40 results about "Secure communication system" patented technology

The invention relates to a self-adaptive information negotiation method applicable to a continuous variable quantum key distribution system, which comprises the following steps of: estimating an optimal code rate that an LDPC (Low Density Parity Check) code should reach under a current quantum channel, converting an initial code rate into the optimal code rate by a receiver, and obtaining a low-reliability bit number l which needs to be disclosed in conversion calculation, the method comprises the following steps of: decoding an LLR (Local Library Ratio) by using Bob, sending the LLR to Alice through a classic channel in combination with an encryption technology, sorting absolute values of the LLR by Alice in a decoding iteration process, selecting l bit positions with low reliability, sending the bit positions to Bob, determining a bit value by Bob according to the bit positions with low reliability sent by Alice, and feeding back and sending the bit value to Alice, and correcting the LLR value by Alice according to bit information sent by Bob. According to the method disclosed by the invention, the code rate of the LDPC code can be flexibly adjusted along with the change of the state of the time-varying channel, and the negotiation efficiency is improved, so that the key rate of the system is improved. The method is excellent in performance in a time-varying channel environment, negotiation efficiency under a low signal-to-noise ratio condition can be remarkably improved, and an efficient and reliable information negotiation scheme is provided for practical application of a quantum secret communication system.

The invention discloses an implementation method of a sub-connection active STAR-RIS assisted secure communication system. A base station, a sub-connection active STAR-RIS, a legal user and an eavesdropping user are included. According to the invention, M units of STAR-RIS are grouped into L sub-arrays, and an amplifier is shared to reduce power consumption and cost; with maximization of system secrecy energy efficiency as a target, base station beam forming, STAR-RIS reflection / transmission coefficients and amplifier amplification coefficients are jointly optimized; and solving the non-convex optimization problem by adopting an efficient algorithm based on block coordinate descent. According to the invention, the hardware overhead and the system power consumption are effectively reduced through the sub-connection structure, meanwhile, the secure transmission efficiency of the system is remarkably improved through joint optimization, multiplicative fading is overcome, and an efficient and reliable solution can be provided for 6G secure communication.

The invention belongs to the technical field of heterogeneous communication network security, and discloses a heterogeneous communication network physical layer security resource joint allocation method, system, equipment and medium based on multi-hop attention hypergraph convolution, and the method comprises the following steps: updating a node feature matrix to define a propagation operator of hypergraph convolution, and then according to the hyperedge type and the propagation operator, determining the hyperedge type according to the hyperedge type and the propagation operator; updating the multi-hop node feature matrix to carry out attention aggregation to obtain final node embedding, embedding the final node of any legal user node into an input multi-head task, distributing a base station access decision by multiple heads, and calculating the transmitting power and beam forming vector of a base station selected by the base station access decision to any legal user, and finally, based on a secrecy rate optimization problem, taking a negative value of the total secrecy rate as a loss function to guide physical layer security resource joint allocation. The system, the equipment and the medium are used for implementing the method. According to the invention, the physical layer security performance of the secret communication system is effectively improved.

The invention relates to communication security, in particular to a security communication system and method based on a quantum SIM (Subscriber Identity Module) card, and a terminal layer, which are used for generating a quantum random number as a key entropy source, performing identity authentication, encrypting and decrypting data and monitoring eavesdropping behaviors; the network layer is used for realizing key relaying, carrying out protocol conversion and achieving cross-network interconnection; the platform layer is used for performing identity authentication, generating a secret key and implementing security monitoring; according to the technical scheme provided by the invention, the defects that the user identity information is easy to leak, the secret key is easy to crack and an active eavesdropping detection mechanism is lacked in the prior art can be effectively overcome.

The invention relates to a secure communication system and method, which realizes data secure transmission through a direct and / or indirect communication mode between an intelligent device and a background server, and can realize device activation by utilizing the data secure transmission so as to realize background management and monitoring of the device and effectively prevent the device from being counterfeited, stolen and the like. And meanwhile, statistics of the number of customers is facilitated, the state of the intelligent equipment is determined, the user is reminded to carry out maintenance / abnormity reminding on the equipment, and the use experience of the user is improved.

The invention relates to a laser chaotic secret communication system based on coherent pumping phase conjugation, which belongs to the technical field of laser communication and comprises a signal transmitting module, an optical fiber link module, a conjugate transpose module and a signal receiving module. The signal transmitting module generates and modulates a chaotic carrier optical signal, and data encryption is realized through phase modulation; the optical fiber link module is used for long-distance signal transmission; the conjugate transpose module adopts an optical comb to generate coherent pump light, and generates phase conjugate waves through four-wave mixing to realize compensation of dispersion and nonlinear distortion in an optical fiber link; and the signal receiving module recovers original data through chaotic synchronization, coherent detection and digital signal processing. The phase locking characteristic of coherent pumping is utilized, the phase noise influence in a traditional pumping system is reduced, the stability of the system is improved, the anti-interference performance of chaotic secret communication and the transmission quality of the system are improved, and a feasible scheme is provided for achieving high-fidelity and high-safety long-distance optical communication.

The invention provides a vehicle-mounted lightweight security communication system and method based on a cloud quantum key pool, and relates to the field of Internet of Vehicles information security. The method comprises the following steps: presetting the same root key in a hardware security module of a cloud terminal and a hardware security module of a vehicle-mounted terminal, obtaining a key application request of a quantum session of the vehicle-mounted terminal, and distributing a quantum session key of the communication from a cloud quantum key pool; based on the root key, encrypting a quantum session key of the communication to obtain a quantum key data packet and transmitting the quantum key data packet to the vehicle-mounted terminal; and analyzing a session key based on the quantum key data packet in the hardware security module, and encrypting the sensitive data by using the session key through a hardware accelerated symmetric encryption algorithm to obtain encrypted vehicle-mounted sensitive data, and decrypting and storing the encrypted vehicle-mounted sensitive data. The method is used in the communication process of the vehicle-mounted terminal and the cloud terminal, and solves the technical problem that the QKD is limited by a special optical fiber or precise sight distance free space optical communication in the mobile vehicle scene application.

The application provides a kind of identity authentication method and system based on blockchain, comprising constructing the distributed two-way authentication and secure communication system of fusion PKI center node and blockchain consensus node;Identity information is configured according to user role;All identity information is stored in a decentralized manner using blockchain technology, and the key summary of identity information is stored on chain instead of original data;Client, server start two-way authentication process according to the trusted information stored on chain, and complete the negotiation and generation of session key;Client, server use the generated session key to perform symmetric encryption and decryption processing on the transmission content.The application effectively prevents the risk of personnel rule violation, data tampering and other risks through strict identity verification and operation traceability, and users can independently manage identity authorization range and use scenarios, thereby completely changing the situation that users passively accept information management and control under the traditional system.

The present application relates to the field of traffic communication, specifically to a secure communication system in traffic control network, including three modules of identity authentication, trust evaluation and communication encryption. In the communication node access of traffic control network, the asymmetric encryption and symmetric encryption double channels are used for parallel verification, and the initial channel is established to transmit non-critical data after being legal. The trust evaluation module fuses non-critical data, link delay and retransmission times, combines historical variance confidence index, and outputs communication trust score through model calculation to determine the node as encryption state or constraint state. In the encryption state, the encryption channel is established to transmit critical data in the signal switching window by using one-time session key; in the constraint state, the state snapshot is transmitted in time, and if it is continuously untrusted, the channel is closed, and the historical characteristics are called to accelerate the verification when accessing again. The system realizes the safe transmission of critical data and the efficient exchange of non-critical data, and improves the security and real-time performance of traffic control network.

A method, including generating a full trust group of entities, each entity of the full trust group performs at least one function of issuing a certificate, revoking the certificate, and verifying the certificate based on a digital license plate, generating a limited trust group of entities, each entity of the limited trust group performs at least one function of issuing a provisioning ticket, issuing a manufacturing receipt, verifying a provisioning ticket, provisioning a receipt, and operating the digital license plate, and provisioning the digital license plate based on at least one function from the full trust group and at least one function from the limited trust group.

This invention discloses a chaotic synchronization secure communication system and method using mutually injected semiconductor ring lasers. The system includes two mutually injected semiconductor ring lasers, a bidirectional optical injection channel, a cross-feedback module, and a chaotic modulation and demodulation unit. Three modes are achieved through parameter matching: same-mode real-time synchronization, different-mode real-time synchronization, and different-mode delayed synchronization. Same-mode real-time synchronization features a wide high-quality parameter range and low latency, while different-mode delayed synchronization exhibits optimal robustness to parameter mismatch, frequency detuning, and current mismatch. The system can achieve secure communication over a long distance of 120 km, maintaining stable synchronization even under noise and process mismatch conditions, making it suitable for fiber-optic chaotic secure communication scenarios.

The invention discloses a port Internet of Things secure communication system based on quantum key distribution, and the system comprises quantum key distribution equipment which is used for generating and distributing quantum keys; the Internet of Things devices are distributed in all areas of the port and used for collecting and transmitting port operation related data; the control center is used for managing and controlling the whole system; and the communication network comprises a quantum channel and a classic channel, the quantum channel is used for transmitting the quantum key, and the classic channel is used for transmitting the encrypted data and control information. By combining the quantum key distribution technology with the port Internet of Things, a high-security and high-reliability solution is provided for port Internet of Things communication, and strict requirements of ports on communication security under ever-increasing service requirements are met.

The invention provides an encryption communication method and device, equipment, a medium and a product, and relates to the technical field of encryption communication, and the encryption communication method comprises the steps: obtaining an encryption key in a local preset key space based on a local preset key start identifier, and carrying out one-time pad encryption on media stream data; the media stream data subjected to one-time pad encryption is sent to a media service device, and the media service device is configured to obtain a corresponding calling party preset key based on a key start identifier from a calling party terminal and decrypt the media stream data, and to decrypt the media stream data based on a key start identifier obtained from a called party terminal and decrypt the media stream data based on a key start identifier obtained from a called party terminal; and obtaining a corresponding preset key of the called party, performing one-time encryption on the decrypted media stream data again, and sending the encrypted media stream data to the terminal of the called party. According to the embodiment of the invention, the security degree of VoIP communication is improved, the packet loss rate is reduced, and a complete safe communication system capable of landing is formed.

The application discloses a key extraction time synchronization method and system based on an atmospheric turbulence random channel, belongs to the technical field of laser communication and information security, and realizes high-precision time synchronization and dynamic key generation by bidirectional link delay calculation, combination of temperature compensation crystal oscillator compensation and global time reference, adoption of a time division duplex frame structure and an adaptive quantization threshold algorithm, effectively solves the problems of random changes of channel characteristics caused by atmospheric turbulence and clock drift, and can improve synchronization precision and key generation rate, and is suitable for a secure communication system in a complex atmospheric environment.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

A secure communication system allows instructions to be selected and communicated to remote users in a manner that obviates voice transmission includes a transmitter and at least one receiver. The transmitter includes an input that receives an instruction signal from an external system, a transmitter unit that transmits wireless signals, and a first microcontroller coupled to the input and to the transmitter unit. The first microcontroller provides the transmitter unit with a selection signal to wirelessly transmit that corresponds to the received instruction signal. A first receiving unit of the receiver wirelessly receives the selection signal. The first memory of the receiver contains a plurality of stored instructions. An output device of the receiver produces a human-perceptible output of at least one of the stored instructions. The second microcontroller determines the stored instruction in the first memory to be reproduced by the output device based on the received signal.

Method of creating secure tunnel(s), a router node (RN) implementing same and a network comprising RNs is provided. Method comprises connecting a RN to the network. RN comprises bearer interfaces, each having a VRF module; receiving, from neighbouring nodes (NNs), loopback address(es) for bearer interface(s) in the NNs, and detecting, using the RN, routing prefix(es) associated with a tunnel within the loopback address(es). In response using the RN to: build a routing table (RT) comprising loopback address(es) for a bearer interface of the same type in one of the NNs; extract, from the RT, an IP address per tunnel being created; and set each extracted IP address as the destination address for each tunnel. Method comprises establishing a tunnel to each NN, by selecting a bearer interface for each NN; learning the set destination addresses and building the tunnel to each NN using the learnt destination addresses.

The application discloses a kind of quantum secure communication system wave division multiplexer's vulnerability detection device and method, the vulnerability detection device of sending end wave division multiplexer includes first attack module, first spectrometer one, first spectrometer two, first spectrometer three, first beam splitter one, first beam splitter two, first beam splitter three, first isolator one, first isolator two, first tunable laser one, first tunable laser two;The vulnerability detection device of receiving end wave division multiplexer, including second attack module, second spectrometer one, second spectrometer two, second spectrometer three, second beam splitter, second tunable laser.The application can determine whether wave division multiplexer exists vulnerability, simultaneously can identify whether commercial QKD system equipped with wave division multiplexer can resist laser damage attack.

A system receives a search query for a user's information. The system obtains, from a database, user information including a confidentiality status. The system generates a search result interface that visually distinguishes the user's information based on the confidentiality status. The system also displays the interface, including an indication that confidential communication is invoked for the user's contract. The system also stores a confidential communication password and an alternate address associated with the contract. The system also receives a request from an agent to access the confidential information. The system also initiates a privacy validation process by prompting the agent to perform a verbal privacy validation and verify completion of validation steps. Upon successful completion of the validation, the system provides the agent with secure access to the confidential communication password, and logs the password access event in an audit trail. The system utilizes natural language processing for interactions.

The application discloses a cloud-edge secure communication method and system, the method is applied to a cloud-edge secure communication system, the system comprises a first running end and a second running end, and the method comprises the following steps: the first running end receives first cloud-edge communication demand information sent by the second running end; the first running end performs information interaction operation with the second running end according to the first running communication demand information, and obtains an information interaction result; and the second running end establishes a secure connection with the first running end according to the information interaction result, so as to realize cloud-edge secure communication. It can be seen that the information interaction result can be obtained according to the information interaction operation of the first running end and the second running end, the secure connection of the first running end and the second running end is established according to the information interaction result, the cloud-edge secure communication is realized intelligently and conveniently, the cloud-edge communication efficiency and accuracy are improved, and then the transmission security, reliability and efficiency of the cloud-edge message are improved, so that the expansibility and flexibility of the cloud-edge communication are improved.

The invention discloses a lightweight end-to-end transmission method and device for an intermittent high-dynamic satellite link. The lightweight end-to-end transmission device comprises a satellite-borne encryption module, a satellite-ground communication and message protocol module, a ground key management and server module and a device and data management module. A handshake challenge caused by satellite-ground long delay and a short visible window is overcome through a single-round and certificateless elliptic curve key exchange and state persistence mechanism; a monotone increasing counter is used for replacing a random number, and a large window checking mechanism is combined, so that the anti-replay problem in a high time delay environment is solved; and finally, realizing efficient secret communication with a ground station in the satellite resource-constrained processor. The system is composed of four modules: a satellite-borne encryption module, a satellite-ground communication and message protocol module, a ground key management and server module, and a device and data management module.

Systems, devices, and techniques for establishing secure communications with a medical device. A medical device, such as an implantable medical device, may include a computer readable storage medium configured to store encrypted information stored in a manner that allows a trusted instrument to access the encrypted information. The trusted instrument may decrypt information from the medical device and use the decrypted information to establish and allow a second computing device, including a patient computing device, to communicate with the medical device.

The application provides a kind of secure communication system, method and storage medium, belong to communication security field, according to user terminal equipment data, user terminal data set and user terminal secret key are constructed;According to the device identity authentication initiation instruction, user terminal secret key and user terminal data set, device identity authentication result is obtained by device identity authentication;Import server data, according to server data, server data set and server secret key are constructed;According to the server identity authentication initiation instruction, server secret key and server data set, server identity authentication result is obtained by server identity authentication;According to the server identity authentication result and user terminal secret key, secure communication result is obtained by secret key exchange.The application is used for the scene of multi-manufacturer, multi-type, large quantity of equipment security access between internet of things platform and device based on two-way identity authentication to establish secure communication link, effectively reduces the difficulty and cost of new equipment access of internet of things platform, and improves data communication security.

The invention belongs to the technical field of artificial intelligence, and discloses a safety communication system and method of a generative artificial intelligence enabled internet of things, and the system comprises a registration authority which is responsible for registering an internet of things user and internet of things equipment; the Internet of Things user registers with the registration authority by using the smart phone, interacts with the edge artificial intelligence after logging in, and controls the remote intelligent device through the edge artificial intelligence; the intelligent device is used for collecting data in the environment and transmitting the data to the edge artificial intelligence and the Internet of Things user after mutual authentication; the edge artificial intelligence is an edge server close to the intelligent equipment, and an artificial intelligence application is deployed in the edge server and is fusion of edge calculation and artificial intelligence. According to the invention, the secure communication between the Internet of Things user and the remote intelligent device is mainly realized, and a weak physical unclonable function is embedded in the remote intelligent device in order to protect the physical security of the remote intelligent device.

Computer Interface for Quantum Cryptography-Based Secure Communication System

The invention provides an unmanned aerial vehicle assisted mobile edge calculation optimization method and device and a related product, and relates to the technical field of edge calculation. According to the method, an unmanned aerial vehicle is designed to send an artificial interference signal to an eavesdropper in a hovering stage to directly interfere the eavesdropper to receive the signal, so that the eavesdropper is difficult to obtain effective data, and the possibility that the data is stolen is remarkably reduced; meanwhile, the transmission security is guaranteed by combining a physical layer security technology and utilizing the randomness of a wireless channel, so that the eavesdropping attack resistance of the security communication system is enhanced from multiple aspects, and the security of communication is ensured; moreover, by combining the optimization variables, the constraint conditions and the constructed optimization model and comprehensively considering the total energy consumption of the security communication system, fine balance among trajectory planning, resource allocation and an anti-eavesdropping strategy can be realized, the overall energy efficiency of the security communication system is effectively improved, the operation time of the security communication system is prolonged, and the energy waste is reduced. And efficient utilization of energy is realized.

This invention discloses a low-power secure communication system based on hard-wired timing control, belonging to the field of AIoT security chips and edge computing. Addressing the pain points of high standby power consumption, vulnerable software interfaces, and wasted cloud computing power in existing AIoT devices, this invention solidifies the mathematical property of the fraction 10989 / 3500 (the physical approximation of π, 3.139714285...) into a hardware circuit topology that cannot be modified by software. It constructs a SCIT communication group consisting of a dual-mode differential power supply unit, a hard-wired timing enforcement unit, a purely physical anti-intrusion interface unit, and a DHUC communication access unit connected in series. The system achieves true zero-power standby during non-operational periods, prevents unauthorized access through a dual mathematical-physical barrier, and wakes up cloud computing nodes on demand using a "ghost mode," fundamentally solving the security and energy consumption problems of traditional solutions.

A method of secure communication between a device and a computer program running on a server is disclosed. The method comprising the steps of: sending, from the device to the server, generic user identification information based on a current user account logged into on the device; identifying, by the server, the generic user identification information as corresponding to an allowed entity pre-registered with the server; sending, from the server to a remote management module, an identification token associated with the allowed entity, said remote management module having stored thereon a register of registered devices; running, by the remote management module, a remote action on the device using the stored register entry for that device, wherein the remote action passes the identification token to the device; sending, from the device to the server, the identification token; and allowing the device to access the computer program based at least in part on a match between the identification token sent by the server and the identification token received by the server from the device.