253 results about "Security parameter" patented technology

Systems, methods, and apparatuses are described for verifying a user identity in a video conference. A computing device may receive user data and a plurality of security parameters associated with accessing a video conference based on a confidentiality level of the video conference. The computing device may generate a security code that is encoded with user data. The computing device might cause the security code to be displayed on the mobile device for a predetermined time period. The computing device may receive an indication that the first device scanned the security code by using a camera. To verify the identity of a user, the computing device may decode the security code, compare the decoded user data of the decoded security code and expected user data associated with the video conference. The computing device may determine the authenticity of a user video and allow access to the video conference.

The invention provides an anti-quantum identification signature method based on an on-lattice SIS problem. The method comprises the following steps: selecting system safety parameters and other related system parameters; generating a system public parameter and a master key by using the system security parameter and other related system parameters; generating a corresponding public and private key pair by using the user identity ID; the user generates a signature of the message by using the private key; and the verifier verifies the validity of the signature by using the system parameters and the user public key. According to the method, a lattice-based digital signature scheme is constructed by utilizing an SIS difficulty problem on a middle lattice, and quantum attack resistance security is provided for an information system for deploying the algorithm scheme; personal identity information of the user is used for registering and generating public and private keys, the key escrow problem participated by a third party is relieved, and the privacy security of the user is improved.

To provide a safety design device, a safety design method, and a safety design program capable of deriving a security parameter whose safety is guaranteed in encryption design based on a Reused-A-LWE problem using a discrete Gaussian distribution as an error distribution.SOLUTION: A safety design device 1 includes: an inputting portion 11 that receives input of parameters n, m, q, s1, s2 of a Reused -A-LWE problem with a discrete Gaussian distribution as an error distribution; a calculation portion 12 that calculates a parameter sb of the LWE problem with the discrete Gaussian distribution as the error distribution from the parameter s1 and a constant C; an acquiring portion 13 that acquires a security parameter λ of the LWE problem by a calculation formula that guarantees predetermined safety; and an outputting portion 14 that outputs the acquired security parameter λ as a security parameter of the Reused -A-LWE problem.SELECTED DRAWING: Figure 1

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of artificial intelligence, can be applied to business scenes of financial science and technology, medical health and the like, and discloses a parameter security re-calibration and response method, device, equipment and medium, and the method comprises the steps: obtaining parameters of a basic model and a fine-tuned model, and comparing the parameters to obtain differential parameters; performing gradient sensitivity analysis on the differential parameters to generate an abnormal correlation map; detecting the fine-tuned model by using an abnormal association map to determine unsafe parameters; unsafe parameters are processed, safe re-calibration is completed, and basic model parameters are fused to form a re-calibration model; verifying the re-calibration model based on the scenarized security verification set and obtaining feedback; according to the feedback updating strategy, re-calibration is carried out again, and a security application model is generated; and processing the task request through the security application model to obtain a security response result. According to the method, unsafe parameters are identified and corrected through differential analysis and closed-loop recalibration, the safety and the compliance are enhanced while the model performance is kept, and reliable application in a complex scene is ensured.

The application provides a coding method and device, relates to the technical field of media, and comprises the following steps: performing a coding operation on a plurality of display images and a plurality of CRR images to obtain a code stream. First information is used to authenticate to-be-authenticated data to obtain first tree top abstract data. Second information is used to perform signature calculation on the first tree top abstract data to obtain a digital signature. The digital signature is encapsulated into an authentication data set. The code stream comprises a security parameter set and the authentication data set, the security parameter set comprises the first information and the second information, the first information is used to represent an algorithm adopted for generating tree top abstract data, and the second information is used to represent an algorithm adopted for performing digital signature. The first tree top abstract data is tree top abstract data of an encoding end, and the first tree top abstract data comprises tree top abstract data of N main bit streams and / or M CRR slice bit streams, wherein N and M are positive integers.

The invention discloses a kano-based internet nursing service demand classification system, and relates to the technical field of internet medical treatment and artificial intelligence, and the system comprises a local Kano model training module, a safety parameter aggregation module, a global model updating and distribution module, a local model updating and federated evaluation module, and a privacy enhancement module. According to the method, a federated learning framework and a multi-layer encryption protocol are adopted, a cross-mechanism data collaboration mechanism is constructed, user data of all participating mechanisms are subjected to local closed-loop processing, model iteration is completed only through encryption parameters, the cross-domain transmission risk of original data is avoided, fusion extraction of multi-source data features is also achieved, and the user experience is improved. The global model integrates nursing demand laws of different regions and different types of institutions to form a demand classification standard covering a whole scene, provides a cross-region and cross-crowd unified demand judgment standard for an Internet nursing platform, and supports cross-domain scheduling and configuration of service resources.

A system and method for method for managing security governance and enforcing compliance across a plurality of cloud environments using an artificial intelligence model is disclosed. The method includes receiving, from the plurality of cloud environments, data indicative of one or more configurations, one or more operations, and one or more security parameters. The method includes generating a unified representation of a multi-cloud environment. The method includes detecting one or more deviations, one or more anomalies, and one or more non-compliance conditions. The method includes determining one or more governance actions. The method includes executing, through one or more control interfaces, at least a portion of the determined one or more governance actions across the plurality of cloud environments. The method includes updating one or more of one or more models, one or more policies, and one or more decision parameters.

An information processing method is performed by a relay user equipment (UE).The method includes: sending a first request message to a network device, wherein the first request message at least comprises a Relay Service Code (RSC) to identify a relay service; receiving a first response message returned by the network device based on the first request message, wherein a relay UE is authorized to provide the relay service indicated by the RSC, and the first response message includes a security parameter for UE-to-UE relay discovery; after receiving the first response message, performing monitoring of a second request message from a source UE; and in response to the relay UE supporting the relay service indicated by the RSC included in the second request message, broadcasting a third request message according to the second request message and relay information.

A communication method, performed by a first communication apparatus or a chip in the first communication apparatus, includes sending a first request to a first discovery key management network element. The first request is used to request a security parameter. The first request includes an identifier of a proximity-based service. The proximity-based service is a proximity-based service provided by a second communication apparatus for the first communication apparatus. The communication method also includes receiving the security parameter and an identifier of the security parameter from the first discovery key management network element. The communication method further includes receiving a discovery message from the second communication apparatus. The discovery message carries the identifier of the proximity-based service and the identifier of the security parameter. The communication method additionally includes processing the discovery message based on the security parameter corresponding to the identifier of the security parameter.

The invention discloses a data aggregation method with fault tolerance and privacy protection functions, and relates to the technical field of smart power grid data security. The method comprises the following steps: setting security parameters, and issuing public parameters; enabling the intelligent electric meter to randomly select a first private key and a blind factor to calculate and publish a first public key, and enabling the aggregation gateway to randomly select a second private key to calculate and publish a second public key; encrypting the collected power consumption data of the user by using the intelligent electric meter to generate a data report; when the aggregation gateway receives the data report, executing a traditional data aggregation algorithm, and if the data report receives the data report, executing a data aggregation algorithm supporting fault tolerance to generate an aggregation ciphertext; and verifying the validity of the data and the time in the data center, and performing data recovery by using the private key. According to the method, data aggregation with fault-tolerant and privacy protection functions can be realized for two application conditions of a fault ammeter and a fault-free ammeter.

The invention provides a video encryption transmission method and device and a video decryption output method and device. The video encryption transmission method comprises the following steps: constructing a security parameter set according to an encrypted video encryption key and an initialization vector of an image group; performing XOR operation on the first L-1 bytes of the original data byte stream by adopting the stream key to obtain encrypted byte stream data; setting a network abstraction layer header for each network abstraction layer unit after the image group is processed, wherein the network abstraction layer header at least comprises original coding standard information and encryption state information; performing hash signature processing on the encrypted byte stream data of the image group to generate signature data, and packaging the signature data into an authentication network abstraction layer unit; packaging the security parameter set, the network abstraction layer unit provided with the network abstraction layer head, the authentication network abstraction layer unit and the original parameter set of the image group according to the transmission sequence of the original code stream of the image group to obtain an encrypted video code stream; and sending the encrypted video code stream to a receiver.

The invention provides a smart home security authentication management method and system based on a wireless local area network. The method comprises the following steps: constructing a home network security authentication domain; when a new smart home device is accessed, marking the new smart home device as a second smart home device, and obtaining a device authentication state matrix of a home network security authentication domain; generating an authentication challenge vector based on the device authentication state matrix, and sending the authentication challenge vector to the second smart home device and the first smart home device for cooperative verification; and if the authentication challenge vector passes the cooperative verification, updating keys of all smart home devices in the home network security authentication domain according to a preset dynamic key synchronization protocol. Through construction of a home network security authentication domain, intra-domain sharing of security parameters such as a device authentication state and key management is realized, when any key is updated, other devices update synchronously, and associated dependence exists among keys, so that a risk conduction path of a whole network falling situation caused by key leakage of a single device is blocked.

A method, system, or apparatus for generating and / or verifying a signature on a message is provided. The method, system, or apparatus at a signer may include receiving a message, generating a security parameter, generating at least two seeds corresponding to at least two servers based on the security parameter, transmitting the at least two seeds to each server of the at least two servers, determine a private key based on the security parameter or the at least two seeds, and generating, on the message, a signature based on the private key. The method, system, or apparatus at a verifier may include receiving, from a signer, a signature on a message, obtaining at least two partial public keys, determining a full public key based on the at least two partial public keys, and authenticating the signature on the message based on the full public key. Other aspects, embodiments, and features are also claimed and described.

The invention relates to the field of federal learning, in particular to an error correction method, electronic equipment and a computer readable storage medium. An error correction method comprises the following steps: step 1, a system initialization stage: configuring global model parameters of a federal learning architecture, a client asymmetric key pair and security parameters; and step 2, a federal learning training stage: a client calculates an encryption gradient based on local data and adds a timestamp signature, and a server updates a global model through homomorphic aggregation and stores a historical gradient, a model parameter and a client contribution degree index at the same time. The method has the beneficial effect that the robustness and accuracy of the model are improved. Meanwhile, by maintaining the consistency of the model, it can be ensured that federal learning achieves fair and efficient cooperation among multiple participants, and therefore wider application of the federal learning technology is promoted.

The present invention proposes a method for provisioning a credential to a user equipment (10) in a private telecommunications network, the private telecommunications network including a credential holder and a gNB / AMF or eNB / MME, the method comprising: a) sending a provisioning request (40) from the user equipment (10) to the gNB / AMF or eNB / MME (11); b) establishing a PLS key (41) between the user equipment (10) and the gNB / AMF or eNB / MME (11) by physical layer security; c) providing a PLS key to the user equipment (10) via a PLS key; d) transmitting 43 a message from the user equipment 10 to the gNB / AMF or eNB / MME 11, the message including data permitting identification of the user of the user equipment 10 and / or the user equipment 10 and the master key, the message being integrity and confidentiality protected by a PLS key or a key derived from the PLS key; e) transmitting 44 a message from the gNB / AMF or eNB / MME 11 to the credential holder 12, the message including data permitting identification of the user of the user equipment 10 and / or the user equipment 10 and the master key, the message being integrity and confidentiality protected by a PLS key or a key derived from the PLS key. f) verifying in the credential holder (12) the data that allows identifying the user of the user equipment (10) and / or the user equipment (10); g) if the verification is positive, assigning in the credential holder (12) a unique subscription identifier to the user equipment (10) and generating corresponding keys, security parameters, and key derivation functions; h) transmitting the unique subscription identifier from the credential holder (12) to the gNB / AMF or eNB / MME (11). i) transmitting the unique subscription identifier, security parameters, and key derivation function from the gNB / AMF or eNB / MME (11) to the user equipment (10) in a message integrity and confidentiality protected by a PLS key or a key derived from the PLS key (47); j) generating a final key at the user equipment (10), the final key being a credential including the unique subscription identifier, security parameters, and final key (48);Including.

The invention provides a multi-secret confusion mode component homomorphic encryption method, system and device and a medium, and relates to the technical field of homomorphic encryption, and the method comprises the steps: generating a coding mode base set and an encryption mode base set according to safety parameters and system configuration; generating a key associated with the encrypted modulo set; coding the plurality of secret messages to be encrypted and the random number into a plaintext; calculating a real modulo component of the plaintext for each encryption modulo to generate a random list, and replacing a specified column element of a corresponding row in the random list with each real modulo component according to the key to obtain a ciphertext; performing homomorphic operation on the at least two ciphertexts under the encryption mode base to obtain a result ciphertext; and extracting a real mode component from the result ciphertext according to the key, reconstructing a plaintext, and decoding to obtain a secret message after homomorphic operation. According to the method, while multi-message parallel homomorphic calculation is supported, the ciphertext security is enhanced through a confusion mode component structure, and correct recovery of an operation result is ensured.

Methods and apparatus for performing mobility in a wireless communication network. An example method, performed by a network node configured to provide a serving cell to a user equipment, UE, and comprises the step of requesting (6001), from a second network node, security information for potential use by the UE after a mobility procedure to the second network node. The example method further comprises receiving (6002) one or more security parameters from the second network node, in response to the request, and forwarding (6003) the one or more security parameters to the UE, for its use in deriving keys for communication with the second node after performing mobility towards the second node.

This disclosure describes systems, methods, and devices related to secure alert standardization. A device may receive an indication of a security event from a virtual function (VF). The device may detect a type of the security event based on security parameters and assign a unique identifier to the event. The device may transmit an alert message comprising the unique identifier and event details to a baseboard management controller (BMC) using a platform-agnostic communication protocol. The device may store the alert message in a persistent server event log maintained by the BMC.

The present application belongs to the technical field of information security, and particularly relates to a BLS traceable security threshold signature method and system based on distributed key generation. The method comprises the following steps: S1, generating a bilinear pairing environment, and initializing public security parameters; S2, determining a group mapping relationship based on a symmetric balanced incomplete block design, each participant interacting in a group to generate respective key shares and a system global public key; S3, a signer performing partial signature and zero-knowledge proof corresponding to the partial signature on a message according to the corresponding key share; S4, an aggregator collecting and verifying the partial signature, screening out an effective signature set, aggregating to generate a final signature, and generating a commitment ciphertext; S5, a verifier verifying the final signature, and confirming the signature as valid if the verification is passed; S6, when the verification is not passed, a tracing mechanism is activated, and a tracer traces the signature group; and S7, according to the group mapping relationship, regularly performing active refreshing of the key shares.

The application provides a quantum key distribution security strength enhancement method. The method comprises the following steps: step 1: when the security parameter epsilon of the generated original key X is greater than the security parameter required by the actual application, a new key Y is generated; step 2: a self-defined security enhancement function is used, the key X and the key Y are input as independent variables into the security enhancement function for operation, and the operation result is used as the final key Z. When the security parameter of the generated original key is greater than the security parameter required by the actual application, the security strength is enhanced by using M independent original keys, and the specific operation comprises: the M independent original keys are input as independent variables into the security enhancement function for operation, and the operation result is used as the final key Z.

The application provides a business data security protection method and system for digital enterprise management, which comprises the following steps: obtaining an access request sequence initiated by a target user on a business operation terminal, generating a dynamic access control policy vector according to a historical behavior track associated with an access operation identifier, and analyzing the dynamic access control policy vector through a policy decoder to generate a real-time access permission instruction; based on the real-time access permission instruction, homomorphic encryption mapping is performed on sensitive data segments in the request context information to generate a ciphertext transmission channel, and the ciphertext transmission channel is synchronized with a security parameter of a cross-department joint analysis model; a federal learning framework is called to perform multi-modal feature fusion on a real-time operation flow of the business operation terminal, an abnormal operation confidence score is generated, and when the score exceeds a dynamic threshold, a cross-level interception protocol is triggered and the current session state is rolled back to a safe baseline version. The application can improve the accuracy and response timeliness of anomaly detection.

The application provides an anti-quantum key packaging method with compact reusability, which comprises the following steps: in step 1, a public key encryption scheme with IND-CPA security is designed based on the RLWE problem on a non-two-power cyclotomic ring through a security parameter, public parameters, a public key and a private key are generated, and the public parameters and the public key are published; in step 2, a secret random tape is used to encrypt a plaintext message into a ciphertext based on the obtained public parameters and the public key; and in step 3, the ciphertext is decrypted through the private key to obtain a corresponding plaintext. The method uses the Nussbaumer technique to realize the reusable NTT algorithm, uses the Karatsuba technique to realize the fast multiplication on a small convolution ring, and designs the reusable NTT algorithm for the public ring structure, and has the advantages of simple realization, low resource consumption and the like in the software and hardware implementation and optimization.

This invention discloses a time-constrained, secure, and controllable data flow method in a cloud-edge environment, belonging to the field of mobile edge cloud computing. Specifically, it involves: First, establishing a communication scenario including an authorizing agency for both the sender and receiver, the sender, edge nodes, a cloud server, and the receiver. Given security parameters, the authorized agency for the receiver runs a global initialization algorithm, outputting public parameters and domain public / private keys. Then, the authorized agency for the sender inputs the public parameters and domain public key, outputting its own domain public / private key. For each sender, an access structure and a valid time interval are assigned, and an encryption key is generated. For each receiver, an attribute set is assigned, and a decryption key is generated. Finally, the sender runs the encryption algorithm and outputs the original ciphertext; the edge node verifies the sender's sending authority and outputs the cleaned ciphertext; and the legitimate receiver decrypts and outputs the plaintext. This invention meets the requirements for secure and controllable data flow in a cloud-edge environment.

This application provides a method and apparatus for jointly evaluating security boundaries and communication performance based on 5G-A industrial internet. The method includes: acquiring current network load data and current security policy parameter combinations, and inputting the current network load data and current security policy parameter combinations into a nonlinear latency prediction model to obtain the current overall latency; utilizing the current security policy parameter combinations and the current overall latency to generate a current security-communication global score; when the current security-communication global score is lower than a preset threshold, determining the fine-tuning amount of each security parameter from a multidimensional coupling relationship matrix library based on the current network load data and the current security policy parameter combinations to obtain the optimal security policy parameter combination. Through the nonlinear latency prediction model and the multidimensional coupling relationship matrix library, coupled modeling of security and communication is achieved; it also enables comparison and integration of security and communication in the same dimension, achieving synergistic optimization of security and communication resources.

Secure computing infrastructure for electronic messages is described herein. A system can intercept an electronic message for transmission to a recipient device. The system can determine, prior to transmission of the electronic message for receipt by the recipient device, a category of the recipient device based on a domain name associated with an internet protocol address of the recipient device. The system can generate a plurality of content segments based on overlapping sequences of words in the electronic message. The system can identify, using machine learning models and based on the category of the recipient device, a security parameter to apply to the electronic message. The system can detect, using machine learning models, an incompatibility between a content segment and the security parameter. The system can block, responsive to the detection of the incompatibility, the transmission of the electronic message for receipt by the recipient device.

The application relates to the technical field of information security, in particular to an adapter signature method, a signature device, electronic equipment and a storage medium. The application determines and discloses shared public parameters based on preset security parameters, the shared public parameters including two prime numbers, a generating element, a hash function, a specific message and an arbitrary message; a key pair, including a public key and a private key, is generated for a signer based on the shared public parameters; an instance and a witness associated with NP relationship are determined for a verifier and the instance is disclosed; a pre-signature is generated by the signer according to the shared public parameters, the private key and the instance; the effectiveness of the pre-signature is verified by the verifier according to the shared public parameters, the public key and the instance; a full signature is generated by the verifier according to the shared public parameters, the public key, the pre-signature and the witness; the effectiveness of the full signature is verified by the verifier according to the shared public parameters and the public key; and the witness is extracted from the pre-signature and the full signature by the signer according to the shared public parameters, thereby improving the security of the adapter signature method.

The embodiment of the invention discloses a Beidou navigation authentication receiving method and device. A specific embodiment of the method comprises the following steps: generating a system public parameter and a master key according to a security parameter and the maximum number of authorized users; inputting the obtained user identity number, the system public parameter and the master key into a key generation algorithm to obtain a user private key, and transmitting the user private key to the user through a secure channel; comparing the navigation message hash value with a preset hash value to obtain a comparison result; and in response to determining that the comparison result represents that comparison is consistent, determining the navigation message as a navigation message signal which is not tampered. According to the embodiment, the public key management process is simplified, and the encryption efficiency is improved. The decryption authority of the illegal user can be cancelled in time, and the illegal user is effectively prevented from stealing and tampering the Beidou navigation message.

A computer-implemented method that includes: Output (610) of an instruction containing information about processing cores by one or more processors (104, 105) of a data processing system (102), wherein the information about processing cores includes positions of one or more processing cores of the data processing system, wherein the processing cores of the data processing system include logical cores and physical cores, and wherein the instruction further includes a user selection; Setting (620) security parameters for the information returned by the instruction by one or more processors based on user selection, wherein the returned information includes topological information for mapping the logical cores to the physical cores; Retrieving (630) the topological information by one or more processors based on the information which includes the positions and the safety parameters; and Using (660) the topological information by one or more processors via an operating system running on the data processing system to map the logical cores to the physical cores.

The application discloses a data aggregation method with fault tolerance and privacy protection functions and relates to the technical field of smart grid data security. The method comprises the following steps: setting security parameters and publishing public parameters; letting smart meters randomly select a first private key and a blind factor to calculate and publish a first public key, and letting an aggregation gateway randomly select a second private key to calculate and publish a second public key; using the smart meters to encrypt user power consumption data collected by the smart meters to generate a data report; when the aggregation gateway receives the data report, if the data report is, a traditional data aggregation algorithm is executed, and if the data report is, a data aggregation algorithm supporting fault tolerance is executed to generate aggregation ciphertext; and the validity of data and time is verified in a data center, and data is recovered by using a private key. The application can realize data aggregation with fault tolerance and privacy protection functions for two application conditions of a faulty meter and a non-faulty meter.