20 results about "Trust third party" patented technology

The application provides a third-party-based key exchange method and system, a trusted third party and an entity, wherein the trusted third party only participates in identity authentication of the entity and assists in negotiation of a key between the two entities, and cannot obtain a shared key between the two entities, effectively solving the problem that the trusted third party cannot avoid obtaining the exchanged key in the existing key exchange scheme based on the trusted third party, and ensuring that the finally exchanged key is only owned by the two entities participating in the key exchange. In addition, in the application, the trusted third party can also provide a random number to participate in the final key generation, thereby ensuring the strength of the final key, meeting the requirement that the trusted third party needs to manage the strength of the exchanged key in a specific application scenario, and enhancing the management and control capability of the system.

We provide computing systems and methods for communicating with customer devices and trusted third parties. [Solution] In the currency conversion system, the network interface receives customer identity data and a request to restore the customer wallet from the customer device. The processor verifies the customer identity data received from the customer device. Once the processor has verified the customer identity data received from the customer device, the network interface communicates a request to a trusted third-party key repository for a first key associated with the customer wallet. The processor uses the first key associated with the customer wallet and a second key associated with the customer wallet to restore the customer wallet.

The application belongs to the technical field of encryption, and provides an anti-quantum threshold encryption method and system, wherein a trusted third party generates system parameters, uniformly and randomly generates a matrix, samples a secret vector and a noise vector, calculates a public key vector, and discloses the matrix and the public key vector as a public key; a unique and public identification value is allocated to each authorized accesser, a private key share is calculated, and the private key share is sent to the authorized accesser respectively; a data owner acquires a message to be encrypted and the public key, calculates a ciphertext, and the ciphertext comprises a first component and a second component; an authorized accesser participating in decryption reads the first component of the ciphertext, calculates a partial decryption value, and sends the identification value and the partial decryption value to the trusted third party; when the trusted third party receives the partial decryption values of no less than a threshold parameter, Lagrange coefficients are calculated, an aggregated decryption value is calculated, the decryption of the ciphertext is carried out, and the obtained result is sent to the authorized accesser participating in decryption. The application can guarantee the confidentiality of the message.

The application discloses a privacy-enhanced data aggregation method supporting off-line fault tolerance and deviation correction. The method efficiently packs multi-dimensional data by using the Chinese remainder theorem, and realizes ciphertext aggregation without a fully trusted third party by introducing a collaborative mask based on neighbor relationship and a special mask shared by SM and CC, thereby guaranteeing data and identity privacy. Meanwhile, a deviation correction recovery mechanism executed unidirectionally by a control center is designed. The mechanism reconstructs a residual mask by using information such as a frozen candidate set and an effective participation set, thereby recovering a real aggregation result without requiring a node to respond secondly or an off-line node to supplement transmission. Performance evaluation shows that, compared with existing advanced schemes, DBPMDA reduces the additional communication and calculation overhead of the system in the case of device off-line, and is suitable for a resource-limited smart grid Internet of Things environment.

A method, system, device and medium for defending against poisoning attacks in vertical federated learning, an active party and passive party interaction data integrity verification scheme is designed for the classic vertical federated learning algorithm Secureboost, the method is: key generation and distribution; the active party encrypts the Boost tree gradient information, and sends the encrypted result to the passive party, and sends the encrypted Boost tree gradient information to the trusted third party after homomorphic hash encryption; the passive party aggregates the received encrypted gradient information according to the feature dimension, and then performs homomorphic hash on the aggregation result and sends it to the trusted third party; the trusted third party aggregates all the information sent by the passive party, and then verifies whether the encrypted Boost tree gradient information sent by the active party and the aggregation result of the passive party information are consistent, if consistent, the integrity verification is passed, otherwise the verification is failed; the system, device and medium based on the above method defend against poisoning attacks, realize the safe aggregation of global model, and improve the defense reliability of poisoning attacks.

The application discloses a kind of fusion attack traceability and data integrity audit federated learning method and system, the method includes: trusted third party initializes system parameter, system parameter and initial model parameter are sent to all clients;Gradient and four characteristics returned by each client are received, attack traceability and reputation evaluation are carried out to four characteristics, determine the client set of next round continues training;Gradient set is sent to aggregation server after encryption, receive the encrypted aggregation gradient returned by aggregation server, obtain aggregation gradient plaintext by decryption;The present application is processed by client homomorphic encryption, attack detection and traceability, secure multi-party aggregation, encrypted reputation management, hierarchical process of independent integrity verification, malicious attack is identified and traced to next round training before model, so that attack detection is realized under the premise of guaranteeing privacy not to leak, reduce the overall security risk of federated learning system.

The application relates to the fields of secure multi-party communication and quantum cryptography, and discloses a dynamic quantum message authentication method capable of identifying suspension, which comprises the following steps: a semi-quantum trusted third party (SQ-TTP) screening honest participant phase, in which the SQ-TTP dynamically groups the participants, randomly selects part of the participants to form a small quantum communication network for message transmission, and screens out no less than the number of groups of honest participants according to the message authentication result; a parallel transmission of quantum messages of each group phase, in which the SQ-TTP specifies the screened honest participants as the receivers of each group, and the participants in the group complete the message transmission by adopting a quantum message transmission mode similar to that in the screening phase; and a stage of transmitting the received messages to a server by the SQ-TTP and the receivers of each group, in which the server decrypts the messages by using the key sent by the SQ-TTP, and authenticates the messages by measuring the trap qubits. The application is applicable to a large-scale quantum communication network, and can reduce the consumption of quantum resources and improve the message transmission efficiency by dynamic grouping and parallel transmission.

The invention relates to an anonymous data submission method based on a hash mask, and belongs to the technical field of data security. According to the method, all data senders generate session keys between every two data senders under the assistance of a data receiver, and then the senders randomly join one of m groups respectively; all data senders generate unique serial numbers which are different from one another under the condition that a trusted third party does not need to participate, and it is guaranteed that the values of the serial numbers can be deduced by no other entities except the data senders; all the data senders carry out packaging protection on own data by using own serial numbers and session key sequences; a data receiver obtains all the packaged data and unpacks the packaged data to obtain a set of original plaintext data, but cannot deduce the source of the data. According to the method and the device, the data receiver can obtain the data submitted by the data provider without a trusted third party, and the data receiver cannot deduce the source of the data, so that the identity anonymity of the data provider is guaranteed.

The application discloses a kind of distributed flow table item effective time dynamic hopping implementation methods, including distributed flow table item effective time dynamic hopping definition, implementation, and balance security, performance and resource consumption three features such as characteristic.This method, flow table item in flow table existence time is regarded as privacy, through the ladder random response mechanism of differential privacy in SDN forwarding equipment local flow table item in flow table existence time is dynamically disturbed, forms dynamic mobile flow table item attack surface, makes low-speed flow table overflow attack unable to synchronize flow table item attack surface, to the attack has realized effective active defense.The method does not need to upgrade existing SDN interface protocol and controller software, does not need to introduce trusted third party, while considering network security, guarantee network performance and expansibility, especially suitable for various types of need to support high security and large concurrent user, and has special requirements to delay and expansibility, guarantee its service quality and user experience.

The invention relates to the technical field of data security, in particular to a data access method based on a dynamic token, electronic equipment and a storage medium, the method comprises the following steps: in response to a token application request of a first entity, generating and issuing a data access token to the first entity through a preset trusted third party, the second entity triggers a verification request after receiving a data access request carrying the data access token sent by the first entity, the preset trusted third party receives the verification request for the data access token sent by the second entity, the validity of the data access token is verified through the preset trusted third party, and a verification result is returned to the second entity; the execution of the data access request of the first entity by the second entity is controlled; according to the invention, the current authority of both parties of the data transaction can be verified at the same time, so that the data transaction security during data interaction between cross-domain or mutual-mutual-trust entities is ensured.

In a trust framework that enables secure communication, a configurer establishes an initial set of potential trusted relationships between a client and one or more anchors associated with one or more hosts. Once configured, the client can use a trusted relationship to securely communicate with a host without reliance on trusted third parties.

A concise non-interactive zero-knowledge proof generation method based on distributed calculation comprises the following steps: respectively carrying out (1) distributed zero test, (2) distributed replacement test, meta-distributed reset test and distributed fraction summation test, carrying out distributed summation test on the results of the two tests, and then carrying out distributed polynomial commitment. And security authentication is realized. According to the method, the generation speed of the certification in a simple non-interactive zero-knowledge certification protocol is remarkably improved through distributed calculation, meanwhile, a universal arithmetic circuit is supported (no special structure is needed), a trusted third party is not needed for execution in the initialization stage, currently known quantum algorithm attacks can be resisted, and the method is suitable for popularization and application. And only communication traffic of logarithmic polynomial magnitude is needed in the distributed system.

The invention belongs to the technical field of unmanned aerial vehicle Internet security, particularly relates to an unmanned aerial vehicle Internet identity authentication and key negotiation method, system and terminal, and designs an authentication and key negotiation method for an unmanned aerial vehicle dynamic group in order to solve the problem of secure communication between an unmanned aerial vehicle and each physical node in the unmanned aerial vehicle Internet. In the designed method, anonymity and privacy protection of UAV identity information are realized based on a symmetric encryption algorithm by introducing a trusted third-party mechanism; lightweight unmanned aerial vehicle identity authentication and group session key distribution are realized by using uniqueness and unclonability of the PUF, a message authentication code and secret sharing; when the UAV needs to join or exit the group, the join or exit of the UAV is realized based on a secret sharing scheme.

The invention belongs to the technical field of encryption, and provides an anti-quantum threshold encryption method and system, a trusted third party generates system parameters, uniformly and randomly generates a matrix, samples a secret vector and a noise vector, calculates a public key vector, and publishes the matrix and the public key vector as public keys; distributing a unique and public identification value to each authorized visitor, calculating a private key share of the authorized visitor, and sending the private key share to the authorized visitor; the data owner obtains a to-be-encrypted message and a public key and calculates a ciphertext, and the ciphertext comprises a first component and a second component; an authorized visitor participating in decryption reads the first component of the ciphertext, calculates a partial decryption value, and sends the identification value and the partial decryption value to the trusted third party; and when the trusted third party receives a partial decryption value not less than the threshold parameter, calculating a Lagrange coefficient, calculating an aggregation decryption value, decrypting the ciphertext, and sending an obtained result to an authorized visitor participating in decryption. According to the invention, the confidentiality of the message can be ensured.

The invention belongs to the cross field of distributed machine learning and information security technology, and relates to a federated learning participant optimization selection method and system of an integrated block chain, and a trusted third party under the block chain generates a homomorphic encryption key; the homomorphic encryption key comprises an encryption public key and an encryption private key; a participant obtains a historical global model and an encrypted public key based on the block chain, trains and encrypts a local model, and uploads the local model to the block chain; a network node generates a participant selection scheme through iteration, obtains an encryption aggregation model by combining homomorphic encryption, and sends the encryption aggregation model to a trusted third party through an intelligent contract; the trusted third party decrypts the encryption aggregation model based on the encryption private key and calculates a fitness value, and the smart contract screens an optimal participant selection scheme based on the fitness value; the smart contract generates a global model based on the optimal participant selection scheme and writes the global model into the block chain; and circularly executing the process until federal learning meets a preset target condition. According to the method, decentration is realized on the architecture level, and high-quality participants are efficiently screened out.

The application discloses a kind of efficient data sharing methods based on block chain, can solve the problems, such as data storage concentration, search algorithm inefficiency existing in current data sharing process, realize safe and efficient decentralized data sharing.The encrypted data is stored in interstellar file system (IPFS) to obtain content identifier (CID);Key words are hashed, form keyword index with CID, and are stored on blockchain.Finally, searchable encryption algorithm based on inverted index is used, and the query operation on related data is realized by generating search trapdoor.Data users initiate query request based on discrete logarithm problem, and data owners can realize authorization operation without the participation of trusted third party.The application can maintain good search efficiency when the number of indexes is large, and realize decentralized data sharing without the supervision of trusted third party, so that the data sharing of each organization is safer, more efficient and convenient.

A method of obtaining a public key of a second party by a first party comprises authenticating a third party at a system of the first party, establishing a secure connection between the system of the first party and a system of the third party after authenticating the third party, transmitting a request to receive the public key of the second party from the system of the first party to the system of the third party over the secure connection, and receiving, at the system of the first party, the public key of the second party from the system of the third party over the secure connection. The request comprises an identifier of the second party and the public key of the second party is associated with the identifier of the second party.

The application discloses a multi-source heterogeneous resource verification method and device for a virtual power plant, an equipment and a medium, relates to the technical field of electrical engineering, and comprises the following steps: sending a resource aggregator attribute set and an edge layer identity of the virtual power plant to a target trusted third party to obtain an edge decryption key and a conversion key generated by the target trusted third party; obtaining ciphertext of multi-source heterogeneous resources of the virtual power plant sent by a terminal layer; verifying the ciphertext by using an edge node; if the verification is passed, performing partial decryption on the ciphertext based on the conversion key to obtain partially decrypted ciphertext; restoring data of the partially decrypted ciphertext by using a resource aggregator and the edge decryption key, and verifying the integrity of the restored data; if the integrity verification is passed, regarding the restored data as multi-source heterogeneous resource data of the virtual power plant, improving the security and real-time performance of large-scale resource access in the virtual power plant, ensuring data privacy and access security, and avoiding the risk of tampering.

The embodiment of the specification discloses a database integrity verification method, device, system, medium and equipment. First, the aspect enhancement code is injected at the preset cut point position of the database. Then, when the modification operation for the database is received, the aspect enhancement code is executed to generate the verification hash value corresponding to the modification operation. Further, the password service of the trusted third party is called, and the verification hash value is used to sign the target data corresponding to the modification operation through the password service. Finally, the database data is verified based on the hash message authentication code obtained by the verification hash value and the data signature, to determine whether the database is tampered.

This secure computation method, implemented by first and second computing devices (102, 104) suitable for communicating with one another via a communication network (106), comprises the following steps: - initializing, - determining indices for each identifier, - computing, encrypting and transmitting presence ratios, - carrying out encrypted homomorphic computation of a score computation function, - scrambling the results of the encrypted homomorphic computation, this comprising a sub-step of masking the score and a sub-step of scrambling the score, so as to preserve the confidentiality of the score and the confidentiality of the score computation function, respectively, - transmitting the scrambled results to the first computing device (102), - decrypting the scrambled results, - transmitting the masked score in the clear to the second computing device (104), - processing the masked score in the clear so as to obtain the value of the score without masking.