166 results about "SM4 Algorithm" patented technology

The invention provides an identity information dynamic desensitization method and system based on SM4 and SM9 algorithms, and the method comprises the steps: carrying out the data segmentation of original identity information, and obtaining sensitive segment information and common segment information; performing key dynamic generation based on an SM4 algorithm, and encrypting the sensitive segment information to obtain encrypted sensitive segment information; extracting a feature value of the common segment information through a preset hash function, and converting the feature value into coded data in a preset format to obtain converted common segment information; splicing the converted common segment information and the encrypted sensitive segment information to obtain preliminary desensitized data; and encrypting the preliminary desensitized data based on an SM9 algorithm to generate an encrypted ciphertext, and embedding a unique identity identifier associated with the original identity information into the encrypted ciphertext in an encryption mode to obtain desensitized identity information. According to the invention, the dynamic desensitization of the identity information can be realized, and the data format can be kept unchanged.

The invention relates to the technical field of commercial password detection methods, and discloses a high-security method for negotiating a temporary session key based on a national secret algorithm, and the commercial password detection method comprises the following steps: initialization and identity authentication: two communication parties generate an SM2 public and private key pair, and the identity is verified through a digital certificate and an SM2 signature; temporary key negotiation: generating a shared key point based on an SM2 key exchange protocol; session key derivation: generating a temporary session key by using an SM3 hash algorithm; key confirmation and encrypted communication: verifying the key through an SM4 algorithm and encrypting communication data; according to the high-security method for negotiating the temporary session key based on the national secret algorithm, efficient key negotiation of both communication parties in an unsecure channel is realized through an SM2 key exchange protocol, an SM3 hash algorithm and an SM4 symmetric encryption algorithm. The method combines digital certificate authentication, dynamic random numbers and timestamps, has forward security, replay attack resistance and man-in-the-middle attack resistance, and is suitable for high-security scenes such as finance and government affairs.

The invention provides a privacy computing security system based on a domestic cryptographic algorithm. The privacy computing security system comprises a key management module, a data encryption module, a homomorphic encryption module, a differential privacy module, an intelligent threat detection module and an access control module. The key management module generates a key by adopting an anti-quantum computing algorithm based on a learning and sampling problem LWE, and performs distributed storage and management by utilizing a block chain technology; the data encryption module performs data encryption and decryption by using an SM4 algorithm; the homomorphic encryption module executes arithmetic and logic operations in a data encryption state; the differential privacy module dynamically protects data privacy; the intelligent threat detection module monitors and detects abnormal activities in real time based on a deep learning model; and the access control module manages user access authority. According to the method, multiple security technologies are integrated, so that the anti-quantum computing capability, data privacy protection and computing efficiency are improved, and the method is suitable for data processing scenes needing high security and privacy protection.

The invention discloses a method and system for quickly constructing a national secret encryption channel, and the method comprises the steps: a client and a server respectively generate a client private key and a server private key based on a sensitive data transmission scene, and apply for an SM2 algorithm certificate; based on the private key and the digital certificate, the client and the server perform a handshake process, and the handshake process comprises that the client and the server perform identity verification and negotiation by exchanging certificates, temporary public keys and signature information; based on temporary public key information exchanged between the client and the server, performing key negotiation through an SM2 elliptic curve algorithm to obtain negotiation data; and based on the session key in the negotiation data, encrypting and decrypting the communication data by using a GCM mode of the SM4 algorithm. According to the method, various negotiation parameters are optimized and simplified based on a domestic encryption algorithm, rapid establishment of the secure channel is realized, only one round-trip delay is needed in the whole process, and time and bandwidth are saved on the premise of ensuring communication security.

The invention belongs to the technical field of network security, and discloses an encrypted enterprise network data security access method and system, and the method comprises the steps: constructing a biological recognition unit and an equipment binding unit, recognizing multi-dimensional biological data through the biological recognition unit, and carrying out the identity authentication of a user through the combination of a dynamic token generation time binding mechanism; the equipment binding unit associates the identity authentication result with the hardware fingerprint of the security access terminal to generate a digital identity certificate; a basic key is generated and updated in a rolling mode through a quantum random number generator; dual protection is carried out on the multi-dimensional biological data through a hierarchical encryption unit, the hierarchical encryption unit comprises an application layer and a transmission layer, the application layer adopts an SM4 algorithm to encrypt service content data in the multi-dimensional biological data, and the transmission layer adopts an SM2 algorithm to generate a session key to carry out forward secrecy; the security access of enterprise network data is ensured, and the security protection capability of the enterprise network is comprehensively enhanced.

The invention provides a handshake protocol method and system based on an SM2 algorithm and an SM4 algorithm, and relates to the field of encrypted transmission, and the method comprises the steps: obtaining first request information in a session process; sending a first SM2 public key generated based on an SM2 algorithm and first client random number ciphertext information to the server; decrypting the SM4 ciphertext information based on a first SM2 private key generated by an SM2 algorithm to obtain an SM4 target key; processing the random number ciphertext information of the second client and the random number ciphertext information of the first server; sending the second server random number target ciphertext information to the server; and processing the first request information to receive the session return ciphertext information from the server and decrypt to determine the session return plaintext information. The handshake encryption between the client side and the server side is completed based on the SM2 algorithm and the SM4 cryptographic algorithm, the SM2 algorithm and the SM4 algorithm are used for replacing an RSA algorithm, an ECDHE algorithm and a DES algorithm on which an SSL protocol depends, and autonomous controllability of data security and information security is achieved.

The invention discloses an intelligent system and method for fusing mental health evaluation in an interest scene based on an education robot. The system realizes non-intrusive mental health assessment by constructing a technical architecture of'multi-modal biological feature anonymization-quantum hybrid encryption-federated learning privacy protection-dynamic risk assessment '. The method is characterized by comprising the following steps of: (1) generating irreversible biological characteristic codes by adopting a chaos random number generator, and realizing anonymized association by combining a double hash chain technology; (2) designing a quantum enhanced hybrid encryption system, fusing an SM4 algorithm, NTRU post quantum cryptography and quantum key distribution; (3) developing a dynamic scene generator, and naturally fusing psychological test questions into interest topics by using a generative adversarial network (GAN) and a curiosity engine; (4) constructing a multi-modal emotion analysis system, and combining an LSTM + CNN hybrid model to realize physiology-behavior-voice data fusion analysis; and (5) deploying a federated learning framework, and protecting model training data through differential privacy noise injection (epsilon = 0.5).

The invention discloses an intelligent abnormity early warning system for an industrial Internet of Things edge node, which comprises an edge sensing layer, an edge intelligent layer and a cloud edge collaboration layer, and is characterized in that the edge sensing layer is used for data acquisition and security preprocessing; the edge intelligent layer is used for intelligently analyzing the data transmitted by the edge sensing layer and constructing a dynamic space-time diagram neural network model and a dynamic edge knowledge graph; a digital twinning threshold engine is set, when the digital twinning threshold engine detects abnormity, reverse reasoning is carried out along the knowledge graph, and self-adaptive early warning is carried out; and the cloud edge collaboration layer is used for carrying out collaboration processing on early warning triggered by the digital twin threshold engine. According to the invention, the spatial-temporal features of the equipment group are learned through the set dynamic spatial-temporal diagram neural network; the digital twin threshold engine generates a dynamic threshold based on physical simulation and adapts to environment and load changes; the edge layer realizes lightweight real-time analysis; and a full-link embedded chaotic encryption and national cipher SM4 algorithm is adopted.

The invention discloses a data security transmission method and system with anti-quantum security, and relates to the technical field of data transmission, and the method comprises the steps: obtaining information which comprises an identity identifier, a temporary public key, a temporary secret value and a validity period demand of a user; generating a public key and a private key of the user based on an ML-DSA signature algorithm; sending an authentication request to a CA authentication center according to the information and a public key of the user, and receiving a certificate authenticated, signed and issued by the CA authentication center; exchanging and verifying the credentials of each other with other users; and after the certificate verification is passed, responding to the data transmission instruction, calling and executing a temporary shared key generation module, outputting a temporary shared key, and then sending data to other users or receiving data from other users based on an SM4 algorithm and an ML-DSA signature algorithm according to the temporary shared key. According to the invention, the cost and risk during upgrading and updating of the system are reduced.

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.

The invention discloses a digital archive multi-protection-based data security transmission method, and relates to the field of data security transmission, and the method comprises the steps: generating a random seed in real time based on a quantum state, carrying out the iterative blocking of the quantum seed through combining with Logistic chaotic mapping, outputting variable-length secret key fragmentation, carrying out the symmetric encryption of archive data through employing a lightweight SM4 algorithm, and carrying out the encryption of the archive data. Obtaining encrypted data of the fragments; a behavior anomaly probability is calculated through a hidden Markov model, a risk score is calculated through a safety interval, and when a score value exceeds a safety threshold value, a grading response is triggered; key fragments are generated by adopting n nodes, at least k fragments can reconstruct signatures to monitor the node state of the block chain, and when the node anomaly rate exceeds a node threshold value, a three-layer architecture is automatically switched. The method has the advantages that an active multi-protection system is constructed through a quantum dynamic key, risk-driven hierarchical response and block chain disaster recovery switching, and quantum attack resistance and dynamic adaptation to transmission of network risks are realized.

The invention relates to the technical field of FPGA architecture, in particular to an SM4 hardware acceleration and anti-side-channel protection method and system of a domestic FPGA, which comprises the following steps of: performing data type identification operation on bright-ciphertext batch data by utilizing an acceleration block to obtain a data type, and according to a pre-constructed parallelization strategy and the data type, performing data type identification operation on the SM4 hardware acceleration and anti-side-channel protection on the SM4 hardware acceleration and anti-side-channel protection on the SM4 hardware acceleration and anti-side-channel protection system; performing dynamic resource configuration on the plaintext-ciphertext batch data to obtain resource configuration information, and performing configuration according to the resource configuration information, the key-mode parameter and the dynamic control instruction to obtain a configured SM4 algorithm; according to the configured SM4 algorithm, performing encryption processing on the plaintext-ciphertext batch data to obtain to-be-protected encrypted data; and performing protection operation based on physical layer leakage suppression, logic layer confusion association and system layer dynamic response on key-mode parameters, dynamic control instructions, plaintext-ciphertext batch data and encryption processing by using the protection block, and converting to-be-protected encrypted data into protected encrypted data. According to the invention, the encryption processing performance and security can be improved.

The invention relates to the technical field of information security, and discloses a handwriting dynamic encryption and electronic signature method based on a national secret algorithm, and the method comprises the steps: obtaining the handwriting data of a user, and carrying out the preprocessing of the data to remove noise and errors; carrying out feature extraction on the preprocessed handwriting data, extracting corresponding track features, speed features and pressure features, and generating a feature hash value of a unique identifier through a cryptographic SM3 hash algorithm; splicing and combining the feature hash value and a user private key, deriving a dynamic key through a national secret SM2 algorithm, and generating an electronic signature by using the dynamic key; an electronic signature is combined with a timestamp to form a structured signature packet, and the signature packet is hierarchically encrypted and stored in a database through a national cryptographic SM4 algorithm. According to the method and the system, the handwritten signature picture, the digital signature technology, the electronic signature technology and the biological recognition and layout file processing technology are fused, so that the safety and the reliability of electronic document signing are improved.

According to the safety coprocessor hybrid encryption method based on the SM2 / 3 / 4 domestic cryptographic algorithm, a novel hybrid encryption system based on the SM2 / 3 / 4 and considering encryption safety, efficiency and key management convenience is constructed on the basis of the characteristics of the SM2 algorithm, the SM3 algorithm and the SM4 algorithm, and the encryption / decryption and signature / verification process is achieved. And aiming at the efficiency problem of a domestic SM algorithm, an encryption / decryption and signature / verification scheme is designed and realized through pure software analysis and software and hardware (SW / HW) collaboration, so that optimal division of software and hardware is realized, and the algorithm efficiency is greatly improved.

The invention provides a data encryption transmission method, system and device based on SM4, and belongs to the technical field of data encryption transmission. The method comprises the following steps: acquiring an encrypted fragmented data packet from front-end equipment; wherein the encrypted fragment data packet at least comprises a ciphertext fragment set, a timestamp and an environment feature hash value which are determined based on the network state value of the front-end equipment and the acquisition environment parameters. The number of ciphertext fragments in the ciphertext fragment set is in positive correlation with the network state value; matching the environment feature hash value with a preset environment feature hash library to determine whether a decryption parameter is generated or not according to a matching result; wherein the decryption parameters at least comprise a dynamic key and an initialization vector IV; if yes, generating decryption parameters according to the encrypted fragmented data packet; and decrypting each ciphertext fragment in the ciphertext fragment set based on the decryption parameters and a preset SM4 algorithm. Therefore, flexible, safe and stable data encryption transmission is realized in a water conservancy monitoring scene.

The invention discloses a system and a method for encrypting high-speed audio and video data based on an FPGA (Field Programmable Gate Array). The system mainly comprises an optical module interface, an FPGA module, a DDR4 (Double Data Rate 4), a FLASH and an HDMI (High Definition Multimedia Interface) TX interface. Wherein the FPGA module internally comprises a self-designed custom protocol processing module, a cache control module, a key management module and a data encryption module; the optical module interface is used for receiving audio and video data in a user-defined format; the user-defined protocol processing module analyzes effective audio and video data according to a user-defined message format, and the data is cached in a DDR4 (Double Data Rate 4) by a cache module; the key management module generates a key used for data encryption through an SM2 algorithm; the data encryption module realizes hardware encryption through the SM4 algorithm module; and the HDMI output interface module converts the encrypted audio and video data into an HDMI format and outputs the converted audio and video data at an HDMI TX interface. According to the high-speed data encryption method based on FPGA hardware logic, an optical module interface and an HDMI interface are combined, and an efficient and safe audio and video data encryption solution is provided.

The invention relates to the technical field of big data, in particular to a precise authorized data element credible circulation method and system.The method comprises the following steps that user identity registration is carried out through an authentication center, information collection, face detection, face feature extraction, digital identity generation and data storage are included, a vector database is used for storing face feature vectors, and the face feature vectors are stored in the database; generating a digital identity (ID) and a public and private key pair by using a cryptographic algorithm SM2, and generating summary information by using an SM3 algorithm and storing the summary information in an evidence storage center; the beneficial effects are that according to the accurate authorization data element credible circulation method and system provided by the invention, an authentication center realizes digital identity authentication based on face recognition of a vector database, and an authorization center realizes data contract authorization based on modes such as an electronic signature and a handwritten authorization book; the evidence storage center realizes process data evidence storage traceability based on a block chain technology, and the ARQC and ARPC communication protocols realize data signature, encryption and accurate authorization based on a national secret SM2 / SM4 algorithm.

According to the clinical nursing patient information monitoring and inputting method and system, the data accuracy, the data inputting efficiency and the privacy protection safety are improved; the method comprises the following steps: firstly, collecting and preprocessing vital sign data of a patient in real time through various physiological sensors; then, acquiring a nursing record image, acquiring nursing record data through an OCR model, acquiring nursing information voice, transwriting the nursing record data and the nursing information voice into nursing information data through a medical scene voice transwriting model, and performing unified standardization processing on the three groups of data to generate patient information data; and finally, when patient information data is input, symmetric encryption is carried out by adopting a national cryptographic SM4 algorithm, encrypted data is obtained, a dynamic encryption key is generated through an ECDH key distribution technology, and the dynamic encryption key can be called to carry out decryption operation after authentication of a dual protection mechanism of Hash value pre-verification and identity authentication is passed.

The invention relates to a traceable security communication method, device and equipment based on a privacy number, and belongs to the technical field of communication processing, and the method realizes credible storage of communication data by obtaining a communication record and generating a distributed unique identifier, adopting an SM2 algorithm for signature and writing evidence data into a block chain. Meanwhile, the preset master key is subjected to fragmentation processing, a plurality of sub-key fragments are generated, the storage position is determined, and the session key is generated by adopting an SM4 algorithm to perform end-to-end encryption on the communication content, so that the communication security is guaranteed. Besides, a zero-knowledge proof protocol is introduced for identity verification, dynamic risk assessment and an authority fusing mechanism are combined, high-risk communication is effectively prevented, multiple cryptography technologies and safety mechanisms are comprehensively applied, and safety, credibility and auditing performance of the communication process are comprehensively improved.

The invention relates to the technical field of electric digital data processing security, and discloses a solid state disk data encryption method and a solid state disk. According to the method, a national cryptographic algorithm hardware encryption and decryption co-processing module is serially arranged on a data bus between a main control chip and a flash memory particle array, so that transparent encryption of write-in data and transparent decryption of read-out data are realized; the module performs encryption and decryption based on an SM4 algorithm and an XTS advanced encryption standard mode in combination with a logic address as an adjustment value, and securely injects a root key through an out-of-band interface to derive a data key. The system comprises a main control chip, a flash memory array and the co-processing module, wherein the co-processing module is integrated with a hardware encryption and decryption engine, a key management unit and data flow control logic. On the premise that a general main control chip is not changed, high-performance, high-compatibility and high-security national cryptographic hardware-level full-disk encryption is realized.

The invention discloses a data encryption and access control device for an intelligent fire-fighting internet of things system in the technical field of data protection. The data encryption and access control device comprises a dynamic encryption engine, a multi-mode access control module and a safety coprocessor. The dynamic encryption engine adaptively selects an SM4-GCM and SM9-Kyber hybrid encryption algorithm based on the data sensitivity level and the equipment type, so that the transmission encryption delay is less than or equal to 0.9 ms; the multi-mode access control module supports dynamic permission upgrading and tamper-proof evidence storage in a fire emergency scene through a three-layer architecture of RBAC + ABAC + block chain auditing; the security coprocessor adopts an FPGA hardware acceleration SM4 algorithm, and the energy efficiency ratio reaches 15Gbps / W. Anti-quantum security: the post-quantum algorithm Kyber-768 passes through the third round of authentication of NIST, and the key negotiation efficiency is improved by 3 times compared with that of the traditional ECDH (test data: the negotiation time consumption of 100,000 times is reduced from 18 seconds to 5.7 seconds). Technical optimization of the device comprises fine-grained access control innovation, a multi-modal strategy engine, block chain auditing and tracing, hardware acceleration efficiency optimization and distributed key management.

The invention discloses a secure communication method and system of an MQTT protocol based on a national cryptographic module, a server and a client based on MQTT protocol communication are both configured with the national cryptographic module, and the secure communication method comprises the following steps: the server and the client generate an initial key pair based on the national cryptographic module, signature verification is carried out based on a national cryptographic algorithm and the initial key pair, so that security identity authentication between the server and the client is realized; negotiating an encryption key between the server and the client based on a national secret algorithm; the client sends a connection message of an MQTT protocol encrypted based on an encryption key and a national cryptographic algorithm to the server, and verification of a client user name and a password is carried out; the MQTT protocol communication based on the encryption key and the national cryptographic algorithm is carried out based on the verification result, SM2 algorithm signature and signature verification are fused in the MQTT protocol based on the national cryptographic hardware cryptographic module, the SM4 algorithm is adopted to symmetrically encrypt and decrypt data transmitted by the MQTT protocol, the MQTT protocol conforming to the national cryptographic algorithm is designed, and the confidentiality of the data is ensured.

The invention discloses a data multi-layer national secret encryption acquisition and transmission system and method with an adjustable encryption strategy, and the system comprises a strategy adjustment module which is used for determining the encryption strategy of current data transmission, and the encryption strategy comprises a first encryption strategy and a second encryption strategy; the data acquisition module is used for acquiring data in the monitoring terminal in real time through a sensor and a data interface; the encryption module is used for performing multi-layer encryption processing on the acquired data by adopting SM1, SM2, SM3 and SM4 cryptographic algorithms; the transmission module is used for sending the encrypted data to a data center through a secure channel; and the data center is used for identifying the encryption strategy and decrypting and authenticating the received data. According to the method, data transmission can be carried out by flexibly adopting different strategies, and under the encryption condition, multi-layer encryption processing of the data can be carried out by adopting multiple national cryptographic algorithms, so that the security of data acquisition and transmission is enhanced.

The invention discloses an online data encryption and decryption method and device based on an eFlash-XIP mode, equipment and a storage medium, and relates to the technical field of data processing, and the method comprises the steps: obtaining a target key, encryption and decryption enabling information and the memory size of to-be-encrypted data from a first data storage region in a memory; encrypting the to-be-encrypted data based on the target key and the encryption and decryption enabling information by using a target encryption algorithm obtained by improving an SM4 algorithm to obtain encrypted data; creating a second data storage area based on the memory size of the to-be-encrypted data, and storing the encrypted data to the second data storage area through a preset controller; and obtaining the to-be-decrypted data from the second data storage area through the preset controller, and decrypting the to-be-decrypted data based on the target key and the encryption and decryption enabling information by using a target decryption algorithm obtained by improving the SM4 algorithm to obtain decrypted data. Therefore, online data encryption and decryption can be realized.

The invention provides an RDMA-oriented user data access control method and system, and relates to the technical field of computer network information security, and the method comprises the steps: initializing an RDMA network, and building a communication protocol mechanism; in the communication process, a key generation center is deployed in the RDMA network, and after a request of accessing the RDMA network by a terminal node is obtained, terminal node identity registration and identity authentication are performed on the key generation center, and then a shared key of the terminal node and the key generation center and a shared session key between the terminal nodes are generated; after the communication receiving end receives the encrypted message, the message is decrypted by using the shared session key between the terminal nodes and the SM4 algorithm; and then MAC verification is carried out on the data sent by the sending end by using the message identification code, the message is accepted if verification succeeds, otherwise, the message is discarded, and one-time data transmission is completed.

The invention discloses a distributed GPU scheduling, data encryption management and dynamic charging system oriented to privatized AI deployment, and belongs to the technical field of distributed computing and artificial intelligence. The system comprises a decentralized scheduling module, which distributes tasks to distributed GPU nodes through a dynamic weight scoring model (weight factors comprise GPU utilization rate, network delay and task priority); the central control load balancing unit is used for monitoring node states in real time and dynamically adjusting a scheduling strategy; the data encryption module is used for establishing a point-to-point encryption channel between a user terminal and a GPU node based on a WebRTC technology, and data is encrypted by a national cryptographic SM4 algorithm and is decrypted only at a target node; and the dynamic billing unit is used for realizing 0.01-element micro billing according to the GPU computing power consumption and automatically distributing earnings through an intelligent contract. Experiments show that the task completion time of the system in a 100-node cluster is shortened by 30%, the resource utilization rate is improved by 45%, the data leakage risk is reduced by 98%, and the system is suitable for enterprise sensitive data protection and personal user elastic computing power requirements.

The invention discloses an SM4 algorithm accelerated calculation method based on RISC-V. The SM4 algorithm accelerated calculation method comprises the following steps: step 1, acquiring corresponding plaintext and key data; 2, building an SM4 algorithm calculator based on an RISC-V platform, and setting a data processing area and an algorithm optimization area in an SM4 algorithm accelerator; step 3, taking the plaintext and the key data as input, storing and preprocessing the input plaintext and key data through a data processing area, generating an initialization vector through a system used for operating an SM4 algorithm, and obtaining a counter value of system operation; step 4, the algorithm optimization area reads key data and system parameters and executes a key expansion algorithm, and the expanded key is stored; and 5, the algorithm optimization area takes the expanded secret key and the counter value as input data and executes an encryption algorithm, so that the round function operation of the SM4 algorithm is accelerated. According to the method, the problem that the data processing capability is low when the SM4 algorithm is realized by hardware is solved.

The invention discloses a program decompilation prevention method and device and a medium, and the method comprises the steps: determining a target code required to be protected in a program source code, carrying out the obfuscation processing of the target code and a mixed factor code of the target code according to the obfuscation logic of the target code, generating an intermediate code, and carrying out the obfuscation processing of the mixed factor code of the target code through an SM4 symmetric encryption algorithm, the method comprises the following steps of: firstly, generating an intermediate code, encrypting the intermediate code to generate an encrypted Class file, then, carrying out hierarchical encryption on a preset loading class to generate a multi-layer encrypted loading class, and finally, packaging the encrypted Class file, the multi-layer encrypted loading class and a basic class to generate an encrypted JAR packet. According to the method, the Class file is encrypted through the code obfuscation technology and the SM4 cryptographic algorithm, layer-by-layer encryption is carried out on the self-defined loading class, the complexity after code obfuscation is greatly improved, and the security of source code software is improved.

The invention discloses a national cryptographic algorithm acceleration system supporting SM4-ZUC dual-core dynamic collaboration, and belongs to the technical field of information security and hardware acceleration. The system comprises an AXI read-write module, a configuration register module, an SM4 algorithm module and a ZUC algorithm module. The configuration register receives and distributes information such as a secret key, an initial vector and a mode through an APB interface; the AXI read-write module supports burst transmission and dynamic scheduling data read-write; the SM4 algorithm module supports three modes of GCM, CTR and ECB; and the ZUC algorithm module is compatible with ZUC-128 / 256. And the corresponding ZUC-128 / 256 and SM4 algorithms can be dynamically selected for operation by judging an encryption mode in the ZUC and SM4 algorithms. The system adopts a three-level assembly line architecture, space-time multiplexing of read-write data and encryption is realized, and throughput rate is improved.

The invention relates to the field of Internet of Things security and intelligent access control, and particularly discloses a re-encryption near field communication method and a security door lock, and the method comprises the following steps: S1, in a near field communication establishment stage, carrying out equipment bidirectional authentication by adopting a national cipher SM4 algorithm, and generating a dynamic session key; s2, in a data transmission stage, dynamically switching an AES-256 or DES encryption algorithm based on the signal strength to ensure the communication security; s3, when abnormal operation is detected, triggering an SM3 hash algorithm to generate a security alarm fingerprint, and interrupting a current communication link; according to the invention, through dynamic combination encryption of a national cryptographic algorithm and AES / DES, a security protection system adaptive to a communication environment is constructed, and bidirectional authentication of equipment is realized by adopting an SM4 algorithm in a near field communication establishment stage, so that identity credibility is ensured; in the data transmission stage, the encryption strength is intelligently switched according to the real-time signal strength, so that the communication reliability in a weak signal environment is guaranteed, and the data confidentiality in a strong signal environment is enhanced.