step 9, comparing inconsistency. According to the method, the encryption key is generated by using the random variable, namely the power consumption during chip operation, so that the safety is remarkably improved, and even if an encryption algorithm and a communication protocol are mastered, the encryption algorithm and the communication protocol are difficult to crack; meanwhile, secret key generation and management can be achieved only through a conventional current measuring circuit, cost is remarkably reduced, and the risk that external storage depends on is reduced; in addition, the method also supports customized design and dynamic key updating, shows extremely high flexibility, and ensures the security and reliability of an encryption system.

Communications between computing devices connected via a network can be secured with digital keys (e.g., encryption keys). The key may be updated based on states of a state machine. The computing device may receive a key update command to update a key value. In response to the key update command, the computing device may update the key value upon determining that the computing device is in a first state based on state data defining the first state, the state data including the key value, a machine mode specifying a current operating environment, and a lock value specifying that memory storing the key value is one of locked or unlocked.

An authentication key exchange system according to one embodiment is an authentication key exchange system including a key generation device and a plurality of equipment. The key generation device includes a parameter generation unit configured to receive a security parameter 1λ and a total number N of the equipment as inputs, and output a master private key MSK, a master public key MPK, and an initial revoked user list RL; a static private key generation unit configured to receive the master private key MSK, the master public key MPK, and an identifier ID of the equipment as inputs, and output a static private key sskID corresponding to the identifier ID; a revoked user list update unit configured to receive the master public key MPK and a new revoked user list RL as inputs, increment a current time T, and update a revoked user list RLT at the current time T to the revoked user list RL; and a key update information generation unit configured to receive the master private key MSK, the master public key MPK, the current time T, and the revoked user list RL as inputs, and output key update information kuT at the current time T by using a KUNode algorithm. The equipment includes a latest private key generation unit configured to receive the master public key MPK, the static private key sskID corresponding to its own identifier ID, and the key update information kuT at the current time T as inputs, and output a latest private key cskID,T at the current time T without using pairing calculation; a temporary key generation unit configured to receive the master public key MPK and the latest private key cskID,T corresponding to its own identifier ID at the current time T as inputs, and output a temporary private key eskID and a temporary public key epkID; and a session key generation unit configured to receive the master public key MPK, its own identifier ID, an identifier ID′ of a communication partner, the latest private key cskID,T corresponding to its own identifier ID at the current time T, the temporary private key eskID corresponding to its own identifier ID, and a temporary public key epkID′ corresponding to the identifier ID′ of the communication partner as inputs, and output a session key SK shared with the communication partner.

The invention provides a power distribution terminal key management method and system based on trusted computing, and relates to the field of power system management.The method comprises the following steps that key strength is determined according to risk indexes; encrypting the real-time data of the power distribution terminal by using the encryption key; transmitting to a key management center through a preset security access gateway; performing integrity verification on the encrypted real-time data, and associatively storing a verification result, a security risk index and a transmission timestamp to a block chain evidence storage node to form a tampering-free encryption key operation context record; and dynamically optimizing an encryption key updating strategy in combination with the historical change trend of the security risk index so as to realize closed-loop security management and control of the whole life cycle of the encryption key. According to the invention, the active immunity and the overall safety management and control level of the power distribution Internet of Things in a complex environment are significantly improved.

The invention provides a multi-device communication key negotiation method, and the method comprises the steps: generating a corresponding private key and a scalar multiplication point for each device, the scalar multiplication point being a product of the private key and an elliptic curve base point; each device broadcasts a scalar multiplication point corresponding to the device and receives scalar multiplication points of other devices, and each device calculates a shared key by using a private key of the device and the received scalar multiplication point based on a pairing strategy; encrypted communication between the devices is performed using the shared key. The method has the beneficial effects that the authenticity and integrity of the message are verified by fusing and using certificate signature, the confidentiality of the message is ensured by using the secret key negotiation based on the scalar multiplication point and the private key, the dynamic secret key updating is realized, and the communication security is ensured in multiple aspects.

The application relates to a high-speed encryption and decryption engine and an encryption and decryption implementation method, wherein a plurality of physical channels are provided to provide a plurality of service processing modules with cryptographic services, the problem that a cryptographic card can only provide a single service channel is solved, secondary keys are imported into an FPGA chip for buffering, a session key is managed in a life cycle by the FPGA chip, the time cost of key updating required by cryptographic operation can be reduced, and the processing delay of the cryptographic service can be obviously reduced; the FPGA chip is used as a cryptographic operation processing core unit, multi-stage parallel pipeline processing is realized, and the processing performance is effectively improved.

The invention relates to the technical field of Internet of Things equipment encryption, and discloses an Internet of Things equipment encryption method and device and electronic equipment, and the method comprises the steps of secret key level-to-level management, dynamic secret key updating, hierarchical encryption communication, and secret key revocation and recovery. According to the invention, a three-level architecture of the master key, the regional key and the equipment key is adopted, hierarchical isolation management of the keys is realized, and the key leakage risk is effectively reduced; a dynamic key updating mechanism can automatically identify and update expired or abnormal keys, so that the flexibility of the system is improved; equipment-level, area-level and core-level data isolation protection is realized through a layered encryption communication strategy, and cross-level attacks are prevented; by quickly identifying abnormal equipment and executing key revocation and recovery, safe operation of the system is ensured; a verification mechanism is introduced to guarantee the integrity and reliability of data transmission. The method is suitable for various scenes such as smart cities and industrial Internet of Things, and provides all-around safety guarantee for Internet of Things equipment.

A rekeyable lock cylinder with a cylinder body, an inner sleeve, and a plug assembly is provided. The plug assembly includes a plurality of key followers and a corresponding plurality of first racks and second racks disposed in carriers. The first racks correspond to operation of a user key and the second racks correspond to operation of a master key. As such, the lock cylinder is usable in a user / master key system. Disengaging either of the first or second racks from the key followers allows rekeying of the lock cylinder for the user key or the master key.

The invention relates to the technical field of communication security, and discloses a low-delay high-security data transmission method and system for a video platform, and the method comprises the steps: updating associated information and network bandwidth parameters according to a secret key, and considering historical secret key updating data of each mobile terminal; the key updating execution strategy and the key caching execution strategy of each mobile terminal are respectively solved by adopting an optimization algorithm, so that the influence of data transmission delay caused by key switching is reduced and the risk caused by key caching is reduced as far as possible while the key replacement frequency of different mobile terminals in different time periods is met. Meanwhile, a secret key updating execution strategy and a secret key caching execution strategy are converted into secret key updating parameter retrieval coordinates, the updating mode of each dynamic secret key compared with an original secret key is determined in a secret key updating parameter matrix constructed by the user dynamic feature set, and data words of the user dynamic features and the secret key updating and caching strategies are embedded, so that the user dynamic features and the secret key updating and caching strategies are updated. The instantaneity and complexity of the key are improved, and the cracking difficulty is increased.