A network data security management and control method and system based on bidirectional transmission

Abstract

The application discloses a network data security management and control method and system based on bidirectional transmission, belongs to the technical field of data transmission, and can greatly increase the security in the key transmission process through the mode of multi-node cooperative transmission of key shares, and can effectively avoid the attack of malicious nodes and increase the security and redundancy of bidirectional data transmission through the authorization of multiple system nodes to newly accessed nodes, so that even if one or several key shares are stolen and cracked in the data transmission process, the illegal person cannot realize the decryption of data.

Description

Technical Field

[0001] This invention belongs to the field of data transmission technology, specifically relating to a network data security management method and system based on bidirectional transmission. Background Technology

[0002] In the coal mining industry, the security of network data transmission is paramount. With the development of automation and intelligence in coal mines, various sensors and control systems transmit data via networks. This data may contain sensitive information, such as personnel location data and production data. However, existing data transmission technologies often have security vulnerabilities, such as unauthorized access or tampering of data. Therefore, a network data security management method is needed to ensure data security and integrity.

[0003] In existing technologies, to improve data security, either asymmetric or symmetric encryption algorithms are often used for encrypted data transmission. However, asymmetric encryption algorithms are often slow when encrypting large amounts of data; while symmetric encryption algorithms can encrypt large amounts of data quickly, they suffer from the problem of key leakage. Therefore, existing technologies have low fault tolerance, and there is a problem of difficulty in effectively transmitting keys after new nodes are connected to the data management system. Summary of the Invention

[0004] This invention provides a network data security management method and system based on bidirectional transmission to solve the technical problems existing in the prior art.

[0005] On one hand, the present invention provides a network data security management method based on bidirectional transmission, comprising:

[0006] The coal mine data management system initializes system parameters and publishes these parameters on the blockchain; the coal mine data management system has N pre-defined authorized management nodes.

[0007] Each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters. Each management node transmits its corresponding key share to the coal mine data management system through a secure data transmission method.

[0008] The coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes, and uses the system key to transmit data in subsequent data transmission processes;

[0009] When a data operator requests to operate on data in the coal mine data management system, all management nodes collaborate to distribute the key share corresponding to the data operator, so that the data operator becomes an authorized user node.

[0010] If a data operator uploads data to the coal mine data management system, the data to be uploaded will be encrypted according to the system parameters of the coal mine data management system before being uploaded.

[0011] If a data operator downloads data from a coal mine data management system, the coal mine data management system encrypts the data to be downloaded using a system key, transmits the encrypted data to the data operator, and randomly assigns N authorized management nodes and user nodes to transmit key shares to the data operator through secure data transmission.

[0012] The data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, thus achieving two-way data security control.

[0013] Further, initialize system parameters, including:

[0014] Choose an additive group G1 and a multiplicative group G2; where the order of both additive group G1 and multiplicative group G2 is q, and the generator of additive group G1 is P;

[0015] Construct a bilinear mapping e: G1×G2 based on the additive group G1 and the multiplicative group G2;

[0016] In a finite field Select a parameter d from the list, and obtain the public key based on parameter d and generator P to calculate parameter Q = d·P;

[0017] The coal mine data management system generates its own system public key and system private key;

[0018] The additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, the public key computation parameter Q, and the system public key are collectively used as system parameters.

[0019] Furthermore, it also includes:

[0020] Each management node starts from a limited domain Choose a private key d i And obtain the public key from the blockchain to calculate the parameter Q, based on the private key d. i And the public key calculation parameter Q, to determine the public key corresponding to the i-th management node as P. i =d i ·Q;

[0021] Where i = 1, 2, ..., N, each management node has a unique identifier ID. i ,and .

[0022] Furthermore, each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters, including:

[0023] Each management node reads the system parameters of the coal mine data management system from the blockchain, obtaining the additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, and the public key calculation parameter Q;

[0024] Each management node generates an N-term polynomial as follows:

[0025] f i (x)=a i0 +a i1 x+a i2 x 2 +...+a i(N-1) x N-1

[0026] Among them, f i (x) represents the polynomial corresponding to the i-th management node, a i0 a i1 a i2 ... a i(N-1) Let x represent N coefficients selected from a finite field, i = 1, 2, ..., N, and N represent the total number of management nodes.

[0027] Each management node, identified by the polynomial and the unique identity of other management nodes, obtains the first key parameter s. i,j =f i (ID j )modq; where s i,j f represents the first key parameter of the i-th management node relative to the j-th management node; i (ID j ) represents the parameter obtained based on the polynomial of the i-th management node and the unique identifier of the j-th management node as the independent variable; mod represents the modulo function, and q represents the order;

[0028] The i-th management node uses the public key P of the j-th management node. j And the first key parameter, obtain the first intermediate parameter as {s i,j P j}, and transmit the first intermediate parameter to the j-th management node; i is not equal to j;

[0029] The j-th management node receives N-1 first intermediate parameters, denoted as {s}. i,j P j}, and calculate the second key parameter s based on the first intermediate parameter and itself. j,j The key share obtained is: ;s m,j This represents the key parameters calculated by the m-th management node for the j-th node.

[0030] Furthermore, the coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes, including: the coal mine data management system generates the system key using a Lagrange interpolation formula based on the key share transmitted by all management nodes.

[0031] Furthermore, when a data operator requests to manipulate data in the coal mine data management system, all management nodes collaboratively distribute the key share corresponding to the data operator, thereby making the data operator an authorized user node, including:

[0032] The i-th management node starts from the finite field. Choose a random number r i And according to the random number r i Obtain the second intermediate parameter as ;

[0033] The i-th management node starts from the finite field. Choose a random number h i And according to the second intermediate parameter and random number r i Generate key share related parameters sh i For: sh i =k i +h i Q+r i Q; where k i This represents the i-th management node;

[0034] The i-th management node will send the key share related parameters sh i Random number h i and random number r i All data is transmitted to the smart contract, which then transmits the data according to the key share-related parameters sh. i Random number h i and random number r i The key share corresponding to the data operator is:

[0035]

[0036] Where, k new This refers to the key distributed by the data operator, ID. new ID represents a unique identifier for the data operator. m ID represents the unique identifier corresponding to the m-th management node. j This represents the unique identifier corresponding to the j-th management node.

[0037] Furthermore, after all management nodes collaborate to distribute key shares corresponding to data operators, enabling data operators to become authorized user nodes, the process also includes: allowing data operators to join the blockchain to read data on the blockchain; and allowing data operators to participate in the subsequent distribution of key shares to other data operators.

[0038] Furthermore, if a data operator uploads data to the coal mine data management system, the data to be uploaded is encrypted according to the system parameters of the coal mine data management system before uploading, including:

[0039] If a data operator uploads data to the coal mine data management system, the system public key of the coal mine data management system is obtained from the blockchain, and the data to be uploaded is encrypted before being uploaded.

[0040] Furthermore, the data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, including:

[0041] The data operator uses the received N key shares to recover the system key using the Lagrange interpolation formula, and then uses the system key to decrypt the encrypted data to be downloaded.

[0042] On the other hand, the present invention provides a network data security management and control system based on bidirectional transmission, including: a coal mine data management system, a management node, a blockchain, and a data operator;

[0043] The coal mine data management system is used to generate system parameters, manage coal mine data, manage data operators, and encrypt coal mine data before transmitting it to data operators.

[0044] The blockchain is used to publish system parameters, enabling management nodes and authorized data operators to obtain these parameters.

[0045] The management node is used to obtain system parameters from the blockchain, generate an initial key share based on the system parameters, and transmit the initial key share to the coal mine data management system so that the coal mine management system can generate a system key based on the initial key share to encrypt and transmit coal mine data.

[0046] The data operator is used to request authorization from the coal mine data management system and, after obtaining a key share, to conduct bidirectional secure data transmission with the coal mine data management system based on the key share.

[0047] The management node is also used to collaboratively distribute key shares to the data operator when the data operator requests authorization from the coal mine data management system.

[0048] This invention provides a network data security management method and system based on bidirectional transmission. By using a multi-node collaborative key share transmission method, the security of the key transmission process can be greatly increased. Furthermore, with multiple system nodes authorizing newly connected nodes, attacks from malicious nodes can be effectively avoided, increasing the security and redundancy of bidirectional data transmission. Even if one or more key shares are stolen or cracked during data transmission, unauthorized individuals cannot decrypt the data. Attached Figure Description

[0049] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0050] Figure 1 A flowchart of a network data security management method based on bidirectional transmission provided in an embodiment of the present invention.

[0051] Figure 2 This is a block diagram of a network data security management and control system based on bidirectional transmission, provided as an embodiment of the present invention.

[0052] The accompanying drawings have illustrated specific embodiments of the invention, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the invention in any way, but rather to illustrate the concept of the invention to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0053] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the invention as detailed in the appended claims.

[0054] The embodiments of the present invention will now be described in detail with reference to the accompanying drawings.

[0055] like Figure 1 As shown, this embodiment of the invention provides a network data security management method based on bidirectional transmission, including:

[0056] The coal mine data management system initializes system parameters and publishes these parameters on the blockchain; the coal mine data management system has N pre-defined authorized management nodes.

[0057] A coal mine data management system is a complex system used to monitor and manage various data in a coal mine, such as production data, safety data, and personnel information. To ensure data security and effective authentication, the coal mine data management system has multiple management nodes pre-installed, and data security is protected based on these management nodes.

[0058] Each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters. Each management node transmits its corresponding key share to the coal mine data management system through a secure data transmission method.

[0059] The initial coal mine data management system does not have a system key. Key shares are generated by each management node, and the coal mine data management system can construct a system key based on these key shares for system encryption. Since these management nodes do not know the system key, there is no problem of key leakage. The system key can only be recovered after a certain number of key shares are obtained.

[0060] The coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes, and uses the system key to transmit data in subsequent data transmission processes;

[0061] Optionally, a key replacement cycle can be preset. At the end of each key replacement cycle, all management nodes collaboratively generate a system key and simultaneously allocate key shares to authorized user nodes. This effectively ensures the security of the system key and greatly enhances the security of data transmission. User nodes are used to represent data operators.

[0062] When a data operator requests to operate on data in the coal mine data management system, all management nodes collaborate to distribute the key share corresponding to the data operator, so that the data operator becomes an authorized user node.

[0063] If the data operator is an authorized user node, they can directly manipulate the data in the coal mine data management system.

[0064] If a data operator uploads data to the coal mine data management system, the data to be uploaded will be encrypted according to the system parameters of the coal mine data management system before uploading.

[0065] Since the data uploaded by data operators is usually fragmented and small in volume, the data security requirements are also lower. Therefore, the data can be encrypted using the public key of the coal mine data management system before being uploaded to the coal mine data management system to ensure data security.

[0066] If a data operator downloads data from the coal mine data management system, the coal mine data management system encrypts the data to be downloaded using the system key, transmits the encrypted data to the data operator, and randomly assigns N authorized management nodes and user nodes to transmit key shares to the data operator through secure data transmission.

[0067] N authorized management nodes and user nodes refer to N nodes selected from the system nodes and authorized user nodes, where N is the minimum number of nodes required to recover the system key. However, in practical applications, the number of authorized management nodes and user nodes is often greater than N. To further improve redundancy during transmission, the number of nodes transmitting key shares can be greater than N. This way, even if some key shares are lost, the data operator can still recover the system key, thereby achieving data decryption.

[0068] The data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, thus achieving two-way data security control.

[0069] The data in the coal mine data management system is all integrated project data, which has high requirements for data security. When data operators obtain this data, the key distribution method provided by this invention can be used to transmit the system key to the data operator, thereby improving the security of the key transmission process.

[0070] This invention provides a network data security management method based on bidirectional transmission. By using a multi-node collaborative transmission of key shares, the security of key transmission can be greatly increased. Furthermore, with multiple system nodes authorizing newly connected nodes, attacks from malicious nodes can be effectively avoided, increasing the security and redundancy of bidirectional data transmission. Even if one or more key shares are stolen or cracked during data transmission, unauthorized individuals cannot decrypt the data.

[0071] In this embodiment of the invention, initializing system parameters includes:

[0072] Choose an additive group G1 and a multiplicative group G2; where the order of both additive group G1 and multiplicative group G2 is q, and the generator of additive group G1 is P;

[0073] Construct a bilinear mapping e: G1×G2 based on the additive group G1 and the multiplicative group G2;

[0074] In a finite field Select a parameter d from the list, and obtain the public key based on parameter d and generator P to calculate parameter Q = d·P;

[0075] The coal mine data management system generates its own system public key and system private key;

[0076] The additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, the public key computation parameter Q, and the system public key are collectively used as system parameters.

[0077] Since the private key of the coal mine data management system in this invention has not been made public since its generation, theoretically, using the public key to encrypt data is extremely difficult to crack, which can greatly increase the security of data upload.

[0078] Optionally, isolated physical areas can be defined within the coal mine data management system, and the system private key can be stored in these isolated physical areas, accessible only to the coal mine data management system, thereby further enhancing data security.

[0079] In this embodiment of the invention, it further includes:

[0080] Each management node starts from a limited domain Choose a private key d i And obtain the public key from the blockchain to calculate the parameter Q, based on the private key d. i And the public key calculation parameter Q, to determine the public key corresponding to the i-th management node as P. i =d i ·Q;

[0081] Where i = 1, 2, ..., N, each management node has a unique identifier ID. i ,and In this embodiment of the invention, each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters, including:

[0082] Each management node reads the system parameters of the coal mine data management system from the blockchain, obtaining the additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, and the public key calculation parameter Q;

[0083] Each management node generates an N-term polynomial as follows:

[0084] f i (x)=a i0 +a i1 x+a i2 x 2 +...+a i(N-1) x N-1

[0085] Among them, f i (x) represents the polynomial corresponding to the i-th management node, a i0 ai1 a i2 ... a i(N-1) Let x represent N coefficients selected from a finite field, i = 1, 2, ..., N, and N represent the total number of management nodes.

[0086] Each management node, identified by the polynomial and the unique identity of other management nodes, obtains the first key parameter s. i,j =f i (ID j )modq; where s i,j f represents the first key parameter of the i-th management node relative to the j-th management node; i (ID j ) represents the parameter obtained based on the polynomial of the i-th management node and the unique identifier of the j-th management node as the independent variable; mod represents the modulo function, and q represents the order;

[0087] The i-th management node uses the public key P of the j-th management node. j And the first key parameter, obtain the first intermediate parameter as {s i,j P j}, and transmit the first intermediate parameter to the j-th management node; i is not equal to j;

[0088] The j-th management node receives N-1 first intermediate parameters, denoted as {s}. i,j P j}, and calculate the second key parameter s based on the first intermediate parameter and itself. j,j The key share obtained is: ;s m,j This represents the key parameters calculated by the m-th management node for the j-th node.

[0089] In this embodiment of the invention, the coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes, including: the coal mine data management system generates the system key using a Lagrange interpolation formula based on the key share transmitted by all management nodes.

[0090] Lagrange interpolation is a mathematical algorithm used for interpolation that finds a polynomial function. It is often used in the Shamir secret sharing scheme. Therefore, this invention draws on the Shamir secret sharing scheme and the multi-node collaboration method to improve the security of data transmission.

[0091] In this embodiment of the invention, when a data operator requests to operate on data in the coal mine data management system, all management nodes collaboratively distribute the key share corresponding to the data operator, so that the data operator becomes an authorized user node, including:

[0092] The i-th management node starts from the finite field. Choose a random number r i And according to the random number r i Obtain the second intermediate parameter as ;

[0093] The i-th management node starts from the finite field. Choose a random number h i And according to the second intermediate parameter and random number r i Generate key share related parameters sh i For: sh i =k i +h i Q+r i Q; where k i This represents the i-th management node;

[0094] The i-th management node will send the key share related parameters sh i Random number h i and random number r i All data is transmitted to the smart contract, which then transmits the data according to the key share-related parameters sh. i Random number h i and random number r i The key share corresponding to the data operator is:

[0095]

[0096] Where, k new This refers to the key distributed by the data operator, ID. new ID represents a unique identifier for the data operator. m ID represents the unique identifier corresponding to the m-th management node. j This represents the unique identifier corresponding to the j-th management node. The smart contract is deployed in the coal mine data management system.

[0097] If a data operator downloads data from the coal mine data management system, the system encrypts the data using its system key before transmitting the encrypted data to the data operator. The system also randomly assigns N authorized management and user nodes to transmit key shares to the data operator via secure data transmission, which may include:

[0098] If a data operator downloads data from the coal mine data management system, the coal mine data management system will encrypt the data to be downloaded using the system key before transmitting the encrypted data to the data operator.

[0099] N authorized management nodes and user nodes are randomly assigned. These N authorized management nodes and user nodes encrypt the key share using the public key published by the data operator and then transmit it to the data operator. The data operator can then decrypt the data using its own private key.

[0100] It is worth noting that, in order to ensure the security of the private key, after calculating the key share, each node can regenerate the public and private keys according to its own algorithm, thereby ensuring that the private key is held only by itself.

[0101] In this embodiment of the invention, after all management nodes collaboratively distribute key shares corresponding to data operators so that the data operators become authorized user nodes, the method further includes: allowing data operators to join the blockchain to read data on the blockchain; and allowing data operators to participate in the subsequent distribution of key shares to other data operators.

[0102] Once a data operator becomes an authorized node, it can transfer key shares to other data operators when they subsequently acquire data, thus forming a variable key distribution system.

[0103] In this embodiment of the invention, if a data operator uploads data to a coal mine data management system, the data to be uploaded is encrypted according to the system parameters of the coal mine data management system before being uploaded, including:

[0104] If a data operator uploads data to the coal mine data management system, the system public key of the coal mine data management system is obtained from the blockchain, and the data to be uploaded is encrypted before being uploaded.

[0105] In this embodiment of the invention, the data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, including:

[0106] The data operator uses the received N key shares to recover the system key using the Lagrange interpolation formula, and then uses the system key to decrypt the encrypted data to be downloaded.

[0107] like Figure 2 As shown, this embodiment of the invention provides a network data security management and control system based on bidirectional transmission, including: a coal mine data management system, a management node, a blockchain, and a data operator;

[0108] The coal mine data management system is used to generate system parameters, manage coal mine data, manage data operators, and encrypt coal mine data before transmitting it to data operators.

[0109] The blockchain is used to publish system parameters, enabling management nodes and authorized data operators to obtain these parameters.

[0110] The management node is used to obtain system parameters from the blockchain, generate an initial key share based on the system parameters, and transmit the initial key share to the coal mine data management system so that the coal mine management system can generate a system key based on the initial key share to encrypt and transmit coal mine data.

[0111] The data operator is used to request authorization from the coal mine data management system and, after obtaining a key share, to conduct bidirectional secure data transmission with the coal mine data management system based on the key share.

[0112] The management node is also used to collaboratively distribute key shares to the data operator when the data operator requests authorization from the coal mine data management system.

[0113] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The solutions in the embodiments of the present invention can be implemented using various computer languages, such as the object-oriented programming language Java and the interpreted scripting language JavaScript.

[0114] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0115] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0116] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0117] Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and all changes and modifications falling within the scope of the invention.

[0118] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. A network data security management and control method based on bidirectional transmission, characterized in that, include: The coal mine data management system initializes system parameters and publishes these parameters on the blockchain; the coal mine data management system has N pre-defined authorized management nodes. Each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters. Each management node transmits its corresponding key share to the coal mine data management system through a secure data transmission method. The coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes, and uses the system key to transmit data in subsequent data transmission processes; When a data operator requests to operate on data in the coal mine data management system, all management nodes collaborate to distribute the key share corresponding to the data operator, so that the data operator becomes an authorized user node. If a data operator uploads data to the coal mine data management system, the data to be uploaded is encrypted according to the system parameters of the coal mine data management system before uploading, including: obtaining the system public key of the coal mine data management system from the blockchain before encrypting the data to be uploaded; If a data operator downloads data from a coal mine data management system, the coal mine data management system encrypts the data to be downloaded using a system key, transmits the encrypted data to the data operator, and randomly assigns N authorized management nodes and user nodes to transmit key shares to the data operator through secure data transmission. The data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, thus achieving two-way data security control.

2. The network data security management method based on bidirectional transmission according to claim 1, characterized in that, Initialize system parameters, including: Choose an additive group G1 and a multiplicative group G2; where the order of both additive group G1 and multiplicative group G2 is q, and the generator of additive group G1 is P; Construct a bilinear mapping e: G1×G2 based on the additive group G1 and the multiplicative group G2; In a finite field Select a parameter d from the list, and obtain the public key based on parameter d and generator P to calculate parameter Q = d·P; The coal mine data management system generates its own system public key and system private key; The additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, the public key computation parameter Q, and the system public key are collectively used as system parameters.

3. The network data security management method based on bidirectional transmission according to claim 2, characterized in that, Also includes: Each management node starts from a limited domain Choose a private key d i And obtain the public key from the blockchain to calculate the parameter Q, based on the private key d. i And the public key calculation parameter Q, to determine the public key P corresponding to the i-th management node. i =d i ·Q; Where i = 1, 2, ..., N, each management node has a unique identifier ID. i ,and .

4. The network data security management method based on bidirectional transmission according to claim 3, characterized in that, Each management node reads the system parameters of the coal mine data management system from the blockchain and generates a corresponding key share based on the read system parameters, including: Each management node reads the system parameters of the coal mine data management system from the blockchain, obtaining the additive group G1, the multiplicative group G2, the order q, the bilinear mapping e, the generator P, and the public key calculation parameter Q; Each management node generates an N-term polynomial as follows: f i (x)=a i0 +a i1 x+a i2 x 2 +...+a i(N-1) x N-1 Among them, f i (x) represents the polynomial corresponding to the i-th management node, a i0 a i1 a i2 ... a i(N-1) Represent N from a finite field The selected coefficients, x represents the independent variable, i = 1, 2, ..., N, and N represents the total number of management nodes; Each management node, identified by the polynomial and the unique identity of other management nodes, obtains the first key parameter s. i,j =f i (ID j )modq; where s i,j f represents the first key parameter of the i-th management node relative to the j-th management node; i (ID j ) represents the parameter obtained based on the polynomial of the i-th management node and the unique identifier of the j-th management node as the independent variable; mod represents the modulo function, and q represents the order; The i-th management node uses the public key P of the j-th management node. j And the first key parameter, obtain the first intermediate parameter as {s i,j P j }, and transmit the first intermediate parameter to the j-th management node; i is not equal to j; The j-th management node receives N-1 first intermediate parameters, denoted as {s}. i,j P j }, and calculate the second key parameter s based on the first intermediate parameter and itself. j,j The key share obtained is: ;s m,j This represents the key parameters calculated by the m-th management node for the j-th node.

5. The network data security management method based on bidirectional transmission according to claim 4, characterized in that, The coal mine data management system generates a system key for data encryption based on the key share transmitted by all management nodes. This includes: the coal mine data management system generates the system key using a Lagrange interpolation formula based on the key share transmitted by all management nodes.

6. The network data security management method based on bidirectional transmission according to claim 5, characterized in that, When a data operator requests to manipulate data in the coal mine data management system, all management nodes collaborate to distribute the corresponding key share to the data operator, thus making the data operator an authorized user node, including: The i-th management node starts from the finite field. Choose a random number r i And according to the random number r i Obtain the second intermediate parameter as ; The i-th management node starts from the finite field. Choose a random number h i And based on the random number r i Generate key share related parameters sh i For: sh i =k i +h i Q+r i Q; where k i This represents the key share of the i-th management node; The i-th management node will send the key share related parameters sh i Random number h i and random number r i All data is transmitted to the smart contract, which then transmits the data according to the key share-related parameters sh. i Random number h i and random number r i The key share corresponding to the data operator is: Where, k new This refers to the key distributed by the data operator, ID. new ID represents a unique identifier for the data operator. m ID represents the unique identifier corresponding to the m-th management node. j This represents the unique identifier corresponding to the j-th management node.

7. The network data security management method based on bidirectional transmission according to claim 6, characterized in that, After all management nodes collaborate to distribute key shares to data operators so that the data operators become authorized user nodes, the process also includes: allowing data operators to join the blockchain to read data on the blockchain; and allowing data operators to participate in the subsequent distribution of key shares to other data operators.

8. The network data security management method based on bidirectional transmission according to claim 7, characterized in that, The data operator recovers the system key based on the received N key shares, and uses the system key to decrypt the encrypted data to be downloaded, including: The data operator uses the received N key shares to recover the system key using the Lagrange interpolation formula, and then uses the system key to decrypt the encrypted data to be downloaded.

9. A network data security management and control system based on bidirectional transmission, characterized in that, include: Coal mine data management system, management nodes, blockchain, and data operators; The coal mine data management system is used to generate system parameters, manage coal mine data, manage data operators, and encrypt coal mine data before transmitting it to data operators. The blockchain is used to publish system parameters, enabling management nodes and authorized data operators to obtain these parameters. The management node is used to obtain system parameters from the blockchain, generate an initial key share based on the system parameters, and transmit the initial key share to the coal mine data management system so that the coal mine management system can generate a system key based on the initial key share to encrypt and transmit coal mine data. The data operator is used to request authorization from the coal mine data management system and, after obtaining a key share, to conduct bidirectional secure data transmission with the coal mine data management system based on the key share. When the data operator requests to operate on data in the coal mine data management system, all management nodes cooperate to distribute the key share corresponding to the data operator, making the data operator an authorized user node. If the data operator downloads data from the coal mine data management system, the coal mine data management system encrypts the data to be downloaded using its system key, transmits the encrypted data to the data operator, and randomly assigns N authorized management nodes and user nodes to transmit the key share to the data operator through secure data transmission. If the data operator uploads data to the coal mine data management system, it obtains the system public key of the coal mine data management system from the blockchain, encrypts the data to be uploaded, and then uploads it. The management node is also used to collaboratively distribute key shares to the data operator when the data operator requests authorization from the coal mine data management system.

Images