Data transmission ciphering and integrity checking method

Abstract

The invention relates to an encryption and integrality check method of a data-transmission belonging to the electric communication technique field. In the invention, an originating node and a destination node share a root key not known by attackers, the root key and message authentication codes of all the prior transferred data generate an encryption key for encrypting the prior transferred data; at the present an encrypted data and a message authentication code corresponding the data node are transferred from the originating node to the destination node. The invention can encrypt and check the data transferred between the nodes and have advantages of safety and high performance.

Description

technical field [0001] The present invention relates to a data transmission method in the technical field of telecommunications, in particular to an encryption and integrity check method for data transmission. Background technique [0002] To protect information, data in transit needs to be encrypted and integrity checked. Encryption is to protect the confidentiality of data, so that attackers cannot understand the original meaning of the data intercepted on the transmission path; integrity verification is to prevent attackers from maliciously modifying the transmitted data, injecting forged data, replaying Tampering with data transmitted in the past, blocking currently transmitted data, reversing the order of data transmission, etc. This protection requirement for data transmission exists in many fields; for example, data is transmitted from a certain processor inside the same computer to another processor; another example is that data is transmitted from one computer syst...

AI Technical Summary

Problems solved by technology

However, simply relying on message authentication codes to detect the integrity of each transmitted data has the disadvantage of being unable to resist attacks such as replay, so it does not have sufficient security

[0004] Through document retrieval to prior art, it is found that: W.Shi et al. are in "Proceedings of the International Conference on Parallel Architectures and Compilation Techniques, 2004, pp.123-134" (Proceedings of the International Conference on Parallel Architecture and Compilation Techniques, 2004, "Architectural Support for High SpeedProtection of Memory Integrity and Confidentiality in MultiprocessorSystems" published on page 123-page 134) (architecture supports multiprocessor system memory integrity and high-speed protection of confidentiality), which proposes inter-processor The confidentiality and integrity protection technology of data communication, specifically, the bus serial number that can be shared and monitored by the processors is used to generate the encryption key, and combined with the message authentication code of each transmitted data, the encryption and verification of the bus data is realized. experience; its shortcoming is: not all communication nodes in all cases can share the same serial number among each other (for example, multi-processor interconnection structure in non-bus form), so this technology cannot be generally applied. In addition, this Technology cannot prevent attacks by breaking the synchronization of shared serial numbers across processors

Images