A secure transmission method and system based on SM2 key agreement mechanism

Abstract

The invention relates to a secure transmission method and system based on an SM2 key agreement mechanism. The method includes: the Internet of Things terminal and the Internet of Things server negotiate a session key; the Internet of Things terminal generates service report data, encrypts the data, and reports the encrypted service report data ciphertext to the Internet of Things server, and the Internet of Things service The terminal decrypts and reports the data ciphertext and performs business processing; after the IoT server performs business processing, it generates business delivery data, encrypts the data, and sends the encrypted business delivery data ciphertext to the IoT terminal. The IoT terminal decrypts the ciphertext of the service-delivered data to obtain the plaintext of the service-delivered data. On the premise that the terminal of the Internet of Things and the server can be safely accessed through identity authentication and the security of data communication is ensured, the present invention adopts a key negotiation mechanism based on the national secret SM2 algorithm to simplify the key negotiation interaction process between the terminal of the Internet of Things and the server , to reduce network resource consumption and delay problems.

Description

technical field [0001] The invention relates to the technical field of the Internet of Things, in particular to a secure transmission method and system based on an SM2 key agreement mechanism. Background technique [0002] For massive IoT device communication scenarios, IoT terminals and servers need to perform frequent business interactions. It is necessary to ensure the credible identity of IoT terminals and prevent counterfeit and illegal IoT terminal access. At the same time, the data communication between the IoT terminal and the server needs to ensure the data leakage, eavesdropping and tamper-proof of the communication parties, and ensure the confidentiality and integrity of the data. [0003] Traditional terminal security access is mainly implemented based on SSLVPN technology. With the development of the Internet of Things technology, various types of Internet of Things terminals have emerged in large numbers, and the access demand has increased sharply. The tradi...

AI Technical Summary

Problems solved by technology

There are mainly: 1. SSLVPN needs to be bound with TCP connections one by one when IoT terminals access, which requires the server-side security access system to maintain a number of TCP connections equivalent to the number of online terminals, and these connections are all SSL encrypted connections. When a large number of encrypted heartbeat packets will cause a heavy burden, the terminal access performance using SSLVPN is greatly limited; 2. The SSLVPN connection establishment process is relatively complicated, and multiple groups of data packets need to be exchanged to complete the key negotiation. Therefore, the terminal access relatively slow entry

Images