18 results about "Trusted third party" patented technology

This invention relates to the field of privacy computing and discloses a collaborative analysis method for potential financial risks based on fuzzy privacy set intersection. The method first protects the privacy of deposit and loan data from various financial institutions through Paillier homomorphic encryption. Then, it utilizes a fuzzy privacy set intersection algorithm based on Unintentional Key-Value Storage (OKVS) and the discrete logarithm problem to achieve fuzzy matching of user identities across multiple institutions. While ensuring the privacy of user feature data, it identifies records of the same user that meet a predetermined distance threshold. Finally, it aggregates the encrypted deposit and loan data of the matched records and compares them with the threshold. A trusted third party decrypts the data and completes the judgment of potential financial risks, thus realizing financial privacy and security risk analysis under cross-institutional data collaboration.

This invention provides a local differential privacy collaborative sampling data collection method and system resistant to poisoning attacks, belonging to the field of information security and privacy protection technology. The scheme compares the single-dimensional probability distribution reported by the user terminal with the median probability distribution to identify and eliminate abnormal reported data, thereby effectively suppressing data poisoning attacks initiated by malicious user terminals. Subsequently, under the constraint of local differential privacy, combined with a generalized random response mechanism and a collaborative sampling strategy, multidimensional data is sampled differentially to achieve more accurate frequency estimation. The scheme of this invention improves the privacy protection strength and the accuracy of statistical results in multidimensional data collection without relying on a trusted third party.

The present invention relates to a method for processing sensitive data, particularly biomedical images, securely, automatically, and reproducibly on a cloud computing infrastructure. The invention also discloses the device for implementing this method. The invention relies in particular on cloud computing, cryptography, biomedical imaging, pseudonymization, anonymization, and advanced signal and image processing technologies. The invention also covers a use case for such a method through the secure implementation of image processing technologies (a business application) applied to biomedical images. In one embodiment, these images are obtained from magnetic resonance imaging (MRI), specifically for applying advanced processing with the business application to map the apparent transverse relaxation rate (R2*) and perform quantitative susceptibility imaging (QSM).Figure for the abbreviation: figure 1.

The application relates to a communication establishment method based on security evaluation and an electronic device, and belongs to the technical field of communication security. The method comprises the following steps: obtaining a first system running state measurement value of a first device; after certificate authentication of the first device and a second device is passed, the first device requests a trusted third party to authenticate the first system running state according to the first system running state measurement value; if the second system running state of the second device and the first system running state of the first device are both authenticated, communication between the first device and the second device is established. The communication establishment method based on security evaluation and the electronic device provided by the application significantly improve the active defense capability of communication, improve the reliability of security evaluation, and realize communication security evaluation in a TPM-free environment.

The present invention relates to a method for processing sensitive data, particularly biomedical images, securely, automatically, and reproducibly on a cloud computing infrastructure. The invention also discloses the device for implementing this method. The invention relies in particular on cloud computing, cryptography, biomedical imaging, pseudonymization, anonymization, and advanced signal and image processing technologies. The invention also covers a use case for such a method through the secure implementation of image processing technologies (a business application) applied to biomedical images. In one embodiment, these images are obtained from magnetic resonance imaging (MRI), specifically for applying advanced processing with the business application to map the apparent transverse relaxation rate (R2*) and perform quantitative susceptibility imaging (QSM).Figure for the abbreviation: figure 1.

The application provides a data packet security verification method in an information center network, comprising the following steps: 1) a legal content publisher registers a password parameter to a trusted third party, and signs a data packet; 2) an access router directly connected to the content publisher periodically updates the reputation of the content publisher according to a verification result of the data packet; 3) the access router performs batch verification on the data packet and probabilistically discards the data packet; and 4) an intermediate router verifies each data packet that needs to be verified one by one according to a verification probability set by the access router for each data packet, and discards the data packet verified as false. The application is used for preventing content pollution attacks in the information center network, can verify the authenticity and integrity of the content with low cost, and avoids false content from entering the network.

A first party quantum trusted executed environment (QTEE) receives a first party initial key from a first party and generates an expanded key; a second party QTEE receives a second party initial key from a second party and generates an expanded key; an untrusted third party controls an untrusted quantum source to distribute an input quantum system to the QTEEs; the first party QTEE encodes the input quantum system into a first quantum system and sends the first quantum system to the untrusted third party; the second party QTEE encodes the input quantum system into a second quantum system and sends the second quantum system to the untrusted third party; the untrusted third party performs an entangling measurement on the quantum systems resulting an entangling measurement outcome and sends to the parties; and the parties generate secret keys using the expanded keys and the entangling measurement outcome.

This invention belongs to the field of quantum-safe multi-party computation and discloses a quantum-safe multi-party summation method based on quantum circuits. In the offline phase, all participants negotiate to obtain a specific quantum state, and the result of passing all quantum states through a quantum addition gate is 0. In the online phase, each participant adds the specific quantum state to the input quantum state and encrypts the resulting quantum state using a key before sending it to the next participant. The next participant decrypts the encrypted state and executes the quantum addition circuit, and so on, until the penultimate participant obtains the final result and sends it to the other participants. This invention utilizes the specific quantum state generated in the offline phase to hide the real input, enabling the establishment of a trusted data fusion environment that can withstand collusion attacks from N-2 participants, promoting the secure flow of data elements and helping to solve the data silo problem. No trusted third party is required during the computation process, eliminating trust dependencies; it supports input quantum states, defending against future quantum computing threats.

A method for bootstrapping and / or onboarding a device into an industrial network is provided. In this method an bootstrapping and / or onboarding request is received from the device, aka pledge, comprising a membership token, that allows to proof the membership of the device to a device group by a zero-knowledge proof, and the membership token is verified by a manufacturer signing authority as trusted 3rd party using this zero-knowledge proof (ZKP).

This invention discloses a secure archiving system and method based on blockchain data. The secure archiving system includes a user node U, a leader node L, a data reading node R, a data deletion node D, a trusted third party TTP, and a cloud storage system CSS. The secure archiving method includes at least four steps: archiving of historical blockchain data, authorized reading of archived data, authorized deletion of archived data, and recovery of faulty data. While retaining the functionality of the blockchain ledger, it reduces the storage pressure on the blockchain system, achieves lightweight storage for the blockchain system, and solves the problem of significant performance degradation caused by the continuous growth of ledger data over time. It also solves the problem of data bloat in the blockchain system while ensuring that the data is unforgeable and tamper-proof. At the same time, it can also realize authorized access to archived data, privacy protection, and faulty data repair.

According to an embodiment of the present disclosure, a security control system for protecting and authenticating identity information may include threshold signature parties including a user terminal configured to drive an electronic wallet, a trusted third party (TTP) server, and a backup server, and the user terminal may generate, through the electronic wallet, a private key of a user as a distributed key including a plurality of key shares according to a threshold signature technique, and store one of the generated key shares in the user terminal and transmits the other key shares to the TTP server and the backup server.

This secure calculation method, implemented by first and second computing devices (102, 104) adapted to communicate with each other via a communication network (106), comprises the following steps: initialization, determination of indices for each identifier, calculation, encryption and transmission of attendance ratios, encrypted homomorphic calculation of a scoring function, scrambling of the results of the encrypted homomorphic calculation including a substep of score masking and a substep of score scrambling, so as to preserve the confidentiality of the score and the confidentiality of the scoring function respectively, transmission of the scrambled results to the first computing device (102), decryption of the scrambled results, transmission of the masked score in plaintext to the second computing device (104), and processing of the masked score in plaintext to obtain the unmasked score value. Figure 1

This invention belongs to the field of quantum-safe multi-party computation and discloses a verifiable quantum-safe multi-party XOR protocol based on hyperdense coding. The preprocessing stage is for n participants P. j Each participant holds two classical bits. Through an ultra-dense encoding method, P0 obtains specific aggregate information of each party's classical bits by transmitting only n qubits, while ensuring that P0 cannot access portions of the bits held by each party that P0 has no right to see. This method significantly reduces the communication overhead in multi-party computation. During the computation phase, the real input is hidden using the key and auxiliary values ​​generated in the preprocessing phase, and an XOR operation is performed without revealing the privacy of the input. The protocol does not require the participation of a trusted third party, eliminating trust dependencies and achieving decentralized security; it supports quantum state input, defending against future quantum computing threats; and it can verify whether anyone maliciously tampered with the calculated value during the XOR operation, making it suitable for sensitive scenarios such as privacy computation and joint analysis.

This invention relates to a fingerprinting scheme for tracking and prosecuting piracy of digital works, belonging to the field of digital copyright protection technology. It includes the process of generating fingerprint-containing digital products and the fingerprint identification process after discovering illegal copies. The scheme does not require a trusted third party or blockchain technology support. Through a two-way constraint mechanism between publishers and users, it achieves accurate tracking and prosecution of piracy. This invention requires neither blockchain technology nor a trusted third party, yet it can accurately determine the subject of illegal copying—whether it is a user who committed illegal copying or a publisher who copied and then framed others—thus avoiding affecting the practicality of the scheme. The execution process is simple and efficient, avoiding the consumption of large amounts of computing, storage, and communication resources.

This invention discloses a highly efficient and rapidly recoverable Laconic inadvertent transmission protocol, dividing the protocol into a main part and an extension part. The main part includes system initialization, database digest generation, message encryption, decryption cache generation, and a message recovery phase. The system initialization phase requires execution by a trusted third party. In subsequent phases, the protocol operates between two parties, referred to as the receiver and the sender. The receiver holds the database, and the sender holds two messages and a selection index. After the protocol completes, the receiver can recover the message without knowing any information about the other message. The extension part includes digest update, decryption cache update, PSI receiver encoding, and PSI sender encoding steps. This invention significantly reduces the computational overhead for the receiver when decrypting and recovering messages, solving performance bottlenecks. It supports efficient database updates, has a flexible structure, and wide applicability.