290 results about "Secret sharing" patented technology

The invention provides a privacy protection multi-task allocation method for an unmanned aerial vehicle crowdsourcing perception system, which combines addition secret sharing and homomorphic encryption to realize bilateral privacy protection of a task side and an unmanned aerial vehicle position. The task requester and the working party split a task position and a UAV departure position into two secret shares [.] 1 and [.] 2 by adopting an additive secret sharing mechanism respectively, and send the two secret shares [.] 1 and [.] 2 to the two independent service parties S1 and S2 respectively; the service party calculates an encrypted square Euclidean distance between the UAV and the task based on the shared share, and generates two distance matrix shares D1 and D2. On the basis, the two service parties cooperatively execute privacy comparison and a minimum index protocol under the optimized Paillier, and multi-task encryption shortest path distribution is realized in combination with a Hungary algorithm. According to the method, addition secret sharing is fused, Paillier encryption and task matching optimization are optimized, the total flight path of the UAV is remarkably reduced while position information privacy of the whole task allocation process is guaranteed, and good safety and deployability are achieved.

The invention discloses an identity authentication method and system based on a national secret algorithm, and the method comprises the steps: building a hierarchical key management system based on a national secret IBE framework, generating a system master key pair through employing an SM2 algorithm, and achieving a decentralized key distribution mechanism; constructing a domain perception differential privacy protection module, defining a privacy budget allocation strategy according to the security level, and adding calibrated Laplace noise to the user identity feature vector; designing a distributed batch matrix multiplication protocol, and decomposing the distributed batch matrix multiplication protocol to a plurality of computing nodes for parallel processing through a secret sharing technology; a zero-knowledge proof verification mechanism is implemented, and identity verification is completed through a commitment scheme based on an SM3 hash algorithm; deploying a self-adaptive key updating strategy, and analyzing threat level change through a threat situation evaluation function; and establishing a secure communication channel based on SM4 symmetric encryption, and performing encryption processing by using the temporary session key. The security and expandability of the system are improved, the privacy of the user is effectively protected, and the system adapts to a dynamically changing network threat environment.

The invention discloses a channel security transmission method for protecting data privacy of an edge gateway of the Internet of Things, and relates to the technical field of security and privacy protection of the Internet of Things, and the method comprises the steps: constructing an edge gateway security architecture, generating a quantum key through a QKD module based on the constructed edge gateway security architecture, and generating sensitivity data through an IPS vNSF; calculating noise based on the sensitivity data, generating disturbance data based on the noise, calculating a shared key, generating an encryption key in combination with the quantum key and the shared key, segmenting the encryption key through Shamir secret sharing, and encrypting and decrypting the key; encrypting the noise by using the decrypted key, generating global noise based on the encrypted noise, and calculating secondary disturbance data based on the global noise; and generating coded data based on the secondary disturbance data, and generating reconstruction data based on the coded data. According to the invention, the comprehensive security authority of the edge gateway in the aspects of key security and privacy protection intensity is improved.

The invention relates to the technical field of data encryption, in particular to a VPN dynamic hierarchical encryption system and method for cross-border data transmission, and the method comprises the steps: dividing a data flow into different hierarchies based on information entropy; the high-entropy core data is embedded in a steganography mode through a chaos algorithm by means of the low-entropy redundant space; carrying out global basic encryption on the mixed carrier, and respectively executing chaotic scrambling and differential iterative diffusion for the steganography region and the middle entropy region; dynamically injecting a filling block according to entropy feedback to realize flow homogenization shaping; and splitting the deconstructed index through threshold secret sharing, and performing hidden distribution. According to the method provided by the invention, the concealment and security of cross-border data transmission can be effectively improved.

The invention discloses a data management method and system for a data credible delivery platform. Access is realized through symmetric encryption of source data, and credible right confirmation is realized by relying on identities of owners and users of alliance chain evidence storage, source data hash and authorization rules; adding a timestamp to the encrypted data stream verified by the certificate to form a traceability mark, and encrypting or desensitizing privacy data; the trusted computing is provided with three modes: a local mode executes an algorithm in an ownership party isolation environment and records a log on a chain, a third-party mode constructs a trusted sandbox based on TEE, executes computing and links log hash after remote certification, and an algorithm privacy mode realizes cooperative computing through a Shamir secret sharing splitting algorithm in combination with MPC, a confusion circuit and zero-knowledge certification; and the result delivery adopts public key encryption, a decryption key is issued after the receipt of the user is verified, and the result hash and the receipt are linked for evidence storage, so that the problems that the existing trusted platform cannot support the execution of various algorithms and is lack of effective supervision are solved.

The embodiment of the invention discloses a safety calculation method and device for robot cluster collaboration and a medium, and relates to the technical field of safety calculation, and the method comprises the steps: carrying out the participant authentication of a robot cluster and a production enterprise node in advance, and carrying out the dynamic identity verification of each robot after the participant authentication is passed, the operation feature data of each target robot passing verification are extracted and encrypted, and encrypted feature vectors are determined; splitting the encrypted feature vector into a plurality of data fragments, storing the data fragments to a distributed node, obtaining a predetermined task cooperation strategy, and distributing the task cooperation strategy to an edge computing node in a secret sharing manner; executing safety calculation in a ciphertext state through a task cooperation strategy and the plurality of data fragments, determining a joint motion control instruction of each target robot, and generating corresponding zero-knowledge proof data; and after the verification is passed, the encrypted control instruction is distributed through the block chain smart contract, so that safety calculation of robot cluster collaboration is realized.

The embodiment of the invention discloses a ciphertext domain reversible information hiding method and device based on secret image sharing. A specific embodiment of the method comprises the following steps: carrying out secret sharing on secret information to be embedded to obtain a secret information sharing copy sequence; carrying out system conversion on the secret information sharing part sequence to obtain a converted information sharing part sequence; performing image scrambling on the secret image by using a preset scrambling key to obtain a scrambled image; performing region division on the scrambled image to obtain an image division region sequence; embedding each converted information sharing copy in the converted information sharing copy sequence into a corresponding image division region in the image division region sequence so as to carry out ciphertext domain reversible information hiding, and obtaining a marked sharing copy sequence; and storing the marked shared copy sequence. According to the embodiment, the calculation complexity of the encryption process can be reduced.

The invention relates to the field of artificial intelligence and federated learning, and discloses a supply chain data security sharing method based on federated learning. According to the method, a decentralized multi-participant collaborative architecture is constructed, local differential privacy disturbance is applied to a local gradient in each round of iteration, and a threshold secret sharing and Paillier homomorphic encryption dual mechanism is adopted to segment, encrypt and transmit a gradient share; and each participant reconstructs a global gradient through linear superposition, and locally completes model updating. The method does not need a trusted third party, effectively prevents leakage of original data and gradient information, gives consideration to model effectiveness and strong privacy protection, and is suitable for a cross-enterprise supply chain intelligent collaboration scene.

The invention discloses a railway freight data security encryption method based on distributed storage, which relates to the technical field of railway information security, and comprises the following steps: registering distributed storage nodes, collecting railway freight tasks, tracks and node registration data, constructing a distributed storage network based on the node registration data, generating a node list, and encrypting the node list. Performing identity authentication, key initialization and identity verification during access among the nodes on the nodes in the node list, issuing a short-time access token after verification is passed, generating a track interval key according to freight track data, fragmenting the track interval key by using a threshold secret sharing method, distributing the track interval key to multiple nodes and dynamically deriving a key, and based on the derived key, using an improved ECC parallel encryption method in combination with Paillier dynamic encryption to encrypt data, and generating an encrypted data packet. According to the invention, track data is used as key drive, and dynamic hierarchical encryption and collaborative credible decryption of railway freight task data in a distributed environment are realized.

The invention discloses a unified key management method and device for a distributed password service component, and aims to solve the problems of single-point failure, consistency deficiency and insufficient life cycle management and control of existing key management. According to the method, based on a distributed key generation protocol, Shamir secret sharing, PBFT consensus and Lagrange interpolation, key generation, distributed storage, safe distribution and dynamic rotation whole-process management and control are achieved. The device is composed of n nodes including a processor, a memory and a communication and key processing module, and supports encrypted storage, secure communication and consensus collaboration. Security is guaranteed through a threshold mechanism, hash verification and a hash chain technology, availability is improved through SDN optimization and failover, and nodes and parameters can be flexibly adapted and expanded. The method is applied to scenes such as a power grid, gives consideration to safety, availability and compliance, and is suitable for unified key management of distributed system password services.

An audio authentication and identity verification system and method that encodes dynamic cryptographic information across the audible and inaudible spectrum (0 Hz→30 kHz, scalable to 124 kHz). A rolling acoustic signature simultaneously embeds identity, time, date, and GPS location using a hybrid of frequency shift keying (FSK), phase shift keying (PSK), Morse style pulse duration modulation, and time domain multiplexing. To guarantee post-event privacy and integrity, the system further incorporates a dual custody audio architecture in which every authenticated recording is split into complementary bit interleaved segments stored separately, and the decryption key is fragmented via Shamir 3-of-5 secret sharing—preventing unilateral access or tampering. The system establishes a tamper proof, real time, and offline capable authentication layer that functions in air, through conventional microphones, and via dedicated emitter hardware.

The invention relates to the cross technical field of computer information security and medical data processing, in particular to a medical data sharing privacy protection system based on a block chain and homomorphic encryption, which comprises a data representation and preprocessing layer, an access control and task execution layer and a result credibility guarantee layer. The preprocessing layer maps original data to a specific mathematical structure through implicit computable coding according to semantic features of medical data and a target computing task, and adapts to standard homomorphic operation; the access control layer defines a fine-grained access strategy and dynamically generates a task binding token in combination with attribute-based encryption and an intelligent contract; and the result guarantee layer adopts a fusion verification label and threshold secret sharing technology to realize lightweight calculation result verification. The system improves the data sharing suitability and the result credibility on the premise of guaranteeing the privacy security of the medical data, and is suitable for a medical data alliance collaborative sharing scene.

The invention provides a multi-person approval control method, an electronic device, a readable medium and a program product, and the method comprises the steps: responding to the submission of an approval application, generating a process continuing key for the approval application, splitting the process continuing key into n secret shares through a threshold secret sharing algorithm according to a preset (k, n) threshold parameter, and distributing the n secret shares to each approver; receiving an approval instruction submitted by each approver and the signed secret share associated with the approval instruction; verifying the validity of the signed secret share of which the approval instruction is agreed, and determining the signed secret share as an effective share if the verification is passed; when the number of the effective shares reaches or exceeds k, at least k shares are selected from the effective shares, and a process continuing key is restored through a threshold secret sharing algorithm; and performing comparison verification on the restored flow continuing key and a flow continuing key generated during initialization, and triggering execution of a business flow corresponding to the approval application after verification is passed. According to the invention, multi-person examination and approval can be realized, and compulsory compliance and tampering prevention

The invention provides a controllable anonymity optimization method for a block chain smart contract, and belongs to the technical field of block chain smart contracts, and the method comprises the steps: generating a user private key through employing a threshold secret sharing protocol and a three-layer GPU acceleration architecture, storing a corresponding relation between identity information and a Hash ciphertext to a supervision center, and carrying out the encryption of the user private key; a user signs a smart contract calling parameter by using a private key and then sends the smart contract calling parameter to a block chain network, a block chain node extracts all signatures in a transaction to construct a dependency graph and groups each parallel verification group by using a greedy coloring algorithm, and parallel verification is performed on each parallel verification group by using bilinear pairing batch processing and a three-layer GPU acceleration architecture. After verification is passed, intelligent contract service logic is executed to complete transaction uplink, the supervision user retrieves the user identity information original text through the Hash ciphertext, and the technical problem that the on-chain calculation cost is too high due to the fact that signature batch verification efficiency is low when controllable anonymity is achieved in the block chain intelligent contract is solved.

The invention discloses a privacy protection Transform reasoning method based on function secret sharing, which is characterized in that homomorphic encryption is adopted to encrypt an input token sequence, nonlinear operation is processed through a secure multi-party computing protocol, a distributed interval function key is generated by using function secret sharing, and secure comparison and dynamic token pruning are realized. The privacy protection reasoning specifically comprises the steps of an initialization stage, an input encryption stage, a cooperative calculation stage, a safety pruning stage, a result recovery stage and the like. Compared with the prior art, the method has the advantages that the online communication complexity of security comparison is reduced to a constant level from a quadratic level through a function secret sharing technology, the communication bottleneck problem of token pruning in the prior art is effectively solved, and the security comparison efficiency is improved on the premise of protecting client input data and server model parameter privacy. The reasoning efficiency of the Transform model in the privacy sensitive scene is remarkably improved, the method is particularly suitable for the scene where Transform model reasoning needs to be carried out on sensitive data and the privacy requirement is high, and the application prospect is good.

The embodiment of the invention discloses a safety calculation method and device for intelligent workshop device coordination and a medium, and relates to the technical field of safety calculation, and the method comprises the steps: carrying out the on-chain device authentication of a plurality of device terminals in a target intelligent workshop in advance, so as to obtain the device production data corresponding to the target device terminal passing the authentication, performing sensitivity grading on the equipment production data, and determining a corresponding dynamic privacy level; matching a corresponding data encryption strategy according to the dynamic privacy level, determining a plurality of data encryption fragments corresponding to the equipment production data based on the data encryption strategy, and storing the data encryption fragments to a preset distributed node; and obtaining a current collaborative scheduling task of the target intelligent workshop, performing security calculation on the predetermined associated data encryption fragment through a predetermined edge calculation node based on a mixed framework of a confusion circuit and arithmetic secret sharing, generating a collaborative scheduling instruction, and feeding back the collaborative scheduling instruction to the target equipment terminal, therefore, safe calculation of equipment cooperative scheduling is realized.

The invention discloses a cloud distributed node identity authentication method based on an identity label certificate, and aims to solve the problems of single-point failure, difficulty in cross-domain mutual recognition, efficiency and privacy imbalance and the like of a traditional authentication scheme. The system is composed of an identity identification certificate generator, a distributed certificate verification network and a block chain certificate account book, a master key is split through threshold secret sharing, the overhead is optimized through BLS signature aggregation, state consistency is guaranteed in combination with DHT and gossip protocols, and certificate full-life-cycle management is achieved through block chain certificate storage and an intelligent contract. The process includes system initialization, identity registration and certificate issuing, identity authentication and certificate updating and revocation, technologies such as elliptic curve cryptography and zero-knowledge proof are adopted, and security, efficiency and privacy protection are considered. The method is suitable for multiple scenes such as a power grid and the Internet of Things, supports cross-domain mutual recognition and dynamic capacity expansion, can effectively prevent illegal access and data tampering, and is suitable for large-scale cloud distributed node identity authentication.

The present application belongs to the cross field of information security and computer application technology, and relates to a large model privacy protection reasoning method and system based on secure multi-party computation. The method comprises: obtaining a prompt required for reasoning in a secret sharing form input by a client; obtaining a large model weight parameter input in a secret sharing form by a server; performing privacy protection calculation on each operation in the large model and executing model reasoning; sending a shared value of the model reasoning result to the client, and reconstructing the reasoning result based on the shared value by the client. The present application uses homomorphic encryption, vector oblivious linear evaluation and other cryptography technologies and segmented polynomial optimal approximation to construct a secure reasoning framework of a large Transformer model, can perform fast and accurate large model collaborative reasoning, and provides semi-honest security for the client and the model owner, that is, both parties need to accurately comply with the agreement and the privacy of each party will not be leaked.

The invention discloses a quantum security verifiable secret sharing method and device, equipment and a storage medium, is applied to a secret holder, and relates to the technical field of network security, and the method comprises the steps: determining a secret extraction polynomial of a target secret, and determining a target polynomial for determining a share; determining each secret share by using a hidden polynomial, a target secret, a secret extraction polynomial and a target polynomial; determining a fingerprint value based on a polynomial set and the target polynomial; determining a commitment value by using a share distribution polynomial, an auxiliary polynomial and the fingerprint value; sending the secret shares and the target polynomial to each participant; the participant verifies the secret share and the target polynomial; and if the verification is passed, the target secret share passing the verification and the corresponding target polynomial are disclosed, and the Chinese remainder theorem is utilized to carry out secret recovery to obtain the target secret so as to complete the corresponding secret sharing operation. And a verifiable function of secret sharing is realized at low cost.

The invention discloses a secure neural network inference method and system based on linearization during inference, and relates to the technical field of machine learning and information security. A model holder deploys a random feature extraction module of a trained nonlinear neural network at a client, and distributes learnable modules to two non-serial servers; the client inputs the data to a random feature extraction module for feature extraction to obtain random features, the mapped random features are segmented based on arithmetic secret sharing to obtain a first secret share and a second secret share, and the first secret share and the second secret share are respectively distributed to the two servers; the two servers conduct reasoning calculation on the received secret share based on the learnable module, during reasoning, an S-cos activation function is linearized, a first calculation result and a second calculation result are obtained and returned to the client side, and the client side reconstructs a prediction result based on the first calculation result and the second calculation result. And an efficient neural network reasoning service is realized on the premise of protecting data privacy and model privacy.

This invention provides a privacy-preserving community search method and system for graph data streams. It utilizes a secret shared domain comprised of multiple servers. Within this domain, each server can only access the first encrypted data of the graph data stream's list structure and the second encrypted data of the search parameters. Throughout the community search process, the search parameters and all information in the graph data stream except for the time of generation are processed within the encrypted domain and are not leaked to the querying server, thus achieving privacy protection during the community search process for graph data streams.

A processing system includes: a client that uploads a file to be stored; and a secret sharing storage that stores fragment files obtained by dividing the uploaded file in a distributed manner across a plurality of storage servers, in which the client includes a backup unit that compresses a plurality of files to be stored into one file at a predetermined compression rate and then uploads the compressed file, and the secret sharing storage includes: the plurality of storage servers; and a distribution server that encrypts the compressed file, and then divides the compressed file into fragment files and stores the fragment files in a distributed manner across the plurality of storage servers.

This invention discloses a password matching method based on equality testing. Each matching server obtains a login password secret share; the difference between the pre-held registration password secret share and the login password secret share is obtained to get a difference secret share; the first equality test problem between the registration password secret share and the login password secret share is transformed into a second equality test problem between the difference secret share and 0; based on addition, multiplication, and inner product calculations under replicated secret sharing, the second equality problem is subjected to ring dimensionality reduction to obtain a third equality test problem; the third equality test problem is solved based on Fermat's Little Theorem to obtain the equality test result, thereby obtaining the password matching result.

The application provides a privacy protection vertical federated learning method and system based on gradient boosting decision table, and the method is applied to a system comprising a plurality of participating terminals, each participating terminal holds part of feature data of each learning sample, and the categories of the feature data held by each participating terminal are different; in the learning method provided by the application, all intermediate data is encrypted in the whole learning process, each participating terminal can only obtain additive secret sharing shares of the data, and cannot obtain complete plaintext data. The application can realize privacy protection of privacy protection vertical federated learning data based on gradient boosting decision table.

The invention discloses a remote key security management method and device for a cloud virtualization cryptographic module, and aims to solve the problems of cloud key trust root, transmission security and the like. The core of the method is to keep the master key control right of a user locally, and through cooperative work of a local client, a cloud management platform and a distributed vHSM instance, through the four steps of system initialization and key fragmentation distribution, remote certification and secure channel establishment, distributed cooperative operation and local result synthesis, and by utilizing IBE, Shamir secret sharing, a threshold cryptographic algorithm and TEE technologies, the user master key control right and the distributed vHSM instance are subjected to remote certification and secure channel establishment, distributed cooperative operation and local result synthesis. And the key is available and invisible. The device comprises three modules, namely a local client, a cloud management platform and a vHSM cluster. The method guarantees secret key confidentiality and completeness, supports a national secret algorithm, meets compliance requirements, adapts to cloud native elasticity requirements, and is suitable for cloud secret key management in industries such as electric power and the like.

The application relates to the field of artificial intelligence and federal learning, and discloses a supply chain data security sharing method based on federal learning. The method constructs a decentralized multi-participant collaborative architecture, applies local differential privacy disturbance to local gradients in each iteration, and adopts a double mechanism of threshold secret sharing and Paillier homomorphic encryption to split, encrypt and transmit gradient shares; each participant reconstructs the global gradient through linear superposition and completes model updating locally. The application does not require a trusted third party, effectively prevents leakage of original data and gradient information, balances model utility and strong privacy protection, and is suitable for cross-enterprise supply chain intelligent collaboration scenarios.

A multi-party password book distribution method based on secret sharing, a sender uploads a password book to an interstellar file system through public key encryption, adopts secret sharing to secret split information obtained by splicing a public key and a Hash of an expected receiver, a receiver obtains a secret share through biological feature recognition technology, and obtains a sender public key through a judgment function to download an original password book from the interstellar file system. According to experimental results and security analysis, the scheme can guarantee high time efficiency and resist impersonation attacks, and guarantee the safe transmission of the password book. The present application solves the security problem of password book distribution by adopting a shamir threshold scheme, changes the threshold for safe password book distribution, dynamically solves the entry and exit of receivers, solves the problem that original covert communication can only perform one-to-one communication, and realizes one-to-many communication.

This invention provides an optimized method for controllable anonymity of blockchain smart contracts, belonging to the field of blockchain smart contract technology. This invention generates user private keys using a threshold secret sharing protocol and a three-layer GPU-accelerated architecture, storing the correspondence between identity information and hash ciphertext in a monitoring center. Users sign smart contract call parameters using their private keys and send the results to the blockchain network. Blockchain nodes extract all signatures from the transaction, construct a dependency graph, and group them using a greedy coloring algorithm. Each parallel verification group is then verified in parallel using bilinear pairing batch processing and a three-layer GPU-accelerated architecture. After successful verification, the smart contract business logic is executed to complete the transaction on-chain. Monitoring users retrieve the original user identity information using the hash ciphertext. This invention solves the technical problem of low efficiency in batch signature verification leading to excessively high on-chain computation costs when achieving controllable anonymity in blockchain smart contracts.

This invention discloses a secure distributed backup method for databases based on secret sharing, relating to the field of database security technology. The method includes: selecting n backup nodes, setting a recovery threshold t, extracting sensitive information from the database, and using a secret sharing algorithm to divide the sensitive information into n shares within the backup nodes; allocating each share to a corresponding backup node for storage; adding a password share to each share stored in each backup node to construct an encrypted share; creating a mapping table based on the correspondence between backup nodes and encrypted shares; receiving a recovery request, retrieving the encrypted share from several backup nodes based on the response request and the mapping table, and decoding the retrieved encrypted share to obtain the sensitive information. This invention ensures data security during the backup process by dividing and encrypting sensitive information in the database and then distributing the divided information across multiple backup nodes.

The invention discloses a data processing method, system and device and a storage medium. Relates to the field of data transmission, and the method comprises the steps: obtaining to-be-transmitted target data, and encrypting the target data through a public key to obtain encrypted data; sending the encrypted data to the target server; and under the condition that an encryption operation result fed back by the target server side is received, restoring a private key piece of the target client side based on sub private key pieces of a plurality of users associated with the target client side, and restoring a target private key based on the private key pieces restored by the plurality of client sides, the sub private key pieces are obtained by splitting a private key piece of the target client in a secret sharing mode, and the private key pieces of the multiple clients are obtained by splitting a target private key in the secret sharing mode; and decrypting the encryption operation result based on the target private key to obtain a decrypted operation result. Through the method and the device, the problem of high security risk of data interaction between servers in related technologies is solved.