9 results about "SAFER" patented technology

The embodiment of the invention provides a communication encryption method, computer equipment and a storage medium, relates to the technical field of information security, and can provide a safer communication process. Comprising the following steps: a server receives a first key acquisition request sent by a first terminal, and acquires a first composite key from a plurality of composite keys; wherein the composite key is a key obtained after fusion processing based on multiple types of quantum keys. And the server obtains a second composite key matched with the user information of the first terminal from the plurality of composite keys. And sending the second composite key to the server, so that the server encrypts the first composite key through the second composite key to obtain the encrypted first composite key. And the server sends the encrypted first composite key to the first terminal, so that the first terminal encrypts or decrypts communication data with the second terminal based on the first composite key after decrypting the encrypted first composite key.

Data stored in a memory circuit may be encrypted using client keys that need to be available for high-speed data processing and yet held securely to avoid unauthorized access to the encrypted data. A secure processor circuit in a processor-based system obtains client keys associated with client applications and generates secure key-encryption keys that are used to encrypt the client keys so the client keys can be securely stored in the memory circuit. In some examples, data keys for encrypting data blocks associated with the client application may be generated from the client key, encrypted by a data key-encryption key generated in the secure processor circuit, and stored in the memory circuit. In such examples, because the client keys and data keys are encrypted while in memory, they are safer from software attacks on the memory circuit, which improves the security of the encrypted data blocks.

The application provides an IPv6 message encryption and decryption method based on a quantum key application mechanism, which is realized by a sending end and a receiving end in cooperation, and the sending end and the receiving end exchange roles when transmitting back to realize the encryption transmission of messages in the opposite direction by the same processing procedure; the messages are directly encrypted by using quantum keys, and the message encapsulation uses the extensible characteristics of the IPv6 protocol, and a new extension message header is added in the header of the IPv6 message to record the parameters used for message encryption. The combination of the quantum key encryption and the message of the IPv6 is the innovation point in the application, the quantum key is directly used for encryption when the message is encrypted and decrypted, other key negotiation methods are not needed, and other network protocol negotiation keys are not needed, so that the scheme is safer and simpler. The application encapsulates the encrypted message by using the extensible characteristics of the IPv6 protocol, so that the encrypted message is still a standard IPv6 message, and the messages of the whole scheme follow the IPv6 protocol without additional protocol overhead.

Data stored in a memory circuit may be encrypted using client keys that need to be available for high-speed data processing and yet held securely to avoid unauthorized access to the encrypted data. A secure processor circuit in a processor-based system obtains client keys associated with client applications and generates secure key-encryption keys that are used to encrypt the client keys so the client keys can be securely stored in the memory circuit. In some examples, data keys for encrypting data blocks associated with the client application may be generated from the client key, encrypted by a data key-encryption key generated in the secure processor circuit, and stored in the memory circuit. In such examples, because the client keys and data keys are encrypted while in memory, they are safer from software attacks on the memory circuit, which improves the security of the encrypted data blocks.

The application relates to the technical field of computer security, in particular to a zero-trust security system and control method based on bidirectional authentication of subjects and data, which comprises a decentralized identity management module, which is used for generating decentralized digital identities for access subjects and data assets, and bidirectionally verifying the identities of the access subjects and the data assets; an AI dynamic trust evaluation module, which is used for continuously collecting multidimensional real-time data streams, and generating a dynamically updated comprehensive trust score through a deep learning model; a dynamic strategy generation and execution module, which is used for generating real-time access control strategies based on the comprehensive trust score and data asset attributes, and executing the real-time access control strategies; and a closed-loop feedback optimization module, which is used for dynamically optimizing parameters of the deep learning model through a reinforcement learning algorithm according to strategy execution effect data. Through bidirectional decentralized authentication of subjects and data, AI dynamic trust evaluation and reinforcement learning closed-loop optimization, the application realizes safer, smarter and more flexible fine-grained access control.

This invention relates to a fine-grained, controllable blockchain rewriting method under cloud computing, featuring a hidden policy for user tracking, revocation, and attribute cancellation. The invention utilizes traceable and revocable ciphertext policy attribute-based encryption as its technical support. Only when the data modifier's attributes satisfy the access policy embedded in the transaction data written by the data owner in the block can the correct hash collision be found, thus modifying the data and achieving fine-grained, controllable, and rewriteable blockchain functionality. Secondly, by employing outsourced computing technology, some complex calculations are transferred to the data service manager under the cloud service provider, significantly improving algorithm efficiency and greatly reducing the burden on on-chain users. Simultaneously, the access policy written by the data owner in the block is partially hidden, making the controllable and rewriteable blockchain more secure and easier to expand in practical applications, effectively protecting privacy.

This invention discloses a data cache expiration handling system and method for quantum communication networks. The method includes: a client querying target data by inputting the primary key ID of the target data; comparing the expiration time of the primary key ID with the system time; if the expiration time of the primary key ID does not exceed the system time, returning the target data to the client; if the expiration time of the primary key ID exceeds the system time, obtaining a quantum key qk from the QK queue storing quantum keys to encrypt the target data to obtain encrypted target data; storing the quantum key qk and the encrypted target data in a database module, database R1, and database R2; and returning the encrypted target data to the client. This invention establishes synchronized data in databases R1 and R2, solving the memory overflow problem; it determines whether data is expired based on the expiration time of the quantum key, making cached data updates more reliable and secure; and it improves the user experience.

Data stored in a memory circuit may be encrypted using client keys that need to be available for high-speed data processing and yet held securely to avoid unauthorized access to the encrypted data. A secure processor circuit in a processor-based system obtains client keys associated with client applications and generates secure key-encryption keys that are used to encrypt the client keys so the client keys can be securely stored in the memory circuit. In some examples, data keys for encrypting data blocks associated with the client application may be generated from the client key, encrypted by a data key-encryption key generated in the secure processor circuit, and stored in the memory circuit. In such examples, because the client keys and data keys are encrypted while in memory, they are safer from software attacks on the memory circuit, which improves the security of the encrypted data blocks.

The present application relates to a method for Shamir threshold face information recognition encryption authentication and data security transmission, comprising the following steps: S11, encrypting the face information plaintext to form face information ciphertext; S12, dividing the encrypted face ciphertext using secret sharing technology to divide the encryption key, and dividing the user key into five key components according to the (3, 5) threshold scheme based on the threshold sharing strategy of polynomial; S13, sending the divided five key components to five key storage nodes through a key escrow system; further comprising: S21, sending a key component transmission request to the five key storage nodes through the key escrow system; S22, after receiving any three key components of the same key, the key is recovered using the Lagrange algorithm. The present application can greatly reduce the risk of key leakage, also makes the supervision department have a trace, and most importantly, the implementation of key recovery enables users to use their own keys more flexibly and safely in various application scenarios.