23 results about "Stream cipher" patented technology

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

The invention relates to a security data isolation and information exchange method and system based on a lightweight protocol, belongs to the technical field of industrial automation control system security, and solves the technical problems of low transmission efficiency, high analysis overhead, high security risk and high resource consumption of an existing method. Comprising the following steps: collecting and preprocessing original plaintext data at an industrial control network side; an external unit identifier, a timestamp and a pre-shared key on the industrial control network side are used as encryption factors, lightweight stream cipher encryption and packaging are carried out on the preprocessed data, and a lightweight protocol data packet is generated; through a special physical isolation device, the light-weight protocol data packet subjected to deep detection is unidirectionally isolated and ferried from an industrial control network side to an internal network side; performing post-processing on the received lightweight protocol data packet at the intranet side to restore original data; and delivering the restored original plaintext data to an intranet service application. And safe and efficient information data exchange is realized.

The invention relates to the technical field of data security and block chains, and particularly discloses a sensor data acquisition security authentication system based on a block chain. The system comprises a sensor node module, a dynamic key management module, a ciphertext processing engine, a block chain consensus module and an authentication decision module, a key is dynamically generated through a physical unclonable function and environmental noise, and decryption-free integrity authentication of ciphertext data is realized in combination with stream cipher encryption and block chain distributed verification. According to the method, the security and the system throughput in the data acquisition process are improved, and meanwhile, the calculation overhead is reduced.

The application relates to a biological information authentication method and device based on a stream cipher, and a medium, the method is applied to a server side, and comprises the following steps: establishing a connection with a client, obtaining a preprocessed face biological feature vector from the client; obtaining an original password from the client, generating key information according to the original password; encrypting the face biological feature vector and the key information through a 256-stream cipher to obtain encrypted ciphertext; calculating the similarity index of the encrypted ciphertext and preset original biological information, judging whether the similarity index is less than a preset threshold, if yes, authentication is passed, and if not, authentication fails and a prompt information is sent. Compared with the prior art, the 256-stream cipher encryption mode is adopted, and the security and performance are effectively improved.

The application discloses a kind of light security communication method and system for agricultural perception node.The method includes that 256-bit static master key is preset in the bottom layer security storage area of perception node and heterogeneous convergence gateway, and the unique hardware serial number is read as node identification;Synchronous acquisition environmental data and visual feature data, splice into long payload plaintext;Derive dynamic session key, use dynamic session key to drive stream cipher to encrypt long payload plaintext, static master key drives block cipher to encrypt short header, and encapsulates into data frame;Data frame is sent through wireless channel, and heterogeneous convergence gateway receives and reversely decrypts short header to extract dynamic anti-fake factor, and replay attack verification is carried out;After verification, dynamic session key is reconstructed to restore data and uploaded to cloud data management server.The application also discloses a system using the above light security communication method for agricultural perception node, realizes the high security node legitimacy authentication and anti-replay attack under limited hardware computing power.

The utility model relates to the field of cryptology, and discloses an efficient and safe sequence password generating device which comprises a shell, a cover plate is rotatably connected to the surface of the shell, a displayer is arranged on the cover plate, a fixing plate is detachably installed in the shell through bolts, and a password generator is inserted in the fixing plate. A clamping assembly is arranged on the fixing plate and used for clamping the password generator. An opening and closing assembly is arranged on the shell and used for overturning the cover plate. The clamping assembly comprises four sets of fixing sleeves inserted into the fixing plate, connecting columns are inserted into the fixing sleeves, limiting sleeves are connected into the fixing plate in a threaded mode, springs are arranged between the connecting columns and the limiting sleeves, and cross rods are integrally formed at the ends of the connecting columns. By means of the clamping assembly, the problems that when the password generator is not clamped and is vibrated, the password generator can move in the device, an internal connecting circuit is loosened, and normal electrical connection of the password generator is affected are solved.

The invention discloses a data encryption transmission method and device, equipment, a system, a storage medium and a product, and the data encryption transmission method applied to sending equipment comprises the steps: carrying out the encryption and modulation processing of first plaintext data based on a quantum noise stream cipher technology, and generating a first modulation symbol; performing spatial expansion processing on the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal; sending the ciphertext signal to a receiving device; wherein the constellation points in the preprocessed base information are in non-uniform distribution in the judgment boundary. Therefore, according to the embodiment of the invention, the base information is preprocessed, so that the ciphertext signal encrypted and modulated by the quantum noise stream cipher technology is located near the judgment boundary, even if the quantum noise is small noise, the high bit representing the ciphertext data in the ciphertext signal can also be influenced, the bit error rate of the high bit is improved, and the accuracy of the ciphertext data is improved. And the security of data transmission is improved.

This invention discloses a device binding software encryption method and system based on multi-layer nested encryption, which addresses the problem that existing software encryption protection mechanisms cannot achieve reverse engineering, copying, and static analysis protection in environments with strong offline conditions and no reliable network connection. The method includes: generating a signing key and a verification key; constructing plaintext license information and performing three-layer nested encryption on the plaintext: encrypting the plaintext license information using AES, outputting AES ciphertext and an authentication tag; performing elliptic curve digital signature on the AES ciphertext using ECC to obtain an ECC signature value; concatenating the AES ciphertext and the ECC signature value, and encrypting the concatenated data using the ZUC stream cipher algorithm to obtain a ciphertext obfuscation; and performing reverse decryption and verification on the ciphertext obfuscation. Successful verification returns the function flag bit from the plaintext license information; otherwise, an error code is returned. This method effectively resists copying, tampering, reverse analysis, and unauthorized porting.

Embodiments of the present disclosure relate to processing systems and corresponding methods of operation. A master device issues memory burst transaction requests via an interconnect bus to obtain data from a slave device. A cryptographic engine is coupled to the interconnect bus and decrypts the obtained data to produce plaintext data for the master device. The cryptographic engine selectively operates according to a stream cipher mode of operation, or a block cipher mode of operation. The cryptographic engine is configured to suspend a read data channel of the interconnect bus between the slave device and the master device in response to the cryptographic engine switching from the block cipher mode of operation to the stream cipher mode of operation. The read data channel is reactivated in response to a last beat of a read burst of plaintext data produced by the cryptographic engine.

The invention discloses a face recognition building intercom system based on VOIP encryption transmission, and relates to the technical field of building intercom communication, the system comprises an entrance machine, an indoor machine and a management platform, the entrance machine is integrated with a network state sensing module, a security policy management module, a biological characteristic key generation module and a human body posture recognition model, the entrance machine collects a face image and completes preliminary recognition, the biological feature key generation module extracts feature factors from the face image and dynamically generates a unique encryption key, the security policy management module switches encryption policies such as a ChaCha20 stream cryptographic algorithm and an AES-256 algorithm according to a call stage and network quality parameters, and the security policy management module carries out encryption on the face image. The redundancy error correction strategy is dynamically adjusted based on the data packet priority and the network condition, the management platform is responsible for coordinating system operation, storing logs and pushing strategy suggestions, dynamic balance of communication safety, real-time performance and reliability is achieved, system energy consumption is reduced, user privacy is protected, and the method is suitable for application scenes with complex network conditions.

The invention relates to the field of Internet of Things, embedded systems and information security, in particular to a lightweight dynamic traceability system and method based on stream cipher and time synchronization, and aims to solve the problems that an existing static two-dimensional code is easy to copy, high in replay attack risk, poor in adaptive resource limited scene and the like. Calculating a time slice after triggering, and encrypting the stream cipher to generate a check code to construct a dynamic two-dimensional code; the user anonymously uploads information; the platform records traceability information after triple signature verification of the manufacturer identity, the replay attack and the equipment identity. The system comprises a read-write storage area, an encryption module, a real-time clock register, a power supply module and electronic paper or an ink screen capable of displaying the two-dimensional code. The method can resist copying and replaying attacks, is adaptive to scenes such as bottle cap chips, gives consideration to privacy and statistics, and guarantees the safety and effectiveness of traceability.

The invention discloses a data processing method, system and device and a readable storage medium, and the method comprises the steps: obtaining target data and a secret key, and determining a working mode; determining a target core unit matched with the working mode from the first core unit and the second core unit; the communication line is communicated with the target core unit and the modular addition operation module; writing an initial parameter corresponding to a protocol supported by the target core unit into a replacement box shared by the first core unit and the second core unit; in the process of generating a stream key corresponding to the key by the target core unit, performing modular addition calculation by using a modular addition operation module, and performing data conversion and secure storage by using a substitution box; and processing the target data by using the stream key generated by the target core unit to obtain encrypted data or decrypted data. By multiplexing the modular addition operation module and the substitution box, the area of the algorithm core of the stream cipher is reduced, and the power consumption and the manufacturing cost of the algorithm core circuit are reduced.

The invention provides an unmanned aerial vehicle sensitive data transmission method and system based on Beidou space-time encryption. According to the method, firstly, based on Beidou positioning data, a credible timestamp and flight height and course angle data of an unmanned aerial vehicle, a space-time reference code is generated through fusion, secondly, channel pulse response characteristics are obtained by utilizing multipath fading characteristics, and the space-time reference code and the channel pulse response characteristics are jointly coded to generate a dynamic encryption seed; the method comprises the following steps: acquiring an encrypted insulator surface image data stream, and then adding Beidou positioning data and channel pulse response characteristics as verification metadata into a data packet while sending the encrypted insulator surface image data stream, so that a receiving end can synchronously restore a dynamic encryption seed to complete decryption operation; according to the technical scheme provided by the invention, the strong association binding of the encryption key and the specific time-space point is realized, the potential safety hazard that the key is fixed in the traditional encryption scheme is effectively overcome, and the unification of safety and availability is realized.

The application provides a homomorphic evaluation method and device of symmetric cipher algorithm, and belongs to the technical field of cryptography, to design a homomorphic evaluation scheme of symmetric stream cipher which meets a lower multiplication depth design standard and has high calculation efficiency and homomorphic friendliness under the condition of ensuring security. In the method, the homomorphic evaluation of SNOW 3G algorithm and ZUC algorithm can be respectively applied to a mixed homomorphic mode, such as performing the first part of operations of LFSR and FSM in a level 0 door bootstrap mode and performing a lookup table operation in a level 1 hierarchical homomorphic calculation mode, so as to realize the architecture and algorithm of homomorphic calculation of SNOW 3G algorithm and ZUC algorithm through fully homomorphic encryption, and further realize the homomorphic evaluation scheme of symmetric cipher algorithm which meets the lower multiplication depth design standard under the condition of ensuring security.

The application provides a logistics privacy protection method based on encrypted two-dimensional codes, relates to the field of logistics privacy protection, divides two-dimensional codes into uniform blocks and non-uniform blocks, utilizes the characteristics of high embedding capacity of a binary image reversible data hiding algorithm based on pixel prediction, image recovery and data extraction separable technology, and the non-decodable of encrypted two-dimensional codes, and completes access control of the access rights of each party in logistics privacy protection. On this basis, multiple keys are further introduced to improve the security of embedded data. Not only the internal and external privacy leakage problems existing in the current express logistics process are solved, but also the anti-pollution ability of express two-dimensional codes in harsh environments is realized by virtue of the high error correction ability of two-dimensional codes and the reversibility of binary image hiding algorithm. The application combines separable technology and stream cipher encryption technology, is mainly based on an improved pixel prediction encrypted binary image reversible data hiding algorithm, and realizes logistics privacy protection for preventing internal and external leakage of privacy information.

The present application relates to the field of Internet of Things, embedded system and information security, in particular to a lightweight dynamic traceability system and method based on stream cipher and time synchronization, aiming at the problems of easy copying of existing static two-dimensional code, high risk of replay attack, poor adaptation to resource limited scene, etc., the method comprises: writing identity information and activating real-time clock at product end; calculating time slice after triggering, generating check code by stream cipher encryption to construct dynamic two-dimensional code; uploading information anonymously by user; recording traceability information after three signatures of manufacturer identity, replay attack and device identity by platform. The system comprises read-write storage area, encryption module, real-time clock register, power module, and electronic paper or ink screen capable of displaying two-dimensional code. The present application can resist copying and replay attack, adapt to scenarios such as bottle cap chip, and balance privacy and statistics, ensuring safe and effective traceability.

Provided is a calculation device that is provided with at least a processor and a memory and that, when the bit length of a common key which has been assigned to be used for communication between a terminal device and a network differs from the bit length of an input key which is used in a prescribed algorithm, increases or reduces the bit length of the assigned common key, thereby performing conversion into a key with a prescribed bit length, and performs encryption processing or decryption processing on a stream cipher, wherein at least one of a constant and an initial value that are used to initialize the stream cipher differs according to the bit length of the assigned common key.

The present application provides a kind of lightweight industrial control network transmission encryption method, and the data transmission between industrial control host and industrial control equipment adopts lightweight stream encryption mode, and each transmitted data is encrypted by XOR mode, and the encryption mode is approximately one-time pad, namely stream encryption.The present application respectively places stream key generation facility and stream cipher machine on the two sides of industrial control host and industrial control equipment, and both sides first negotiate the random key R of stream cipher to be generated for this time processing data transmission before processing each time key Then the ciphertext enc (R key , PcKey) is generated by using the public key PcKey of industrial control equipment for encryption, and the encrypted key enc (R key , PcKey) is sent to industrial control equipment, and the random key R of stream cipher is obtained by using the private key PsKey of industrial control equipment for decryption key , and the industrial control host is informed.The present application can provide security protection for the data transmission between industrial control host and industrial control equipment of industrial control system.

A method is disclosed. The method includes receiving, by a processing network computer from a relying party computer associated with a relying party, a request for data associated with a user operating a user device. The processing network computer is capable of retrieving first encrypted data of the user having an encrypted user layer. The processing computer is then capable of generating a second symmetric key to add an encrypted relying party layer to the first encrypted data using a stream cipher. The double encrypted data can be transmitted to the user device, which removes the encrypted user layer on the first double encrypted data and then adds a second encrypted relying party layer to form a second double encrypted data. The second double encrypted data can be transmitted to the relying party computer, which is capable of removing both encrypted relying party layers to obtain access to the data associated with the user.

Memory controller circuitry for performing decryption (e.g., and load) operations and / or encryption (e.g., and store) operations utilizing a message authentication code (MAC) tag, as an initialization vector for a counter based stream cipher, that is stored in one or more error correction code (ECC) memory chips of a single memory module is described. In certain examples, a computing system includes a processing element to generate a memory load request for ciphertext; and a memory controller circuit to, in response to the memory load request: read the ciphertext, a message authentication code (MAC) tag, and an error correction code from memory, perform a first error correction operation on the ciphertext based on the error correction code to generate corrected ciphertext, perform a second error correction operation on the MAC tag based on the error correction code to generate a corrected MAC tag, perform a decryption operation on the corrected ciphertext based on the corrected MAC tag to generate a plaintext, generate a second MAC tag based on the plaintext, and provide the plaintext for the memory load request in response to the corrected MAC tag matching the second MAC tag. In certain examples, the error correcting codes may be encrypted to act as an initialization vector (IV) used for data encryption while still being capable of correcting the original plaintext where, in the case of an erroneous IV, trial and error may be used to recover the determine the correct IV.

Methods, systems, and devices for protective actions for a memory device based on detecting an attack are described. In some systems, a memory device may detect whether a fault is injected into the memory device. The memory device may apply a delay during boot up if a fault is detected. To ensure the delay is applied, the memory device may default to applying the delay and may remove an indication to apply the delay if a fault is not detected. Additionally or alternatively, the memory device may erase information from non-volatile memory during boot up, for example, if a fault is detected. The memory device may be configured to ensure at least a specific portion of memory resources (e.g., resources configured to store sensitive information) is erased during boot up. In some examples, the memory device may store data using a stream cipher to improve security of the data.

The invention discloses a take-out data security protection method and system. The system comprises a take-out platform module, a merchant module, a rider module, a user module and an acquisition module. And establishing a vertical alliance chain network and a horizontal alliance chain network, accessing the take-out platform modules, the merchant modules and the rider modules into the vertical alliance chain network, and accessing two or more take-out platform modules into the horizontal alliance chain network. In the vertical alliance chain network, the user personal information in the take-out platform module is encrypted by using an RSA + AES hybrid encryption algorithm, and a merchant and / or a rider needs to obtain the user personal information according to the order number and order time of the user as a decryption mode. In a horizontal alliance chain, a W-K mean value clustering analysis method is utilized to obtain user take-out dish preference, a take-out recommendation model is trained in combination with a secure multi-party calculation method, and training order data of each take-out platform is encrypted by utilizing a U-A5 stream cryptographic algorithm to ensure that the data is kept in an encrypted state in a transmission process.

The application provides a Beidou space-time encryption-based unmanned aerial vehicle sensitive data transmission method and system. First, the application fuses Beidou positioning data and trusted time stamps, and the flight height and heading angle data of the unmanned aerial vehicle to generate a space-time reference code. Second, the application uses multipath fading characteristics to obtain channel impulse response characteristics, and jointly encodes the two to generate a dynamic encryption seed. Third, the application drives a stream cipher generator to obtain encrypted insulator surface image data stream. Then, while sending the encrypted insulator surface image data stream, the application appends Beidou positioning data and channel impulse response characteristics as verification metadata to the data packet, so that the receiving end can synchronize the dynamic encryption seed to restore and complete decryption operations. The technical scheme provided by the application not only realizes strong association binding of the encryption key and a specific space-time point, but also effectively overcomes the security risks of fixed and unchanged keys in traditional encryption schemes, and realizes the unity of security and usability.