Data integrity verification method and system based on label embedding and homomorphic encryption

Abstract

The invention discloses a data integrity verification method and system based on label embedding and homomorphic encryption. The method comprises the following steps: constructing a multi-dimensional authorization label for power internet of things data; according to a homomorphic encryption algorithm, performing encryption processing on the power Internet of Things data and the multi-dimensional authorization tag to generate a first ciphertext; calculating a chained hash fingerprint value of the ciphertext and the multi-dimensional authorization tag; packaging the first ciphertext, the multi-dimensional authorization tag and the fingerprint to generate a first data packet, and sending the first data packet to a receiver through a transport layer protocol; the receiver performs legality verification on the authorization label according to the local strategy set; if the verification is passed, recalculating the hash fingerprint and comparing the hash fingerprint with the original hash fingerprint; and if yes, determining that the electric power Internet of Things data is not tampered and belongs to integrity data. According to the method, data integrity verification and access control can be completed in an encryption state, the privacy protection capability is improved, and the decryption exposure risk is reduced.

Description

Technical Field

[0001] The present invention belongs to the technical field of power Internet of Things data processing, and in particular relates to a data integrity verification method and system based on tag embedding and homomorphic encryption. Background Art

[0002] The power industry is a typical IoT application area, with numerous sensors, smart meters, and other monitoring devices distributed across the power grid. These devices continuously generate vast amounts of data, which is crucial for the operation, maintenance, and optimization of the grid. Power data has several notable characteristics: real-time, diverse, and sensitive.

[0003] Since power data is distributed across different device nodes, this poses challenges to data management and sharing. Power data from different regions or departments is often stored in independent systems, forming data silos, which makes data integration and sharing difficult. The security of power data is particularly important, especially during data transmission, to ensure that data is not illegally intercepted or tampered with. The power industry involves multiple different organizations and departments, such as power generation companies, transmission companies, distribution companies, and regulatory authorities, which need to share data to work collaboratively.

[0004] Existing data management has some shortcomings in addressing the above challenges: although traditional encryption technology can protect data security, when data needs to be frequently calculated and verified, the decryption and re-encryption process consumes a lot of computing resources, affecting the efficiency of data processing; traditional data integrity verification methods usually require data to be in plaintext, which is difficult to achieve when data is encrypted and transmitted. Summary of the Invention

[0005] The present invention provides a data integrity verification method and system based on tag embedding and homomorphic encryption, which is used to solve the problem in the prior art that data encryption and integrity verification are independent of each other and chain-type and traceable data integrity verification cannot be achieved in the ciphertext state.

[0006] In a first aspect, the present invention provides a data integrity verification method based on tag embedding and homomorphic encryption, comprising: Acquire power IoT data and build multi-dimensional authorization tags for the power IoT data; The power Internet of Things data is encrypted using a homomorphic encryption algorithm and a disturbance factor generated by a multi-dimensional authorization tag is embedded to obtain the first ciphertext. Calculate a chained hash fingerprint value based on the first ciphertext, the corresponding multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain a first hash fingerprint; Combining and packaging the first ciphertext, the multidimensional authorization tag, and the first hash fingerprint to obtain a first data packet, and transmitting the first data packet to a receiver according to a transport layer protocol; After receiving the first data packet, the receiver verifies the legitimacy of the multi-dimensional authorization tag according to a local preset authorization policy set to determine whether the power Internet of Things data falls within the authorization scope; If the verification is successful, the receiver recalculates the hash value of the current data packet using a hash function to obtain a second hash fingerprint, and determines whether the second hash fingerprint is consistent with the first hash fingerprint included in the first data packet; If they are consistent, it is determined that the power Internet of Things data has not been tampered with during transmission and is integrity data.

[0007] In a second aspect, the present invention provides a data integrity verification system based on tag embedding and homomorphic encryption, comprising: an authorization tag building module, configured to obtain power Internet of Things data and generate a multi-dimensional authorization tag for the power Internet of Things data, including a data source identifier, a timestamp, a key hash, and a regional authorization code; An encryption module is configured to encrypt the power Internet of Things data according to a tag embedding and homomorphic encryption algorithm, and embed a disturbance factor generated by the multi-dimensional authorization tag to obtain a first ciphertext; a fingerprint generation module configured to calculate a chained hash fingerprint value based on the first ciphertext, the multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain a first hash fingerprint; a packaging module configured to combine and package the first ciphertext, the multi-dimensional authorization tag, and the first hash fingerprint to form a first data packet, and transmit the first data packet to a receiver according to a transport layer protocol; a tag verification module, configured for the receiver to verify the multi-dimensional authorization tag in the first data packet according to a locally preset tag mapping strategy set, and determine whether the power Internet of Things data belongs to an authorized access object; a fingerprint comparison module configured to, on the premise that the tag verification is passed, use a hash function to combine the first ciphertext in the first data packet and the multi-dimensional authorization tag to calculate a second hash fingerprint, and compare it with the first hash fingerprint in the first data packet; The determination module is configured to determine that if the second hash fingerprint is consistent with the first hash fingerprint, the power Internet of Things data has not been tampered with during transmission and is integrity data, and allow the recipient to perform data decryption processing.

[0008] According to a third aspect, an electronic device is provided, comprising: at least one processor, and a memory communicatively connected to the at least one processor, wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can perform the steps of the data integrity verification method based on tag embedding and homomorphic encryption.

[0009] In a fourth aspect, the present invention also provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the processor executes the steps of the data integrity verification method based on label embedding and homomorphic encryption.

[0010] The present invention realizes the direct processing and verification of power Internet of Things data in an encrypted state by introducing label embedding and homomorphic encryption technology, so that the data is always under encryption protection during the entire transmission and storage process, effectively reducing the risk of data leakage and significantly improving the level of data privacy and security. Compared with the traditional method that requires the ciphertext to be decrypted before verification, the present invention uses a self-constructed multi-dimensional authorization tag to embed it into the homomorphic encryption process, so that the encrypted data itself has verifiability, avoiding the security risks caused by decryption exposure. In addition, the present invention constructs a chain hash fingerprint value mechanism, which cooperates with the multi-dimensional authorization tag in the data packet to realize data integrity verification in the ciphertext state. This mechanism enables the recipient to determine whether the data has been tampered with or forged during the transmission process without decrypting the data content, thereby ensuring the authenticity and integrity of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following is a brief introduction to the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0012] Figure 1 A flowchart of a data integrity verification method based on tag embedding and homomorphic encryption provided by the present invention; Figure 2 A structural block diagram of a data integrity verification system based on tag embedding and homomorphic encryption provided by the present invention; Figure 3 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0013] To make the objectives, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0014] See also Figure 1 , which shows a flowchart of a data integrity verification method based on label embedding and homomorphic encryption of the present application.

[0015] Step S101: Obtain power IoT data and construct a multidimensional authorization tag for the power IoT data. The multidimensional authorization tag (MDAT) includes the following fields: data source identifier (SID), timestamp (T), hash value of the key identifier (H(K)), and region authorization code (RCode). The multidimensional authorization tag is bound to the data to be encrypted as a data identity and permission description. The multidimensional authorization tag is defined as: ; where the operator Indicates concatenation of fields. is the data source identifier of the i-th data block, is the timestamp of the i-th data block, is the key identifier of the i-th data block, is a cryptographic hash function, is the regional authorization code of the i-th data block.

[0016] Step S102: Encrypt the power Internet of Things data according to the homomorphic encryption algorithm and embed the disturbance factor generated by the multi-dimensional authorization tag to obtain the first ciphertext .

[0017] In this step, a first prime number p and a second prime number q are selected, and a first modulus n=pq is calculated based on the first prime number p and the second prime number q; Choose an integer first part of the public key , and generate the first public key (n, g); Calculate the first part of the private key , generate a first private key (λ, μ) based on the first part of the private key, where μ is the multiplicative inverse of λ with respect to the first modulus n, i.e., satisfies λ · μ ≡ 1 (mod n), where λ and the modulus n are coprime, i.e., gcd(λ, n) = 1, and μ can be calculated using the extended Euclidean algorithm, where lcm is the least common multiple; Let m be the plaintext data block, i.e., the power IoT data, the multi-dimensional authorization tag be MDAT, and the random number r < n. The first ciphertext generation expression is: ; Among them, g is the public key, m is the plaintext data block, and r is a random integer that satisfies 1 <r<n, To map the multi-dimensional authorization label to the function of the perturbation factor, we define it as follows: ; in, is the multi-dimensional authorization label of the i-th data block, is the cryptographic hash function, k is the perturbation exponent, and n is the modulus used in the homomorphic encryption algorithm.

[0018] Step S103: Calculate the chained hash fingerprint value based on the first ciphertext, the corresponding multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain the first hash fingerprint for data integrity verification. The calculation formula is: ; in, is the multi-dimensional authorization label of the i-th data block, is the chain hash fingerprint value of the i-th data block, is the chain hash fingerprint value of the i-1th data block, i is a positive integer, is a cryptographic hash function; When i=1, the chain hash fingerprint value of the first data block Equal to the initial chain hash fingerprint value, the calculation formula of the initial chain hash fingerprint value is: ; in, is the initial chain hash fingerprint value, It is the initial multi-dimensional authorization label, and Salt is a preset random seed used to initialize the hash chain.

[0019] Step S104: Combine and package the first ciphertext, the multi-dimensional authorization tag, and the first hash fingerprint to obtain a first data packet, and transmit the power Internet of Things data packet to a receiver according to a transport layer protocol.

[0020] Step S105: the receiver verifies the validity of the multi-dimensional authorization tag according to a local preset authorization policy set. If the multi-dimensional authorization tag is invalid, the receiver refuses to receive the data packet and terminates the verification process.

[0021] Step S106: If the multidimensional authorization tag is valid, the hash value of the ciphertext in the data packet and the multidimensional authorization tag is recalculated using the same hash function as the sender to obtain a second hash fingerprint, and the second hash fingerprint is compared with the first hash fingerprint carried in the data packet to see whether they are consistent.

[0022] Step S107: If the second hash fingerprint is consistent with the first hash fingerprint, the power Internet of Things data is determined to be integrity data and subsequent decryption operations are allowed to be performed; otherwise, it is determined that the data has been tampered with during transmission and is marked as non-integrity data.

[0023] See also Figure 2 , which shows a data integrity verification system based on label embedding and homomorphic encryption of the present application, including an authorization label construction module 210, an encryption module 220, a fingerprint generation module 230, a packaging module 240, a label verification module 250, a fingerprint comparison module 260 and a determination module 270.

[0024] The authorization tag construction module 210 is configured to obtain the power Internet of Things data and generate a multi-dimensional authorization tag for the power Internet of Things data, which includes a data source identifier, a timestamp, a key hash, and a regional authorization code; The encryption module 220 is configured to encrypt the power Internet of Things data according to the tag embedding and homomorphic encryption algorithm, and embed the perturbation factor generated by the multi-dimensional authorization tag to obtain a first ciphertext; The fingerprint generation module 230 is configured to calculate a chained hash fingerprint value based on the first ciphertext, the multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain a first hash fingerprint; a packaging module 240 configured to combine and package the first ciphertext, the multi-dimensional authorization tag, and the first hash fingerprint to form a first data packet, and transmit the first data packet to a recipient according to a transport layer protocol, wherein the first data packet includes the first ciphertext, the multi-dimensional authorization tag, and the chained hash fingerprint value; The tag verification module 250 is configured to verify the multi-dimensional authorization tag in the first data packet according to a locally preset tag mapping strategy set by the receiver to determine whether the power Internet of Things data belongs to the authorized access object; The fingerprint comparison module 260 is configured to, on the premise that the tag verification is passed, use the same hash function to combine the first ciphertext in the first data packet and the multi-dimensional authorization tag to calculate a second hash fingerprint, and compare it with the first hash fingerprint in the first data packet; The determination module 270 is configured to determine that the power Internet of Things data has not been tampered with during transmission and is integrity data if the second hash fingerprint is consistent with the first hash fingerprint, and allow the recipient to perform data decryption processing.

[0025] It should be understood that Figure 2 The modules and references in Figure 1 Therefore, the operations and features described above for the method and the corresponding technical effects also apply to Figure 2 The modules in it will not be described in detail here.

[0026] In other embodiments, embodiments of the present invention further provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, causes the processor to execute the data integrity verification method based on tag embedding and homomorphic encryption in any of the above method embodiments; As an embodiment, the computer-readable storage medium of the present invention stores computer-executable instructions, and the computer-executable instructions are configured as follows: Obtain power IoT data and construct a multi-dimensional authorization tag for the power IoT data, including fields such as data source identifier, timestamp, key hash, and regional authorization code; Encrypting the power Internet of Things data according to a homomorphic encryption algorithm to generate a first ciphertext, in which corresponding authorization tag information is embedded; Calculating an integrity hash value of the current data block based on the first ciphertext, the multi-dimensional authorization tag, and the chained hash fingerprint value of the previous data block to generate a chained hash fingerprint value to obtain a first hash fingerprint; Combining and packaging the first ciphertext, the multi-dimensional authorization tag, and the first hash fingerprint to generate a first data packet, and transmitting the first data packet to a receiver according to a transport layer protocol; After receiving the data packet, the receiver verifies the mapping of the multi-dimensional authorization tag according to the local authorization policy set to determine whether the data belongs to a legally authorized source; If the verification is successful, the receiver recalculates the hash fingerprint of the power IoT data packet and compares it with the received fingerprint value to verify whether the data has been tampered with during transmission; If the comparison results are consistent, the power Internet of Things data is determined to be integrity data that has not been tampered with, and the decryption operation is allowed; otherwise, it is marked as incomplete and access is denied.

[0027] The computer-readable storage medium may include a program storage area and a data storage area, wherein the program storage area may store an operating system and application programs required for at least one function; the data storage area may store data created based on the use of a data integrity verification system based on tag embedding and homomorphic encryption, etc. In addition, the computer-readable storage medium may include a high-speed random access memory, and may also include a memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the computer-readable storage medium may optionally include a memory remotely located relative to the processor, and these remote memories may be connected to the data integrity verification system based on tag embedding and homomorphic encryption via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0028] Figure 3 Schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. Figure 3 As shown, the electronic device includes: a processor 310 and a memory 320. The electronic device may also include: an input device 330 and an output device 340. The processor 310, the memory 320, the input device 330 and the output device 340 may be connected via a bus or other means. Figure 3 The example of the connection via bus is taken. The memory 320 is the computer-readable storage medium mentioned above. The processor 310 executes various functional applications and data processing of the server by running the non-volatile software programs, instructions and modules stored in the memory 320, that is, implements the data integrity verification method based on tag embedding and homomorphic encryption of the above method embodiment. The input device 330 can receive input digital or character information, and generate key signal input related to user settings and function control of the data integrity verification system based on tag embedding and homomorphic encryption. The output device 340 may include a display device such as a display screen.

[0029] The electronic device can execute the method provided by the embodiment of the present invention, and has the functional modules and beneficial effects corresponding to the execution method. For technical details not fully described in this embodiment, please refer to the method provided by the embodiment of the present invention.

[0030] Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented using software plus a necessary general-purpose hardware platform, or of course, hardware. Based on this understanding, the essence of the above technical solution, or the portion that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, or an optical disk, and includes a number of instructions for causing a computer device (such as a personal computer, server, or network device) to execute the methods of each embodiment or certain portions of the embodiments.

[0031] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A data integrity verification method based on label embedding and homomorphic encryption, characterized in that: include: Acquire power IoT data and build multi-dimensional authorization tags for the power IoT data; The power Internet of Things data is encrypted using a homomorphic encryption algorithm and a disturbance factor generated by a multi-dimensional authorization tag is embedded to obtain the first ciphertext. Calculate a chained hash fingerprint value based on the first ciphertext, the corresponding multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain a first hash fingerprint; Combining and packaging the first ciphertext, the multidimensional authorization tag, and the first hash fingerprint to obtain a first data packet, and transmitting the first data packet to a receiver according to a transport layer protocol; After receiving the first data packet, the receiver verifies the legitimacy of the multi-dimensional authorization tag according to a local preset authorization policy set to determine whether the power Internet of Things data falls within the authorization scope; If the verification is successful, the receiver recalculates the hash value of the current data packet using a hash function to obtain a second hash fingerprint, and determines whether the second hash fingerprint is consistent with the first hash fingerprint included in the first data packet; If they are consistent, it is determined that the power Internet of Things data has not been tampered with during transmission and is integrity data.

2. The data integrity verification method according to claim 1, characterized in that: The multi-dimensional authorization tag is defined as: ； in, is the multi-dimensional authorization label of the i-th data block, operator Indicates concatenation of fields. is the data source identifier of the i-th data block, is the timestamp of the i-th data block, is the key identifier of the i-th data block, is a cryptographic hash function, is the regional authorization code of the i-th data block.

3. The data integrity verification method according to claim 1, wherein: The first ciphertext generation expression is: ； Among them, is the first ciphertext, g is the public key, m is the plaintext data block, that is, the power Internet of Things data; r is a random integer satisfying 1 < r < n, n is the modulus used in the homomorphic encryption algorithm, and MDAT is the multi-dimensional authorization tag. is a function that maps the multi-dimensional authorization tag to a perturbation factor, and is defined as follows: ； in, is the multi-dimensional authorization label of the i-th data block, is a cryptographic hash function, and k is a perturbation exponent.

4. The data integrity verification method according to claim 1, wherein: The chain hash fingerprint value calculation formula is: ； in, is the multi-dimensional authorization label of the i-th data block, is the chain hash fingerprint value of the i-th data block, is the chain hash fingerprint value of the i-1th data block, i is a positive integer, is a cryptographic hash function; When i=1, the chain hash fingerprint value of the first data block Equal to the initial chain hash fingerprint value, the calculation formula of the initial chain hash fingerprint value is: ； in, is the initial chain hash fingerprint value, is the initial multi-dimensional authorization label, and Salt is the preset random seed.

5. A data integrity verification system based on tag embedding and homomorphic encryption, characterized in that: include: an authorization tag building module, configured to obtain power Internet of Things data and generate a multi-dimensional authorization tag for the power Internet of Things data, including a data source identifier, a timestamp, a key hash, and a regional authorization code; An encryption module is configured to encrypt the power Internet of Things data according to a tag embedding and homomorphic encryption algorithm, and embed a disturbance factor generated by the multi-dimensional authorization tag to obtain a first ciphertext; a fingerprint generation module configured to calculate a chained hash fingerprint value based on the first ciphertext, the multi-dimensional authorization tag, and the hash fingerprint of the previous data block to obtain a first hash fingerprint; a packaging module configured to combine and package the first ciphertext, the multi-dimensional authorization tag, and the first hash fingerprint to form a first data packet, and transmit the first data packet to a receiver according to a transport layer protocol; a tag verification module, configured for the receiver to verify the multi-dimensional authorization tag in the first data packet according to a locally preset tag mapping strategy set, and determine whether the power Internet of Things data belongs to an authorized access object; a fingerprint comparison module configured to, on the premise that the tag verification is passed, use a hash function to combine the first ciphertext in the first data packet and the multi-dimensional authorization tag to calculate a second hash fingerprint, and compare it with the first hash fingerprint in the first data packet; The determination module is configured to determine that if the second hash fingerprint is consistent with the first hash fingerprint, the power Internet of Things data has not been tampered with during transmission and is integrity data, and allow the recipient to perform data decryption processing.

6. The data integrity verification system according to claim 5, characterized in that: The multi-dimensional authorization tag is defined as: in, is the multi-dimensional authorization label of the i-th data block, operator Indicates concatenation of fields. is the data source identifier of the i-th data block, is the timestamp of the i-th data block, is the key identifier of the i-th data block, is a cryptographic hash function, is the regional authorization code of the i-th data block.

7. The data integrity verification system according to claim 5, characterized in that: The first ciphertext generation expression is: ； Wherein, is the first ciphertext, g is the public key, m is the plaintext data block, i.e., the power Internet of Things data; r is a random integer satisfying 1 < r < n, n is the modulus used in the homomorphic encryption algorithm, and MDAT is the multi-dimensional authorization tag. is a function that maps the multi-dimensional authorization tag to a perturbation factor, and is defined as follows: ； in, is the multi-dimensional authorization label of the i-th data block, is a cryptographic hash function, and k is a perturbation exponent.

8. The data integrity verification system according to claim 5, characterized in that: The chain hash fingerprint value calculation formula is: ； in, is the multi-dimensional authorization label of the i-th data block, is the chain hash fingerprint value of the i-th data block, is the chain hash fingerprint value of the i-1th data block, i is a positive integer, is a cryptographic hash function; When i=1, the chain hash fingerprint value of the first data block Equal to the initial chain hash fingerprint value, the calculation formula of the initial chain hash fingerprint value is: ； in, is the initial chain hash fingerprint value, is the initial multi-dimensional authorization label, and Salt is the preset random seed.

9. An electronic device comprising: At least one processor, and a memory communicatively connected to the at least one processor, wherein the memory stores instructions executable by the at least one processor, characterized in that the instructions are executed by the at least one processor so as to enable the at least one processor to perform the steps of the data integrity verification method based on tag embedding and homomorphic encryption according to claim 1.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the processor is caused to perform the steps of the data integrity verification method based on tag embedding and homomorphic encryption according to claim 1.

Images