136 results about "Signature file" patented technology

The invention discloses a multi-firmware refreshing method and device, electronic equipment and a storage medium, and relates to the technical field of computers, a target mirror image file comprises firmware files of multiple target firmware, and the multi-firmware refreshing efficiency is improved; verifying the signature file and the standard hash value of the target mirror image file, if verification succeeds, matching firmware metadata in the target mirror image file with hardware metadata, and if matching succeeds, writing a target version firmware file in the target mirror image file into corresponding target firmware. The security of the target mirror image file and the version compatibility of the target firmware and the hardware configuration are ensured; the multiple target version firmware files are sequentially written into the corresponding target firmware according to the multi-firmware refreshing sequence, and the version dependence problem during multi-firmware refreshing is solved; and if the current target version firmware file fails to be written, rollback of multiple target firmware is supported, and the risk that equipment is unavailable due to the fact that partial firmware fails to be updated is avoided.

A talking head digital identity immutable dual authentication method, comprising: publishing a talking head show, downloading talking head file, talking head show file, signature files from a server into a playback device; downloading talking head hash and talking head show hashes from a blockchain into the playback device; using a talking head and talking head show public key to validate talking head and talking head show signatures; determining whether the talking head and talking head show signatures are correct, and if correct, a talking head hash and talking head show hash are checked against hashes from the blockchain; incorporating a 3D mesh model into the talking head show; if the calculated talking head hash and the calculated talking head show hash of files from the server and the hashes of the talking head and talking head show from the blockchain match, respectively, then playback of the talking head show plays.

The invention relates to the technical field of digital signature, and particularly provides a software upgrade patch signature and verification method, device and equipment, and the software upgrade patch signature method can comprise the following steps: when it is confirmed that a selected digital certificate is valid and the digital certificate is used for making an upgrade patch, verifying the upgrade patch; signing a product upgrade package by using the digital certificate to obtain a signature value; wherein the signature value is stored in an upgrade package signature file, and the digital certificate is stored in a certificate file; and encrypting and compressing the product upgrade package, the upgrade package signature file and the certificate file by using a target password and a compression command to obtain a compressed upgrade package. According to the embodiment of the invention, the transmission security of the upgrade package can be improved.

The invention provides a file processing method and computer equipment, and the method comprises the steps: obtaining file information of a first file in response to a first operation of a user; based on the file information of the first file, extended attribute information of the first file is obtained, and the extended attribute information comprises file path information of a second file; wherein the relationship between the first file and the second file comprises at least one of the following relationships: the first file is a backup file of the second file, the second file is a source file of the first file, the first file is a signature file of the second file, and the first file is a file generated after the second file runs abnormally; or the second file is an executable file of the first file; and processing the second file based on the file path information of the second file. Through the file processing method provided by the invention, the second file corresponding to the first file can be accurately determined.

The invention provides a file signature method, verification method and device based on an anti-counterfeiting image, and relates to the technical field of computers. The file signature method based on the anti-counterfeiting image comprises the following steps: performing hash processing on a to-be-signed file to obtain a hash value of the to-be-signed file; encrypting the hash value based on the symmetric encryption key to obtain an encrypted hash value; based on the first asymmetric encryption public key, encrypting the symmetric encryption key to obtain an encryption key; generating an anti-counterfeiting image based on the encrypted hash value and the encryption key; and embedding the anti-counterfeiting image into the to-be-signed file. According to the file signature method, verification method and device based on the anti-fake image, the anti-fake and tamper-proof capabilities of the file are improved, and the anti-fake performance of the file can be further improved while normal display and transmission of the file are not affected.

The invention discloses an encryption device, a decryption device, an encryption method and a decryption method for a vehicle upgrade package, and belongs to the technical field of encryption. The encryption device is at least used for responding to the preparation of the in-vehicle infotainment upgrade package, and signing the in-vehicle infotainment upgrade package by using a first asymmetric encryption algorithm to obtain a signature file; generating encryption parameters by using a preset symmetric encryption algorithm in response to the generation of the signature file; in response to generation of encryption parameters, encrypting the signature file by using the encryption parameters to obtain an encrypted file; in response to generation of an encrypted file, writing the encryption parameter into a parameter file, and encrypting the parameter file by using a second asymmetric encryption algorithm to obtain an encrypted parameter file; and at least after the encryption file and the encryption parameter file are generated, generating an in-vehicle encryption upgrade package based on the encryption file and the encryption parameter file. According to the method, before offline upgrading of the intelligent cabin of the automobile is executed, signature and encryption can be executed on the vehicle-mounted terminal upgrade package, so that the security of the vehicle-mounted terminal upgrade package can be improved.

The invention discloses a vehicle-mounted software upgrading method and device and a computer program product, and the method comprises the steps: generating a feature factor based on vehicle identification information; generating a verification list file; generating an integrity verification file; performing digital signature on the integrity verification file to generate a signature file, and packaging the verification list file, the integrity verification file, the signature file and the public key certificate into a verification file package; the vehicle machine reads the verification file package and verifies the consistency of the hash values in the verification list file and the integrity verification file, the validity of the signature file and the legality of the public key certificate; and when all verification is passed, dynamically calculating the hash value of each firmware sub-packet based on the feature factor, matching the hash value with the hash value of each firmware sub-packet in the verification list file, and if the matching is successful, executing upgrading. According to the method, the feature factors and a centralized verification mechanism are introduced, so that the safety and the convenience of off-line upgrading of the vehicle-mounted USB are remarkably improved.

The present application discloses a basic input / output system security protection method, apparatus, device and medium, relating to the field of computer system security technology. The method comprises extracting a firmware capsule file from a basic input / output system image file to achieve independent verification of the update content, so that the system can seamlessly adapt to dynamic firmware updates and avoid compatibility issues caused by changes in signature rules. The firmware capsule file includes a first signature and a signature file, and the signature file includes a core code file and a second signature. This layered design allows for dynamic adjustment of verification strategies based on security requirements at different levels. The first layer verifies the integrity of the signature file to ensure that the firmware capsule file has not been tampered with. The second layer verifies the integrity of the core code file to ensure that the core functions have not been tampered with, thereby enhancing dynamic adaptation capabilities.

The invention discloses a file processing method and device and electronic equipment. The method comprises the following steps: receiving target file information sent by a first user through a first user side; under the condition that both the first character string and the first verification data are correct, sending the first character string to a second user side; receiving a verification file sent by a second user through a second user side, and identifying the verification file according to the second user information and the second verification data to obtain an identification result; under the condition that the identification result is correct, sending the to-be-signed file and the first character string to a second user side, and receiving feedback information sent by the second user side; and under the condition that the signed file is not abnormal, storing the signed file in a database. According to the method and the device, the problem of relatively low security of encrypted transmission of the electronic contract by setting a password in the related technology is solved.

The present application discloses a data transmission method based on a symmetric key pool, including: first, the sending end and the receiving end are both preset with the same total key pool and hash algorithm; the sending end then uses the preset hash algorithm to perform hash calculation on the identity identifier, the location information of the first authentication key, and the number of the first load key to obtain a hash value, and encrypts it to obtain a signature file; the load data is encrypted by the first load key to obtain a ciphertext load, the ciphertext load is CRC-checked, and a first CRC check code is generated; finally, the sending end composes a quantum security data packet and sends it to the receiving end. The two ends of the present invention use a key pool as a resource pool for bilateral authentication communication, and use data authentication methods such as hash values, ciphertexts, and CRC check codes to ensure data transmission integrity and non-repudiation; and the load key is obtained in a one-industry-one-key manner or a one-time-one-key manner, and the privacy protection of user data can be improved by encrypting data with it.

The invention provides a program installation method based on asymmetric encryption and related equipment, and relates to the technical field of asymmetric encryption communication encryption, if security verification results of a first CA certificate of a PLC and a second CA certificate of an engineering station are both secure and credible, the PLC and the engineering station perform bidirectional TLS verification; if the handshake verification succeeds, the PLC negotiates with the engineering station to generate a temporary symmetric encryption key, and constructs an encryption session channel; the engineering station exports a target control program, processes the target control program to generate a signature file, and sends the signature file to the programmable logic controller by using the encrypted session channel, the programmable logic controller verifies the signature file, and if the verification is successful, the target control program is installed. According to the method, the private key of the PLC is stored in the encryption module, dual-mechanism authentication of the TLS and CRL check mechanism is adopted, and when the program is installed, the installed program is subjected to Hash calculation by using the trusted module and is bound with the timestamp, so that the installed program is prevented from being forged and tampered, whether the program is installed for the first time or not is checked, and the safety of program installation is ensured.

A system and method for content aware monitoring of an output of a media channel by a media system is provided herein. In at least one embodiment, the method comprises: receiving a media assertion schedule comprising a schedule of assertion checks which allow validating that the output of the media channel, by the media system, is synchronized with an expected media channel output; receiving, from a signature generating module, at least one observed signature file; determining that the timestamp data, in each of the at least one received observed signature file, aligns with at least one timecode included in an assertion check in the media assertion schedule; identifying an assertion condition included in the assertion check; and validating the assertion condition using the observed media frame signatures included in each of the at least one received observed signature file.

The invention provides a score card model analysis processing method and system, electronic equipment and a storage medium, and relates to the field of model processing.The method comprises the steps that a score card model based on a text form is obtained, and the score card model is compiled into an intermediate byte code file through a compiler; performing encryption processing on the intermediate byte code file to obtain an encrypted file; performing digital signature on the encrypted file to generate a signature file; generating a decryption tool and encoding the public key of the asymmetric key in the decryption tool to obtain a target decryption tool; and sending the encrypted file, the target decryption tool and the signature file to a data end for use. According to the method, the score card model can be ensured to be always in an encrypted state in the whole delivery process, and model logic and algorithm details are prevented from being leaked; the data end can call and use the model through the target decryption tool on the premise of not decrypting the specific content of the model, so that not only is the use convenience of the data end ensured, but also the risk that the model is accessed without authorization can be avoided.

The embodiment of the invention provides a full generation cycle carbon data credibility verification method and system and related equipment, and belongs to the technical field of information security. According to the method, the data abstract about the carbon data from the data acquisition terminal is acquired, and the zero-knowledge certification technology is adopted to perform carbon data credibility rule verification on the data abstract to generate the certification file, so that the privacy of the carbon data authenticity verification process is improved. The proof file and the data abstract are sent to the trusted mechanism equipment for digital signature operation, so that a signature file from the trusted mechanism equipment is received, the signature file carries a timestamp and comprises the signed proof file and the signed data abstract, the credibility of the carbon data is improved, and the reliability of the carbon data is improved. And the signature file is stored in an immutable log system adopting a hash chain recording mechanism, so that the carbon data can be prevented from being tampered, and the carbon data interaction efficiency can be improved through a centralized storage mode.

The embodiment of the invention provides an electronic signature method and device, electronic equipment and a storage medium. The method comprises the steps that a to-be-signed file is acquired; implicit signature processing is carried out on the to-be-signed file to obtain a signed file, and preprocessing operation is carried out on the signed file to obtain a preprocessed file; sending the pre-processed file to each client terminal, so that the client terminal performs signature operation on the pre-processed file to obtain a temporary signature file; the temporary signature files returned by the client terminals are received, the temporary signature files are subjected to seal combining processing, the target signature file corresponding to the to-be-signed file is obtained, and it is guaranteed that countersigning is independent and disordered and does not affect one another through continuous increasing of signature domain object identifiers; the integrity of the original document is guaranteed through the implicit signature in the initialization stage, the integrity of incremental data is guaranteed through the countersigning signature data block, and the safety and accuracy of the signature file are improved.

The present application discloses a digital signature method, system, computer-readable storage medium and electronic device. The method includes: obtaining a user's digital signature instruction; based on the signatory information, the cloud server uses the first part of the digital signature corresponding to the signatory information to sign the target signature file information to generate a first signature file; the mobile terminal receives the first signature file and the signatory information; the mobile terminal uses the second part of the digital signature to sign the first signature file to generate a second signature file. Therefore, the embodiment of the present application can only carry a mobile terminal that stores a part of the digital signature to sign the document to be signed together with the other part of the digital signature stored on the server to generate the final signed file, eliminating the inconvenience caused by the need to use a dedicated device to store the digital certificate, and greatly improving the convenience and experience of users using digital signatures.

The technology relates to a computer-implemented method for automated deployment of at least one computing infrastructure comprising at least one un-provisioned server and at least one switch. The method comprises accessing a computer-readable medium comprising instructions which, upon being operated by a processor, causes execution of: a server management module, and a key management module; wherein, during each booting of the at least one server, the server management module compares a series of at least one signature, to signatures stored in a signatures file, and depending on the result of the comparison, the server management module validates the loading of the operating system if all the signatures of the series are listed in the signatures file, such that only the totally signed operating system is loaded during the booting of the at least one server.

The present invention discloses a lightweight quantum digital signature and quantum digital signcryption method. The quantum digital signature method includes: user A generates a request req for performing a quantum digital signature on data M and sends the request req to a trusted CA center; user A registers in the trusted CA center and negotiates with the trusted CA center to generate and store a one-time certificate for signature; user A then signs the data M to generate a signature file M-SIGN; user A generates a transmission file DOC based on the signature file M-SIGN and sends it to user B, and user B performs a signature verification operation on the signature file M-SIGN in the transmission file DOC. User A of the present invention uses a signature certificate otCA, its own public CA certificate CA 1A etc. to sign the data M, realizing the binding of the transmitted data M to the identity of user A; and the communication data is only transmitted between users A and B, and no third party will receive the communication data, ensuring that the communication data will not be known to irrelevant third parties.

The present application relates to the technical field of vehicles, and discloses a software updating method and device for a vehicle controller, a digital signature system, and a computer program product. The method comprises: acquiring an identifier of a target controller, an identifier of a target digital signature algorithm, and a digest of a software update package of target software; on the basis of the identifier of the target controller and the identifier of the target digital signature algorithm, searching a first database for a private key in a first key pair, wherein the first database is used for storing private keys in key pairs applied for different controllers and different digital signature algorithms; and generating a first signature file on the basis of the digest of the software update package of the target software and the private key in the first key pair. By performing unified online management on key pairs, private keys in key pairs can be queried online when signature files are generated. Compared with offline management and private key query, the present application improves the efficiency of searching for key pairs, thereby improving the efficiency of generating signature files.

The present invention relates to a linear network coding method based on BLS. The source node divides the file to be signed into several file blocks and represents them as a prime domain #imgabs0# k dimensional vectors, which are then augmented to become a set of linearly independent vectors; a subspace generated based on this set of vectors is signed, and a label for the subspace and a signature for each basis vector are generated. The signatures are loaded into a data packet and sent to a downstream node; after receiving the data packet, the intermediate router or the destination node verifies the signature of the data packet from the same source node; the intermediate router linearly combines all verified data packets to form a new data packet and sends it to the downstream node; if the destination node receives a predetermined number of verified data packets, it can parse the original data sent by the source node. The present invention can not only resist pollution attacks in network coding and ensure data integrity and authenticity, but also reduce user computing complexity and ensure secure and efficient data transmission.

One or more embodiments of the invention provide a software product security protection and verification method and device, a storage medium and a product. The security protection method for the software product comprises the following steps: analyzing a to-be-processed software product to obtain file structure information and file content of a file; generating an encryption key based on the file structure information of the files, encrypting the file content of each file by using the encryption key to obtain encrypted files, and combining all the encrypted files into an encrypted data packet according to the file structure information of the files, the file structure of an encrypted file in the encrypted data packet is the same as that of a file in the software product; signing the file structure information and the file content of the file by using a private key specified by a software product platform party to generate a signature file; and combining a public key corresponding to the private key, the encrypted data packet and the signature file to obtain an output data packet of the software product. And the security and the integrity of the software product are protected.

The invention discloses a one-key automatic signature method and system based on a CPE program small file, and relates to the field of CPE programs.The method comprises the steps that signature parameters input by a user are received through a graphical interface, and the signature parameters comprise a signature branch, a secret key list, storage capacity and a to-be-signed module path; and dynamically matching the key list according to the signature branch, and converting the parameter into a digital identifier which can be identified by the server side. And uploading the to-be-signed file to the Linux server through an SCP protocol after the to-be-signed file is subjected to standardized renaming, and calling a server signature interface to execute signature. And after the signature succeeds, the system renames the file and automatically downloads the file to a local specified path. The system is composed of a parameter input module, a dynamic display module, a file processing module, a signature execution module and a security verification module, automation, cross-platform compatibility and secure transmission of small file signature are achieved, the tedious process of small file burning signature of CPE equipment is remarkably simplified, and signature efficiency and security are improved.

This invention provides a multi-signature scheme compatibility method based on the Android system, comprising: pre-installing multiple signature verification schemes within the Android system; each signature verification scheme including the encryption algorithm and digital certificate used by the signing authority when signing its released APK application; parsing the APK signature file to extract the signing authority information, thereby obtaining the corresponding signature verification scheme. This invention provides a multi-signature scheme compatibility method based on the Android system, supporting signature verification of APK applications released by various signing authorities within the Android system, ensuring that the APK application has not been tampered with, and thus guaranteeing system security. Therefore, this invention achieves compatibility of the Android system with APK applications released by various signing authorities, improving the convenience of installing various APK applications on the Android system.

This invention discloses a method, system, apparatus, and online payment clearing platform for processing reconciliation files. The method includes: generating a key file corresponding to a terminal; generating a first reconciliation file based on the transaction flow data of the terminal within a transaction period; encrypting the first reconciliation file based on a first digital envelope included in the key file to generate a second reconciliation file; performing hash signature processing on the key file to generate a first signature file; and performing hash signature processing on the second reconciliation file to generate a second signature file; and sending the key file, the first signature file, the second reconciliation file, and the second signature file to the terminal, so that the terminal can perform business reconciliation processing based on the received files. Encrypting the reconciliation file through a two-layer data encryption mechanism improves the security of the information data in the reconciliation file; the two-layer data signature mechanism enhances the non-repudiation and tamper-proof capabilities of the reconciliation file.

The application discloses a one-key automatic signature method and system based on a CPE program small file, relates to the field of CPE programs, and comprises the following steps: receiving signature parameters input by a user through a graphical interface, including a signature branch, a key list, a storage capacity and a to-be-signed module path; dynamically matching the key list according to the signature branch, and converting the parameters into digital identifiers recognizable by a server end; after the to-be-signed file is standardizedly renamed, uploading the file to a Linux server through an SCP protocol, and calling a server signature interface to execute signature; after the signature succeeds, the system renames the file and automatically downloads the file to a local specified path. The system is composed of a parameter input module, a dynamic display module, a file processing module, a signature execution module and a security verification module, realizes the automation of small file signature, cross-platform compatibility and safe transmission, significantly simplifies the cumbersome process of small file burning and signature of CPE equipment, and improves signature efficiency and security.

The invention provides an Android resource file encryption method and device based on a quantum encryption technology, which are applied to a packaging process of a target application program, and the method comprises the following steps: obtaining a signature file of the target application program; generating a first session identifier corresponding to the signature file according to a preset encryption algorithm; obtaining a first quantum key after encryption of the charging key from a quantum key management service platform according to the first session identifier; performing quantum encryption on a resource file of the target application program by using the first quantum key, and storing the encrypted resource file after quantum encryption in a folder of the target application program; and packaging and compressing the encrypted resource file to generate an APK quantum encryption compressed package of the target application program. According to the scheme provided by the invention, in the packaging process of the resource file, the APK compression package is encrypted by using the quantum key, and the quantum key generates a one-time pad key through a quantum key distribution mode based on a quantum mechanics principle, so that the security of the resource file is ensured.

The invention provides an automatic packaging method and system for Android applications, and relates to the technical field of software development. The system comprises three main components, namely a Web front end, a data storage server and a packaging server, the Web front end is responsible for creating a packaging task, providing project data filling, version management, a project management list, APK distribution and other functions, the packaging server executes an actual packaging task, automatically processes project data and generates an APK file, and the data storage server is used for storing data of an APP project, including pictures, signature files, configuration files and font files; according to the method, a visual user interface can be provided, a user can conveniently manage different versions and data of the APP project, and meanwhile, due to the automatic packaging process, errors caused by manual operation are reduced, and the packaging speed is increased. Through automatic signature and resource replacement, the system ensures the consistency and security of the packaging process; a user can conveniently download and share the generated APK file through the APK distribution page.

The present invention discloses a two - level threshold signature method and device for hierarchical management. The method includes: obtaining a file M to be signed and configuring roles participating in the signature; a trusted center D selects parameters for the file M to be signed; signature personnel are selected, and each signature personnel uses their respective sub - keys to sign the file M to be signed; a signature organizer C receives the signature results of each signature personnel for the file M to be signed and verifies its compliance; the verified signature results are synthesized, and the signature organizer C uses its own private key D c to sign the synthesized signature result to obtain a final signature result, and the final signature result is published to the signature receiver; the signature receiver verifies the signature compliance of the signature organizer C based on the public key E c of the signature organizer C and verifies the signature compliance of each signature personnel. This method obtains the signature of the file and conducts compliance verification, and is applicable to the hierarchical management system.

The invention relates to a digital asset secure storage management method and system, and the method comprises the steps: receiving a private key call request of a user, searching a fragmentation coordinate set and fragmentation verification metadata of a target private key according to the private key call request, initiating biological information verification and environment credibility verification, carrying out the chaotic refreshing when the verification is passed, and carrying out the secure storage of the target private key. And obtaining a dynamic authentication token, activating an HSM channel to access the target private key fragment, and securely transmitting the target private key fragment from the storage position to the trusted execution environment for integrity and legality verification. And when the verification is passed, calling a white-box cryptographic engine to reconstruct the target private key fragment into a target private key, generating a digital signature file according to the reconstructed target private key, and outputting the digital signature file in one direction through an electromagnetic shielding optical fiber. Fusing the target private key fragment called this time, generating a fragment fusing list, recording the fragment fusing list in the digital signature file, and updating the index of the private key fragment; and calling the MPC engine to drive the digital assets to flow unidirectionally through the physical switch gateway.

The invention discloses a container mirror image authentication method and system in an offline environment, a medium and a product, and relates to the technical field of computer information security, and the method comprises the steps: at a target client, randomly generating a second check number B; based on the first check number A and the second check number B, a public and private key pair P2 is generated through a seed generation function and a first key generation algorithm, a private key of the public and private key pair P2 is used for conducting mirror image signature on the container, a signature file is generated, and the signature file is packaged and encrypted to generate a mirror image encryption compression package; at the target server side, decompressing the to-be-verified mirror image encryption compressed package to obtain a to-be-verified second verification number B, user information and environment information; and on the basis of the first check number A and the obtained second check number B to be verified, regenerating the public and private key pair P2 to be verified, and verifying the signature file by using the public key of the public and private key pair P2. The method can solve the problems that in the prior art, during container mirror image authentication, public key trust is difficult to establish, and the identity of a maker cannot be accurately traced to the source.