33results about How to "Prevent data theft" patented technology

The invention discloses an authentication and key negotiation method and device and a storage medium, and the method comprises the steps: a key management device configures a seed key set for a terminal device, and periodically updates the current effective seed keys of the terminal device and an authentication device; the terminal equipment initiates identity authentication to the authentication equipment, the terminal equipment and the authentication equipment generate derived passwords based on the current effective seed key and a preset association factor respectively, and identity authentication is carried out by sending challenge codes to each other and encrypting and verifying the challenge codes of the opposite side according to the respective derived passwords. According to the technical scheme provided by the invention, a one-time derived password can be generated by adopting a non-interaction mode through association factors based on time or events, identity verification is carried out through the derived password, a seed key is transmitted through a post quantum password, and meanwhile, the seed key is periodically updated, so that the security characteristic that the key is irrelevant in the forward and backward directions is realized, and the security of the key is improved. And quantum safety is realized.

The invention belongs to the technical field of network data exchange, and particularly relates to a rapid data exchange system between networks, which comprises a first processing subsystem and a second processing subsystem, the first processing subsystem is used for acquiring data transmitted in real time from an external network communication system in one network, dividing the data into a plurality of data packets according to a random rule, encrypting the plurality of divided data packets one by one in sequence according to a private encryption algorithm, and sequentially sending the encrypted data packets to the second processing subsystem; the second processing subsystem is used for decrypting the plurality of encrypted data packets one by one in sequence according to a private decryption algorithm to obtain a plurality of decrypted data packets, and verifying each decrypted data packet; and combining the plurality of decrypted data packets after verification according to a sequence by using a random rule, verifying the combined data, and sending the combined data after verification to an external network communication system in another network.