79 results about "Signature file" patented technology

The invention discloses a multi-firmware refreshing method and device, electronic equipment and a storage medium, and relates to the technical field of computers, a target mirror image file comprises firmware files of multiple target firmware, and the multi-firmware refreshing efficiency is improved; verifying the signature file and the standard hash value of the target mirror image file, if verification succeeds, matching firmware metadata in the target mirror image file with hardware metadata, and if matching succeeds, writing a target version firmware file in the target mirror image file into corresponding target firmware. The security of the target mirror image file and the version compatibility of the target firmware and the hardware configuration are ensured; the multiple target version firmware files are sequentially written into the corresponding target firmware according to the multi-firmware refreshing sequence, and the version dependence problem during multi-firmware refreshing is solved; and if the current target version firmware file fails to be written, rollback of multiple target firmware is supported, and the risk that equipment is unavailable due to the fact that partial firmware fails to be updated is avoided.

A talking head digital identity immutable dual authentication method, comprising: publishing a talking head show, downloading talking head file, talking head show file, signature files from a server into a playback device; downloading talking head hash and talking head show hashes from a blockchain into the playback device; using a talking head and talking head show public key to validate talking head and talking head show signatures; determining whether the talking head and talking head show signatures are correct, and if correct, a talking head hash and talking head show hash are checked against hashes from the blockchain; incorporating a 3D mesh model into the talking head show; if the calculated talking head hash and the calculated talking head show hash of files from the server and the hashes of the talking head and talking head show from the blockchain match, respectively, then playback of the talking head show plays.

The invention relates to the technical field of digital signature, and particularly provides a software upgrade patch signature and verification method, device and equipment, and the software upgrade patch signature method can comprise the following steps: when it is confirmed that a selected digital certificate is valid and the digital certificate is used for making an upgrade patch, verifying the upgrade patch; signing a product upgrade package by using the digital certificate to obtain a signature value; wherein the signature value is stored in an upgrade package signature file, and the digital certificate is stored in a certificate file; and encrypting and compressing the product upgrade package, the upgrade package signature file and the certificate file by using a target password and a compression command to obtain a compressed upgrade package. According to the embodiment of the invention, the transmission security of the upgrade package can be improved.

The invention discloses a vehicle-mounted software upgrading method and device and a computer program product, and the method comprises the steps: generating a feature factor based on vehicle identification information; generating a verification list file; generating an integrity verification file; performing digital signature on the integrity verification file to generate a signature file, and packaging the verification list file, the integrity verification file, the signature file and the public key certificate into a verification file package; the vehicle machine reads the verification file package and verifies the consistency of the hash values in the verification list file and the integrity verification file, the validity of the signature file and the legality of the public key certificate; and when all verification is passed, dynamically calculating the hash value of each firmware sub-packet based on the feature factor, matching the hash value with the hash value of each firmware sub-packet in the verification list file, and if the matching is successful, executing upgrading. According to the method, the feature factors and a centralized verification mechanism are introduced, so that the safety and the convenience of off-line upgrading of the vehicle-mounted USB are remarkably improved.

The present application discloses a basic input / output system security protection method, apparatus, device and medium, relating to the field of computer system security technology. The method comprises extracting a firmware capsule file from a basic input / output system image file to achieve independent verification of the update content, so that the system can seamlessly adapt to dynamic firmware updates and avoid compatibility issues caused by changes in signature rules. The firmware capsule file includes a first signature and a signature file, and the signature file includes a core code file and a second signature. This layered design allows for dynamic adjustment of verification strategies based on security requirements at different levels. The first layer verifies the integrity of the signature file to ensure that the firmware capsule file has not been tampered with. The second layer verifies the integrity of the core code file to ensure that the core functions have not been tampered with, thereby enhancing dynamic adaptation capabilities.

The invention provides a program installation method based on asymmetric encryption and related equipment, and relates to the technical field of asymmetric encryption communication encryption, if security verification results of a first CA certificate of a PLC and a second CA certificate of an engineering station are both secure and credible, the PLC and the engineering station perform bidirectional TLS verification; if the handshake verification succeeds, the PLC negotiates with the engineering station to generate a temporary symmetric encryption key, and constructs an encryption session channel; the engineering station exports a target control program, processes the target control program to generate a signature file, and sends the signature file to the programmable logic controller by using the encrypted session channel, the programmable logic controller verifies the signature file, and if the verification is successful, the target control program is installed. According to the method, the private key of the PLC is stored in the encryption module, dual-mechanism authentication of the TLS and CRL check mechanism is adopted, and when the program is installed, the installed program is subjected to Hash calculation by using the trusted module and is bound with the timestamp, so that the installed program is prevented from being forged and tampered, whether the program is installed for the first time or not is checked, and the safety of program installation is ensured.

A system and method for content aware monitoring of an output of a media channel by a media system is provided herein. In at least one embodiment, the method comprises: receiving a media assertion schedule comprising a schedule of assertion checks which allow validating that the output of the media channel, by the media system, is synchronized with an expected media channel output; receiving, from a signature generating module, at least one observed signature file; determining that the timestamp data, in each of the at least one received observed signature file, aligns with at least one timecode included in an assertion check in the media assertion schedule; identifying an assertion condition included in the assertion check; and validating the assertion condition using the observed media frame signatures included in each of the at least one received observed signature file.

The invention provides a score card model analysis processing method and system, electronic equipment and a storage medium, and relates to the field of model processing.The method comprises the steps that a score card model based on a text form is obtained, and the score card model is compiled into an intermediate byte code file through a compiler; performing encryption processing on the intermediate byte code file to obtain an encrypted file; performing digital signature on the encrypted file to generate a signature file; generating a decryption tool and encoding the public key of the asymmetric key in the decryption tool to obtain a target decryption tool; and sending the encrypted file, the target decryption tool and the signature file to a data end for use. According to the method, the score card model can be ensured to be always in an encrypted state in the whole delivery process, and model logic and algorithm details are prevented from being leaked; the data end can call and use the model through the target decryption tool on the premise of not decrypting the specific content of the model, so that not only is the use convenience of the data end ensured, but also the risk that the model is accessed without authorization can be avoided.

The embodiment of the invention provides a full generation cycle carbon data credibility verification method and system and related equipment, and belongs to the technical field of information security. According to the method, the data abstract about the carbon data from the data acquisition terminal is acquired, and the zero-knowledge certification technology is adopted to perform carbon data credibility rule verification on the data abstract to generate the certification file, so that the privacy of the carbon data authenticity verification process is improved. The proof file and the data abstract are sent to the trusted mechanism equipment for digital signature operation, so that a signature file from the trusted mechanism equipment is received, the signature file carries a timestamp and comprises the signed proof file and the signed data abstract, the credibility of the carbon data is improved, and the reliability of the carbon data is improved. And the signature file is stored in an immutable log system adopting a hash chain recording mechanism, so that the carbon data can be prevented from being tampered, and the carbon data interaction efficiency can be improved through a centralized storage mode.

The embodiment of the invention provides an electronic signature method and device, electronic equipment and a storage medium. The method comprises the steps that a to-be-signed file is acquired; implicit signature processing is carried out on the to-be-signed file to obtain a signed file, and preprocessing operation is carried out on the signed file to obtain a preprocessed file; sending the pre-processed file to each client terminal, so that the client terminal performs signature operation on the pre-processed file to obtain a temporary signature file; the temporary signature files returned by the client terminals are received, the temporary signature files are subjected to seal combining processing, the target signature file corresponding to the to-be-signed file is obtained, and it is guaranteed that countersigning is independent and disordered and does not affect one another through continuous increasing of signature domain object identifiers; the integrity of the original document is guaranteed through the implicit signature in the initialization stage, the integrity of incremental data is guaranteed through the countersigning signature data block, and the safety and accuracy of the signature file are improved.

The present application discloses a digital signature method, system, computer-readable storage medium and electronic device. The method includes: obtaining a user's digital signature instruction; based on the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal receives the first signature file and the signatory information; the mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, the embodiment of the present application can only carry a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed file, eliminating the inconvenience caused by the need to use a dedicated device to store the digital certificate, and greatly improving the convenience and experience of users using digital signatures.

The technology relates to a computer-implemented method for automated deployment of at least one computing infrastructure comprising at least one un-provisioned server and at least one switch. The method comprises accessing a computer-readable medium comprising instructions which, upon being operated by a processor, causes execution of: a server management module, and a key management module; wherein, during each booting of the at least one server, the server management module compares a series of at least one signature, to signatures stored in a signatures file, and depending on the result of the comparison, the server management module validates the loading of the operating system if all the signatures of the series are listed in the signatures file, such that only the totally signed operating system is loaded during the booting of the at least one server.

The present application relates to the technical field of vehicles, and discloses a software updating method and device for a vehicle controller, a digital signature system, and a computer program product. The method comprises: acquiring an identifier of a target controller, an identifier of a target digital signature algorithm, and a digest of a software update package of target software; on the basis of the identifier of the target controller and the identifier of the target digital signature algorithm, searching a first database for a private key in a first key pair, wherein the first database is used for storing private keys in key pairs applied for different controllers and different digital signature algorithms; and generating a first signature file on the basis of the digest of the software update package of the target software and the private key in the first key pair. By performing unified online management on key pairs, private keys in key pairs can be queried online when signature files are generated. Compared with offline management and private key query, the present application improves the efficiency of searching for key pairs, thereby improving the efficiency of generating signature files.

The present invention relates to a linear network coding method based on BLS. The source node divides the file to be signed into several file blocks and represents them as a prime domain #imgabs0# k dimensional vectors, which are then augmented to become a set of linearly independent vectors; a subspace generated based on this set of vectors is signed, and a label for the subspace and a signature for each basis vector are generated. The signatures are loaded into a data packet and sent to a downstream node; after receiving the data packet, the intermediate router or the destination node verifies the signature of the data packet from the same source node; the intermediate router linearly combines all verified data packets to form a new data packet and sends it to the downstream node; if the destination node receives a predetermined number of verified data packets, it can parse the original data sent by the source node. The present invention can not only resist pollution attacks in network coding and ensure data integrity and authenticity, but also reduce user computing complexity and ensure secure and efficient data transmission.

One or more embodiments of the invention provide a software product security protection and verification method and device, a storage medium and a product. The security protection method for the software product comprises the following steps: analyzing a to-be-processed software product to obtain file structure information and file content of a file; generating an encryption key based on the file structure information of the files, encrypting the file content of each file by using the encryption key to obtain encrypted files, and combining all the encrypted files into an encrypted data packet according to the file structure information of the files, the file structure of an encrypted file in the encrypted data packet is the same as that of a file in the software product; signing the file structure information and the file content of the file by using a private key specified by a software product platform party to generate a signature file; and combining a public key corresponding to the private key, the encrypted data packet and the signature file to obtain an output data packet of the software product. And the security and the integrity of the software product are protected.

This invention discloses a method, system, apparatus, and online payment clearing platform for processing reconciliation files. The method includes: generating a key file corresponding to a terminal; generating a first reconciliation file based on the transaction flow data of the terminal within a transaction period; encrypting the first reconciliation file based on a first digital envelope included in the key file to generate a second reconciliation file; performing hash signature processing on the key file to generate a first signature file; and performing hash signature processing on the second reconciliation file to generate a second signature file; and sending the key file, the first signature file, the second reconciliation file, and the second signature file to the terminal, so that the terminal can perform business reconciliation processing based on the received files. Encrypting the reconciliation file through a two-layer data encryption mechanism improves the security of the information data in the reconciliation file; the two-layer data signature mechanism enhances the non-repudiation and tamper-proof capabilities of the reconciliation file.

The application discloses a one-key automatic signature method and system based on a CPE program small file, relates to the field of CPE programs, and comprises the following steps: receiving signature parameters input by a user through a graphical interface, including a signature branch, a key list, a storage capacity and a to-be-signed module path; dynamically matching the key list according to the signature branch, and converting the parameters into digital identifiers recognizable by a server end; after the to-be-signed file is standardizedly renamed, uploading the file to a Linux server through an SCP protocol, and calling a server signature interface to execute signature; after the signature succeeds, the system renames the file and automatically downloads the file to a local specified path. The system is composed of a parameter input module, a dynamic display module, a file processing module, a signature execution module and a security verification module, realizes the automation of small file signature, cross-platform compatibility and safe transmission, significantly simplifies the cumbersome process of small file burning and signature of CPE equipment, and improves signature efficiency and security.

The present invention discloses a two - level threshold signature method and device for hierarchical management. The method includes: obtaining a file M to be signed and configuring roles participating in the signature; a trusted center D selects parameters for the file M to be signed; signature personnel are selected, and each signature personnel uses their respective sub - keys to sign the file M to be signed; a signature organizer C receives the signature results of each signature personnel for the file M to be signed and verifies its compliance; the verified signature results are synthesized, and the signature organizer C uses its own private key D c to sign the synthesized signature result to obtain a final signature result, and the final signature result is published to the signature receiver; the signature receiver verifies the signature compliance of the signature organizer C based on the public key E c of the signature organizer C and verifies the signature compliance of each signature personnel. This method obtains the signature of the file and conducts compliance verification, and is applicable to the hierarchical management system.

The invention relates to a digital asset secure storage management method and system, and the method comprises the steps: receiving a private key call request of a user, searching a fragmentation coordinate set and fragmentation verification metadata of a target private key according to the private key call request, initiating biological information verification and environment credibility verification, carrying out the chaotic refreshing when the verification is passed, and carrying out the secure storage of the target private key. And obtaining a dynamic authentication token, activating an HSM channel to access the target private key fragment, and securely transmitting the target private key fragment from the storage position to the trusted execution environment for integrity and legality verification. And when the verification is passed, calling a white-box cryptographic engine to reconstruct the target private key fragment into a target private key, generating a digital signature file according to the reconstructed target private key, and outputting the digital signature file in one direction through an electromagnetic shielding optical fiber. Fusing the target private key fragment called this time, generating a fragment fusing list, recording the fragment fusing list in the digital signature file, and updating the index of the private key fragment; and calling the MPC engine to drive the digital assets to flow unidirectionally through the physical switch gateway.

The invention discloses a container mirror image authentication method and system in an offline environment, a medium and a product, and relates to the technical field of computer information security, and the method comprises the steps: at a target client, randomly generating a second check number B; based on the first check number A and the second check number B, a public and private key pair P2 is generated through a seed generation function and a first key generation algorithm, a private key of the public and private key pair P2 is used for conducting mirror image signature on the container, a signature file is generated, and the signature file is packaged and encrypted to generate a mirror image encryption compression package; at the target server side, decompressing the to-be-verified mirror image encryption compressed package to obtain a to-be-verified second verification number B, user information and environment information; and on the basis of the first check number A and the obtained second check number B to be verified, regenerating the public and private key pair P2 to be verified, and verifying the signature file by using the public key of the public and private key pair P2. The method can solve the problems that in the prior art, during container mirror image authentication, public key trust is difficult to establish, and the identity of a maker cannot be accurately traced to the source.

An image management method includes: receiving information about a signer and information about a target image that are sent by a first terminal device, where the signer is an object designated to sign the target image; obtaining a signature file based on the information about the signer and the information about the target image; and if a first digest that is of the target image and is returned by a container platform matches a second digest obtained based on the signature file, indicating the container platform to allow use of the target image to start a container.

The present application discloses a multi-firmware refresh method, device, electronic device and storage medium, which relate to the field of computer technology. The method includes a target image file including a firmware file of multiple target firmwares, thereby improving the efficiency of multi-firmware refresh; verifying the signature file and the standard hash value of the target image file; if the verification is successful, matching the firmware metadata in the target image file with the hardware metadata; if the matching is successful, writing the target version firmware file in the target image file into the corresponding target firmware, thereby ensuring the security of the target image file and the version compatibility of the target firmware with the hardware configuration; writing the multiple target version firmware files into the corresponding target firmware in sequence according to the multi-firmware refresh order, thereby solving the version dependency problem during multi-firmware refresh; if the current target version firmware file fails to be written, supporting the rollback of multiple target firmwares, thereby avoiding the risk of device unavailability due to the failure of some firmware updates.

The embodiment of the invention provides a memory testing method and electronic equipment. The memory test method comprises the steps of storing a target signature file and a memory test script in a target test partition when to-be-tested equipment is in a factory test mode; writing or deleting a start test flag bit in the random access memory based on the trigger state of the preset combination key; in the power-on self-test process of the basic input and output system, detecting whether the start test flag bit exists in the random access memory or not; if the test starting flag bit exists in the random access memory, the device to be tested is controlled to start the target test partition to execute memory test operation, so that automatic test of the memory is achieved, and the memory test efficiency is remarkably improved.

The present application relates to the technical field of encryption, and discloses an in‑vehicle infotainment system update package encryption device, decryption device, encryption method and decryption method. The encryption device is at least used for: in response to the creation of an in‑vehicle infotainment system update package, using a first asymmetric encryption algorithm to sign the in‑vehicle infotainment system update package to obtain a signature file; in response to the generation of the signature file, using a preset symmetric encryption algorithm to generate encryption parameters; in response to the generation of the encryption parameters, using the encryption parameters to encrypt the signature file to obtain an encrypted file; in response to the generation of the encrypted file, writing the encryption parameters into a parameter file, and using a second asymmetric encryption algorithm to encrypt the parameter file to obtain an encrypted parameter file; and at least upon the generation of the encrypted file and the encrypted parameter file, generating an encrypted in‑vehicle infotainment system update package on the basis of the encrypted file and the encrypted parameter file. In the present application, the in‑vehicle infotainment system update package can be signed and encrypted before performing an offline update for an automotive intelligent cockpit, helping to improve the security of the in‑vehicle infotainment system update package.

The application provides a general cooperative channel image file processing method, system and device. The system comprises: a business access interface, configured to receive a file processing request initiated by at least one business invoker, and call back a system processing result to the corresponding business invoker; a unified gateway module, configured to authenticate, limit flow and route distribute the received file processing request; a core service module, configured to receive the file processing request routed and distributed by the unified gateway module, acquire an image file from a cooperative channel party system according to the file processing request, and perform file processing on the image file; an adaptation module, configured to provide the core service module with a unified service call and file processing interface for communication with different cooperative channel party systems; and a storage module, connected with the core service module and the adaptation module, configured to centrally store image files, signature files and structured data required for system operation.

A method for secure inter-process communication within a computer operating system. The process modules (10, 20) each comprise: a process executable (12, 22) previously signed by asymmetric signature with a public / private key pair; said public key (14, 24); and a module identifier (16, 26). A signature file (30) comprises: the process signatures (32) of all the process modules, a signature of the signature file (36), and a signature of a coordinator component (34). A secure coordinator component (40) controls the exchange of data between the process modules after creating a read / write pipe pair for each process module. The modules and the coordinator component authenticate each other using the signatures stored in the signature file (30).For the interconnection, a requesting module (RM) transmits to the coordinating component (40), via the respective pair of pipes previously created, a message and a module identifier (26) of a target process module (TM) receiving the message. The coordinating component (40) transmits the message to the target process module (TM) via the respective pair of pipes previously created for that target module (TM). (Figure to be published: Figure 1).

The present invention relates to the technical field of electronic seals, and discloses an intelligent seal self-service system and method, wherein the system comprises an electronic seal usage management module, an electronic seal signing position positioning module, and an electronic signature file generation module; the identity information of the seal user during the electronic seal usage process is recorded without a trace based on the electronic seal image information and the facial feature image information of the seal user, thereby realizing the scientific and intelligent construction of the electronic seal usage traceability information and improving the security of the electronic seal; the electronic seal signing position information of different types of seal documents is accurately matched based on the seal document type identification information combined with an intelligent search algorithm and standard settings, thereby realizing the accurate positioning of the electronic seal signing position based on the seal document type, thereby improving the applicability and intelligence of the seal self-service system.

The invention provides a signature anti-counterfeiting identification method which can be applied to the technical field of artificial intelligence. The signature anti-counterfeiting identification method comprises the following steps: detecting a signature area on a signature file, and extracting a signature image from the signature area; inputting the signature image into a preset neural network model, and outputting an identification result of the signature image; wherein the preset neural network is obtained by training based on a multi-modal training set, the multi-modal training set comprises a plurality of variant images of a plurality of signatures, and the step of generating the multi-modal training set comprises the following sub-steps: obtaining original images of a plurality of signatures of a plurality of different users; performing different-scale expansion on the signed original image and adding a noise factor to obtain a plurality of variant images with different noises and different scales; and calculating the similarity between the variant images and the original image, screening the variant images with the similarity greater than a first threshold, and adding the screened variant images into a multi-modal training set. The invention further provides a signature anti-counterfeiting recognition device and equipment, a storage medium and a program product.

The invention relates to a television starting method and device based on a cryptographic algorithm, equipment and a storage medium. The method comprises the following steps: when the television equipment is powered on, collecting an equipment identifier and a running timestamp of the television equipment, generating a dynamic signature file by utilizing an SM2 algorithm based on the equipment identifier and the running timestamp, storing the dynamic signature file in an equipment trusted execution environment, and verifying the dynamic signature file before an operating system of the television equipment is started, and if the verification is passed, starting an operating system, verifying the to-be-upgraded software package before software upgrading of the television equipment, and if the verification is passed, carrying out software upgrading. According to the application, an Android RSA certificate trust system is replaced by a state secret certificate trust system, and signature and signature verification are carried out on core scenes such as smart television security startup, smart television OTA upgrade, smart television application trusted release, smart television application upgrade and the like, so that security startup and autonomous controllability of the smart television starting from a chip TEE trust root are realized.

The application discloses a file processing method and device and electronic equipment. Relates to the field of information security, the method comprises the following steps: receiving the target file information sent by the first user through the first user terminal; in the case that the first string and the first verification data are correct, the first string is sent to the second user terminal; receiving the verification file sent by the second user through the second user terminal, and identifying the verification file according to the second user information and the second verification data to obtain an identification result; in the case that the identification result is correct, the to-be-signed file and the first string are sent to the second user terminal, and the feedback information sent by the second user terminal is received; in the case that the signed file is normal, the signed file is stored in the database. Through the application, the problem of low security of the electronic contract in the related art by setting the password to encrypt the transmission is solved.