32 results about "Static key" patented technology

The invention relates to the technical field of data encryption, and discloses a data encryption method, encryption equipment and a storage medium. In the method, an encryption device obtains to-be-encrypted data uploaded by a terminal, and extracts a plurality of data features from the to-be-encrypted data, the data features including a data sensitive feature, a business risk feature and a user behavior feature; performing quantitative scoring on the plurality of data features to obtain a plurality of feature scores, and calculating a total data score according to the plurality of feature scores; inputting the total data score into a preset trained decision tree model to determine the security level of the to-be-encrypted data; according to the security level, determining a target encryption algorithm from a preset corresponding relationship between the security level and the encryption algorithm; and encrypting the to-be-encrypted data according to the target encryption algorithm and the dynamically generated encryption key. By means of the method, the problems that differential protection is difficult to achieve according to data characteristics in a related encryption method, and security risks are caused by key management staticization are solved.

The invention provides a scroll compressor cross ring dynamic strain wireless measuring device, which relates to the technical field of compressor state monitoring and comprises a high-temperature-resistant strain gauge, a wire fixing system and a wireless sensor. Wherein the high-temperature-resistant strain gauges are respectively attached to stress sensitive areas of a static key, a ring beam and a movable key of the cross ring every time; the wire fixing system comprises a three-stage fixing structure formed by an adhesive, an internal wire, an external wire and an internal binding post; the three stages of fixing structures are a strain gauge end fixing structure, a lead transition section fixing structure and a binding post end fixing structure in sequence; the high-temperature-resistant strain gauge is connected with the wireless sensor through an internal wire, a binding post and an external wire, and continuous signal collection is achieved. By implementing operation according to the technical route, the impact load borne by the cross ring at the moment of starting and stopping of the compressor can be collected in a high-quality mode, data collection in a closed cavity is achieved, and an experimental basis is provided for subsequent strength design of the cross ring.

The invention relates to the technical field of electric digital data processing, and discloses a solid state disk controller circuit and a solid state disk. The controller circuit comprises a physical unclonable function unit based on an SRAM (Static Random Access Memory), which is used for dynamically generating a stable hardware trust root key during power-on; the secure boot and firmware decryption engine is used for deriving a firmware decryption authentication key and a data key packaging key by using the key, and carrying out decryption and integrity verification on the encrypted firmware; the runtime firmware execution monitoring unit is used for detecting illegal jump in real time and triggering safe shutdown through a hardware-level control flow diagram; and the dynamic data encryption key management unit recovers the plaintext data key and sends the plaintext data key to the encryption engine only during operation, and power failure disappears. By means of the scheme, end-to-end security protection of firmware and data is achieved, and the risks of static key leakage and firmware tampering are eradicated.

According to the secure data transmission system based on dynamic encryption authentication provided by the invention, a trust root which cannot be tampered is established for the whole system through the hardware password module, and continuous derivation and rotation of a session key are realized by the dynamic key management module on the basis, so that the security risk caused by long-term use of a static key is effectively solved. And the secure communication gateway module executes bidirectional authentication and anti-hijacking challenge response by using a dynamic key, so that the real-time credibility and session continuity of the communication process are ensured. And the strategy control engine uniformly coordinates the behaviors of key management and the communication gateway by receiving and compiling the declarative strategy, so that flexible deployment and centralized management and control of the security strategy are realized. According to the system, a cryptographic basis, a dynamic strategy, real-time monitoring and automatic response are deeply fused, a self-adaptive and automatic deep defense system with the capability of continuously resisting advanced threats is constructed, and the overall safety level and the operation efficiency of data transmission are remarkably improved.

The invention discloses a vehicle-mounted dynamic key management and verification method and device, equipment and a medium, and relates to the technical field of computer networks. In response to an encryption request for target firmware in a target vehicle, acquiring firmware information of the target firmware issued by the cloud; the firmware information comprises an identification code of a target vehicle and a firmware version number of the target firmware; performing slicing processing on the target firmware to obtain at least one firmware slice in the target firmware; generating a firmware key tree corresponding to the target firmware based on the firmware information and the original entropy; the firmware key tree comprises a root key of the target firmware and a slice key of each firmware slice. By adopting the technical scheme, the key can be dynamically managed based on firmware information such as the firmware version number, the binding of the key with the vehicle-mounted equipment and the firmware is realized, the risk that the existing static key is easy to leak is solved, and the safety of the vehicle function is improved.

The disclosure relates to a method and system for securely selecting applications using application identifiers. The method for securely selecting applications using Application Identifiers (AIDs), wherein application-specific static keys are utilized to encrypt AIDs, ensuring privacy and preventing inference about the selected application. The method includes generating a random number to embed in the encryption for uniqueness and replay attack prevention, authenticating the selection command with a Message Authentication Code (MAC) for integrity, and transmitting the encrypted selection command to a recipient device for further processing.

The invention discloses a payment routing method and device based on voiceprint encryption, equipment and a medium, and the method comprises the steps: obtaining a plurality of voiceprint secret key fragments containing voiceprint features and payment information based on a voice payment instruction of a user, and obtaining a plurality of static secret key fragments used for access authorization; performing routing evaluation on a plurality of preset cross-border payment paths to obtain a target path for payment settlement; performing encryption processing on each voiceprint key fragment to obtain a plurality of anonymous identifiers matched with the target path; performing combined verification on each voiceprint key fragment and each static key fragment according to each anonymous identifier to obtain a routing verification result; and sending the route verification result and each anonymous identifier to the target path for payment settlement. According to the method, payment authentication security is enhanced through a dual verification mechanism of voiceprint key fragmentation and static key fragmentation, and the method is suitable for a high-sensitivity financial scene and can assist a financial institution to quickly access a mainstream cross-border payment network.

The invention belongs to the field of embedded device security design, and particularly relates to a security starting system and method based on dynamic environment binding and heterogeneous inspection. A safe starting framework is constructed through a triaxial accelerometer, a main control chip and a verification module, wherein the main control chip integrates an annular oscillator array, a temperature sensor and a hardware hash engine, and the verification module comprises an AI coprocessor and a block chain communication module. The system firstly collects three-dimensional acceleration and environment temperature data, combines dynamic physical signals generated by an annular oscillator array, and generates a dynamic decryption key through fusion of a hardware hash engine; and then heterogeneous dual-channel verification is formed through the AI coprocessor and the block chain communication module, so that the key validity is ensured. According to the method, a static key is replaced by a dynamic trust root, the bottleneck of a single chain is broken through heterogeneous verification, protection is enhanced through environmental data binding, security and light weight are considered, a real-time industrial control scene with limited adaptive resources is adapted, and attacks such as physical detection and environmental simulation are effectively resisted.

The invention provides a virtual machine key management method and device, equipment, a storage medium and a program product, and relates to the technical field of information security, the method comprises the following steps: constructing a security state vector of a virtual machine based on state information of the virtual machine; key derivation is carried out based on a root key of a host machine where the virtual machine is located, the identity label of the virtual machine, the security state vector and the system time, and a master key of the virtual machine is generated; and performing key derivation based on the master key, the context information of the virtual machine, the random number and the system time, and generating a session key of the virtual machine. According to the method, multilevel dynamic key derivation is realized by constructing the security state vector of the virtual machine, so that the binding of the key with the identity, the real-time running state and the physical environment of the virtual machine is completed, the rigidity and lag risks caused by long-term fixed use of a static key are overcome, the self-adaption to the dynamic life cycle of the virtual machine is realized, and the dynamic life cycle of the virtual machine is improved. And finally, key isolation management is realized.

Embodiments of the present application provide a data processing method, a client, a server and a system. The method is applied to the client and includes: for a login request, using a first encryption algorithm and a static key in a WebAssembly module to encrypt data transmitted by the login request, and sending the login request to a server; receiving first business data and a dynamic key in response to the login request from the server, and using the first decryption algorithm and the static key in the WebAssembly module to decrypt the first business data and the dynamic key; for a non-login request, using a second encryption algorithm and the dynamic key in the WebAssembly module to encrypt data transmitted by the non-login request; and sending the non-login request to the server; and receiving second business data in response to the non-login request from the server, and using the second decryption algorithm and the dynamic key in the WebAssembly module to decrypt the second business data.

The invention discloses a short message signature intelligent filing verification system, and belongs to the technical field of Internet security services. According to the method, the problem that security defects exist in the face of key leakage, permission abuse and content fraud due to the fact that the prior art depends on a static key and a fixed strategy and lacks a behavior analysis and security mechanism is solved, and the authenticity and legality of a filing subject are ensured by introducing multi-factor authentication and combining a behavior portrait technology; based on dynamic trust evaluation and permission policy adjustment, intelligent access permission management is realized, normal business requirements can be met, abnormal behaviors can be timely handled, and system security is guaranteed; through Hash operation and dynamic instruction binding, the uniqueness and non-tampering performance of each short message request are ensured; and based on a response mechanism driven by a multi-layer check and decision tree model, efficient, safe and reliable operation of short message communication is further guaranteed.

The invention discloses a file processing method and device and a program product. Relates to the field of financial science and technology, and the method comprises the steps: generating a data encryption key under the condition that a to-be-encrypted file of a first object is received, and the first object comprises an object for creating the to-be-encrypted file; the file attribute of the to-be-encrypted file and the object attribute of the first object are obtained, and the object attribute comprises at least one of a department to which the first object belongs in the financial institution and a post in the financial institution; determining a key encryption key based on the file attribute and the object attribute of the first object; the to-be-encrypted file is encrypted based on the data encryption key and the key encryption key to obtain a target encryption result, and the target encryption result comprises the encrypted file. Through the file processing method and device, the problem of file processing caused by the fact that the file is encrypted by adopting a static key in an enterprise and the static key is independently managed by an encryptor in the related technology is solved.

This invention relates to the field of network hardware security technology, specifically disclosing a device authentication and key derivation method and electronic device based on FPGA physical binding. The method includes: in response to device power-on, blocking the protected data path; calling the underlying hardware primitives of the FPGA to read the chip's unique physical identifier sequence; comparing the unique physical identifier sequence with preset authentication information to generate an authentication result; and generating a working key based on the unique physical identifier sequence and an external input key when authentication is successful. This invention restricts the protected data path at the initial power-on stage of the device and combines the chip-bound physical identifier sequence with the external input key to dynamically generate the working key, reducing reliance on static key storage mechanisms and mitigating the risk of configuration data being copied to unauthorized chips and continuing to operate.

The invention provides a switch access terminal security authentication method and system, and the method comprises the steps: detecting a terminal access request through a switch, executing initial authentication based on a terminal hardware fingerprint and a user certificate, and generating and issuing a static key seed corresponding to a session after the authentication is passed; during the terminal access period, according to the track offset degree of the current behavior relative to the historical behavior, calculating the behavior abnormity membership degree; updating the dynamic trust value according to the abnormal behavior membership degree, and generating a security parameter containing a key strength parameter and a micro-isolation strategy identifier; and performing multiple rounds of hash derivation on the static key seed based on the key strength parameter to obtain a dynamic session key, retrieving an access control rule from a policy library in combination with the micro-isolation policy identifier, and issuing the access control rule to a switch to realize communication encryption and dynamic network access control. By adopting the scheme of the invention, adaptive regulation and control of the dynamic key and access control based on terminal behavior perception can be realized, so that the security protection response capability of the switch access environment is improved.

This invention provides a method for segmented random encryption and upgrade of embedded device firmware. The method includes: generating overall firmware segmentation rules based on function entry address offsets; generating data segments based on data structure boundary identifiers; segmenting the firmware and recording the segment index and segment index offset of each segment; randomly assigning encryption algorithms to each segment using a pre-set multi-type encryption algorithm pool; obtaining the actual independent key for each segment through hash operation by concatenating dynamic factors; independently encrypting each segment and storing the encryption algorithm pool index and encryption key metadata corresponding to each segment; reassembling the encrypted segments in their original order into complete ciphertext firmware, and attaching the encryption algorithm pool index and encryption key metadata to generate encrypted firmware ciphertext. This invention ensures that each segment key is unique and unpredictable through dynamic random segmentation and random allocation of algorithm pools, completely avoiding the defects of static keys and blocking firmware imitation paths at the source.

The invention discloses a dynamic data encryption transmission method and system and a storage medium, and belongs to the technical field of data communication security. The method aims to solve the problems of high key leakage risk and high key management overhead in a traditional static key encryption scheme. According to the method, the initial key and the initial vector are pre-shared at the sending end and the receiving end, and the encryption key of each data block is dynamically generated by depending on the ciphertext content of the previous data block in the transmission process. Specifically, a sending end and a receiving end synchronously calculate a current dynamic key according to a previous ciphertext block through hash and a key derivation function, and encrypt and decrypt a current data block by using the key. Due to the chained evolution characteristic of the secret key, cracking of a single ciphertext does not affect the security of other data, and data tampering can cause subsequent decryption failure, so that extremely high security, built-in integrity verification and replay attack resistance are provided, additional transmission of the secret key is not needed, and the communication overhead is reduced.

The data transmission method based on service characteristics comprises the following steps: a sub-node obtains data from a center node: the sub-node sends a data obtaining request to the center node; the center node queries target data according to the data obtaining request, extracts a feature according to a service to which the target data belongs, generates a first key, encrypts the target data by using the first key to obtain a first data packet, and transmits the first data packet to the sub-node in pieces; the sub-node assembles the first data packet by receiving all the pieces of the first data packet, extracts a second key according to the feature of the service to which the target data belongs, and decrypts the first data packet by using the second key; if the logic of the features of the service to which the target data belongs is the same, the decryption is successful, and the sub-node obtains the target data. The application avoids the problem that the traditional static key is easily cracked, greatly increases the diversity and security of the key, and makes the data encryption more flexible and secure.

The application relates to the technical field of computer data security, and provides a file transmission encryption method and device based on device identification, equipment and medium, the method comprises the following steps: receiving a file stream encryption result sent by a client; wherein the file stream encryption result is obtained by encrypting a read file stream by the client using a target session key; the target session key is obtained by decrypting a received encryption key by the client using a locally generated device private key; the encryption key is obtained by encrypting a dynamically generated initial key by the client using a device public key based on the legality verification of the device identification sent by the client; the validity of the file stream encryption result is verified, and based on the verification, the file stream encryption result is stored. The application can effectively prevent the key from being stolen or tampered with during transmission, realize efficient, dynamic and safe encryption of sensitive file streams, and effectively prevent the security risks caused by long-term use of static keys.

The application discloses an encryption communication method and system based on dynamic key negotiation. The method comprises the following steps: in response to a communication request sent by a printer to a consumable chip, the consumable chip generates a first random number and sends the first random number to the printer; the printer generates a second random number, and dynamically negotiates a session key according to the first random number, the second random number and a pre-shared root key; and the printer and the consumable chip perform encrypted transmission on interactive data based on the session key. Through the dynamic key negotiation mechanism of the double random numbers combined with the pre-shared root key, the application realizes independent generation or periodic update of the session key between the printer and the consumable chip in each communication, effectively prevents the data leakage risk caused by interception or cracking of the static key, guarantees the confidentiality and integrity of the interactive data, and significantly improves the security of the communication data between the printer and the consumable chip.

The application relates to the technical field of intelligent control, and discloses an industrial-grade control cabinet safety control method, which comprises the following steps: step 1, collecting quantum arbitrary number generator data to generate a key and evaluating the key entropy by using an edit distance measure; step 2, adjusting a key update strategy by using Markov decision according to the key generated in step 1 and updating the key when an attack is detected; step 3, collecting network traffic according to the update strategy in step 2 to build a topology analysis model, determining a network attack by using persistent homology, and issuing an alarm; and step 4, building an adjacency matrix according to the traffic data and equipment connection information in step 3 and calculating a graph Laplacian matrix. The application adopts quantum arbitrary number generation and Markov decision to optimize the key update strategy, dynamically updates the key when an attack is detected, guarantees the randomness of the key and the anti-attack ability, and can effectively reduce the key leakage risk and improve the system anti-quantum computing attack ability compared with the existing static key management scheme.

The invention relates to the technical field of data encryption, and discloses an intelligent encryption method, device and system for application sensitive data. Comprising the following steps: executing a secret key mixing operation of a static secret key and a dynamic secret key in a coding encryption environment to obtain a mixed secret key result, and further executing corresponding encryption and coding format conversion operation on target application data and the mixed secret key result, signature detection and integrity verification operations are executed in the operation decryption environment, and corresponding decryption and decoding format conversion operations are executed on the target format ciphertext data, so that the comprehensiveness and rationality of an intelligent encryption and decryption mode of the application sensitive data are improved; furthermore, the diversity, pertinence and independence of the encryption operation environment and the decryption operation environment of the application sensitive data are improved, so that the encryption and decryption accuracy and the encryption and decryption reliability of the application sensitive data are improved, and the use safety and the management reliability of the application sensitive data are further improved; and the management accuracy and management efficiency of the application sensitive data are improved.

The invention discloses a local area network encryption communication method and system based on dynamic RSA secret key and hardware binding, and relates to the technical field of medical data safety communication. The hardware terminal establishes a secure communication channel with the external device by identifying an identifier of the external device and a key pair list of the hardware terminal, allocates an RSA public key to the external device based on the key pair list, and responds to a communication request encrypted by the external device through the RSA public key. And the hardware terminal decrypts the communication request through an RSA private key paired with the RSA public key, and sends a decryption result encrypted through the RSA private key to the external equipment. The problems that in the prior art, the static key risk is high, and medical data can be directly accessed by the outside are solved.

A secure element for securely communicating over a communication network is provided. The secure element comprises a storage unit in which a set of computer readable instructions for mutual authentication of the secure element with an external entity, a static key pair and a receipt are stored. The secure element comprises a control unit configured to execute the set of computer readable instructions which configure the control unit to initiate a secure channel, generate at least one shared secret by performing an elliptic curve key agreement based on the static key pair, generate at least one session key for secure messaging over the secure channel based on the at least one shared secret and shared information, wherein the shared information comprises the receipt, determine a new receipt based on one of the at least one session key, and store the new receipt in the storage unit.

This application discloses a dynamic encryption / decryption method, apparatus, device, and storage medium for information, relating to the field of data encryption technology. The method includes: encrypting initial information using a public key to obtain initial ciphertext; generating an insertion position index based on the ciphertext length of the initial ciphertext; splitting and concatenating the ciphertext based on the insertion position index to generate target ciphertext; and sending a service request containing the target ciphertext to a backend, so that the backend decrypts the target ciphertext to restore the initial information. This application effectively solves the security risks associated with static key storage by using a public key to encrypt and generate initial ciphertext at the front end and dynamically generating an insertion position index based on its length to split and hide the private key within the target ciphertext. This significantly improves the security of data transmission without requiring additional key management configuration.

The invention relates to the technical field of information security, in particular to a data encryption method and device, electronic equipment and a storage medium, and is used for solving the problem of data leakage easily caused by brute force cracking of a secret key when the data is encrypted by using the static secret key in the prior art. The method comprises: in response to an acquisition request of target service data initiated by a terminal device, acquiring a key factor of a target key, the key factor comprising a time salt value and a device fingerprint; the time salt value is used for representing time information for initiating the acquisition request, and the equipment fingerprint is used for representing identity information of the terminal equipment; generating a target key based on the time salt value and the device fingerprint; and encrypting the target service data based on the target key, and sending the encrypted target service data and the target key to the terminal equipment. The dynamic key is generated by using the time salt value and the equipment fingerprint, so that the uniqueness of each session key is ensured, the risk of data leakage caused by brute force cracking of the static key is reduced, and the replay attack is effectively prevented.

This invention relates to the field of power communication technology, specifically to a secure communication method and system based on power line carrier channels. The secure communication method based on power line carrier channels provided in this solution fully utilizes the real-time characteristics of power line carrier channels. Using pilot signals as a carrier, it obtains the dynamic parameters of the current channel through channel estimation, generates a communication key based on the channel parameters, and because the channel parameters change in real time with the power grid load and interference conditions, the generated communication key has inherent real-time and randomness, avoiding the vulnerability of static keys to being cracked. Simultaneously, a verification key generated at the sending end is compared with the communication key distributed at the receiving end to ensure accurate synchronization of the communication key. Furthermore, the communication key generation process is deeply integrated with the power line carrier channel, eliminating the need for additional external random sources, and the communication key can be updated in real time with each communication, further enhancing communication security.

The invention discloses a new energy intelligent production management platform data integrity verification method based on a national secret algorithm. According to the invention, a dynamic self-adaptive security verification system is constructed by deeply fusing a cryptographic mechanism and new energy production environment characteristics. Due to the introduction of the dynamic entropy source parameters, the verification identifier has environmental sensitivity, the power fluctuation characteristics of the wind and light power generation system can be sensed in real time, and the randomness of the physical world is converted into the unpredictability of cryptographic elements. A two-factor verification mechanism based on an SM2 algorithm breaks through the limitation of a traditional static key, and through the synergistic effect of equipment fingerprints and environment parameters, unique authentication of a data source is ensured, and continuous verification of the running environment situation is achieved. The dynamic coupling mechanism effectively defends replay attacks and man-in-the-middle tampering, so that an attacker cannot break through system protection by copying historical data or forging an equipment identity, and meanwhile, the millisecond-level response speed is kept to meet the real-time requirement of new energy production.

The application discloses an instruction management method for an alternating current micro-grid frequency regulation system, relates to the technical field of alternating current micro-grid instruction management, and comprises the following steps: monitoring a frequency regulation instruction, extracting metadata of the frequency regulation instruction, and constructing a directed acyclic graph according to a logical relationship between the instructions; then, the number of characters and the memory occupation value of the directed acyclic graph are extracted, and a current timestamp is obtained; the application realizes dynamic and lightweight real-time integrity protection; the application discloses a method for abandoning a static key or a fixed hash strategy, and creatively converting the dynamic change characteristics of the instruction chain into a verification key in real time through a nonlinear operation rule. Any slight tampering with the instruction chain will immediately cause the chain characteristics to change, and then cause the key to be unmatched in the periodic check, so that the real-time protection of the instruction flow is realized, the security mechanism and the business flow are synchronously evolved, the protection granularity is fine, and the real-time performance is high.

The invention relates to the technical field of equipment control, and discloses a control method and system of intelligent wearable equipment for children. The method comprises the steps that multi-sensor data are collected through a dual-core heterogeneous processor, and an original data set containing three-axis acceleration, heart rate variability and environmental parameters is obtained; extracting time domain and frequency domain features by adopting a sliding window segmentation algorithm to form child motion feature vectors; a lightweight random forest algorithm is used to identify four motion states of static, walking, running and riding; generating a dynamic child behavior encryption key through an SHA-256 Hash algorithm based on the motion state identifier and the heart rate variability data; and finally, transmitting the encrypted child safety monitoring data through a CoAP protocol. The problems of resource competition of a single-core processor, insufficient motion state recognition accuracy, too high power consumption of an encryption algorithm and poor security of a static key in the prior art are solved.