68 results about "Trust third party" patented technology

Example systems and methods include: receiving, by a computing system, a request to add a block to a blockchain, wherein the block includes an entry that relates to a semantic representation, wherein the semantic representation encodes a state change to a state stored on the blockchain; obtaining, by the computing system, a copy of the semantic representation as provided by a trusted third party, wherein the copy of the semantic representation is digitally signed by the trusted third party or provided by the trusted third party at a network address; validating, by the computing system, the semantic representation; and initiating, by the computing system, procedures to add the block to the blockchain.

The invention provides a threshold access system supporting threshold decryption and an NTRU type multi-party homomorphic encryption method, and belongs to the technical field of information security and data security. The threshold access system supporting threshold decryption comprises an initialization stage, a key generation stage, a secret share sharing stage, an encryption stage, a decryption stage, a homomorphic calculation stage and a data reconstruction stage, and a new NTRU type multi-party homomorphic encryption method is realized based on the threshold access system. Comprising an initialization stage, a key generation stage, an encryption stage, a decryption stage and a homomorphic calculation stage, so that the method can be more suitable for application scenarios of highly sensitive data processing, the dependence on a trusted third party is very small, the communication overhead and the calculation overhead are very small, the privacy of data is ensured, subdomain lattice attacks can be resisted, and the security of the data is improved. And the efficiency is relatively high.

The invention relates to the fields of cryptographic algorithms and homomorphic encryption, in particular to an anti-quantum-attack homomorphic encryption method. Along with increasing demands of outsourcing computing and privacy protection application in a multi-user scene, multi-key homomorphic encryption becomes an important research direction. The construction of a traditional multi-key homomorphic encryption scheme generally depends on a common random character string (CRS) model, and a trusted party needs to generate a common parameter for a public key so as to support calculation on a joint ciphertext. Due to the dependence on the central trusted mechanism, the anti-attack capability and the decentralization characteristic of the system are greatly reduced. In order to avoid excessive dependence on trusted third parties and public parameters, a distributed key generation protocol is used in the invention, all users are enabled to independently generate keys thereof, and ciphertexts of a plurality of users are expanded to the same dimension through a ciphertext expansion technology, so that the encryption efficiency is improved. Therefore, multi-key homomorphic encryption in a multi-user scene is realized without depending on a trusted third party, a lattice-based CRS-free multi-key homomorphic encryption method is provided, and the security and decentration characteristic of the scheme are enhanced. Furthermore, the invention provides a directional decryption mechanism and introduces the directional decryption mechanism into the scheme, the public key information of the target user is embedded into the ciphertext, it is ensured that only the specific target user can decrypt the ciphertext after homomorphic operation, and more flexible privacy protection is provided.

The invention relates to the field of secure multi-party communication and quantum cryptography, and provides a dynamic quantum message authentication method capable of identifying suspension. Comprising the following steps: in a stage of screening honest participants by a semi-quantum trusted third party SQ-TTP, dynamically grouping the participants by the SQ-TTP, randomly selecting part of the participants to form a small quantum communication network for message transmission, and screening honest participants not less than the grouping number according to a message authentication result; in a quantum message parallel transmission stage of each group, the SQ-TTP appoints the screened honest participants as receivers of each group, and the participants in the group complete message transmission in a quantum message transmission mode similar to that in the screening stage; in the stage that the SQ-TTP and each packet receiver transmit the received message to the server, the server decrypts the message by using the key sent by the SQ-TTP and authenticates the message by measuring trap quantum bits. The method is suitable for a large-scale quantum communication network, the quantum resource consumption is reduced through dynamic grouping and parallel transmission, and the message transmission efficiency is improved.

The invention discloses a watermark implantation method, a watermark detection method, a server, a trusted third party, a medium and a product. The watermark implanting method is applied to a server and comprises the following steps: generating a watermark request according to information of a large language model; the watermark request is sent to a trusted third party to obtain a watermark seed generated by the trusted third party according to the identity label of the server side, and the watermark seed is generated based on a hash function; and in a big language model reasoning process, implanting a watermark according to the watermark seed to obtain an output text with the watermark. According to the technical scheme, in the watermark implanting stage, the trusted third party provides the watermark seed, the server side implants the watermark in the big language model reasoning process by using the corresponding watermark seed, and through interaction between the trusted third party and the server side, a close relation is established for the watermark seed and watermark implanting, so that the watermark embedding efficiency is improved. Therefore, a reliable basis is provided for watermark detection and identity recognition, and the credibility and reliability of watermark implantation and detection of the large language model are improved.

Methods, systems, and apparatuses for a background check data co-op platform. A method includes receiving, from a verified, trusted third party (VTTP) computing system, validation data associated with a qualification included in a digital work wallet of a job seeker, and determining, based on the qualification, that the qualification is a static qualification. The method further includes, based on the determination that the qualification is a static qualification, storing, in the digital work wallet based on the validation data, an indication that the qualification is validated. The method further includes, based on receipt of a request to submit an application for a job by the job seeker, sending the digital work wallet with the indication that the qualification is validated to an employer system associated with the job.

The invention discloses a privacy protection federated learning method based on result-agnostic function encryption, and the method comprises the steps: dividing a derived key assembly into a plurality of shares, and carrying out the reconstruction through the remaining shares even if a part of clients are offline and the key shares are missing, thereby guaranteeing that a function key can be recovered, and an encryption model can be correctly aggregated, and improving the privacy protection efficiency. And the robustness and fault tolerance of the system are greatly improved. A non-interactive key exchange technology is adopted, and a secret sharing mechanism is combined, so that a client can generate a private key in a collaborative manner under the condition that no trusted third party participates, the deployment complexity is reduced, and the security and expandability of the system are improved. A function encryption process with an unknown result is designed, only an intermediate result in an encrypted state is output in an aggregation stage, and decryption is finally completed by local joint of a client, so that the possibility of snooping an aggregation result and reversely deducing original data by a server under a semi-honesty model is fundamentally avoided, and data privacy in a federated learning process can be effectively guaranteed.

The invention provides a practical fault-tolerant data aggregation method and system without a trusted third party, the method is combined with a Shamir threshold secret sharing technology to generate an encryption mask secret key, high fault tolerance can be achieved, homomorphism of the Shamir threshold secret sharing technology is utilized, an aggregated mask value is recovered instead of a mask secret key of a single user, and the reliability of the data aggregation is improved. The data privacy security of a single user can be ensured; and a trusted third party does not need to provide any information to assist the reconstruction process. Through a technology of synchronously updating a secret key by introducing an advanced encryption standard, a proposed data aggregation scheme does not need to be subjected to auxiliary processing by a trusted third party under the condition of ensuring robustness and privacy, and a mask can be reconstructed by an edge node and an intelligent electric meter (user). According to the scheme provided by the invention, by optimizing the algorithm and the data structure, the demand on computing resources is reduced, so that the intelligent electric meter can operate efficiently even under the condition of limited processing capacity, the communication traffic is low, and the efficiency is high.

The invention aims to provide a decentralized edge data integrity batch verification method and system, and the method comprises the steps: taking any industrial edge server as an initiator, sending a data integrity verification request to an intelligent contract, and collecting the response of a candidate; after the response of any candidate is collected through the smart contract, selecting an optimal verifier combination from the candidates; the reward allocation and reputation update are performed, and the reward is allocated to the verifier by contribution to significantly reduce communication overhead and verification latency. According to the method disclosed by the invention, the verification delay and the communication overhead can be remarkably reduced without depending on a central trusted third party, and the special requirements of the industrial Internet of Things are met.

The invention discloses an intelligent Internet of Things data aggregation method without a trusted third party, and relates to the technical field of Internet of Things, a plurality of resource nodes and a resource node management center are arranged, and the types of Internet of Things data collected by the resource nodes are distinguished through a multi-classification fusion method based on fuzzy measurement; each resource node autonomously generates a public key and a private key and encrypts the Internet of Things data to generate a ciphertext, a plurality of aggregation nodes are arranged to aggregate different types of ciphertexts, an operation center identifies the type of the aggregated ciphertext and selects a port to a corresponding service node, the service node decrypts the aggregated ciphertext to obtain aggregated data, and the aggregated data is transmitted to the aggregation node. According to the method, the distinguishing and aggregation of the multi-type Internet of Things data without a trusted third party are realized, the data transmission efficiency is improved, meanwhile, the security problem caused by external attacks and internal collusion attacks is avoided, and the reliability of Internet of Things data transmission protection is improved.

The application provides a third-party-based key exchange method and system, a trusted third party and an entity, wherein the trusted third party only participates in identity authentication of the entity and assists in negotiation of a key between the two entities, and cannot obtain a shared key between the two entities, effectively solving the problem that the trusted third party cannot avoid obtaining the exchanged key in the existing key exchange scheme based on the trusted third party, and ensuring that the finally exchanged key is only owned by the two entities participating in the key exchange. In addition, in the application, the trusted third party can also provide a random number to participate in the final key generation, thereby ensuring the strength of the final key, meeting the requirement that the trusted third party needs to manage the strength of the exchanged key in a specific application scenario, and enhancing the management and control capability of the system.

We provide computing systems and methods for communicating with customer devices and trusted third parties. [Solution] In the currency conversion system, the network interface receives customer identity data and a request to restore the customer wallet from the customer device. The processor verifies the customer identity data received from the customer device. Once the processor has verified the customer identity data received from the customer device, the network interface communicates a request to a trusted third-party key repository for a first key associated with the customer wallet. The processor uses the first key associated with the customer wallet and a second key associated with the customer wallet to restore the customer wallet.

The application belongs to the technical field of encryption, and provides an anti-quantum threshold encryption method and system, wherein a trusted third party generates system parameters, uniformly and randomly generates a matrix, samples a secret vector and a noise vector, calculates a public key vector, and discloses the matrix and the public key vector as a public key; a unique and public identification value is allocated to each authorized accesser, a private key share is calculated, and the private key share is sent to the authorized accesser respectively; a data owner acquires a message to be encrypted and the public key, calculates a ciphertext, and the ciphertext comprises a first component and a second component; an authorized accesser participating in decryption reads the first component of the ciphertext, calculates a partial decryption value, and sends the identification value and the partial decryption value to the trusted third party; when the trusted third party receives the partial decryption values of no less than a threshold parameter, Lagrange coefficients are calculated, an aggregated decryption value is calculated, the decryption of the ciphertext is carried out, and the obtained result is sent to the authorized accesser participating in decryption. The application can guarantee the confidentiality of the message.

The invention discloses an efficient broadcast authentication method for a radio frequency identification system and the radio frequency identification system. The method comprises the following steps: a master station provides registration service for a radio frequency receiver and / or each radio frequency transmitter by using system public parameters, and sends generated registration information; the system public parameters comprise a master station public key KHN; the radio frequency receiver generates an authentication request by using the received registration information; the trusted third party broadcasts an authentication request to each radio frequency transmitter; in response to the authentication request, the radio frequency transmitter generates an authentication response and sends the authentication response to the trusted third party; the trusted third party processes the acquired authentication responses sent by the plurality of transmitters to generate an authentication credential; sending an updated authentication response to the radio frequency receiver, and sending an authentication credential to the radio frequency transmitter; in response to the updated authentication response, the radio frequency receiver verifies the timestamp, computes a receiver session key; in response to the authentication credential, the radio frequency transmitter verifies the timestamp and calculates a transmitter session key.

The invention relates to the technical field of data security, in particular to a bank asset electronic auction algorithm based on homomorphic encryption, which comprises key generation and distribution, hybrid encryption quotation, threshold decryption and verification and result publication. Compared with the prior art which depends on a non-completely trusted third party to realize the auction process, the scheme adopts a decentralized (t, n) threshold decryption mechanism, combines a Shamir secret sharing technology, splits a private key into multiple parts and distributes the multiple parts to all participants, and decryption needs at least t nodes to cooperate to complete. In the prior art, a centralization risk is caused by dependence on a single third party, and control by an attacker or single-point failure is easily caused; according to the scheme, through distributed key management and threshold verification, third-party dependence is eliminated, it is ensured that even if part of nodes are malicious or invalid, the result can still be safely decrypted and verified, and the collusion attack resistance and fault tolerance of the system are remarkably improved.

The application discloses a mass interface call log storage and tracing method and system based on a blockchain, belongs to the technical field of the blockchain, and aims to solve the problems of mass interface call log storage difficulty and data sharing tracing difficulty in a data sharing mode. A service gateway pushes a call log to a Kafka cluster; the Kafka cluster consumes the call log and stores the consumed call log in batches to an ES system through logstash; a log collection system uploads a total hash value corresponding to the batch call log to the blockchain, the blockchain returns a transaction hash value to the log collection system, the log collection system returns the transaction hash value to the ES system and associates the transaction hash value with the corresponding batch call log; a trusted third party calculates a total hash value of the corresponding batch call log, compares the obtained total hash value with the total hash value queried from the blockchain, and determines that the call log is trusted if the total hash values are consistent.

The disclosed technology provides for managing, authenticating, and authorizing data sharing between parties utilizing multi-party-computation ("MPC"). A method can include: receiving, by a server from a party B system, (i) a request to access first data of a party A system and (ii) second data of party B, sending, to the party systems, an authorization request to authorize the request, receiving, from the party systems, MPC shares associated with trusted third party processing of data, the MPC shares generated as part of a digital contract between the parties for combining the first and second data within an environment of the trusted third party, to which neither party has access, retrieving MPC authorization functions associated with the digital contract, determining whether the requested access is authorized based on the MPC shares and MPC authorization functions, and performing data processing operations using the first and second data in a secure environment.

Embodiments of the present disclosure provide a multimedia data stream processing method and apparatus, an electronic device and a storage medium. The method comprises: receiving stream pushing related data sent by a stream pushing node, wherein the stream pushing related data corresponds to a pushed multimedia data stream; determining a target processing policy on the basis of the stream pushing related data and reception related data of a received processed multimedia data stream forwarded by a trusted third party; and when the target processing policy is a stream repushing policy, creating a data transmission link corresponding to the trusted third party and a current receiver so as to push, on the basis of the created data transmission link, the multimedia data stream pushed by the stream pushing node to the trusted third party. The technical solution provided by the embodiments of the present disclosure can ensure that the trusted third party forwards the multimedia data stream to the current receiver, achieving the effect of improving the forwarding service quality and stability.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

The present invention provides a method and system for flexible data sharing based on public key and attribute-based encryption, belonging to the field of data encryption technology. In the solution of the present invention, a trusted third party generates system public parameters PP and a master private key MSK; an ordinary public key encryption user generates an ordinary public key PK and an ordinary private key SK; the trusted third party generates a user attribute-based private key SK based on the user attribute set S ABE ; the ordinary public key encryption user encrypts the data plaintext M to obtain an ordinary public key encrypted ciphertext CT; the ordinary public key encryption user generates a conversion key RK, and at the same time sets an access control policy to limit the usage right of the conversion key RK; the cloud service provider uses the conversion key RK to convert the ordinary public key encrypted ciphertext CT into an attribute-based encrypted ciphertext CT'; the attribute-based encryption user uses the user attribute-based private key SK ABE to decrypt the attribute-based encrypted ciphertext CT' and output the data plaintext M. The present invention can directly convert the ordinary public key encrypted ciphertext specified by the user into an attribute-based encrypted ciphertext.

The present invention discloses a secure and verifiable federated learning scheme with low communication volume and resistance to tampering attacks and deletion attacks, comprising the following steps: (1) initialization: a trusted third party generates initialization parameters and a public-private key pair for each user and distributes them to the corresponding users; (2) secret sharing: each user generates a mask and shares the mask with each user through secret sharing technology; (3) encryption and proof generation: the user uses the mask to encrypt the local update to be uploaded and generates a proof for the unencrypted local update for subsequent correctness verification and resistance to spoofing attacks; (4) aggregation verification: the trusted third party collects the user's proof to generate a verification proof, and the server requests to restore the mask of the offline user; (5) aggregation update: the user verifies the server's request. If the verification is successful, the server restores the mask and then aggregates the updates uploaded by the user; (6) correctness verification: the user verifies the correctness of the aggregation result sent by the server.

The present invention discloses a method for aggregating intelligent IoT data without a trusted third party, and relates to the technical field of IoT. A plurality of resource nodes and a resource node management center are set, and the types of IoT data collected by the resource nodes are distinguished by a multi-classification fusion method based on fuzzy measurement. Each resource node autonomously generates a public and private key and encrypts the IoT data to generate a ciphertext. A plurality of aggregation nodes are set to aggregate different types of ciphertexts. An operation center identifies the type of the aggregated ciphertext and selects a port to a corresponding business node. The business node decrypts the aggregated ciphertext to obtain aggregated data, thereby achieving the distinction and aggregation of multiple types of IoT data without a trusted third party, improving the data transmission efficiency, avoiding the security problems caused by external attacks and internal collusion attacks, and improving the reliability of IoT data transmission protection.

A method, system, device and medium for defending against poisoning attacks in vertical federated learning, an active party and passive party interaction data integrity verification scheme is designed for the classic vertical federated learning algorithm Secureboost, the method is: key generation and distribution; the active party encrypts the Boost tree gradient information, and sends the encrypted result to the passive party, and sends the encrypted Boost tree gradient information to the trusted third party after homomorphic hash encryption; the passive party aggregates the received encrypted gradient information according to the feature dimension, and then performs homomorphic hash on the aggregation result and sends it to the trusted third party; the trusted third party aggregates all the information sent by the passive party, and then verifies whether the encrypted Boost tree gradient information sent by the active party and the aggregation result of the passive party information are consistent, if consistent, the integrity verification is passed, otherwise the verification is failed; the system, device and medium based on the above method defend against poisoning attacks, realize the safe aggregation of global model, and improve the defense reliability of poisoning attacks.

The invention discloses a lightweight privacy protection vehicle formation building method, which adopts a multi-level encryption mechanism from pilot vehicle selection and member attribute matching in a formation forming stage to feedback aggregation and reputation updating in a formation disintegration stage, and ensures the confidentiality and integrity of sensitive data (such as reputation values, attributes and feedback reports). Through dynamic bucket mapping, random vector perturbation and lightweight ciphertext calculation, the method significantly reduces calculation and communication overhead while guaranteeing privacy, and solves the core problems that a traditional scheme depends on a trusted third party, is susceptible to association attacks, is insufficient in dynamic adaptability and the like. The technical framework can be widely applied to logistics fleet collaborative transportation, urban intelligent bus formation scheduling, automatic driving vehicle group collaboration and other scenes, and safe and reliable technical support is provided for large-scale deployment of an intelligent traffic system.

The application discloses a kind of fusion attack traceability and data integrity audit federated learning method and system, the method includes: trusted third party initializes system parameter, system parameter and initial model parameter are sent to all clients;Gradient and four characteristics returned by each client are received, attack traceability and reputation evaluation are carried out to four characteristics, determine the client set of next round continues training;Gradient set is sent to aggregation server after encryption, receive the encrypted aggregation gradient returned by aggregation server, obtain aggregation gradient plaintext by decryption;The present application is processed by client homomorphic encryption, attack detection and traceability, secure multi-party aggregation, encrypted reputation management, hierarchical process of independent integrity verification, malicious attack is identified and traced to next round training before model, so that attack detection is realized under the premise of guaranteeing privacy not to leak, reduce the overall security risk of federated learning system.

The application relates to the fields of secure multi-party communication and quantum cryptography, and discloses a dynamic quantum message authentication method capable of identifying suspension, which comprises the following steps: a semi-quantum trusted third party (SQ-TTP) screening honest participant phase, in which the SQ-TTP dynamically groups the participants, randomly selects part of the participants to form a small quantum communication network for message transmission, and screens out no less than the number of groups of honest participants according to the message authentication result; a parallel transmission of quantum messages of each group phase, in which the SQ-TTP specifies the screened honest participants as the receivers of each group, and the participants in the group complete the message transmission by adopting a quantum message transmission mode similar to that in the screening phase; and a stage of transmitting the received messages to a server by the SQ-TTP and the receivers of each group, in which the server decrypts the messages by using the key sent by the SQ-TTP, and authenticates the messages by measuring the trap qubits. The application is applicable to a large-scale quantum communication network, and can reduce the consumption of quantum resources and improve the message transmission efficiency by dynamic grouping and parallel transmission.

The present invention provides a secure aggregation method based on random exchange and key homomorphic pseudorandom functions, specifically comprising: in an initial stage, a user randomly selects n other users and exchanges the generated random numbers with them respectively; after the exchange, the total amount of the users' random numbers is calculated and sent to a control center; in a sending stage, a ciphertext is formed by a modular addition homomorphic operation based on the current time period, the user's electricity consumption, and the key obtained in the initial stage, and the ciphertext is summed up at the gateway and sent to the control center; in a decryption stage, the obtained ciphertext sum and the total amount of random numbers corresponding to the ciphertext sum are decrypted to obtain the total electricity consumption; in a management stage, new users are added, old customers are withdrawn, or the user's smart meter malfunctions are managed. The beneficial effects of the present invention are: no trusted third party is required, multiple solutions are adaptable, implementation is convenient, user management is lightweight, and while ensuring the security and accuracy of the results, additions and deletions can be freely made, resulting in strong applicability.

The invention provides a data flexible sharing method and system based on public key and attribute-based encryption, and belongs to the technical field of data encryption. In the scheme of the invention, a trusted third party generates a system public parameter PP and a main private key MSK; the common public key encryption user generates a common public key PK and a common private key SK; the trusted third party generates a user attribute base private key SKABE on the basis of the user attribute set S; the common public key encryption user encrypts the data plaintext M to obtain a common public key encryption ciphertext CT; the common public key encrypts the user to generate a conversion key RK, sets an access control strategy, and limits the use permission of the conversion key RK; the cloud service provider uses a conversion key RK to convert the common public key encrypted ciphertext CT into an attribute-based encrypted ciphertext CT '; and the attribute-based encryption user decrypts the attribute-based encryption ciphertext CT'by using the user attribute-based private key SKABE, and outputs a data plaintext M. According to the invention, a common public key encrypted ciphertext specified by a user can be directly converted into an attribute-based encrypted ciphertext.

The invention relates to an anonymous data submission method based on a hash mask, and belongs to the technical field of data security. According to the method, all data senders generate session keys between every two data senders under the assistance of a data receiver, and then the senders randomly join one of m groups respectively; all data senders generate unique serial numbers which are different from one another under the condition that a trusted third party does not need to participate, and it is guaranteed that the values of the serial numbers can be deduced by no other entities except the data senders; all the data senders carry out packaging protection on own data by using own serial numbers and session key sequences; a data receiver obtains all the packaged data and unpacks the packaged data to obtain a set of original plaintext data, but cannot deduce the source of the data. According to the method and the device, the data receiver can obtain the data submitted by the data provider without a trusted third party, and the data receiver cannot deduce the source of the data, so that the identity anonymity of the data provider is guaranteed.

The invention provides a cross-border data verification system and method, and the system comprises a data main body, an overseas receiver, and a domestic agent provided with a domestic trusted third party. And the data subject sends the first data security certification file of the target cross-border data and the data subject identity identifier to an overseas receiver. And the overseas receiver performs data encryption processing on the first data security certificate file and the data subject identity identifier to obtain a second data security certificate file and a cross-border service identifier, and sends at least one of the second data security certificate file and the cross-border service identifier to the domestic agent and the data subject. The domestic agent performs data verification on the target cross-border data based on a first data security certification file, a second data security certification file, a data subject identity identifier and a cross-border service identifier stored by the domestic trusted third party to obtain a target verification result, and sends the target verification result to the overseas receiver; therefore, the effect of improving the verification security of the cross-border data is achieved.