466 results about "Security parameter" patented technology

The invention provides a service data security protection method and system for digital enterprise management, and the method comprises the steps: obtaining an access request sequence initiated by a target user at a service operation terminal, generating a dynamic access control strategy vector according to a historical behavior track associated with an access operation identifier, and carrying out the dynamic access control strategy vector; analyzing the dynamic access control strategy vector through a strategy decoder, and generating a real-time access permission instruction; based on the real-time access permission instruction, performing homomorphic encryption mapping on a sensitive data segment in the request context information to generate a ciphertext transmission channel, and performing security parameter synchronization on the ciphertext transmission channel and the cross-department conjoint analysis model; and calling a federated learning framework to carry out multi-modal feature fusion on the real-time operation flow of the service operation terminal, generating an abnormal operation confidence score, triggering a cross-level interception protocol when the abnormal operation confidence score exceeds a dynamic threshold, and rolling back the current session state to a security baseline version. According to the invention, the accuracy and response timeliness of anomaly detection can be improved.

A processing device sets a first flag that indicates whether a first critical security parameter (CSP) file exists. The first CSP file includes a first set of CSPs for a memory device. The processing device sets a second flag that indicates whether the first CSP file is valid. The processing device sets a third flag that indicates whether a second CSP file exists. The second CSP file includes a second set of CSPs for the memory device. The processing device sets a fourth flag that indicates whether the second critical security parameter file is valid. The processing device selects one of the first or second CSP file as an active CSP file based on an evaluation of the first, second, third, and fourth flags.

The invention provides a security isolation deployment method and device, a storage medium and a program product, relates to the field of network security, and can realize cross-domain risk situation awareness, dynamically adjust an isolation strategy and improve the security of big data platform operation, the method comprises the steps of obtaining a current data stream and a historical data stream of each risk domain in a plurality of risk domains; determining a risk grade score of the big data platform based on the current data streams and the historical data streams of the plurality of risk domains; the risk grade score is used for indicating the occurrence probability and the influence range of the cross-domain risk event; determining an optimal security parameter combination of a plurality of risk domains of the big data platform based on the risk level score; the optimal safety parameter combination is used for indicating the minimum cross-domain risk propagation probability and resource isolation cost; and based on the optimal security parameter combination, performing security isolation deployment on the plurality of risk domains of the big data platform.

The invention relates to the technical field of network security, in particular to a distributed key management and encryption communication method oriented to a big data environment. The method comprises the following steps: establishing a system architecture and configuring safety parameters; generating a master key and a session key through the random number; segmenting the master key into a plurality of segments and storing the segments to different nodes; encrypting the session key by using the public key of the receiver, distributing the session key through the secure channel, and decrypting the session key by the receiver to obtain the session key; constructing a Merkle tree through an AES-GCM function, and introducing a network adaptation factor into an encryption process by considering that security requirements and network conditions of data encryption in different environments are different; and regularly updating a secret key, implementing an access control strategy, and recording a log to perform system audit so as to guarantee long-term security. According to the invention, the efficient AES-GCM encryption algorithm is used, so that the speed and security of data encryption are improved. By implementing the access control strategy, only the authorized user can access and operate the key, and the security of the system is improved.

The invention provides a fully homomorphic encryption-based encrypted data parallel sorting method and system, and the method comprises the steps: generating a public parameter, a public key and a private key through a safety parameter, and issuing the public parameter and the public key; and coding the plaintext array based on the private key, packaging and encrypting the plaintext array into a plurality of ciphertexts, and issuing the ciphertexts, so that the server executes homomorphic comparison on the ciphertexts of the plaintext array based on the public parameter and the public key to obtain the ciphertext of a comparison matrix of the plaintext array, and sorts the plaintext array according to the comparison matrix based on the public parameter and the public key to obtain the plaintext array. Obtaining a ciphertext of the ordered array; and based on the private key, decrypting and decoding the ciphertext of the ordered array to obtain a plaintext calculation result. According to the method, the sorting task of the corresponding plaintext array can be completed in the ciphertext form, parallel acceleration of the homomorphic sorting algorithm is realized, the throughput rate is improved, and the operation time delay is reduced.

Systems, methods, and apparatuses are described for verifying a user identity in a video conference. A computing device may receive user data and a plurality of security parameters associated with accessing a video conference based on a confidentiality level of the video conference. The computing device may generate a security code that is encoded with user data. The computing device might cause the security code to be displayed on the mobile device for a predetermined time period. The computing device may receive an indication that the first device scanned the security code by using a camera. To verify the identity of a user, the computing device may decode the security code, compare the decoded user data of the decoded security code and expected user data associated with the video conference. The computing device may determine the authenticity of a user video and allow access to the video conference.

Aspects of the present disclosure provide systems, methods, apparatus, and computer-readable storage media that support improved watermarking and fingerprinting of a shared dataset. To illustrate, clustering may be performed on the dataset using initial clustering parameters (e.g., a secret key) to assign each record (e.g., attribute) of the dataset to one of multiple clusters. The secret key may be selected by a user or determined automatically based on the clustering algorithm. After the clustering, the records of each cluster may be selected for embedding a portion of fingerprint data based on one or more security parameters (e.g., a hash function, priority values, even / or selection, etc.). The selected records (or portions thereof) may be replaced with corresponding portions of the fingerprint data to embed the fingerprint data within different records as watermarking. Aspects also include analyzing a dataset to verify whether watermarking is present and to extract a fingerprint.

Disclosed herein is a method for facilitating supervision of individuals based on geofencing. Accordingly, the method may include receiving, using a communication device, a parameter from a supervisor device associated with a supervisor and a geographical location from the supervisor device. Further, the method may include analyzing, using a processing device, the geographical location based on a security parameter and generating a geofence corresponding to a geographical area based on the analyzing. Further, the method may include receiving, using the communication device, supervisee data associated with a supervisee from a supervisee device, including supervisee emergency input or nearby audio and video sensor data. Further, the method may include analyzing, using the processing device, the supervisee data based on the geofence and generating a supervision notification based on the analyzing of the supervisee data. Further, the method may include transmitting, using the communication device, the supervision notification to the supervisor device.

The invention relates to a block chain transaction method supporting privacy protection and identity tracking, and belongs to the technical field of block chain application. The specific process of the method is as follows: a financial management institution FMA generates a public key / private key pair for member registration and anomaly analysis according to a security parameter lambda, and group sending is performed on public keys; deploying a recharging contract and a payment contract on the block chain; each consumer ui registers to the FMA through a mobile device to become a member user of the transaction system, and the consumer holds a group signature key gski returned by the FMA after successful registration; the payment service operator cj registers to the FMA to become a member before providing service, and after successful registration, the payment service operator holds the FMA to return an identifier pid of each product terminal managed by the payment service operator; and the consumer calls a payment contract to carry out order payment based on the signature key gski and the identifier pid of the product terminal, and finally, the method further comprises an anomaly analysis link.

The invention provides an anti-quantum identification signature method based on an on-lattice SIS problem. The method comprises the following steps: selecting system safety parameters and other related system parameters; generating a system public parameter and a master key by using the system security parameter and other related system parameters; generating a corresponding public and private key pair by using the user identity ID; the user generates a signature of the message by using the private key; and the verifier verifies the validity of the signature by using the system parameters and the user public key. According to the method, a lattice-based digital signature scheme is constructed by utilizing an SIS difficulty problem on a middle lattice, and quantum attack resistance security is provided for an information system for deploying the algorithm scheme; personal identity information of the user is used for registering and generating public and private keys, the key escrow problem participated by a third party is relieved, and the privacy security of the user is improved.

A security gateway accesses data in a communications session between a client device and an application hosted by a server. The security gateway inspects security parameters corresponding to the data using one or more large language models (LLMs). In response to inspecting the security parameters corresponding to the data, the security gateway performs one or more security operations on the data in accordance with one or more security policies associated with the one or more LLMs.

The invention provides a zk-SNARK-based power grid data security cleaning and credibility verification method. The method comprises the following steps: firstly, sequentially performing static range verification, adjacent time difference rate judgment, missing value interpolation and sliding window outlier detection on original scheduling data by an acquisition end, generating cleaned data, and calculating a hash value to form sub-constraints; the method comprises the following steps: generating a proof key and a verification key based on security parameters in a trusted initialization stage, uniformly expressing all sub-constraints in an algebraic form, performing coding arrangement, and constructing a Rank-1 constraint system meeting zk-SNARK proof requirements as a basic structure of a generation circuit; the submitter constructs a private witness vector with the cleaned data by using the circuit to generate a proof parameter, and the verifier verifies the proof through a public parameter to confirm that the data meets a preset rule. According to the method, various logical judgments and Hash integrity in the cleaning process are unified into polynomial equality constraints, so that data privacy and consistency are efficiently guaranteed, trust cost and calculation complexity are remarkably reduced by means of a zero-knowledge verifiable mechanism, the security, flexibility and expandability of a system are enhanced, and the method is suitable for popularization and application. The method is suitable for complex scheduling scenes needing to process large-scale power grid data.

The invention relates to the technical field of medical message management, in particular to an HPV detection information management method and system based on privacy protection, and the method comprises the steps: obtaining HPV detection information of a target subject, carrying out the feature extraction of the HPV detection information, and obtaining personal basic information and detection sample information; performing encryption processing on the detection sample information to obtain HPV detection encryption data, and performing privacy feature recognition on the HPV detection encryption data to obtain a privacy feature set; performing privacy risk assessment on the privacy feature set to obtain a privacy risk index; acquiring a whole-process information security parameter of the HPV detection information of the target subject; based on the whole-process information security parameters, performing privacy leakage influence quantitative evaluation on the privacy risk index to obtain a privacy leakage risk evaluation index; calling a corresponding privacy leakage risk threshold value based on the personal basic information, and performing leakage risk early warning judgment on the privacy leakage risk assessment index according to the corresponding privacy leakage risk threshold value; the threat identification precision can be improved, and risk early warning is realized.

A method of configuring local secure memory for a programmable logic controller (PLC) including verifying a content of the local secure memory by comparing the content of the local secure memory to a verification profile, initiating a secure recovery process responsive to unsuccessfully verifying the content of the local secure memory, and, responsive to successfully verifying the content of the local secure memory, adding at least one of an approved operation or a security parameter to the content of the local secure memory and updating the verification profile responsive to adding the at least one of an approved operation or a security profile.

To provide a safety design device, a safety design method, and a safety design program capable of deriving a security parameter whose safety is guaranteed in encryption design based on a Reused-A-LWE problem using a discrete Gaussian distribution as an error distribution.SOLUTION: A safety design device 1 includes: an inputting portion 11 that receives input of parameters n, m, q, s1, s2 of a Reused -A-LWE problem with a discrete Gaussian distribution as an error distribution; a calculation portion 12 that calculates a parameter sb of the LWE problem with the discrete Gaussian distribution as the error distribution from the parameter s1 and a constant C; an acquiring portion 13 that acquires a security parameter λ of the LWE problem by a calculation formula that guarantees predetermined safety; and an outputting portion 14 that outputs the acquired security parameter λ as a security parameter of the Reused -A-LWE problem.SELECTED DRAWING: Figure 1

The disclosure provides a system / method / scheme to securely send data from a cloud, or cloud service provider, to users via a secure connectionless system, referred to herein as a C-VPN communication infrastructure (C-VPN CI). In one example a method of communicating from a cloud service provider to a user via a C-VPN CI includes: (1) obtaining, by a cloud service provider, security parameters from a SDE Cloud server operating on a computing system of the cloud service provider, wherein the security parameters include a set of mathematical rules and values for converting plain text to ciphertext, (2) creating a secure communication using the security parameters received from the SDE Cloud server, wherein the secure communication includes a secure header and secure data, and (3) sending the secure communication to the user via a generic electronic message delivery system.

The invention discloses a balanced SM9 digital signature multi-party adapter signature generation method and system, a secret key generation center initializes system parameters according to security parameters in a symmetric environment, generates participant private key fragments by using a secret sharing technology, and generates a public and private key pair for a multiplication-to-addition ideal function for each participant; the participant requesting the pre-signature generates a difficult relation instance and a zero-knowledge proof and broadcasts the difficult relation instance and the zero-knowledge proof, the other participants calculate the pre-signature after verification, the legality of the pre-signature is verified by verifying a temporary variable, and a complete signature is calculated under the condition that the pre-signature is legal; adapter signature evidences are extracted according to the pre-signatures, the complete signatures and the difficult relation instances, evidence extraction is completed under the condition that instances generated by the adapter signature evidences are consistent with the difficult relation instances, and the national secret SM9 pre-signatures with the adapter function can be cooperatively generated under the condition that multiple participants jointly participate in operation in the symmetric environment; and the signature of the adapter is completed.

The invention relates to the technical field of satellite communication, in particular to a satellite short message data transmission method and device. The method comprises the following steps: a receiving end device establishes an initial communication link with a satellite through a preset guide sequence and performs time synchronization and frequency synchronization to generate a security parameter negotiation channel; sending an encryption capability message to the satellite through the security parameter negotiation channel and establishing an end-to-end corresponding encryption communication channel; sending a short message data transmission request to the satellite through the encrypted communication channel, and sending a beam configuration parameter to the receiving end device through the encrypted communication channel; and when the receiving end equipment adjusts a corresponding receiving antenna according to the beam configuration parameter to form a directional receiving beam and reaches a preset threshold value, a resource redistribution mechanism is triggered, so that beam resources occupied by the low-priority service are dynamically adjusted to the high-priority service for use. According to the invention, efficient and reliable transmission of satellite short message data can be realized.

The invention discloses an inner product encryption method, device and system based on a GR-LWE problem, and belongs to the technical field of information encryption, and the method comprises the following steps: generating a main public key and a corresponding main private key based on a dihedral non-exchangeable group ring and preset security parameters; obtaining vector data used for decryption, and carrying out operation on the vector data and the main private key to generate a decryption key used for decryption operation; vector data to be encrypted and plaintext data to be encrypted are obtained and are operated with the public key part in the main public key to generate a ciphertext; and a decryption key is used for carrying out decryption operation on the ciphertext, and when and only when the inner product result of the vector data for decryption and the vector data to be encrypted is 0, correct plaintext data can be obtained. According to the invention, an inner product encryption scheme is expanded to the dihedral non-exchangeable group ring, so that the security of the encryption scheme is improved, and long-term security guarantee is provided for resisting quantum computer attacks.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention discloses a multi-signature method based on an SIS trap door one-way function. The multi-signature method comprises the following steps: (1) Setup step: a trusted party takes a safety parameter as a public parameter required by an input and output scheme; (2) a KeyGen step: each signer outputs a public and private key pair by taking a public parameter as input; (3) Sign step: each signer takes the private key, the public key, the public parameter and the message as input and outputs a single signature for the message; (4) AggKey step: the verifier takes the signer public key set as input and outputs an aggregation public key; and (5) Verify step: a verifier outputs a bit 1 or 0 by taking the public parameter, the aggregated public key, the message and the multiple signatures as input, which represents that verification succeeds or fails. According to the method, the key homomorphism of the SIS trap door one-way function is utilized, so that multiple signatures of the data are realized; a lattice-based cryptosystem is used, so that the attack of a quantum algorithm can be resisted; the probability verification thought is used, and the efficiency of verifying multiple signatures is improved.

The invention belongs to the field of cryptography and network security, and provides an unmanned aerial vehicle security cooperative computing method based on a certificateless homomorphic network coding signature, which aims at solving the security problem of data transmission in cooperative computing of an unmanned aerial vehicle group, and mainly comprises the following steps: a KGC initializes an Internet of Things data transmission system by generating private and public parameters; the method comprises the following steps of: running a Setup algorithm to generate a bilinear group, a master key and a hash function by taking a security parameter and a dimension of an augmented vector as input; the unmanned aerial vehicle sends an ID to the KGC for registration, and obtains a part of private keys from the KGC; in order to resist pollution attacks, a user divides data into a plurality of vectors before sending a data packet, and generates signatures for the vectors; and after each unmanned aerial vehicle node receives the data packet transmitted by the channel, performing integrity verification on the transmitted data packet, discarding the damaged data packet, and merging the undamaged data packets. And if the node is an intermediate node, sending a vector and signed data packet to a downstream node.

The invention provides a secure execution environment construction method and system, a chip and a storage medium. The method comprises the following steps: creating an encrypted memory area; distributing an independent security data space in the encrypted memory area for each thread; storing the key encryption key and the security parameter in a locking register, and setting an access control strategy of the locking register by using a flag bit register; and monitoring illegal access to the locked register in real time by using an exception handling instruction. According to the secure execution environment construction method and system, the chip and the storage medium provided by the embodiment of the invention, a reliable hardware-level security mechanism is realized through physical isolation, thread-level encryption container, register locking and the like, and the capability of preventing side channel attacks is improved by introducing random elements of power disturbance according to the security level of the locked register.

The invention relates to the technical field of artificial intelligence, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a parameter security re-calibration and response method, device, equipment and medium, and the method comprises the steps: obtaining parameters of a basic model and a fine-tuned model, and comparing the parameters to obtain differential parameters; performing gradient sensitivity analysis on the differential parameters to generate an abnormal correlation map; detecting the fine-tuned model by using an abnormal association map to determine unsafe parameters; unsafe parameters are processed, safe re-calibration is completed, and basic model parameters are fused to form a re-calibration model; verifying the re-calibration model based on the scenarized security verification set and obtaining feedback; according to the feedback updating strategy, re-calibration is carried out again, and a security application model is generated; and processing the task request through the security application model to obtain a security response result. According to the method, unsafe parameters are identified and corrected through differential analysis and closed-loop recalibration, the safety and the compliance are enhanced while the model performance is kept, and reliable application in a complex scene is ensured.

The application provides a coding method and device, relates to the technical field of media, and comprises the following steps: performing a coding operation on a plurality of display images and a plurality of CRR images to obtain a code stream. First information is used to authenticate to-be-authenticated data to obtain first tree top abstract data. Second information is used to perform signature calculation on the first tree top abstract data to obtain a digital signature. The digital signature is encapsulated into an authentication data set. The code stream comprises a security parameter set and the authentication data set, the security parameter set comprises the first information and the second information, the first information is used to represent an algorithm adopted for generating tree top abstract data, and the second information is used to represent an algorithm adopted for performing digital signature. The first tree top abstract data is tree top abstract data of an encoding end, and the first tree top abstract data comprises tree top abstract data of N main bit streams and / or M CRR slice bit streams, wherein N and M are positive integers.

Disclosed in the present invention are a multi-key homomorphic encryption method and calculation method, a storage medium and a computer device. The multi-key homomorphic encryption method comprises: acquiring a message polynomial m, wherein said m is used for representing a message for homomorphic calculation which is uploaded by a participant to a server; on the basis of a security parameter λ and a key generation method MKHE_KG (1λ), generating an evaluation key evk corresponding to the participant and an encryption private key F corresponding to the participant; on the basis of an encryption method MKHE_Enc (m, F), using the encryption private key F to encrypt said m to obtain an encrypted ciphertext c corresponding to the participant; and sending the evaluation key evk and the encrypted ciphertext c to the server, wherein the server is used for performing homomorphic calculation on the encrypted ciphertext and other encrypted ciphertexts, and the other encrypted ciphertexts are sent to the server by other participants. The present invention solves the technical problem of the lack of a secure and NTRU-based multi-key fully homomorphic encryption solution supporting a super-constant number of participants.

The invention discloses a kano-based internet nursing service demand classification system, and relates to the technical field of internet medical treatment and artificial intelligence, and the system comprises a local Kano model training module, a safety parameter aggregation module, a global model updating and distribution module, a local model updating and federated evaluation module, and a privacy enhancement module. According to the method, a federated learning framework and a multi-layer encryption protocol are adopted, a cross-mechanism data collaboration mechanism is constructed, user data of all participating mechanisms are subjected to local closed-loop processing, model iteration is completed only through encryption parameters, the cross-domain transmission risk of original data is avoided, fusion extraction of multi-source data features is also achieved, and the user experience is improved. The global model integrates nursing demand laws of different regions and different types of institutions to form a demand classification standard covering a whole scene, provides a cross-region and cross-crowd unified demand judgment standard for an Internet nursing platform, and supports cross-domain scheduling and configuration of service resources.

An apparatus of a mobile network, the apparatus comprising: a session management function (SMF) comprising: a means for determining a user plane (UP) security policy for a packet data unit (PDU) session of user equipment (UE), wherein the user plane security policy includes user plane security parameters that specify at least one of an integrity protection portion of a user plane packet to be integrity protected and an encryption portion of the user plane packet to be encrypted; and a means for providing the user plane security policy to a radio access network (RAN) node that serves the UE, indicating the user plane security parameters. The user plane security parameters of the user plane security policy may comprise: a full integrity protection parameter indicating that the entire user plane packet is to be integrity protected; and a full encryption parameter indicating that the entire user plane packet is to be encrypted. The integrity protection portion and the encryption portion may comprise one or more headers of the user plane packet. The SMF may further comprise means for determining the user plane security policy based on user plane protection preferences received from the UE during establishment of the PDU session.

The invention discloses a data security sharing method based on a block chain, and belongs to the technical field of data sharing, and the method comprises the steps: storing shared data into the block chain, and carrying out the classification processing, so as to construct a hierarchical access tree model; performing data screening to obtain a target data set, and setting public safety parameters; a master key and a public key are generated through an authority center, and public key security parameters are calculated; encrypting each child node to obtain encrypted data; constructing a data access sharing model, and generating a user private key to calculate a user private key security parameter; and constructing a public contract in the block chain to output the encrypted data, and realizing data decryption based on the user private key security parameter to complete sharing. According to the method, classification processing is carried out on the data by utilizing an attribute encryption method, and encryption is carried out according to the data type, so that the security of the shared data is further improved; and a hierarchical access tree model is formed, so that a storage path is optimized, and the data sharing rate is improved.

A system and method for method for managing security governance and enforcing compliance across a plurality of cloud environments using an artificial intelligence model is disclosed. The method includes receiving, from the plurality of cloud environments, data indicative of one or more configurations, one or more operations, and one or more security parameters. The method includes generating a unified representation of a multi-cloud environment. The method includes detecting one or more deviations, one or more anomalies, and one or more non-compliance conditions. The method includes determining one or more governance actions. The method includes executing, through one or more control interfaces, at least a portion of the determined one or more governance actions across the plurality of cloud environments. The method includes updating one or more of one or more models, one or more policies, and one or more decision parameters.