10 results about "Trusted hardware" patented technology

The application discloses a data verification system implementation method based on a block chain and zero-knowledge proof. In the data verification stage, the data use end pays the corresponding data verification fee to the on-chain smart contract according to the verification requirement, and the demand satisfaction and data real possession are verified through the interaction with the smart contract; in the data declaration stage, the data owner carries out the Merkle tree on the data and generates the characteristic zero-knowledge proof, and the on-chain verification and evidence storage of the data are completed through the interaction with the smart contract, and in the data verification stage, the data owner responds to the challenge of the data real possession, generates the existence proof of the challenge data block set and carries out the on-chain verification and evidence storage, so that the data verification can be independently executed without relying on the third-party service executable environment or the trusted hardware, the independence and safety of the data verification are ensured, and in the whole data real possession verification process, the data is always saved in the local security environment of the data owner, and the complete non-flow of the data is realized.

Methods and devices for generating an elliptic curve digital signature algorithm signature (r, w) are described. In one embodiment, a method includes: i) forming, by a node, a signing group with other nodes; ii) obtaining, by the node, based on a secure random number: a) a multiplicative inverse of the secure random number; and b) the first signature component, r, wherein the first signature component is determined based on the secure random number and an elliptic curve generator point; iii) determining, by the node, a partial signature based on a private secret share, the multiplicative inverse of the secure random number and the first signature component; iv) receiving, by the node, partial signatures from other nodes of the signing group; and v) generating, by the node, the second signature component, w, based on determined and received partial signatures.

Techniques are described relating to the ownership and management of digital assets that are represented by non-fungible tokens (or “NFTs”) on a blockchain. Trusted hardware is used to enable encrypted digital assets to be consumed solely by the owners of the encrypted digital assets and further to enable the transfer of ownership in the digital asset to a new owner using a blockchain. An owner of a digital asset controls access to and consumption of the digital asset via the trusted hardware to which the asset is cryptographically bound. The legal ownership of the digital asset is represented on the blockchain via an NFT. When an NFT changes ownership (e.g., when it is sold to a new owner) on the blockchain, a secure hardware-to-hardware asset transfer protocol is used (off-chain).

The application discloses a privacy protection verifiable joint analysis method based on semi-trusted hardware, which comprises n computing nodes P1,..., P n The local data analysis model is converted into an arithmetic circuit respectively, the arithmetic circuit comprising a plurality of addition gates and a plurality of multiplication gates; a polynomial secret share of to-be-analyzed data distributed by a data holder through a (t, n) threshold Shamir secret sharing scheme is acquired; the polynomial secret share of the to-be-analyzed data is taken as input of the arithmetic circuit, analysis is performed through the arithmetic circuit, and thus an analysis result secret share is obtained, wherein the addition gate is realized by directly adding the polynomial secret share, the multiplication gate is realized by multiplying the polynomial secret share and jointly computing nodes, and the product is reduced in order by using a random secret share generation algorithm; and the analysis result secret share is sent to the data holder, so that the data holder restores the clear analysis result.

The invention discloses a multi-level access control and crowd search method and system based on trusted hardware, and relates to the technical field of energy power. According to the invention, a multi-level access control mechanism based on trusted hardware is constructed, so that authority isolation between different levels of data such as power generation, power transmission and power utilization and personnel is realized, and unauthorized access to core power data is prevented; the security of a query mode and an access mode is protected through a hidden search technology, and an attacker is prevented from deducing sensitive information such as a power grid operation state and load characteristics by analyzing search behaviors; dynamic authority management is used for blocking the search authority of revoked personnel to the data of the power monitoring system, so that the non-repudiation of data operation and the anonymity of user identity are ensured; mode leakage in a storage access process is eliminated through an ORAM mechanism, a cloud malicious agent is prevented from obtaining key data flow tracks such as a power equipment state and a fault record through flow analysis, and the data protection strength and the privacy guarantee capability of the energy power cloud storage system are comprehensively improved.

This invention provides a remote image feature extraction and retrieval method based on SGX, relating to the field of encrypted image retrieval technology. This method utilizes trusted hardware SGX to offload computational operations such as image feature extraction and index construction to a trusted execution environment (enclave) on a cloud server. Within this trusted execution environment, a secret sharing scheme is used for key distribution, and access control lists are implemented to control access for third-party users. Compared to traditional encrypted image retrieval schemes, this invention effectively reduces the computational power requirements for data owners and enables precise access control for third-party users during the retrieval process.

This invention discloses a privacy-preserving vector database query method, comprising: each server obtaining a query vector secret share and performing a linear transformation to obtain a transformed query vector secret share; sending the locally held transformed vector data secret share and the transformed query vector secret share to semi-trusted hardware; the semi-trusted hardware performing a nearest neighbor search to obtain the nearest neighbor vector and its corresponding index; sharing the nearest neighbor vector and the one-hot vector corresponding to the index with each server; each server performing a dot product calculation between the one-hot vector secret share and the locally held label secret share to obtain a query result label secret share; performing an inverse linear transformation on the nearest neighbor vector secret share to obtain a query result vector secret share; and sending the query result label secret share and the query result vector secret share to the user terminal; the user terminal reconstructing the query result vector and the query result label.

This application provides a method, method, and apparatus for storing and querying encrypted data based on trusted hardware. By generating random query tokens and encrypted query formulas, this application prevents the server from associating query content with specific data records, thus avoiding the leakage of specific query relationships and improving security. This solves the problem of leaking access patterns in existing solutions. Furthermore, the computation of query relationships is performed in trusted hardware, with the server only handling storage, achieving separation of storage and computation and reducing server resource consumption.

The application discloses a video content security distribution system and method based on trusted hardware and distributed sharding streaming. The system comprises a cloud processing subsystem, a distributed storage network, an authorization management server and a trusted hardware terminal device. The cloud processing subsystem divides an original video into multiple physical shards, independently encrypts each shard and distributes the shards; meanwhile, a logical play list is generated to describe the mapping relationship between a timeline and the physical shards. The terminal device is provided with a security chip and a security play engine, receives the logical play list after authorization verification, obtains corresponding physical shards on demand, decrypts, assembles and plays in real time in a secure memory, and immediately clears the decrypted data after playing. The application realizes that the video content does not exist in a complete form in a permanent storage medium at any moment, supports high-definition streaming media playing and various business modes, and has high security, good user experience and business flexibility.

This invention relates to the field of digital management of physical assets. In order to achieve trusted management of bottled vintage wines throughout their entire lifecycle, it provides a digital wine cellar management method and system based on AntChain. By combining AntChain's IoT trusted hardware and evidence storage services, a trusted channel is constructed from the physical world to the digital world. This transforms bottled vintage wines from static commodities into dynamically growing assets. Through the automatic accumulation of effective storage time on the blockchain, the difficult-to-quantify vintage and storage status are transformed into clear and reliable on-chain data, achieving trusted management of bottled vintage wines throughout their entire lifecycle. This provides an effective basis for asset pricing and trading.