133 results about "SM4 Algorithm" patented technology

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention belongs to the technical field of network security, and discloses an encrypted enterprise network data security access method and system, and the method comprises the steps: constructing a biological recognition unit and an equipment binding unit, recognizing multi-dimensional biological data through the biological recognition unit, and carrying out the identity authentication of a user through the combination of a dynamic token generation time binding mechanism; the equipment binding unit associates the identity authentication result with the hardware fingerprint of the security access terminal to generate a digital identity certificate; a basic key is generated and updated in a rolling mode through a quantum random number generator; dual protection is carried out on the multi-dimensional biological data through a hierarchical encryption unit, the hierarchical encryption unit comprises an application layer and a transmission layer, the application layer adopts an SM4 algorithm to encrypt service content data in the multi-dimensional biological data, and the transmission layer adopts an SM2 algorithm to generate a session key to carry out forward secrecy; the security access of enterprise network data is ensured, and the security protection capability of the enterprise network is comprehensively enhanced.

The invention discloses an intelligent system and method for fusing mental health evaluation in an interest scene based on an education robot. The system realizes non-intrusive mental health assessment by constructing a technical architecture of'multi-modal biological feature anonymization-quantum hybrid encryption-federated learning privacy protection-dynamic risk assessment '. The method is characterized by comprising the following steps of: (1) generating irreversible biological characteristic codes by adopting a chaos random number generator, and realizing anonymized association by combining a double hash chain technology; (2) designing a quantum enhanced hybrid encryption system, fusing an SM4 algorithm, NTRU post quantum cryptography and quantum key distribution; (3) developing a dynamic scene generator, and naturally fusing psychological test questions into interest topics by using a generative adversarial network (GAN) and a curiosity engine; (4) constructing a multi-modal emotion analysis system, and combining an LSTM + CNN hybrid model to realize physiology-behavior-voice data fusion analysis; and (5) deploying a federated learning framework, and protecting model training data through differential privacy noise injection (epsilon = 0.5).

The invention discloses an intelligent abnormity early warning system for an industrial Internet of Things edge node, which comprises an edge sensing layer, an edge intelligent layer and a cloud edge collaboration layer, and is characterized in that the edge sensing layer is used for data acquisition and security preprocessing; the edge intelligent layer is used for intelligently analyzing the data transmitted by the edge sensing layer and constructing a dynamic space-time diagram neural network model and a dynamic edge knowledge graph; a digital twinning threshold engine is set, when the digital twinning threshold engine detects abnormity, reverse reasoning is carried out along the knowledge graph, and self-adaptive early warning is carried out; and the cloud edge collaboration layer is used for carrying out collaboration processing on early warning triggered by the digital twin threshold engine. According to the invention, the spatial-temporal features of the equipment group are learned through the set dynamic spatial-temporal diagram neural network; the digital twin threshold engine generates a dynamic threshold based on physical simulation and adapts to environment and load changes; the edge layer realizes lightweight real-time analysis; and a full-link embedded chaotic encryption and national cipher SM4 algorithm is adopted.

The invention discloses a data security transmission method and system with anti-quantum security, and relates to the technical field of data transmission, and the method comprises the steps: obtaining information which comprises an identity identifier, a temporary public key, a temporary secret value and a validity period demand of a user; generating a public key and a private key of the user based on an ML-DSA signature algorithm; sending an authentication request to a CA authentication center according to the information and a public key of the user, and receiving a certificate authenticated, signed and issued by the CA authentication center; exchanging and verifying the credentials of each other with other users; and after the certificate verification is passed, responding to the data transmission instruction, calling and executing a temporary shared key generation module, outputting a temporary shared key, and then sending data to other users or receiving data from other users based on an SM4 algorithm and an ML-DSA signature algorithm according to the temporary shared key. According to the invention, the cost and risk during upgrading and updating of the system are reduced.

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.

The invention discloses a digital archive multi-protection-based data security transmission method, and relates to the field of data security transmission, and the method comprises the steps: generating a random seed in real time based on a quantum state, carrying out the iterative blocking of the quantum seed through combining with Logistic chaotic mapping, outputting variable-length secret key fragmentation, carrying out the symmetric encryption of archive data through employing a lightweight SM4 algorithm, and carrying out the encryption of the archive data. Obtaining encrypted data of the fragments; a behavior anomaly probability is calculated through a hidden Markov model, a risk score is calculated through a safety interval, and when a score value exceeds a safety threshold value, a grading response is triggered; key fragments are generated by adopting n nodes, at least k fragments can reconstruct signatures to monitor the node state of the block chain, and when the node anomaly rate exceeds a node threshold value, a three-layer architecture is automatically switched. The method has the advantages that an active multi-protection system is constructed through a quantum dynamic key, risk-driven hierarchical response and block chain disaster recovery switching, and quantum attack resistance and dynamic adaptation to transmission of network risks are realized.

The invention relates to the technical field of FPGA architecture, in particular to an SM4 hardware acceleration and anti-side-channel protection method and system of a domestic FPGA, which comprises the following steps of: performing data type identification operation on bright-ciphertext batch data by utilizing an acceleration block to obtain a data type, and according to a pre-constructed parallelization strategy and the data type, performing data type identification operation on the SM4 hardware acceleration and anti-side-channel protection on the SM4 hardware acceleration and anti-side-channel protection on the SM4 hardware acceleration and anti-side-channel protection system; performing dynamic resource configuration on the plaintext-ciphertext batch data to obtain resource configuration information, and performing configuration according to the resource configuration information, the key-mode parameter and the dynamic control instruction to obtain a configured SM4 algorithm; according to the configured SM4 algorithm, performing encryption processing on the plaintext-ciphertext batch data to obtain to-be-protected encrypted data; and performing protection operation based on physical layer leakage suppression, logic layer confusion association and system layer dynamic response on key-mode parameters, dynamic control instructions, plaintext-ciphertext batch data and encryption processing by using the protection block, and converting to-be-protected encrypted data into protected encrypted data. According to the invention, the encryption processing performance and security can be improved.

The invention relates to the technical field of information security, and discloses a handwriting dynamic encryption and electronic signature method based on a national secret algorithm, and the method comprises the steps: obtaining the handwriting data of a user, and carrying out the preprocessing of the data to remove noise and errors; carrying out feature extraction on the preprocessed handwriting data, extracting corresponding track features, speed features and pressure features, and generating a feature hash value of a unique identifier through a cryptographic SM3 hash algorithm; splicing and combining the feature hash value and a user private key, deriving a dynamic key through a national secret SM2 algorithm, and generating an electronic signature by using the dynamic key; an electronic signature is combined with a timestamp to form a structured signature packet, and the signature packet is hierarchically encrypted and stored in a database through a national cryptographic SM4 algorithm. According to the method and the system, the handwritten signature picture, the digital signature technology, the electronic signature technology and the biological recognition and layout file processing technology are fused, so that the safety and the reliability of electronic document signing are improved.

According to the safety coprocessor hybrid encryption method based on the SM2 / 3 / 4 domestic cryptographic algorithm, a novel hybrid encryption system based on the SM2 / 3 / 4 and considering encryption safety, efficiency and key management convenience is constructed on the basis of the characteristics of the SM2 algorithm, the SM3 algorithm and the SM4 algorithm, and the encryption / decryption and signature / verification process is achieved. And aiming at the efficiency problem of a domestic SM algorithm, an encryption / decryption and signature / verification scheme is designed and realized through pure software analysis and software and hardware (SW / HW) collaboration, so that optimal division of software and hardware is realized, and the algorithm efficiency is greatly improved.

The invention provides a data encryption transmission method, system and device based on SM4, and belongs to the technical field of data encryption transmission. The method comprises the following steps: acquiring an encrypted fragmented data packet from front-end equipment; wherein the encrypted fragment data packet at least comprises a ciphertext fragment set, a timestamp and an environment feature hash value which are determined based on the network state value of the front-end equipment and the acquisition environment parameters. The number of ciphertext fragments in the ciphertext fragment set is in positive correlation with the network state value; matching the environment feature hash value with a preset environment feature hash library to determine whether a decryption parameter is generated or not according to a matching result; wherein the decryption parameters at least comprise a dynamic key and an initialization vector IV; if yes, generating decryption parameters according to the encrypted fragmented data packet; and decrypting each ciphertext fragment in the ciphertext fragment set based on the decryption parameters and a preset SM4 algorithm. Therefore, flexible, safe and stable data encryption transmission is realized in a water conservancy monitoring scene.

According to the clinical nursing patient information monitoring and inputting method and system, the data accuracy, the data inputting efficiency and the privacy protection safety are improved; the method comprises the following steps: firstly, collecting and preprocessing vital sign data of a patient in real time through various physiological sensors; then, acquiring a nursing record image, acquiring nursing record data through an OCR model, acquiring nursing information voice, transwriting the nursing record data and the nursing information voice into nursing information data through a medical scene voice transwriting model, and performing unified standardization processing on the three groups of data to generate patient information data; and finally, when patient information data is input, symmetric encryption is carried out by adopting a national cryptographic SM4 algorithm, encrypted data is obtained, a dynamic encryption key is generated through an ECDH key distribution technology, and the dynamic encryption key can be called to carry out decryption operation after authentication of a dual protection mechanism of Hash value pre-verification and identity authentication is passed.

The invention relates to a traceable security communication method, device and equipment based on a privacy number, and belongs to the technical field of communication processing, and the method realizes credible storage of communication data by obtaining a communication record and generating a distributed unique identifier, adopting an SM2 algorithm for signature and writing evidence data into a block chain. Meanwhile, the preset master key is subjected to fragmentation processing, a plurality of sub-key fragments are generated, the storage position is determined, and the session key is generated by adopting an SM4 algorithm to perform end-to-end encryption on the communication content, so that the communication security is guaranteed. Besides, a zero-knowledge proof protocol is introduced for identity verification, dynamic risk assessment and an authority fusing mechanism are combined, high-risk communication is effectively prevented, multiple cryptography technologies and safety mechanisms are comprehensively applied, and safety, credibility and auditing performance of the communication process are comprehensively improved.

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

The invention discloses a data encryption and access control device for an intelligent fire-fighting internet of things system in the technical field of data protection. The data encryption and access control device comprises a dynamic encryption engine, a multi-mode access control module and a safety coprocessor. The dynamic encryption engine adaptively selects an SM4-GCM and SM9-Kyber hybrid encryption algorithm based on the data sensitivity level and the equipment type, so that the transmission encryption delay is less than or equal to 0.9 ms; the multi-mode access control module supports dynamic permission upgrading and tamper-proof evidence storage in a fire emergency scene through a three-layer architecture of RBAC + ABAC + block chain auditing; the security coprocessor adopts an FPGA hardware acceleration SM4 algorithm, and the energy efficiency ratio reaches 15Gbps / W. Anti-quantum security: the post-quantum algorithm Kyber-768 passes through the third round of authentication of NIST, and the key negotiation efficiency is improved by 3 times compared with that of the traditional ECDH (test data: the negotiation time consumption of 100,000 times is reduced from 18 seconds to 5.7 seconds). Technical optimization of the device comprises fine-grained access control innovation, a multi-modal strategy engine, block chain auditing and tracing, hardware acceleration efficiency optimization and distributed key management.

The invention discloses a data multi-layer national secret encryption acquisition and transmission system and method with an adjustable encryption strategy, and the system comprises a strategy adjustment module which is used for determining the encryption strategy of current data transmission, and the encryption strategy comprises a first encryption strategy and a second encryption strategy; the data acquisition module is used for acquiring data in the monitoring terminal in real time through a sensor and a data interface; the encryption module is used for performing multi-layer encryption processing on the acquired data by adopting SM1, SM2, SM3 and SM4 cryptographic algorithms; the transmission module is used for sending the encrypted data to a data center through a secure channel; and the data center is used for identifying the encryption strategy and decrypting and authenticating the received data. According to the method, data transmission can be carried out by flexibly adopting different strategies, and under the encryption condition, multi-layer encryption processing of the data can be carried out by adopting multiple national cryptographic algorithms, so that the security of data acquisition and transmission is enhanced.

The invention discloses a distributed GPU scheduling, data encryption management and dynamic charging system oriented to privatized AI deployment, and belongs to the technical field of distributed computing and artificial intelligence. The system comprises a decentralized scheduling module, which distributes tasks to distributed GPU nodes through a dynamic weight scoring model (weight factors comprise GPU utilization rate, network delay and task priority); the central control load balancing unit is used for monitoring node states in real time and dynamically adjusting a scheduling strategy; the data encryption module is used for establishing a point-to-point encryption channel between a user terminal and a GPU node based on a WebRTC technology, and data is encrypted by a national cryptographic SM4 algorithm and is decrypted only at a target node; and the dynamic billing unit is used for realizing 0.01-element micro billing according to the GPU computing power consumption and automatically distributing earnings through an intelligent contract. Experiments show that the task completion time of the system in a 100-node cluster is shortened by 30%, the resource utilization rate is improved by 45%, the data leakage risk is reduced by 98%, and the system is suitable for enterprise sensitive data protection and personal user elastic computing power requirements.

The invention discloses a program decompilation prevention method and device and a medium, and the method comprises the steps: determining a target code required to be protected in a program source code, carrying out the obfuscation processing of the target code and a mixed factor code of the target code according to the obfuscation logic of the target code, generating an intermediate code, and carrying out the obfuscation processing of the mixed factor code of the target code through an SM4 symmetric encryption algorithm, the method comprises the following steps of: firstly, generating an intermediate code, encrypting the intermediate code to generate an encrypted Class file, then, carrying out hierarchical encryption on a preset loading class to generate a multi-layer encrypted loading class, and finally, packaging the encrypted Class file, the multi-layer encrypted loading class and a basic class to generate an encrypted JAR packet. According to the method, the Class file is encrypted through the code obfuscation technology and the SM4 cryptographic algorithm, layer-by-layer encryption is carried out on the self-defined loading class, the complexity after code obfuscation is greatly improved, and the security of source code software is improved.

The invention discloses a national cryptographic algorithm acceleration system supporting SM4-ZUC dual-core dynamic collaboration, and belongs to the technical field of information security and hardware acceleration. The system comprises an AXI read-write module, a configuration register module, an SM4 algorithm module and a ZUC algorithm module. The configuration register receives and distributes information such as a secret key, an initial vector and a mode through an APB interface; the AXI read-write module supports burst transmission and dynamic scheduling data read-write; the SM4 algorithm module supports three modes of GCM, CTR and ECB; and the ZUC algorithm module is compatible with ZUC-128 / 256. And the corresponding ZUC-128 / 256 and SM4 algorithms can be dynamically selected for operation by judging an encryption mode in the ZUC and SM4 algorithms. The system adopts a three-level assembly line architecture, space-time multiplexing of read-write data and encryption is realized, and throughput rate is improved.

The invention relates to the field of Internet of Things security and intelligent access control, and particularly discloses a re-encryption near field communication method and a security door lock, and the method comprises the following steps: S1, in a near field communication establishment stage, carrying out equipment bidirectional authentication by adopting a national cipher SM4 algorithm, and generating a dynamic session key; s2, in a data transmission stage, dynamically switching an AES-256 or DES encryption algorithm based on the signal strength to ensure the communication security; s3, when abnormal operation is detected, triggering an SM3 hash algorithm to generate a security alarm fingerprint, and interrupting a current communication link; according to the invention, through dynamic combination encryption of a national cryptographic algorithm and AES / DES, a security protection system adaptive to a communication environment is constructed, and bidirectional authentication of equipment is realized by adopting an SM4 algorithm in a near field communication establishment stage, so that identity credibility is ensured; in the data transmission stage, the encryption strength is intelligently switched according to the real-time signal strength, so that the communication reliability in a weak signal environment is guaranteed, and the data confidentiality in a strong signal environment is enhanced.

The invention discloses a node communication adaptive encryption method and system for a high-availability cluster. The method comprises the following steps: a source node and a destination node perform SM2 key negotiation to generate a shared session key SK; the application layer of the source node sends a message to a high-availability trunking communication service; a high-availability trunking communication service firstly calls a hook function serving as a universal encryption signature interface on a message outbound path by using a communication protocol module, if a specified encryption mode is SM4 encryption, a message is encrypted by using a shared session key SK through an SM4 encryption module to generate an encrypted data packet, otherwise, other encryption modules are called to generate the encrypted data packet; sending the encrypted data packet to a destination node; and the destination node decrypts the generated plaintext data packet and sends the plaintext data packet According to the method, the SM4 algorithm is seamlessly integrated into a communication system of a high-availability cluster, and the performance overhead is controlled within an acceptable range while security encryption is provided through optimization.

The invention relates to the technical field of data encryption, in particular to a video watermark steganography method, which comprises the following steps: acquiring a secret key, text information of a video to be embedded and a video to be processed; respectively preprocessing the secret key, the text information and the video to be processed to obtain a Hash secret key, a coding file and a target video; obtaining the frame number of the target video; based on the frame number, selecting a Camelia algorithm or an SM4 algorithm to encrypt the Hash secret key, and generating a round secret key; based on a Camelia algorithm and the Hash key, processing the coded text to generate a ciphertext; selecting key frames from the target video according to a preset rule to form a key frame candidate set; selecting target frames from random positions in the key frame candidate set, wherein the number of the target frames meets a preset number; and based on the round secret key and the ciphertext, carrying out LSB steganography on the target frame, forming a steganography frame, replacing the target frame at a random position, and forming a steganography video, and by adopting the video steganography mode, a more effective copyright protection means can be provided for a video creator.

The invention discloses a multi-receiver data asset verification transmission method and system based on a national cryptographic algorithm, and relates to the technical field of information security, and the method comprises the steps: a cloud carries out the value evaluation of original data assets, calculates a hash value through a national cryptographic SM3 algorithm, and generates a value voucher; calling a national cryptographic SM4 algorithm and a data encryption key to encrypt original data to obtain a data ciphertext, and encrypting the data encryption key by using a national cryptographic SM2 public key of each receiving edge node to obtain a corresponding key ciphertext; signing the value voucher by using the SM2 private key to generate a digital signature; the data ciphertext, the key ciphertext, the value voucher and the digital signature form a transmission data packet to be issued; and each receiving edge node executes multi-stage verification after receiving. The technical problems that in traditional data asset transmission, data are prone to being tampered and stripped, and the receiver is difficult to trust the value declared by the receiver are solved, and the technical effects of safe transmission, controllable value and efficient verification in multi-receiver data asset transmission are achieved.

The invention relates to the technical field of data encryption, in particular to an application layer data encryption method and system based on an SM4 algorithm and abstract verification, and the method comprises the steps: obtaining to-be-encrypted text data in an application layer, and dividing the to-be-encrypted text data into a plurality of plaintext blocks; calculating the information repetition degree, the semantic association degree, the information sensitivity and the adjustment coefficient of each plaintext block; the method comprises the steps of adjusting control parameters of a chaotic mapping algorithm to obtain corresponding adjusted control parameters of each plaintext block, encrypting each plaintext block by combining the chaotic mapping algorithm and an SM4 algorithm to obtain ciphertext data, and verifying the integrity of the ciphertext data in a communication transmission process through a digital digest technology. According to the method, the S box and the round key are dynamically generated by adjusting the control parameters of the chaotic mapping algorithm, the static mode of fixing the S box and the key in the traditional SM4 algorithm is broken, the attack resistance of the plaintext block is enhanced, the risk that the plaintext block is leaked is reduced, and the encryption effect on application layer data is improved.

The invention discloses an efficient authentication encryption method based on SM4. The method comprises the following steps of: 1) initializing and generating an initial vector IV with the length of 128 bits, a secret key K of a national secret SM4 algorithm, a random number N with the length of 128 bits and associated data AD; 2) setting the length l of state updating data in the sponge structure to be 128 bits; 3) designing permutation operation # imgabs0 # 4 based on SM4 rounds of functions, generating S = IVKN in an authentication stage, sequentially executing # imgabs1 # to divide the associated data AD into a plurality of 128-bit data blocks, and performing round transformation on S to obtain a latest state S of fused associated data information; encrypting the plaintext M based on the state S and the key K to obtain a ciphertext C and an authentication tag T; and 5) completing decryption verification in a decryption stage.

The invention discloses a software and host authorization method and system based on an intelligent password key, and belongs to the technical field of software security. The method comprises the following steps: a fingerprint information generation stage: calling a system interface to collect host hardware information, combining the host hardware information, generating first fingerprint information by using a Hash algorithm, encrypting the first fingerprint information by using an SM4 algorithm to obtain a fingerprint ciphertext, and storing the fingerprint ciphertext in a memory; in the intelligent password key verification stage, whether the Ukey is inserted or not is judged, the inserted Ukey is scanned, and a Ukey insertion event is monitored at the same time; and then verifying the legality of the Ukey, if the Ukey is legal, reading the state of the Ukey, and checking whether the Ukey is bound, if the Ukey is not bound, executing a Ukey binding process, and if the Ukey is bound, executing a Ukey authentication process. According to the method, through hardware-level binding, even if the software is copied to other equipment, due to the fact that hardware information stored in the UKey is not matched, the software cannot run, and piracy is thoroughly blocked; the hardware information encrypted and stored in the UKey cannot be extracted or counterfeited, so that the UKey is prevented from being illegally copied.

The invention discloses an encryption method and device, equipment, a medium and a program product, and relates to the technical field of data processing. The method comprises the steps that L rounds of iterative encryption are conducted according to plaintext data, nonlinear coding data and a secret key table, confused ciphertext data are obtained, the nonlinear coding data comprise input nonlinear inverse coding and output nonlinear coding, the input nonlinear inverse coding is used for offsetting output nonlinear coding added in preorder operation, and the output nonlinear coding is used for being offsetting in follow-up operation; and affine transformation and hybrid nonlinear transformation are carried out on the confused ciphertext data to obtain encrypted data corresponding to the plaintext data, and the encrypted data are data after non-linear coding introduced by counteracting multi-round iterative encryption. Therefore, affine transformation data and the key table can be confused and protected, attacks from an external coding end can be effectively resisted after nonlinear coding confusion, the security of the white-box SM4 algorithm is improved, a new chip does not need to be added, and the encryption cost is reduced.

The invention discloses a video content protection method and device based on a multi-channel image feature security mark, and relates to the technical field of video content security management, and the method comprises the steps: obtaining an original video, and checking the original video; acquiring a video frame image of the audited video, and performing fusion, dimension reduction, compression and encryption processing on multichannel high-order features of the video frame image through a perceptual hash algorithm, an interpolation hash algorithm, a compression coding principle and a national cipher SM4 algorithm to generate a dynamic security mark; embedding the dynamic security mark into the video frame image to generate an approved video; and extracting the dynamic security mark of the currently played video, and checking the consistency between the feature information extracted from the dynamic security mark and the feature information of the played video to judge whether the video is compliant or not. The video content is protected, the security of the video is improved, the compliance check of the video content is realized, and the accuracy and efficiency of compliance judgment of the video content are improved.

The invention relates to an SM4 algorithm hardware security implementation method, system and equipment for industrial control, and the method comprises the steps: building a four-stage pipeline architecture, dividing SM4 into a plurality of processing stages, and carrying out the parallel scheduling of each processing stage through the four-stage pipeline architecture; superposing a random noise current in an operation stage of the four-stage pipeline architecture; performing time domain mask conversion on an intermediate value in the SM4 algorithm processing process by adopting a dynamically updated mask parameter; through the combination of the four-stage pipeline architecture, the random noise current injection and the time domain mask conversion, the encryption throughput is improved, and the side channel attack protection capability is enhanced, so that collaborative optimization of high throughput encryption and strong side channel attack protection of an SM4 algorithm on a domestic hardware platform is realized; and the purpose of providing autonomous and controllable security data protection capability for an industrial control system is achieved.

The application provides a video front-end device authentication method and system based on a national secret SM9 algorithm, which comprises the following steps: a front-end video device downloads an SM9 identification key; the front-end video device and a video encryption subsystem are authenticated bidirectionally based on an identification password algorithm; the front-end video device encrypts monitoring video data by using an SM4 algorithm, and transmits the encrypted monitoring video data to the video encryption subsystem; and the video encryption subsystem decrypts the encrypted monitoring video data and transmits the decrypted monitoring video data to a video user terminal. By using the national secret technology, the standardization degree can be effectively improved, and technical weaknesses can be reduced; the front-end video device and the video encryption subsystem are authenticated bidirectionally based on the SM9 algorithm, so that the authenticity of the access device is ensured, and the access of malicious devices and the illegal control of the front-end device are effectively prevented; the monitoring video data is encrypted based on the national secret algorithm and is transmitted in an encrypted mode, so that the risk of data leakage can be effectively avoided, and the problem of poor safety performance of the existing video monitoring system is solved.