Abstract: A method for managing docking and authentication of computing devices includes detecting when a computing device docks with a docking station, identifying the device by extracting a unique identifier, and authenticating a user via an external interface. Upon successful authentication, a configuration profile is retrieved from a centralized management server and transmitted to the device over a secure channel. The device applies the profile, which may include application restrictions, wireless network settings, and user interface preferences. Session metadata is synchronized with a management system, and events may be logged for compliance tracking. In response to an undocking event, the system may issue a lock command encrypted using AES-256, enforcing local access restrictions. Administrative features include override capabilities, grace period enforcement, and notification handling. Configuration and enforcement actions may be backed up to cloud storage.

Abstract: A method (100) performed by an apparatus in a Software Defined Network, SDN, the method comprising: receiving (102) a request to define a virtual link, VL, in the SDN, the request including security constraint information for the VL; identifying (104) from a network topology of the SDN physical links that are Quantum Cryptography, QC, enabled; computing (106) a path for the VL using only physical links of the identified QC enabled physical links; and initiating (108) provisioning of the VL using the computed path.

Abstract: The present disclosure provides a video transmission method, a video transmission apparatus, an electronic device, and a readable medium, belongs to the field of information transmission technology, and can solve the problem of security of information transmission. The video transmission method of the present disclosure includes: acquiring block data of a video stream to be transmitted; generating an encryption key for an rth block with a block data digest of an (r?1)th block, wherein r is an integer greater than or equal to 2; encrypting block video data of the rth block with the encryption key for the rth block, to obtain block encrypted video data of the rth block; and transmitting the block encrypted video data of the rth block to a receiving end.

Abstract: According to one embodiment, a transmitting device includes an encryption key pre-fetching unit and an encryption chunk generation unit. The encryption key pre-fetching unit acquires the encryption key for encrypting plaintext data from a key management system before receiving the plaintext data. The encryption chunk generation unit generates a packet in which first encrypted data acquired by encrypting first plaintext data using a first encryption key and a first key ID of the first encryption key are stored, and a second key ID of a second encryption key used for encrypting second plaintext data transmitted after the first plaintext data, is embedded. A receiving device includes an encryption chunk analysis unit and a decryption key pre-fetching unit. The encryption chunk analysis unit analyzes the packet and reads the second key ID.

Abstract: Systems and methods for adaptive recursive descent data redundancy are described herein. In one embodiment, a method can include identifying the data object or file for Quantum Fragmentation, determining, via a first portion of a Quantum Fragmentation instance, a factor of fragmentation for the data object or file, transforming the data object or file into a plurality of first data fragments according to the factor of fragmentation by applying one or more cryptographic processing, integrity checking, and resilient fragmentation schemes, via the first portion of the Quantum Fragmentation instance, and persisting, via the first portion of the Quantum Fragmentation instance, each of the plurality of first data fragments to a data store of a plurality of available Cloud or other data stores or to a subsequent portion of the Quantum Fragmentation instance, wherein the persistence for each of the first data fragment occurs independently from the other first data fragments.

Abstract: Embodiments of the present disclosure include a system for performing authentication. The system can include a computing device comprising processor resources and memory resources, the memory resources storing computer-readable instructions that can be executed by the processor resources to perform various functions. In some embodiments, instructions can be executed by the processor to receive, with a transport layer security stack, a first transport layer security request from a first internal communication endpoint task and a second transport layer security request from a second internal communication endpoint task, wherein the first transport layer security request is related to establishing a secure connection with a first external communication endpoint and the second transport layer security request is related to establishing a secure connection with a second external communication endpoint.

Abstract: A cipher instruction is executed that includes encrypting a confidential value. A power block sequencing value is obtained as input to the cipher instruction, and a mask value is generated using the encrypted confidential value and the power block sequencing value. A cipher operation is performed on at least a portion of a message specified by the cipher instruction using the mask value. The power block sequencing value is updated, based on performing the cipher operation of the at least the portion of the message, to provide an updated power block sequencing value to be used in re-execution of the cipher instruction based on the cipher instruction being interrupted. The updated power block sequencing value is to be provided as input to the cipher instruction based on the cipher instruction being re-executed to re-generate the mask value to be used in continuing the cipher operation of the message.

Abstract: Various aspects of the disclosure relate to verification of data sets used for real-time processes and/or batch processes. A computing platform negotiates, by a first quantum node, a shared key group with at least a second quantum node and calculates an exclusive or (XOR) value of a pair of the first quantum node and the second quantum node. The first quantum service node performs a shared key grouping with the second quantum node and then selects a quantum key relay link between a real-time node and a batch source node. The computing platform selects a corresponding state of all virtual quantum nodes associated with the quantum key relay link and encapsulates a virtual quantum link state between any two quantum service nodes in the quantum network into a database decision engine data file.

Abstract: An attribute based encryption system includes a key generator configured to generate a cyclic group (G) having a prime order q; generate an attribute key matrix (M); generate a master public key (MPK) based, at least in part, on the group (G) and (M); generate a master secret key (MSK) based on a first vector s and a second vector t that represent an encryption policy; generate a user secret key based, at least in part, on the MSK and on a set of one or more user attributes; and send the user secret key to a user device, wherein a ciphertext message can be successfully decrypted if a vector y associated with attributes of the user associated with the user secret key is orthogonal to each row of a set of rows of M selected according to a set of authorization attributes used to encrypt the ciphertext message.

Abstract: A quantum-key distributed (QKD)-enabled communication architecture it devises for networked microgrids (NMGs). A real-time QKD-enabled NMGs testbed built in an RTDS environment, and a novel two-level key pool sharing (TLKPS) strategy it designs to improve the system resilience against cyberattacks. In the QKD-based microgrid testbed design there is used a real-time power system simulator, i.e., RTDS, including the QKD modeling, hardware connection, communication network design, and QKD integration. By integrating QKD features into a real-time microgrid simulator, this testbed offers a flexible and programmable testing environment for evaluating the performance of QKD-enabled microgrids under a variety of scenarios.

Abstract: The present disclosure relates to systems, non-transitory computer-readable media, and methods for integrating a document signature system with an account management system. In particular, in one or more embodiments, the disclosed systems activate a digital document template for integration with the account management system, receive interaction data by a client device with a digital document, and send the interaction data or the digital document to the account management system.

Abstract: A virtual private network (VPN) client receives data including a pre-shared key (PSK). The VPN client decrypts the data based on a short-term key pair to obtain a ciphertext. The VPN client then decrypts the ciphertext based on a short-term quantum-resistant key pair to obtain the PSK. A VPN tunnel is then established between the VPN client and a VPN server based on the PSK.

Abstract: The present disclosure relate to exchanging information between a start node and an end node. Based on the information session keys for a connection comprising the start node, the end node, and at least one intermediate node are established. The session keys include a data encryption session key and a Message Authentication Code (MAC) session key. The data is encrypted using the data encryption session key at the start node. MAC is generated using the MAC session key. The encrypted data is relayed, via the at least one intermediate node, from the start node to the end node without the at least one intermediate node re-encrypting the data.

Abstract: A method of quantum key distribution making use of 2-qubit entanglement, by which one entangled qubit is sent from an operator O to Alice and the other entangled qubit is sent from operator O to Bob, making for key-sharing among three parties (multi-user quantum key distribution, i.e. MU QKD). Alice and Bob each measures a respective sequence of qubits randomly along either one of two states, records the measurements in a respective list, and encodes the bits in an encoded list. The encoded lists are sent to operator O for entanglement to be verified with the CHSH inequality. Bob's verified list is sent to Alice and vice-versa, allowing Alice and Bob to further verify correlation. Non-entangled bits are rejected until Alice and Bob have a similar key, being a reconciled quantum-based key as sought.

Abstract: A method for communications in a network can include performing a pairing between a first device and a second device in the network. The method can include deriving a port knocking sequence from identification information of the pairing. The method can include providing port knocking according to the port knocking sequence. The method can include authorizing a connection between the first device and the second device responsive to detecting the port knocking sequence. Other devices and methods are described.

Abstract: Managing worksheet access including receiving a request from a first user account to access a worksheet shared from a second user account, wherein the worksheet comprises a worksheet architecture for at least one data set from a database; determining that the first user account is authorized to access the worksheet architecture of the worksheet; determining that the first user account is authorized to access the at least one data set presented by the worksheet; and granting the first user account access to the worksheet in response to determining that the first user account is authorized to access the worksheet architecture of the worksheet and determining that the first user account is authorized to access the at least one data set presented by the worksheet.

Abstract: Systems and methods for a secure cross-chain atomic swaps are disclosed herein. A user submits to a swap platform a signed limit order to atomically swap an amount of input token for an output token. The swap may involve a Dutch auction approach, in which the order execution price depends on time of inclusion in a block and decreases over the duration of the Dutch auction. The swap platform provides the order details to whitelisted resolvers to evaluate if/when/how to fill the order. Once a resolver makes that determination, it can utilize smart contracts associated with the swap platform to perform the atomic swap on behalf of the user and itself (e.g., without active involvement of the user). Input tokens deposited on an escrow contract are unlocked at the same time that output tokens deposited on another escrow contract are unlocked.

Abstract: A first device receives a data qumode and at least one auxiliary qumode from a second device. The data qumode and the auxiliary qumode(s) were entangled at the second device. The first device entangles the data qumode and the auxiliary qumode(s) and measures the auxiliary qumode(s). Measuring the auxiliary qumode(s) generates an indication of an error channel experienced by the data qumode. The first device applies an error correction to the data qumode based on the indication of the error channel, and generates a corrected data qumode.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for batch retrieving data are described. In one aspect, a method includes receiving, from a client device and by a first multi-party computation (MPC) server of a cluster of MPC servers, a batch request for retrieving multiple database values stored in one or more databases. The batch request includes a first byte array that includes, for each requested key of multiple requested keys, a first secret share of the requested key. Each database includes multiple data items that each include a database key and a corresponding value. The MPC server processes each database key to generate first secret shares of matching data indicating whether the database key matches at least one requested key. The MPC server generates one or more results that represent database values corresponding to each database key that matches at least one requested key.

Abstract: This document describes systems and techniques for using cryptography, secret sharing, secure MPC, garbled circuits, and oblivious transfer to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. A method includes obtaining, by a first computer of a secure multi-party computation (MPC) system, at least a first share of user data related to a user of a client device. For each digital component in a set, a first secret share of a condition bit for the condition is obtained for each of one or more conditions that condition eligibility of the digital component for distribution. A garbled circuit is executed to select a given digital component for which each of the one or more conditions of the digital component is satisfied using the first secret share and the second secret share for each condition.