Search

Replacement and substitution encryption are two basic types of encryption historically. The classical encryption algorithm has been compromised now, but they still can play special role for modern cryptology. For example, in digital image encryption system, substitution can disrupt the original order of the images and eliminate the correlation of image information which not only can realize security of images, but also can resist intentional attack and destruction of clipping and noise. And transposition transformation is introduced into the design of block ciphers. The substitution has the feature of high efficiency and resistance, which makes it meet the specific requirements of encryption. So substitution cypher can be applied to modern encryption system.

A design of encryption cards controlling multiple cipher chips’ high-rate parallel operation based on FPGA is proposed in this paper. According to the design method, we can achieve that multiple encryption card operates encryption in parallel way, which can improve the encryption and decryption rate of the encryption card without enhancing the performance of encryption chip, moreover, increase the key generation rate and management level of the key management system.

Encryption of information is getting increasingly large attention, due to the popularity of internet and the advance of technology. One of the encryption algorithms, MD5, is commonly used in data encryption nowadays. In this paper, MD5 algorithm was briefly described and used to construct a dynamic password encryption technique with time parameters. This dynamic password has no internal relevance, which means the new password can not be derived using previous passwords. Generation of password also takes a relative short time frame, such that in theory the encryption system can not be breached.

In this paper, pseudo-random sequences are designed as encrypting secret keys by the hyper-chaotic system model. Based on the H.264 coding standard, selecting encryption is designed to encrypt intra-prediction modes, MVD symbols and CAVLC residual coding datum. Experiments show that the encryption algorithm has higher security without changing the structure of code streams.

In order to enhance the security of the English character document, data-level information security issues have been researched on the English characters document. Use object-oriented programming to get the character information in English characters document and also get the encoding. Use the “long key stream” algorithm to encrypt. During the process of encryption and decryption, the lossless of English characters file format information is maintained. Also, the setting of encryption and decryption is introduced. English characters document which use this encryption method cannot be cracked illegally. Research on this simulation model guarantees the information safety of English characters document on bottom-level.

With the rapid development of cloud computing, Security problems has become one of the major obstacle against it. In this paper, we present a hybrid encryption scheme based on the characteristics of RC5 and ECC encryption to deal with security issues caused by data residue in static storage and Save the storage space at the same time.

Personal Health Record is internet based application that enables individuals to access and coordinates their womb-to-tomb health data. The patients have management over access to their own PHR. To attain security of non-public health records, we have a tendency to use the attribute based secret writing to write in code to inform before outsourcing it. Here we have a tendency to specialize in multiple forms of PHR owner situation and division of non-public health records users into multiple security domains that cut back key management complex for house owners and users. A high degree of patient’s privacy is secured. Our theme offer a personal health record owner full management of his/her information. In depth security and performance analysis shows that the projected theme is very economical.

As the relational database is applied widely, how to protect the sensitive data and state secrets has become a problem which needs to be solved urgently. The conventional relational database encryption technology not only reduces the system’s performance, but also results that we can not quickly inquire the encryption data through the original index mechanism due to the loss of the original partial order relation among data. This paper proposes a kind of relational database encryption technology based on the main memory database. It has not only realized the transparent encryption, decryption and ciphertext storage of the relational database, but also still retained the original response and retrieval performance. This technical proposal has very strong adaptability as well as strong practice guidance meaning for protecting the internet business data and the war-industry informative state secrets.

Some technical measures should be taken for software protection in addition to the laws and regulations. Software encryption is a commonly used method. The main methods of software encryption are introduced here firstly, and the characteristics of different methods are given. Then the idea of encryption card based on computer system bus is put forward. The design of logical circuit for the concrete realization is shown and the key detection process is described. The key is generated by the port address dynamically with the encryption card. There are several key with multi port. The encryption card is difficult to decrypt and is with good stability, high reliability.

Montgomery algorithm will die N operation into shift operation, optimized Systolic array with fewer resources to achieve efficient Montgomery algorithm, and the application of power conversion technology to further improve the RSA encryption,decryption speed. In order to make full use of FPGA resources, this paper analyzes the impact of the Systolic array at different levels of granularity on the performance of the system, and gives the realization and S = key and encryption,decryption information are RSA encryption system of s hardware 1024 time results.

Ciphertext-Policy Attribute-based encryption (CP-ABE) mechanism is an extension of attribute-based encryption which associates the ciphertext and user's private key with the attribute by taking the attribute as a public key. It makes the representation of the access control policy more flexible, thus greatly reduces the network bandwidth and processing overhead of sending node brought by fine-grained access control of data sharing. According to the principle of CP-ABE encryption mechanism for this mechanism, an improved cloud computing-based encryption algorithm was proposed in this paper to overcome the deficiencies of permission changing process under the massive data. Experimental results show that compared with traditional methods, the new mechanism significantly reduces time-consuming.

Certificate-based encryption is a new paradigm which was introduced by Gentry to address the complex public key revocation problem in traditional public key cryptosystems. It represents an interesting and potentially useful balance between traditional public-key encryption and identity-based encryption. In this paper, we introduce the notion of hierarchical certificate-based encryption that preserves the advantages of certificate-based encryption such as implicit certificate and key-escrow free while inheriting the properties of hierarchical identity-based encryption. We formalize the definition of hierarchical certificate-based encryption and also propose a concrete hierarchical certificate-based encryption scheme that is chosen-ciphertext secure under the hardness of bilinear Diffie-Hellman problem in the random oracle model.

A compression, encryption, storage and retrieval system for massive data is proposed and designed which can be used in these enterprises and institutions in which the business data, which need be protected, increases rapidly. In the system, XML file format is adapted as the intermediate switching format so that the detail of the multiple types of files can be omitted. A special index supporting compression and encryption is presented in the paper. In the process, the documents are stored in the server after compressed and encrypted; an end-user can retrieve the need documents efficiently by helping of the index structure. The security of the data is guaranteed since the data is not needed to be decompressed and decrypted in the retrieval process.

Security is one of the major concerns in network coding. Although intrinsic confidential security is provided because different flows of information are mixed, network coding is still vulnerable to modification attack and wiretapping attack if the wire tapper knows the transmission mechanism. In this paper, a kind of encryption scheme is proposed to secure the network. This scheme has such advantages as the number of encryption is small and the wire tappers are not restricted to only part of the transmission links, but all the links are admissible. In general, the number of encryption is only 1/n of traditional encryption, in which n is the degree of one dimension of source message. Whats more, the integrity of network is also checked in every intermediate node which could make the scheme more efficient compared to the sinks detection only.

Video encryption has been widely researched in digital right management in recent years, especially selective video encryption. Selective video encryption has been the main trend with the development of compression coding methods, which selects an important subset of the comparative large compressed video data to encrypt in order to satisfy the real-time features and ensure the security of the video at the same time. In this paper, according to a particular evaluation criterion we proposed, we mainly analyze several selective video encryption algorithms based on the H.264 standard. Through the analysis we find out how to select the different vital data sets of the video to encrypt according to various security levels and applications.

File transfer and e-mail business dealings have a lot of insecurity on the Internet. This paper presents a encryption algorithm of electronic documents based on matrix, and it brings forward implementing by VC.the algorithm relies on a special class of matrix combination, the method is feasible and effective to improve the security of the electronic document system. Finally, the code is given.

Internet of Things has received more and more attention, due to a wide range of potential applications. In this paper, we propose a secure data aggregation framework for the Internet of Things. It is based on fully homomorphic encryption. Moreover, this is a form of encryption where any specific algebraic operation performed on the raw sensor data is equivalent to the same algebraic operation performed on the cryptographic sensor data.

Broadcast encryption provides a convenient method to distribute digital content to subscribers over an insecure broadcast channel so that only the qualified users can recover the data. In some broadcast encryption based systems such as pay-TV, multiple ciphertext headers (via multiple channels) are needed since the sender needs to send various contents to different groups of subscribers. Each receiver needs to store all headers in order to switch channel fluently. Recently, Phan et al. described a multi-channel broadcast encryption scheme, in which the sender encapsulates multiple ephemeral keys into one ciphertext header so that each receiver only stores one ciphertext header and still can recover various ephemeral keys for different contents. We present an improvement on their scheme, which will reduce the size of public key and the computation cost for decryption. The improved scheme can be used to construct efficient dynamically privileged broadcast encryption system.

A optimized Rijndael algorithm which can execute effectively on STM32F103 processor is presented. Firstly, a theoretical analysis of the Rijndael algorithm and code optimization are carried out, and then simulation results of the optimized algorithm on stm32f103 processor are given. Subsequently, the conclusions as follow can be drawn. The cycles of key schedule for decryption are more than those for encryption. Key schedule for decryption demands larger memory than that for encryption. Decryption is slower than encryption. At last, the experiment shows that the algorithm can be executed on STM32F103 processor efficiently.

The paper designs a hard disk encryption system with pure software realization, the system uses the Windows driver development technology, uses the AES（Advanced Encryption Standard） algorithm as the hard disk encryption algorithm.It could protect sensitive information effectively without additional hardware devices and implements encryption and decryption for the whole hard disk.

Security transaction problem between the client and the server was solved by a network identity authentication protocol of this paper. We designed this protocol from two aspects, one is the hardware structure design, and the other is data encryption. We used fingerprint sensor to gather the user’s fingerprint and characteristic value instead of password input from keyboard, and used RSA probabilistic encryption to generate public key and private key of the client and public key and private key of the server, and then used the protocol certification process to finish operation of the data encryption and decryption. This protocol guarantees every specific legitimate user rights and prevents the hacker from attacking network data, and the practical application shows this protocol is absolutely safe.

Aiming at current problem of high computing overhead of encryption and authentication, this paper proposes a confidentiality and integrity protection method based on one time encryption. The method packages data block and verification data together, and then encrypts it. The confidentiality is guaranteed by traditional encryption mode and the integrity is guaranteed by decrypted verification data. Analysis and simulation show that the method has less time and space overhead than standard encryption and authentication mode. The method can be applied to other integrity and confidentiality protection schemes, and can meet the performance requirements of the most applications.

The double-byte character asymmetric encryption is always the difficult problem in information encryption technology, to choose algorithm not only depends on encryption information safety, but also considering the processing speed of plus and encryption information as well the system implementation of software and hardware. Depend on the large integer factor decomposition and the lower operation speed in public key system to discrete logarithm. The article proposes based on the processing algorithm of knapsack public key of Chinese characters plus and encryption information, introduces the password thought and decryption principle of Merke-Hellman knapsack algorithm, describes the experimental verification of the encryption algorithm to Chinese character.

Nowadays the information security is one of the fundamental and important issues in information management. Utilizing a collection of policies, solution, tools, hardware and software is for the purpose of obtaining an environment in which the information is not threatened while being produced, refined, transferred and distributed. Obtaining such an environment entails doing some things which are called security requirement. Therefore, for meeting those requirements in this project a symmetrical encryption algorithm has been designed and performed.

In order to improve the security of database system and resist threat from all aspects, especially the threat from database administrators, the paper designed a new database encryption system. In this system sensitive information is encrypted and establishes ciphertext address index table for it. Encryptions for character fields and numeric fields have different processing methods. Decryption key should be synthesized by both client and server. System can execute SQL query like equality queries, range queries and so on which are difficult to deal with after encryption. The analysis shows that the system has better security.

Unlike some earlier proxy re-encryption schemes, the LV08 scheme specifies a validity-checking process to guarantee that the received ciphertext is well-formed. In this paper, we clarify that the received message is well-formed is the premise to decryption in all encryption schemes. The underlying mechanism to keep the communicated message well-formed in encryption schemes is another topic. We will simplify the LV08 scheme and show its security level is the same as that of the AFGH05 scheme.

The design of the "two-way ID authentication and hardware encryption-based secure mobile hard disk" adopts the smart card-based technology of two way ID authentication, thus enables higher authentication strength than ordinary password authentication and USB-KEY one way certification; adoption of dedicated hardware encryption chip on encrypting the hard disk data enhances the encryption speed; since this encryption is a hardware level encryption, it is completely transparent to users, and do not rely on the operating system or other applications, with almost no impact on system performance; that the key of the encryption system will be loaded before the system initialization (system boot) prevents malicious code attacks from hard drive, and even when the mobile hard disk was stolen, the thief cannot read out any encrypted data from it on any other computer as long as the thief has no access to the encryption key. Therefore, this "encrypted mobile hard disk" is more secure with better reading and writing performance, and thus can effectively protect sensitive data on the mobile hard disk.

With the rapid development of internet computer viruses, Trojan horses and other safety hazards already have been a serious problem which is not ignored. By analyzing the status of network security, we use data encryption technology to ensure the security of information which is already an accepted, but there are many encryption methods. How to select the appropriate method In this paper, we purpose corresponding encryption system by the current status of the network, and it prepared for select the encryption algorithm next.