63 results about "Static key" patented technology

The invention discloses a computer network data secure transmission system and method, and particularly relates to the technical field of network data secure transmission, and the system comprises a dynamic key management module which generates a key seed through a quantum random number generator, generates a dynamic key bound with a data packet in combination with a timestamp, and transmits the dynamic key to a server; after being encrypted by a receiving end public key, the data are transmitted through an independent verification channel; the dual-path transmission control module is used for establishing dual channels of a main path and a shadow path, a data packet of the main path is embedded into a random camouflage protocol header to simulate a non-sensitive protocol, and a blank data packet is filled in the shadow path to maintain traffic characteristics; according to the real-time verification engine, a receiving end constructs an encrypted hash tree to achieve fragment-level integrity verification, and meanwhile, requests key state three-state verification from the key management module. Through key dynamic generation and separation transmission, dual-path adaptive fragmentation distribution, fragmentation hash tree reconstruction and key linkage verification, and abnormal triggering fragmentation level retransmission, the problems of long-term effectiveness of a static key, predictable transmission path and verification lag are solved.

The invention relates to the technical field of network security, and discloses a network information security encryption method, which comprises the following steps: step 1, a sender generates a pair of post-quantum asymmetric keys including a public key and a private key, the public key is used for encrypting a symmetric key, and the private key is used for decrypting the encrypted symmetric key; the sender sends the public key to the receiver through the secure channel, and verifies the authenticity of the public key of the receiver; and step 2, the sender generates a dynamic symmetric key based on a device identifier and a current timestamp, and the device identifier is used for uniquely identifying the device generating the key. A unique and unpredictable dynamic symmetric key is generated by combining a device identifier and a timestamp, the security problem that a traditional static key is easy to crack and abuse in long-term use is solved, in addition, a dynamic update triggering mechanism based on a time interval and a data volume is supported, key management has high flexibility and security, and the security of the key management is improved. And the encryption requirements in different network environments are met.

The invention relates to the technical field of network communication security, and discloses a real-time encrypted transmission network communication security guarantee system, which comprises a dynamic fragmentation quantum resistance encryption module, a flow perception-based adaptive encryption engine, a zero-handshake continuous identity authentication module and a hardware acceleration fragmentation processing architecture, and the dynamic fragmentation quantum resistance encryption module is configured to segment a data stream into a plurality of fragments according to a time window, and independently generate an unassociated key for each fragment based on a quantum security NTRU algorithm. According to the network communication security guarantee system for real-time encryption transmission, the traditional network communication security guarantee technology is comprehensively innovated, and the problems of static key management, encryption algorithm adaptation, data fragmentation encryption, identity authentication and encryption cooperation, quantum computing threat response and the like are successfully solved; and the performance of the system in key performance dimensions such as security, real-time performance, adaptability, reliability and anti-attack capability is obviously improved.

The invention discloses a multistage video watermark embedding and extracting method and system, and the method comprises the steps: carrying out the perception analysis of an original video through a space-time attention neural network, and dynamically dividing a time domain stable region and a space domain sensitive region; a three-level watermark system is constructed, the three-level watermark system comprises a basic-level watermark, a first-level enhanced watermark and a second-level enhanced watermark, the basic-level watermark adopts an anti-rotation binary matrix generated by a Fourier descriptor, the first-level enhanced watermark is a DCT frequency domain Hash sequence, and the second-level enhanced watermark is a semantic fingerprint generated based on a motion vector. According to the method, through multi-dimensional collaborative optimization of the anti-attack capability, the dynamic security mechanism and the verification efficiency, the core defects that erasing is easy due to insufficient reversibility in a traditional video watermarking technology and counterfeit affiliation chaos is caused by a static key are overcome, and reliable technical guarantee is provided for digital content copyright protection.

The invention relates to the technical field of data encryption, and discloses a data encryption method, encryption equipment and a storage medium. In the method, an encryption device obtains to-be-encrypted data uploaded by a terminal, and extracts a plurality of data features from the to-be-encrypted data, the data features including a data sensitive feature, a business risk feature and a user behavior feature; performing quantitative scoring on the plurality of data features to obtain a plurality of feature scores, and calculating a total data score according to the plurality of feature scores; inputting the total data score into a preset trained decision tree model to determine the security level of the to-be-encrypted data; according to the security level, determining a target encryption algorithm from a preset corresponding relationship between the security level and the encryption algorithm; and encrypting the to-be-encrypted data according to the target encryption algorithm and the dynamically generated encryption key. By means of the method, the problems that differential protection is difficult to achieve according to data characteristics in a related encryption method, and security risks are caused by key management staticization are solved.

The invention relates to the field of power transaction security, in particular to a data security protection method for power transaction. Comprising the following steps: a registration authentication stage: completing identity registration through triple authentication of a physical token, biological feature recognition and a dynamic password and GPS positioning white list verification; in the key initialization stage, an SM2 asymmetric key pair and an SM4 symmetric communication key are dynamically generated according to a transaction time window and main body attributes, and are issued through a point-to-point encryption channel and updated in time; in the data encryption and binding stage, a transaction instruction is encrypted, signed and subjected to double-layer integrity verification; a matching and on-chain registration stage: executing matching after verifying the signature, encrypting a result, writing the result into the block chain, and generating a zero-knowledge proof; and in the settlement and supervision stage, settlement or alarm responsibility investigation is started after decryption verification. According to the invention, the problems of single identity authentication, static key, easy data tampering and the like in the prior art are solved, full-flow security protection of power transaction is realized, and data confidentiality, integrity and traceability are improved.

The present invention discloses a dynamic data encryption method integrating quantum state and chaotic system, which is implemented based on quantum key generated by QKD system. The QKD system includes N pairs of transmitting end and receiving end, N≥1, and the method includes the following steps: S1: preprocessing to obtain plaintext sequence; S2: introducing external disturbance signal to dynamically adjust the chaotic system and generate pseudo-random sequence; S3: obtaining key stream sequence; S4: XOR operation to obtain intermediate ciphertext; S5: generating quantum key, XOR operation to obtain final ciphertext. The present invention also discloses a dynamic data encryption device integrating quantum state and chaotic system, which is used to implement the method. The present invention realizes dynamic change of key by introducing external disturbance signal to dynamically adjust the chaotic system, solves the problem of static key being attacked, has high adaptability and flexibility, and combines quantum key for encryption at the same time, improves encryption strength based on the theoretical security of quantum state, and effectively improves the security of data encryption.

The invention relates to an AI-based satellite communication encryption strategy dynamic optimization method and system. According to the method, a space-time network model is constructed by collecting dynamic topological data of satellite multicast members, a member connection behavior is predicted by using a space-time diagram convolutional network and a probability matrix is generated, and the multicast key tree structure depth and a key distribution path are dynamically optimized based on a prediction result. Self-adaptive switching of a post-quantum cryptographic algorithm is realized in combination with quantum attack threat assessment, model parameters are continuously adjusted and optimized through a closed-loop verification mechanism, and finally collaborative improvement of key updating efficiency and security protection capability is realized in a satellite communication high-dynamic environment, so that key reconstruction delay and signaling overhead are remarkably reduced, and the security protection capability is improved. Meanwhile, quantum computing attack resistance and cross-protocol-layer cooperative protection capability are enhanced, and the problem of insufficient adaptability of a traditional static key management scheme in a dynamic topology scene is effectively solved.

The invention provides a method for realizing secure encryption of a java source code file based on a C + + dynamic library, which relates to the technical field of secure encryption, and comprises the following steps of: partitioning the java source code file, and processing by adopting a dual encryption mechanism through an encryption module in the C + + dynamic library: firstly, generating a dynamic key and a static key XOR to obtain a mixed key, performing AES encryption by utilizing the mixed key, and then, performing encryption by utilizing the mixed key; carrying out secondary encryption by adopting an elliptic curve cryptographic algorithm; the environment is monitored in real time during decryption, and debugging protection is prevented; and if the environment is normal, executing reverse decryption to recover the source code. According to the method, the source code protection intensity is improved, and reverse engineering and debugging attacks are effectively prevented.

The data transmission method based on the service characteristics comprises the following steps that: a partial node acquires data from a central node: the partial node sends a data acquisition request to the central node; the central node queries target data according to the data acquisition request, generates a first key according to a service extraction feature to which the target data belongs, and encrypts the target data with the first key to obtain a first data packet; the central node transmits the first data packet to the partial nodes in a fragmented manner; the sub-node receives all the fragments of the first data packet, then assembles the fragments into the first data packet, generates a second secret key according to the service extraction feature to which the target data belongs, and decrypts the first data packet by using the second secret key; and if the central node and the partial nodes have the same logic according to the business extraction features to which the target data belong, decryption is successful, and the partial nodes obtain the target data. According to the method, the problem that a traditional static key is easy to crack is avoided, the diversity and security of the key are greatly improved, and data encryption is more flexible and safer.

The invention provides an indoor map generation method based on BIM (Building Information Modeling) and real-time data and electronic equipment. The indoor map generation method comprises the following steps: S1, constructing a first indoor grid map based on BIM model data of a building; s2, resetting the first indoor grid map based on indoor static elements to obtain a second indoor grid map; s3, automatically generating a static key node and a static key path in a passable area of the second indoor grid map; s4, obtaining more than one dynamic grid region; s5, generating dynamic key nodes and dynamic key paths in each dynamic grid region by using a triangulation algorithm; and S6, integrating the static key nodes, the static key paths, the dynamic key nodes and the dynamic key paths to obtain an indoor topological map. According to the method, a large amount of manual workload is avoided, the generation efficiency and accuracy of the indoor topological map are improved, and the environment change can be quickly responded. The invention further provides an indoor navigation method and electronic equipment, and the navigation reliability is improved.

The invention provides a scroll compressor cross ring dynamic strain wireless measuring device, which relates to the technical field of compressor state monitoring and comprises a high-temperature-resistant strain gauge, a wire fixing system and a wireless sensor. Wherein the high-temperature-resistant strain gauges are respectively attached to stress sensitive areas of a static key, a ring beam and a movable key of the cross ring every time; the wire fixing system comprises a three-stage fixing structure formed by an adhesive, an internal wire, an external wire and an internal binding post; the three stages of fixing structures are a strain gauge end fixing structure, a lead transition section fixing structure and a binding post end fixing structure in sequence; the high-temperature-resistant strain gauge is connected with the wireless sensor through an internal wire, a binding post and an external wire, and continuous signal collection is achieved. By implementing operation according to the technical route, the impact load borne by the cross ring at the moment of starting and stopping of the compressor can be collected in a high-quality mode, data collection in a closed cavity is achieved, and an experimental basis is provided for subsequent strength design of the cross ring.

The invention relates to the technical field of electric digital data processing, and discloses a solid state disk controller circuit and a solid state disk. The controller circuit comprises a physical unclonable function unit based on an SRAM (Static Random Access Memory), which is used for dynamically generating a stable hardware trust root key during power-on; the secure boot and firmware decryption engine is used for deriving a firmware decryption authentication key and a data key packaging key by using the key, and carrying out decryption and integrity verification on the encrypted firmware; the runtime firmware execution monitoring unit is used for detecting illegal jump in real time and triggering safe shutdown through a hardware-level control flow diagram; and the dynamic data encryption key management unit recovers the plaintext data key and sends the plaintext data key to the encryption engine only during operation, and power failure disappears. By means of the scheme, end-to-end security protection of firmware and data is achieved, and the risks of static key leakage and firmware tampering are eradicated.

Techniques to privacy proof secure element generated certificates anonymous secure element attestations are described herein. An attestation certificate request can be generated that is signed using the static key of the secure element. The attestation certificate request can then be sent to an attestation server, which can verify the attestation certificate request and return an anonymized attestation certificate. The device containing the secure element can transmit the certificate to third parties to verify attestation data signed by the secure element using the certificate and provide assurance to the third parties that the data being attested to has been generated inside a secure element associated with a specific manufacturer.

According to the secure data transmission system based on dynamic encryption authentication provided by the invention, a trust root which cannot be tampered is established for the whole system through the hardware password module, and continuous derivation and rotation of a session key are realized by the dynamic key management module on the basis, so that the security risk caused by long-term use of a static key is effectively solved. And the secure communication gateway module executes bidirectional authentication and anti-hijacking challenge response by using a dynamic key, so that the real-time credibility and session continuity of the communication process are ensured. And the strategy control engine uniformly coordinates the behaviors of key management and the communication gateway by receiving and compiling the declarative strategy, so that flexible deployment and centralized management and control of the security strategy are realized. According to the system, a cryptographic basis, a dynamic strategy, real-time monitoring and automatic response are deeply fused, a self-adaptive and automatic deep defense system with the capability of continuously resisting advanced threats is constructed, and the overall safety level and the operation efficiency of data transmission are remarkably improved.

The invention provides a PUF (Physical Unclonable Function)-based post-quantum Internet of Things static key management method and system. Generation and storage of a secret key in the method comprise the following steps: firstly, inputting a challenge signal determined based on Internet of Things equipment into a physical unclonable function (PUF) to generate a PUF response; then, the PUF response is input into a key derivation function (KDF), and a key encryption key (KEK) is obtained; then, generating a PQC public key and a PQC private key by using a post quantum cryptography PQC algorithm; then, the PQC private key is encrypted by using a KEK and a symmetric encryption algorithm, and the encrypted PQC private key is stored in a secure storage area; wherein the KEK and the unencrypted PQC private key are cleared from the memory. By adopting the lightweight algorithm, efficient and low-cost key management can be realized on resource-limited Internet of Things equipment, meanwhile, the PUF characteristic is utilized to avoid storage of KEK, the quantum attack resistance of the key is enhanced in combination with the quantum cryptographic algorithm, and the security improvement of key management is realized.

The invention, which relates to the technical field of network security, discloses a low-power-consumption radio frequency encryption communication system comprising a front-end data acquisition module which communicates with a plurality of data acquisition terminals through a central gateway; the encryption channel establishment module quickly verifies the legality of the data acquisition terminal and the central gateway, dynamically generates a one-time shared session key as an encryption key, and optimizes an AES algorithm to perform encryption transmission on a plaintext data block; and the back-end result output module processes the decrypted transmission data and outputs a result according to a service demand. Through four-stage fusion of identity authentication, physical layer secret key, optimization encryption and data processing, the channel encryption problem is solved, a full-process security closed loop from physical world information collection to digital world application output is constructed, a session key is generated by using the physical characteristics of a wireless channel, and the security of the session key is improved. Each communication key is unique and unpredictable, the traditional static key reuse risk is thoroughly solved, and forward security is achieved.

The invention discloses a vehicle-mounted dynamic key management and verification method and device, equipment and a medium, and relates to the technical field of computer networks. In response to an encryption request for target firmware in a target vehicle, acquiring firmware information of the target firmware issued by the cloud; the firmware information comprises an identification code of a target vehicle and a firmware version number of the target firmware; performing slicing processing on the target firmware to obtain at least one firmware slice in the target firmware; generating a firmware key tree corresponding to the target firmware based on the firmware information and the original entropy; the firmware key tree comprises a root key of the target firmware and a slice key of each firmware slice. By adopting the technical scheme, the key can be dynamically managed based on firmware information such as the firmware version number, the binding of the key with the vehicle-mounted equipment and the firmware is realized, the risk that the existing static key is easy to leak is solved, and the safety of the vehicle function is improved.

The disclosure relates to a method and system for securely selecting applications using application identifiers. The method for securely selecting applications using Application Identifiers (AIDs), wherein application-specific static keys are utilized to encrypt AIDs, ensuring privacy and preventing inference about the selected application. The method includes generating a random number to embed in the encryption for uniqueness and replay attack prevention, authenticating the selection command with a Message Authentication Code (MAC) for integrity, and transmitting the encrypted selection command to a recipient device for further processing.

The invention discloses a payment routing method and device based on voiceprint encryption, equipment and a medium, and the method comprises the steps: obtaining a plurality of voiceprint secret key fragments containing voiceprint features and payment information based on a voice payment instruction of a user, and obtaining a plurality of static secret key fragments used for access authorization; performing routing evaluation on a plurality of preset cross-border payment paths to obtain a target path for payment settlement; performing encryption processing on each voiceprint key fragment to obtain a plurality of anonymous identifiers matched with the target path; performing combined verification on each voiceprint key fragment and each static key fragment according to each anonymous identifier to obtain a routing verification result; and sending the route verification result and each anonymous identifier to the target path for payment settlement. According to the method, payment authentication security is enhanced through a dual verification mechanism of voiceprint key fragmentation and static key fragmentation, and the method is suitable for a high-sensitivity financial scene and can assist a financial institution to quickly access a mainstream cross-border payment network.

The invention belongs to the field of embedded device security design, and particularly relates to a security starting system and method based on dynamic environment binding and heterogeneous inspection. A safe starting framework is constructed through a triaxial accelerometer, a main control chip and a verification module, wherein the main control chip integrates an annular oscillator array, a temperature sensor and a hardware hash engine, and the verification module comprises an AI coprocessor and a block chain communication module. The system firstly collects three-dimensional acceleration and environment temperature data, combines dynamic physical signals generated by an annular oscillator array, and generates a dynamic decryption key through fusion of a hardware hash engine; and then heterogeneous dual-channel verification is formed through the AI coprocessor and the block chain communication module, so that the key validity is ensured. According to the method, a static key is replaced by a dynamic trust root, the bottleneck of a single chain is broken through heterogeneous verification, protection is enhanced through environmental data binding, security and light weight are considered, a real-time industrial control scene with limited adaptive resources is adapted, and attacks such as physical detection and environmental simulation are effectively resisted.

The invention provides a power grid BIM data dynamic layering encryption method based on function disturbance and chaotic mapping. According to the method, geometric information of a power grid BIM model is converted into a mathematical function set through an NURBS parameterization decomposition technology, disturbance parameters are generated through a double-chaos system, and an NURBS function set is encrypted. Local updating and tampering prevention of attribute data are achieved through a dynamic hash tree and an evidence storage technology, and safe storage, dynamic authority control and efficient updating of the BIM data of the power grid project are ensured. Compared with the prior art, the method has the advantages that the problems of encryption and analysis conflict, static key risk and insufficient compatibility caused by a traditional encryption algorithm are solved, dynamic layered encryption of the power grid BIM data is realized, and the security and availability of the data are improved.

The invention provides a virtual machine key management method and device, equipment, a storage medium and a program product, and relates to the technical field of information security, the method comprises the following steps: constructing a security state vector of a virtual machine based on state information of the virtual machine; key derivation is carried out based on a root key of a host machine where the virtual machine is located, the identity label of the virtual machine, the security state vector and the system time, and a master key of the virtual machine is generated; and performing key derivation based on the master key, the context information of the virtual machine, the random number and the system time, and generating a session key of the virtual machine. According to the method, multilevel dynamic key derivation is realized by constructing the security state vector of the virtual machine, so that the binding of the key with the identity, the real-time running state and the physical environment of the virtual machine is completed, the rigidity and lag risks caused by long-term fixed use of a static key are overcome, the self-adaption to the dynamic life cycle of the virtual machine is realized, and the dynamic life cycle of the virtual machine is improved. And finally, key isolation management is realized.

Embodiments of the present application provide a data processing method, a client, a server and a system. The method is applied to the client and includes: for a login request, using a first encryption algorithm and a static key in a WebAssembly module to encrypt data transmitted by the login request, and sending the login request to a server; receiving first business data and a dynamic key in response to the login request from the server, and using the first decryption algorithm and the static key in the WebAssembly module to decrypt the first business data and the dynamic key; for a non-login request, using a second encryption algorithm and the dynamic key in the WebAssembly module to encrypt data transmitted by the non-login request; and sending the non-login request to the server; and receiving second business data in response to the non-login request from the server, and using the second decryption algorithm and the dynamic key in the WebAssembly module to decrypt the second business data.

The embodiment of the invention provides a wireless networking communication method, which comprises the following steps of: presetting different static keys and static key factors for different nodes in wireless networking, storing the static keys in the nodes by adopting a distributed method, and storing the static key factors in a server. And a symmetric key is negotiated by using a random value calculated by a network node random algorithm and the equipment to be accessed to the network, so that an attacker is prevented from easily obtaining a static key of the node, the attacker is difficult to simulate illegal access by using the uncertainty of a random number, and the communication security of each node in the wireless network is improved.

The invention discloses a short message signature intelligent filing verification system, and belongs to the technical field of Internet security services. According to the method, the problem that security defects exist in the face of key leakage, permission abuse and content fraud due to the fact that the prior art depends on a static key and a fixed strategy and lacks a behavior analysis and security mechanism is solved, and the authenticity and legality of a filing subject are ensured by introducing multi-factor authentication and combining a behavior portrait technology; based on dynamic trust evaluation and permission policy adjustment, intelligent access permission management is realized, normal business requirements can be met, abnormal behaviors can be timely handled, and system security is guaranteed; through Hash operation and dynamic instruction binding, the uniqueness and non-tampering performance of each short message request are ensured; and based on a response mechanism driven by a multi-layer check and decision tree model, efficient, safe and reliable operation of short message communication is further guaranteed.

The invention discloses a file processing method and device and a program product. Relates to the field of financial science and technology, and the method comprises the steps: generating a data encryption key under the condition that a to-be-encrypted file of a first object is received, and the first object comprises an object for creating the to-be-encrypted file; the file attribute of the to-be-encrypted file and the object attribute of the first object are obtained, and the object attribute comprises at least one of a department to which the first object belongs in the financial institution and a post in the financial institution; determining a key encryption key based on the file attribute and the object attribute of the first object; the to-be-encrypted file is encrypted based on the data encryption key and the key encryption key to obtain a target encryption result, and the target encryption result comprises the encrypted file. Through the file processing method and device, the problem of file processing caused by the fact that the file is encrypted by adopting a static key in an enterprise and the static key is independently managed by an encryptor in the related technology is solved.

This invention relates to the field of network hardware security technology, specifically disclosing a device authentication and key derivation method and electronic device based on FPGA physical binding. The method includes: in response to device power-on, blocking the protected data path; calling the underlying hardware primitives of the FPGA to read the chip's unique physical identifier sequence; comparing the unique physical identifier sequence with preset authentication information to generate an authentication result; and generating a working key based on the unique physical identifier sequence and an external input key when authentication is successful. This invention restricts the protected data path at the initial power-on stage of the device and combines the chip-bound physical identifier sequence with the external input key to dynamically generate the working key, reducing reliance on static key storage mechanisms and mitigating the risk of configuration data being copied to unauthorized chips and continuing to operate.

The embodiment of the invention provides a data protection method and device, electronic equipment and a storage medium. The method comprises the following steps: executing the following operations for a data access request received each time: analyzing the data access request to obtain user information and identification authentication information; generating user identification information for the user information, and generating authentication identification information for the identification authentication information; performing identity authentication based on the user information; and under the condition that the identity authentication is passed, generating a secret key based on the user identification information and the authentication identification information, and performing encryption processing on the data accessed by the data access request by using the secret key. According to the technical scheme, the dynamic key instead of the unchanged static key is generated, so that when the key is lost, only data accessed by the current data access request can be leaked, data accessed by the subsequent data access request cannot be leaked, the risk of data leakage is reduced to a certain extent, and the data access efficiency is improved. And immeasurable loss caused to the user is effectively avoided.

A procedure for initiating a secure communication session between a card and a host, a static encryption key being assigned to the card and stored in the card, each of the card and the host providing of a key version number and a key identifier of said static key, the procedure comprising steps at the card: - receive, from the host, an INITIALIZE UPDATE command comprising a host challenge, which is a value unique to the session; - generate a card challenge, which is a value unique to the session, herein processing at least the card's static encryption key, key diversification data and a sequence counter with a first cryptographic function; - generate a session key (S-ENC), herein processing the card's static encryption key, the host challenge and the card challenge with a second cryptographic function; - calculate a card cryptogram using the session key (S-ENC); - send to the host an INITIALIZE UPDATE reply in which the card cryptogram, the sequence counter and the card challenge are comprised, to enable the host to verify the card cryptogram; characterized in that: - each of the card and the host provide of an SCP key identity associated with said key version number and said key identifier of the card's static encryption key; - the INITIALIZE UPDATE command comprises the SCP key identity, and doesn't comprise said key version number and said key identifier; - to generate the card challenge, in addition said key version number and said key identifier are processed with the first cryptographic function.