Password security measurement uncertainty evaluation method, device and equipment and storage medium

Abstract

The application discloses a cryptographic security measurement uncertainty evaluation method, device, equipment and storage medium, relates to the cryptographic security technical field, and discloses a cryptographic security measurement uncertainty evaluation method, which comprises determining the security evaluation item of a to-be-tested cryptographic product; establishing a security measurement model; the output value of the security measurement model is a security quantization value, and the output value of the security measurement model is determined based on the sum of input parameters of the security measurement model; determining the input parameters based on the measurement uncertainty of the cryptographic operation component of the to-be-tested cryptographic product under each security evaluation item; determining the weight of each input parameter of the security measurement model, filling the input parameters into the security measurement model, and obtaining the security quantization value of the to-be-tested cryptographic product as the cryptographic security measurement uncertainty evaluation result of the to-be-tested cryptographic product. The application has the technical effect of improving the comparability of the cryptographic security measurement uncertainty evaluation result.

Description

Technical Field

[0001] This application relates to the field of cryptographic security technology, and in particular to methods, apparatus, equipment and storage media for evaluating cryptographic security measurement uncertainty. Background Technology

[0002] With the increasing demands for network security and data security, cryptographic technology has become a core means of ensuring the secure operation of information systems. According to legal and regulatory requirements, cryptographic products used in critical application scenarios must undergo security testing to prove their security.

[0003] Currently, cryptographic security testing primarily focuses on qualitative analysis, determining whether a product meets relevant security standards and only outputting a "qualified" or "unqualified" conclusion. It fails to provide a quantitative assessment of cryptographic security or reflect the security and reliability of cryptography under specific conditions. This qualitative output of existing cryptographic security testing methods prevents a quantitative evaluation of cryptographic security, leading to situations where security cannot be guaranteed during cryptographic production and procurement, resulting in a loss of trust in the industry chain. Therefore, there is an urgent need for a measurement method that can quantitatively assess cryptographic security and provide reliability indicators to compensate for the shortcomings of existing testing methods. Summary of the Invention

[0004] The main objective of this application is to provide a method, apparatus, device, and storage medium for evaluating the uncertainty of cryptographic security measurement, aiming to solve the technical problem that related technologies cannot achieve quantitative evaluation of cryptographic security.

[0005] To achieve the above objectives, this application proposes a method for evaluating the uncertainty of cryptographic security measurements, the method comprising:

[0006] Determine the security evaluation items for the cryptographic product to be tested;

[0007] Establish a safety measurement model; the output value of the safety measurement model is a quantified safety value, which is determined based on the sum of the input parameters of the safety measurement model.

[0008] The input parameters are determined based on the measurement uncertainty of the cryptographic operation component of the cryptographic product under test under various security evaluation items.

[0009] The weights of each input parameter in the security measurement model are determined, and the input parameters are filled into the security measurement model to obtain the security quantification value of the cryptographic product under test as the evaluation result of the cryptographic security measurement uncertainty of the cryptographic product under test.

[0010] In one embodiment, the step of determining input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product under test under various security evaluation items includes:

[0011] Based on the functional and specification information of the cryptographic product, determine the cryptographic operation components of the cryptographic product;

[0012] Under each security evaluation item, taking the direct output of quantifiable uncertainty values ​​as a condition, and based on the type of cryptographic operation component, the uncertainty calculation algorithm of the cryptographic operation component is determined, and the measurement uncertainty of the cryptographic operation component under each security evaluation item is obtained.

[0013] For each safety assessment item, the input parameters corresponding to the safety assessment item are determined based on the number of measurement uncertainties under the safety assessment item and the sum of all measurement uncertainties.

[0014] In one embodiment, the types of cryptographic operation components include repeatable cryptographic operation components and non-repeatable cryptographic operation components.

[0015] In one embodiment, the steps of determining the uncertainty calculation algorithm for the cryptographic operation component based on its type, and obtaining the measurement uncertainty of the cryptographic operation component under each security evaluation item, include:

[0016] If the cryptographic operation unit is a repeatable cryptographic operation unit, then determine whether it has an uncertainty calculation algorithm;

[0017] If the cryptographic operation unit has an uncertainty calculation algorithm, then the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation unit;

[0018] If the cryptographic operation component does not have an uncertainty calculation algorithm, the cryptographic operation component will be repeatedly measured under the corresponding security evaluation item, and the standard compliance rate of the cryptographic operation component will be calculated. The standard compliance rate is positively correlated with the number of times the measurement does not meet the standard.

[0019] The measurement uncertainty of the cryptographic operation component is determined based on the standard compliance rate; the standard compliance rate is positively correlated with the measurement uncertainty.

[0020] In one embodiment, the steps of determining the uncertainty calculation algorithm for the cryptographic operation component based on its type, and obtaining the measurement uncertainty of the cryptographic operation component under each security evaluation item, include:

[0021] If the cryptographic operation unit is a non-repeatable cryptographic operation unit, then determine whether it has an uncertainty calculation algorithm;

[0022] If the cryptographic operation unit has an uncertainty calculation algorithm, then the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation unit;

[0023] If the cryptographic operation component does not have an uncertainty calculation algorithm, then measure all cryptographic operation components that do not have an uncertainty calculation algorithm and cannot be repeatedly tested under the corresponding security evaluation item, and determine the number of cryptographic operation components that failed the test.

[0024] The measurement uncertainty of a cryptographic operation component is determined based on the number of failed tests; the measurement uncertainty is negatively correlated with the number of failed tests.

[0025] In one embodiment, after obtaining the measurement uncertainty of the cryptographic operation component under each security evaluation item, the method further includes:

[0026] Cryptographic operation components that use the same uncertainty calculation algorithm are grouped into one category;

[0027] For each type of cryptographic operation component, the input parameters are determined based on the number of all measurement uncertainties and the sum of all measurement uncertainties.

[0028] In one embodiment, the security measurement model is represented in the following ways:

[0029]

[0030] in, ω 1. ω 2 and ω 3 is the input parameter f( C i The weight of ) i ∈(1,2,3), ω 1+ ω 2+ ω 3 = 1;

[0031] For input parameters, x ij For the same safety assessment item i The measurement uncertainty of the cryptographic operation component j is given by A, which is a security value and a quantified value.

[0032] Secondly, to achieve the above objectives, this application further provides a cryptographic security measurement uncertainty assessment device, the device comprising:

[0033] The project determination module is used to determine the security evaluation items for the cryptographic product to be tested.

[0034] The model building module is used to build a safety measurement model; the output value of the safety measurement model is a safety quantification value, which is determined based on the sum of the input parameters of the safety measurement model.

[0035] The input parameter determination module determines the input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product under test under various security evaluation items.

[0036] The detection module determines the weights of each input parameter in the security measurement model, fills the input parameters into the security measurement model, and obtains the security quantification value of the cryptographic product under test as the cryptographic security measurement uncertainty evaluation result of the cryptographic product under test.

[0037] Thirdly, to achieve the above objectives, this application further provides a cryptographic security measurement uncertainty assessment device, the device comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, the computer program being configured to implement the steps of the cryptographic security measurement uncertainty assessment method as described above.

[0038] Fourthly, to achieve the above objectives, this application further provides a storage medium, which is a computer-readable storage medium, and stores a computer program on the storage medium. When the computer program is executed by a processor, it implements the steps of the cryptographic security measurement uncertainty assessment method described above.

[0039] One or more technical solutions proposed in this application have at least the following technical effects:

[0040] This application achieves a quantitative assessment of the security of cryptographic products by introducing a security measurement model and a measurement uncertainty quantification mechanism, effectively overcoming the limitation of existing technologies that can only output qualitative "qualified / unqualified" conclusions. By establishing uncertainty calculation algorithms for cryptographic operation components that can and cannot be repeatedly tested, and classifying and summarizing uncertainties according to different evaluation items and algorithm characteristics, it can output the quantitative security value and credibility level of cryptographic products under specific conditions. This improves the comparability, credibility, and objectivity of cryptographic security measurement uncertainty assessment results, providing a quantitative basis for cryptographic product design optimization, production control, and procurement decisions. Attached Figure Description

[0041] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0042] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, those skilled in the art can obtain other drawings based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart illustrating an embodiment of the cryptographic security measurement uncertainty assessment method of this application.

[0044] Figure 2 This is a schematic diagram of the cryptographic security measurement uncertainty assessment device of this application.

[0045] Figure 3 This is a schematic diagram showing the results of the cryptographic security measurement uncertainty assessment equipment used in this application.

[0046] The purpose, features, and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0047] It should be understood that the specific embodiments described herein are merely illustrative of the technical solutions of this application and are not intended to limit this application.

[0048] To better understand the technical solution of this application, a detailed description will be provided below in conjunction with the accompanying drawings and specific implementation methods.

[0049] The main solution of this application embodiment is to achieve quantitative evaluation of cryptographic security by introducing a security measurement model. This method first determines the security evaluation items of the cryptographic product under test and identifies its cryptographic operation components based on the product's functions and specifications. Then, according to the component type (repeatable or non-repeatable) and whether it has an uncertainty calculation algorithm, it uses algorithmic calculation or repeated measurement statistics methods to obtain the measurement uncertainty under each security evaluation item. Finally, based on each measurement uncertainty, it determines the model input parameters and their weights, constructs the security measurement model, and calculates and outputs a quantitative security value.

[0050] Cryptography can be categorized into hardware, software, firmware, hybrid hardware and software, and other similar classifications. Specifically, cryptographic components include chips, circuit boards, servers, quantum devices, firmware code, and files.

[0051] Research indicates that methods for assessing measurement uncertainty in software and software-hardware hybrid cryptographic products are still in the exploratory stage, and no formal, standardized methods have yet been established. Currently, there is no established method for assessing measurement uncertainty in cryptographic security. This lack of measurement uncertainty in cryptographic security prevents the quantitative evaluation of cryptographic security. In the cryptographic industry, situations have arisen where cryptographic security cannot be guaranteed during production and procurement, leading to a loss of trust across the supply chain.

[0052] Therefore, the cryptographic security measurement uncertainty assessment method developed in this application has been proven to be feasible, accurate and practical through testing and practice. Furthermore, this method can achieve quantitative evaluation of cryptographic security, filling a gap in this area and establishing trust among all parties involved in various stages of cryptographic product research and development, production, and quality evaluation.

[0053] Based on this, embodiments of this application provide a method for evaluating the uncertainty of cryptographic security measurements, referring to... Figure 1 , Figure 1 This is a flowchart illustrating the first embodiment of the cryptographic security measurement uncertainty assessment method of this application.

[0054] In this embodiment, the method for evaluating the uncertainty of cryptographic security measurement includes steps S10 to S40:

[0055] Step S10: Determine the security evaluation items for the cryptographic product to be tested.

[0056] Step S20: Establish a security measurement model; the output value of the security measurement model is a security quantification value, which is determined based on the sum of the input parameters of the security measurement model.

[0057] Step S30: Determine the input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product under test under each of the security evaluation items.

[0058] Step S40: Determine the weights of each input parameter of the security measurement model, fill the input parameters into the security measurement model, and obtain the security quantification value of the cryptographic product under test as the cryptographic security measurement uncertainty evaluation result of the cryptographic product under test.

[0059] In one feasible implementation, step S30 includes steps A10 to A30:

[0060] Step A10: Determine the cryptographic operation components of the cryptographic product based on its functional and specification information.

[0061] Step A20: Under each security evaluation item, with the condition that the uncertainty quantification value can be directly output, determine the uncertainty calculation algorithm of the cryptographic operation component based on the type of cryptographic operation component, and obtain the measurement uncertainty of the cryptographic operation component under each security evaluation item.

[0062] The types of cryptographic operation components include repeatable cryptographic operation components and non-repeatable cryptographic operation components.

[0063] Step A20 includes steps B10 to B80:

[0064] Step B10: If the cryptographic operation unit is a repeatable cryptographic operation unit, then determine whether it has an uncertainty calculation algorithm.

[0065] Step B20: If the cryptographic operation unit has an uncertainty calculation algorithm, then the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation unit.

[0066] Step B30: If the cryptographic operation component does not have an uncertainty calculation algorithm, the cryptographic operation component will be repeatedly measured multiple times under the corresponding security evaluation item, and the standard compliance rate of the cryptographic operation component will be calculated. The standard compliance rate is positively correlated with the number of times the measurement does not meet the standard.

[0067] Step B40: Determine the measurement uncertainty of the cryptographic operation component based on the standard compliance rate; the standard compliance rate is positively correlated with the measurement uncertainty.

[0068] Step B50: If the cryptographic operation component is a non-repeatable cryptographic operation component, then determine whether it has an uncertainty calculation algorithm.

[0069] Step B60: If the cryptographic operation unit has an uncertainty calculation algorithm, then the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation unit.

[0070] Step B70: If the cryptographic operation component does not have an uncertainty calculation algorithm, then measure all cryptographic operation components that do not have an uncertainty calculation algorithm and cannot be repeatedly tested under the corresponding security evaluation item, and determine the number of cryptographic operation components that failed the test.

[0071] Step B80: Determine the measurement uncertainty of the cryptographic operation components based on the number of failed tests; the measurement uncertainty is negatively correlated with the number of failed tests.

[0072] Step A30: For each safety assessment item, determine the corresponding input parameters based on the number of measurement uncertainties under the safety assessment item and the sum of all measurement uncertainties.

[0073] Specifically, based on the security indicators that the cryptographic product under test needs to achieve, target values ​​and allowable deviations are set. According to the characteristics of the cryptographic product under test, and referring to its functions, specifications, and other information, it is broken down layer by layer according to its components down to the cryptographic computation components that can output measurement uncertainty. Typically, cryptographic computation components include hardware components as well as software and data components, such as circuit boards, substrates, processors, circuits, random number generators, firmware, executable files or sets of files, data, embedded software, operating systems, memory, storage space, power supplies, converters, etc. For example, a cryptographic machine includes a cryptographic card, which, as a component of the cryptography, can be further divided into more refined cryptographic computation components such as security chips and main control chips.

[0074] The cryptographic operation components are classified into those that can be repeatedly tested and those that cannot be repeatedly tested. For example, a random number generator can be repeatedly tested, while a disassembly protection device can only be tested once and cannot be repeatedly tested.

[0075] For cryptographic operation components that can be repeatedly tested and have an uncertainty calculation algorithm, collect the allowable deviations and corresponding data of the cryptographic operation components under the corresponding security evaluation items, and calculate the measurement uncertainty of the cryptographic operation components under the corresponding security evaluation items according to the uncertainty calculation algorithm of the cryptographic operation components.

[0076] For cryptographic computing components that can be repeatedly tested but do not yet have a method for evaluating measurement uncertainty, a certain number of tests are conducted under the corresponding security evaluation items. The number of times the test does not meet the standard is counted. This number is divided by the total number of tests and multiplied by 100 to obtain the standard compliance rate. The standard compliance rate is then used as the measurement uncertainty, and this value is dimensionless.

[0077] In one example, as a hardware-based cryptographic component, the random number generator is repeatedly measurable, and the quality of its output random numbers is related to cryptographic security. From the perspective of random number quality, this value can be repeatedly tested, but there is currently no clear method for evaluating the measurement uncertainty. Therefore, 1000 sets of random numbers can be tested according to a passing standard; if 981 sets meet the standard, the test is considered passed. Following this method, 1.9% can be used as the measurement uncertainty of the random number generator under the security evaluation item of random number quality.

[0078] In another example, consider software-based cryptographic components that can be repeatedly tested but lack a method for assessing measurement uncertainty. Here, "software-based" refers to software, firmware, various files, and parameters. Since these components are generally modifiable and adjustable, with other conditions unchanged, a certain number of tests are conducted. If a test fails (i.e., no result meets the standard), the component can be modified or adjusted once, and the testing continues until the output meets the standard. The number of times the standard is not met is counted, and this number is divided by the total number of tests to obtain the standard compliance rate, which is used as the measurement uncertainty. This value is dimensionless. For example, cryptography has requirements for roles, services, and authentication; failure to meet these requirements poses a security risk. These are generally implemented in software. If the test result does not meet the requirements, it can be modified or adjusted once and tested again until it does. The evaluation is based on the number of tests conducted.

[0079] For cryptographic computation components that cannot be repeatedly tested but have measurement uncertainty calculation algorithms, the measurement uncertainty is calculated using the uncertainty calculation algorithm, referring to the allowable deviation under the corresponding security evaluation item.

[0080] For cryptographic components that cannot be repeatedly tested and lack a method for evaluating measurement uncertainty, testing is conducted based on the allowable deviation of the cryptographic component. The evaluation is directly based on whether the desired effect is achieved as described in the component's documentation. For example, if the physical protection mechanism is compromised, the cryptography should enter a protected state, such as immediately zeroing out data or ceasing external service provision, to protect cryptographic security. Simultaneously, the breach of the physical protection mechanism should leave traces. In this case, repeated testing of the tested object is not possible. Testing is performed according to the component's documentation. If the physical protection mechanism is compromised and the cryptography enters a protected state, a value of 1 is assigned; otherwise, a value of 0 is assigned. If traces are left, a value of 1 is assigned; otherwise, a value of 0 is assigned. The total number of such cryptographic components is counted, and the measurement uncertainty is obtained by subtracting [the sum of accumulated 1s divided by the total number] from 1. The evaluation value obtained by this method is dimensionless.

[0081] It should be noted that, due to the special nature of cryptography, all security assessment items must pass to be deemed secure. In this embodiment, the security assessment is summarized into three aspects: the operation of the cryptography under secure conditions, the operation of the protection mechanism under secure conditions, and the operation of the protection mechanism under conditions exceeding the set parameters.

[0082] Based on this, a security measurement model can be constructed. Specifically, an initial security measurement model can be determined based on the security assessment items:

[0083]

[0084] in, ω 1. ω 2 and ω 3 is the input parameter f( C i The weight of ) i ∈(1,2,3), ω 1+ ω 2+ ω 3 = 1;

[0085] For input parameters, x ij For the same safety assessment item i The measurement uncertainty of the cryptographic operation component j is given by A, which is a security value and a quantified value.

[0086] Specifically f () can be understood as a hierarchical aggregation function, whose core function is to aggregate multiple underlying measurement uncertainty values ​​into a dimensionless fraction between 0 and 1.

[0087] In one feasible implementation, through recursive nesting, f() achieves a complete hierarchical aggregation from the uncertainty of the smallest quantifiable cryptographic operation component to the score of intermediate sub-items, the top three categories of scores, and finally the security quantification value A.

[0088] The steps can be summarized as follows:

[0089] First, the security evaluation items for the cryptographic product to be tested are determined. In this embodiment, the security evaluation items include three categories: cryptographic operation under secure conditions, protection mechanism operation under secure conditions, and protection mechanism operation under conditions exceeding the set environmental conditions.

[0090] The security evaluation items are further refined, with the ability to directly output quantifiable values ​​of uncertainties as a condition, until the smallest quantifiable sub-item is determined, and the cryptographic operation components under each smallest quantifiable sub-item are identified.

[0091] Based on the above method for calculating the measurement uncertainty of cryptographic operation components, the measurement uncertainty of each cryptographic operation component at the level of the smallest quantifiable sub-item is calculated.

[0092] Based on the measurement uncertainty of the cryptographic operation component belonging to the minimum quantization sub-item, perform one... f (), calculate the measurement uncertainty of the smallest quantized sub-item.

[0093] Using the measurement uncertainty of the smallest quantifiable sub-item as the input parameter of the parent item of the smallest quantifiable sub-item, the process is executed again. f (), calculate the measurement uncertainty of the parent item of the smallest quantifiable sub-item.

[0094] Use the measurement uncertainty output from the previous step as the input index for the next higher level and continue execution. f (), until the aggregation of the three safety evaluation items is completed, and the measurement uncertainty of the three safety evaluation items is obtained.

[0095] For example, a safety measurement model is determined, A = ω 1 f (Password operation under secure conditions)+ ω 2 f (Protection mechanism operates under safe conditions)+ ω 3 f (The protection mechanism operates beyond the set environmental conditions), and then the input items of the model are refined until all quantifiable project indicators are obtained.

[0096] Specifically, targeting f (Password operation under secure conditions) allows for the detailed development of test models. f (Password operation under secure conditions) = f ( f (Password function)f (Password module interface) f (Role, Service, and Identification) f (Sensitive security parameter management) f (Self-test) For secure cryptographic operation under designed security conditions, the cryptographic computing product can be subjected to the above detailed tests and evaluations under these conditions. Security conditions are obtained from the test object's manual, such as permissible voltage and normal temperature range.

[0097] If, after refinement, there are still sub-items in the model that cannot be quantized, refinement continues until all cryptographic computation components in the current sub-item can be quantized and output. f (Minimum quantifiable sub-item 1) = f (Measurement uncertainty of cryptographic operation component a1, measurement uncertainty of cryptographic operation component a2, ..., measurement uncertainty of cryptographic operation component an).

[0098] In this example, cryptographic function testing refers to the requirement that the output of software code such as cryptographic algorithms and protocols must be exactly consistent with the expected value, i.e., correct; otherwise, it is evaluated as incorrect. Uncertainty testing of cryptographic functions can be further subdivided. One of the smallest quantifiable sub-items is the uncertainty of software code execution. Software code execution falls under the category of uncertainty measurement in software (which can be repeatedly tested and has no corresponding uncertainty calculation algorithm). The calculation methods for the measurement uncertainty of the cryptographic operation components involved (such as the uncertainty of a random number generator) have been given above and will not be repeated here.

[0099] For f (the protection mechanism operates under safe conditions), a detailed test model is established: f (Protection mechanism operates under safe conditions) = f ( f (Password module interface implementation) f (Role services and authentication implementation) f (Software / Firmware Security Implementation) f (Implementation in runtime environment) f (Physical security is achieved) f (Non-intrusive security implementation) f (Sensitive security parameter management implementation) f (Lifecycle protection is achieved).

[0100] In this example, the cryptographic module interface, role services and authentication, software / firmware security, operating environment, sensitive security parameter management, and lifecycle assurance can be converted into a success rate as a measurement uncertainty. Whether the implementation is successful is determined based on the design scheme and the technical standards used for testing. If it conforms to the design scheme or technical standards, it is considered secure; otherwise, it is considered insecure. For example, if the cryptographic module interface technical standard requires the logical interface to be separate, and testing reveals a misuse of the interface, it is deemed insecure. Similarly, if the standard requires a secure link between the cryptographic module and the sender or receiver, and testing reveals that the link is not protected by cryptographic technology and the transmitted data is in plaintext, it is deemed insecure. The measurement uncertainty of the involved cryptographic operation components can be calculated according to the scenario described above where repeatable testing is possible but no corresponding measurement uncertainty calculation algorithm exists.

[0101] Physical security can also be further subdivided. Based on the test object's manual, the measures for implementing physical security are outlined, broken down into specific implementation measures, and then these measures are converted into implementation rates. For example, f(physical security implementation) = f(f(shell or encapsulation), f(removal traces), f(prevention of direct observation through openings), ..., f(environmental failure protection against temperature and voltage)). Here, "removal traces" refers to leaving traces when disassembling the cipher, which cannot be quantified. Therefore, the test object is disassembled, and the presence of traces is checked. The measurement uncertainty of the involved cryptographic components can be calculated according to the scenario described above where repeatable detection is not possible and there is no corresponding measurement uncertainty calculation algorithm.

[0102] Non-intrusive security is a crucial capability in cryptography and a key evaluation criterion for ensuring keys cannot be obtained. Non-intrusive security can be transformed or subdivided. Specifically, based on the manual of the object under inspection, the measures for implementing non-intrusive security are outlined. Physical security is broken down into specific implementation measures, and then these measures are converted into implementation rates. f(non-intrusive security implementation) = f(f(energy analysis qualified), f(electromagnetic analysis qualified), f(timing analysis qualified)). f(energy analysis qualified) = f(f(simple energy attack), f(differential energy attack)) = f(f(operation instruction type), f(number of operations), f(energy consumption value)). f(electromagnetic analysis qualified) = f(f(current fluctuation value), f(battery radiation value)). f(timing analysis qualified) = f(f(operation instruction type), f(number of operations), f(operation time)). Qualification for energy analysis, electromagnetic analysis, and timing analysis is defined as no data repetition, meaning that the collected curves or sample points still exhibit irregularities after analysis.

[0103] Regarding f(operation protection mechanism under set environmental conditions), it can be further subdivided into f(operation protection mechanism under set environmental conditions) = f(f(data set to zero), f(no external service)). Data setting to zero and no external service can both be directly detected. For example, whether the voltage exceeds the operating limit by a certain number of volts, or whether the password data is set to zero or no external service is provided, can both be detected. Each cryptographic operation component involved in this project can individually output measurement uncertainty.

[0104] After meticulously breaking down the three safety assessment items into their smallest quantifiable sub-items, the measurement uncertainty of each smallest quantifiable sub-item is calculated, ensuring consistency in the direction of all values. Then, the measurement uncertainty of the next higher-level item is obtained by dividing the sum of the measurement uncertainties of the smallest quantifiable sub-items in the previous level by the number of such sub-items. This process is repeated until the measurement uncertainties of all three safety testing items are calculated. Finally, based on the weights of each safety measurement item, the quantified safety value A is calculated.

[0105] In another feasible implementation, step A20 is followed by the following step:

[0106] Step C10: Group cryptographic operation components that use the same uncertainty calculation algorithm into one category;

[0107] Step C20: For each type of cryptographic operation component, determine the input parameters based on the number of all measurement uncertainties and the sum of all measurement uncertainties.

[0108] Specifically, in this embodiment, cryptographic operation components that use the same uncertainty calculation algorithm are taken as nodes. By identifying and classifying cryptographic operation components that use the same uncertainty calculation algorithm, these components with consistent calculation characteristics are divided into the same node. Then, for all cryptographic operation components in each node, the representative input parameters of the category are calculated by combining the number of measurement uncertainties and the sum of measurement uncertainties, thereby providing a unified and quantifiable input basis for the security measurement model.

[0109] For example, A = f(f(password runs normally under secure conditions), f(protection mechanism successfully implemented under secure conditions), f(protection mechanism runs normally under conditions exceeding the set environmental conditions)), can also be transformed into A = a1 × f(measurement uncertainty consistent 1) + a1 × f(measurement uncertainty consistent 2) + ... + an × f(measurement uncertainty consistent n). a1 + a2 + ... + an = 1. The values ​​of a1, a2, ..., an are determined according to requirements. Measurement uncertainty consistent 1, measurement uncertainty consistent 2, ..., measurement uncertainty consistent n indicate that the values ​​of components with the same measurement uncertainty can be calculated in a single f function. The f function calculates the sum of measurement uncertainties under this type and divides it by the total number, obtaining a value greater than or equal to 0 and less than or equal to 1. The directionality of each type of value should be consistent.

[0110] Understandably, the core function of f() in this embodiment is to aggregate multiple underlying measurement uncertainty values ​​(or their equivalent normalized indices, such as compliance rate, achievement rate, success rate, or the reverse deviation rate, failure rate) into a dimensionless score between 0 and 1, thereby representing the measurement uncertainty of a certain security evaluation item (or sub-item). Through recursive nesting, it achieves a complete hierarchical aggregation from the smallest quantifiable cryptographic operation unit measurement—intermediate sub-item measurement—three major categories of top-level measurements—to the final security quantification value A.

[0111] It should be noted that the above examples are only for understanding this application and do not constitute a limitation on the cryptographic security measurement uncertainty assessment method of this application. Any simple transformations based on this technical concept are all within the protection scope of this application.

[0112] This application also provides a device for evaluating the uncertainty of cryptographic security measurements; please refer to [reference needed]. Figure 2 The device for assessing the uncertainty of cryptographic security measurements includes:

[0113] Project Determination Module 10 is used to determine the security evaluation items for the cryptographic product to be tested;

[0114] The model building module 20 is used to build a safety measurement model; the output value of the safety measurement model is a safety quantification value, which is determined based on the sum of the input parameters of the safety measurement model.

[0115] The input parameter determination module 30 is used to determine the input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product under test under various security evaluation items.

[0116] The detection module 40 is used to determine the weight of each input parameter of the security measurement model, fill the input parameters into the security measurement model, and obtain the security quantification value of the cryptographic product under test as the cryptographic security measurement uncertainty evaluation result of the cryptographic product under test.

[0117] The cryptographic security measurement uncertainty assessment device provided in this application, employing the cryptographic security measurement uncertainty assessment method in the above embodiments, can solve the technical problem that related technologies cannot achieve quantitative assessment of cryptographic security. Compared with related technologies, the beneficial effects of the cryptographic security measurement uncertainty assessment device provided in this application are the same as those of the cryptographic security measurement uncertainty assessment method provided in the above embodiments, and other technical features in the cryptographic security measurement uncertainty assessment device are the same as those disclosed in the methods of the above embodiments, and will not be repeated here.

[0118] This application provides a cryptographic security measurement uncertainty assessment device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the cryptographic security measurement uncertainty assessment method in the above embodiments.

[0119] The following is for reference. Figure 3 This document illustrates a structural schematic diagram of a cryptographic security measurement uncertainty evaluation device suitable for implementing embodiments of this application. The cryptographic security measurement uncertainty evaluation device in the embodiments of this application may include, but is not limited to, mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Description), PMPs (Portable Media Players), and in-vehicle terminals (e.g., in-vehicle navigation terminals), as well as fixed terminals such as digital TVs and desktop computers. Figure 3 The cryptographic security measurement uncertainty assessment device shown is merely an example and should not impose any limitations on the functionality and scope of application of the embodiments of this application.

[0120] like Figure 3As shown, the cryptographic security measurement uncertainty assessment device may include a processing unit 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in the read-only memory 1002 (ROM) or a program loaded from the storage device 1003 into the random access memory 1004 (RAM). The random access memory 1004 also stores various programs and data required for the operation of the instructional video generation device. The processing unit 1001, the read-only memory 1002, and the random access memory 1004 are interconnected via a bus 1005. An input / output interface 1006 (I / O interface) is also connected to the bus 1005. Typically, the following systems can be connected to the input / output interface 1006: input devices 1007 including, for example, a touchscreen, touchpad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage devices 1003 including, for example, magnetic tape, hard disk, etc.; and communication devices 1009. Communication device 1009 allows the instructional video generation device to communicate wirelessly or wiredly with other devices to exchange data. Although instructional video generation devices with various systems are shown in the figure, it should be understood that it is not required to implement or possess all the systems shown. More or fewer systems can be implemented alternatively.

[0121] Specifically, according to the embodiments disclosed in this application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device, or installed from storage device 1003, or installed from ROM 1002. When the computer program is executed by processing device 1001, it performs the functions defined in the methods of the embodiments disclosed in this application.

[0122] The cryptographic security measurement uncertainty assessment device provided in this application, employing the cryptographic security measurement uncertainty assessment method in the above embodiments, can solve the technical problem that related technologies cannot achieve quantitative assessment of cryptographic security. Compared with related technologies, the beneficial effects of the cryptographic security measurement uncertainty assessment device provided in this application are the same as those of the cryptographic security measurement uncertainty assessment method provided in the above embodiments, and other technical features in this cryptographic security measurement uncertainty assessment device are the same as those disclosed in the previous embodiment method, and will not be repeated here.

[0123] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any suitable manner in one or more embodiments or examples.

[0124] The above are merely specific embodiments of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0125] This application provides a computer-readable storage medium having computer-readable program instructions (i.e., a computer program) stored thereon, which are used to execute the cryptographic security measurement uncertainty assessment method in the above embodiments.

[0126] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0127] The aforementioned computer-readable storage medium may be included in the cryptographic security measurement uncertainty assessment device; or it may exist independently and not be assembled into the cryptographic security measurement uncertainty assessment device.

[0128] The aforementioned computer-readable storage medium carries one or more programs. When these programs are executed by the cryptographic security measurement uncertainty assessment device, the device performs the following actions: determines the security assessment items for the cryptographic product under test; establishes a security measurement model; the output value of the security measurement model is a security quantification value, determined based on the sum of the input parameters of the security measurement model; determines the input parameters based on the measurement uncertainty of the cryptographic operation components of the cryptographic product under test under each security assessment item; determines the weights of each input parameter of the security measurement model; fills the input parameters into the security measurement model; and obtains the security quantification value of the cryptographic product under test as the cryptographic security measurement uncertainty assessment result of the cryptographic product under test.

[0129] Computer program code for performing the operations of this application can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, and conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a Local Area Network (LAN) or a Wide Area Network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0130] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0131] The modules described in the embodiments of this application can be implemented in software or hardware. The names of the modules do not necessarily limit the functionality of the unit itself.

[0132] The readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the above-described method for evaluating the uncertainty of cryptographic security measurements. This solves the technical problem that related technologies cannot achieve quantitative evaluation of cryptographic security. Compared with related technologies, the beneficial effects of the computer-readable storage medium provided in this application are the same as those of the cryptographic security measurement uncertainty evaluation method provided in the above embodiments, and will not be elaborated upon here.

[0133] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the cryptographic security measurement uncertainty assessment method described above.

[0134] The computer program product provided in this application can solve the technical problem that related technologies cannot achieve quantitative assessment of cryptographic security. Compared with related technologies, the beneficial effects of the computer program product provided in this application are the same as those of the cryptographic security measurement uncertainty assessment method provided in the above embodiments, and will not be repeated here.

[0135] The above are only some embodiments of this application and do not limit the patent scope of this application. All equivalent structural transformations made under the technical concept of this application and using the content of this application specification and drawings, or direct / indirect applications in other related technical fields, are included in the patent protection scope of this application.

Claims

1. A method of evaluating the uncertainty of a cryptographic security measure, characterized in that The method comprises: determining security evaluation items of a to-be-tested cryptographic product; establishing a security measurement model; an output value of the security measurement model is a security quantification value, and the output value of the security measurement model is determined based on a sum of input parameters of the security measurement model; determining the input parameters based on measurement uncertainties of cryptographic operation components of the to-be-tested cryptographic product under each of the security evaluation items; determining weights of each of the input parameters of the security measurement model, filling the input parameters into the security measurement model, and obtaining the security quantification value of the to-be-tested cryptographic product as a cryptographic security measurement uncertainty evaluation result of the to-be-tested cryptographic product; the step of determining the input parameters based on the measurement uncertainties of the cryptographic operation components of the to-be-tested cryptographic product under each of the security evaluation items comprises: determining cryptographic operation components of the cryptographic product according to function information and specification information of the cryptographic product; under each of the security evaluation items, determining an uncertainty calculation algorithm of the cryptographic operation components based on a type of the cryptographic operation components, and obtaining the measurement uncertainty of the cryptographic operation components under each of the security evaluation items, as a condition that a quantification value of the uncertainty can be directly outputted; for each of the security evaluation items, determining the input parameter corresponding to the security evaluation item based on a number of measurement uncertainties under the security evaluation item and a sum of all measurement uncertainties; a representation of the security measurement model comprises: wherein, ω 1, ω 2 and ω 3 are weights of input parameters f( C i ), i ∈(1,2,3), ω 1+ ω 2+ ω 3=1; For input parameters, x ij For the same security evaluation project i The measurement uncertainty of the cryptographic operation component j under the same security evaluation project, A is the security value, which is a quantitative value. wherein, f The () achieves the complete hierarchical aggregation from the minimum quantifiable cryptographic operation component uncertainty - intermediate sub-item score - three major top-level score - final security quantification value A, the steps can be summarized as: First, security evaluation items of a to-be-tested cryptographic product are determined, and the security evaluation items include three types of cryptographic operation under a secure condition, operation of a protection mechanism under a secure condition, and operation of the protection mechanism under an environment condition exceeding a set condition; Then, each of the security evaluation items is refined, as a condition that a quantification value of the uncertainty can be directly outputted, until the refinement reaches a smallest quantifiable sub-item, and cryptographic operation components under each of the smallest quantifiable sub-items are determined; According to the measurement uncertainty calculation manner of the cryptographic operation components, the measurement uncertainty of each of the cryptographic operation components under the level of the smallest quantifiable sub-item is calculated; According to the measurement uncertainty of the cryptographic operation component belonging to the minimum quantization sub-item, performing once f () to calculate the measurement uncertainty of the minimum quantization sub-item; taking the measurement uncertainty of the smallest quantifiable sub-item as an input parameter for the parent item of the smallest quantifiable sub-item, performing again f the calculation of the measurement uncertainty of the parent item of the smallest quantifiable sub-item; Take the measurement uncertainty of the output of the previous step as the input index of the next higher level, continue to execute f () until the aggregation of three security evaluation projects is completed, and the measurement uncertainty of the three security evaluation projects is obtained.

2. The method of claim 1, wherein the measurement uncertainty is determined by: The type of the cryptographic operation components includes a repeatable cryptographic operation component and a non-repeatable cryptographic operation component.

3. The method of claim 2, wherein the measurement uncertainty is determined by: The step of determining the uncertainty calculation algorithm of the cryptographic operation components based on the type of the cryptographic operation components, and obtaining the measurement uncertainty of the cryptographic operation components under each of the security evaluation items, as a condition that a quantification value of the uncertainty can be directly outputted, comprises: if the cryptographic operation component is the repeatable cryptographic operation component, it is determined whether the cryptographic operation component has the uncertainty calculation algorithm; if the cryptographic operation component has the uncertainty calculation algorithm, the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation component; if the cryptographic operation component does not have the uncertainty calculation algorithm, the cryptographic operation component is repeatedly measured multiple times under the corresponding security evaluation item, and a standard compliance rate of the cryptographic operation component is counted; the standard compliance rate is in a positive correlation with a number of times of measurement non-compliance with a standard; the measurement uncertainty of the cryptographic operation component is determined based on the standard compliance rate; the standard compliance rate is in a positive correlation with the measurement uncertainty.

4. The method of claim 3, wherein the measurement uncertainty is determined by: The step of determining the measurement uncertainty of the cryptographic operation component under each security evaluation item based on the type of the cryptographic operation component includes: If the cryptographic operation component is a non-repeatable detection cryptographic operation component, it is determined whether it has an uncertainty calculation algorithm; If the cryptographic operation component has an uncertainty calculation algorithm, the measurement uncertainty is obtained based on the uncertainty calculation algorithm of the cryptographic operation component; If the cryptographic operation component does not have an uncertainty calculation algorithm, the number of test failed cryptographic operation components is determined by measuring all cryptographic operation components without uncertainty calculation algorithm and non-repeatable detection under the corresponding security evaluation item; Based on the number of test failed cryptographic operation components, the measurement uncertainty of the cryptographic operation component is determined; the measurement uncertainty is negatively correlated with the number of test failed cryptographic operation components.

5. The method of claim 1, wherein the measurement uncertainty is determined by: After the step of obtaining the measurement uncertainty of the cryptographic operation component under each security evaluation item, the following steps are further included: Cryptographic operation components using the same uncertainty calculation algorithm are classified into one category; For each category of cryptographic operation components, the input parameters are determined based on the number of all measurement uncertainties and the sum of all measurement uncertainties.

6. A cryptographic security measure uncertainty evaluation device, characterized by, The device includes: An item determination module for determining the security evaluation items of the cryptographic product to be tested; A model establishment module for establishing a security measurement model; the output value of the security measurement model is a security quantification value, and the output value of the security measurement model is determined based on the sum of input parameters of the security measurement model; An input parameter determination module for determining the input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product to be tested under each security evaluation item; A detection module for determining the weight of each input parameter of the security measurement model, filling the input parameters into the security measurement model, and obtaining the security quantification value of the cryptographic product to be tested as the cryptographic security measurement uncertainty evaluation result of the cryptographic product to be tested; The step of determining the input parameters based on the measurement uncertainty of the cryptographic operation component of the cryptographic product to be tested under each security evaluation item includes: Determining the cryptographic operation component of the cryptographic product according to the function information and specification information of the cryptographic product; Based on the type of the cryptographic operation component, the uncertainty calculation algorithm of the cryptographic operation component is determined to obtain the measurement uncertainty of the cryptographic operation component under each security evaluation item under the condition that the uncertainty quantification value can be directly outputted; For each security evaluation item, the input parameters corresponding to the security evaluation item are determined based on the number of measurement uncertainties under the security evaluation item and the sum of all measurement uncertainties; The representation of the security measurement model includes: wherein ω 1, ω 2 and ω 3 are weights of input parameters f( C i ), i ∈(1,2,3), ω 1+ ω 2+ ω 3 = 1. For input parameters, x ij For the measurement uncertainty of the cryptographic operation component j under the same security evaluation project i A is a security value, which is a quantitative value. wherein, f The () achieves the complete hierarchical aggregation from the minimum quantifiable cryptographic operation component uncertainty - intermediate sub-item score - three major top-level score - final security quantification value A, the steps can be summarized as: First, the security evaluation items of the cryptographic product to be tested are determined, including three types of cryptographic operation under secure conditions, secure protection mechanism operation under secure conditions, and protection mechanism operation under set environmental conditions; Further refining each security evaluation item, and taking the condition that the quantified uncertainty value can be directly outputted, until the minimum quantifiable sub-item is refined, to determine the cryptographic operation component under each minimum quantifiable sub-item; According to the measurement uncertainty calculation method of the cryptographic operation component, the measurement uncertainty of each cryptographic operation component at the level of the minimum quantifiable sub-item is calculated. According to the measurement uncertainty of the cryptographic operation component belonging to the minimum quantization sub-item, performing once f () to calculate the measurement uncertainty of the minimum quantization sub-item; taking the measurement uncertainty of the smallest quantifiable sub-item as an input parameter for the parent item of the smallest quantifiable sub-item, performing again f the calculation of the measurement uncertainty of the parent item of the smallest quantifiable sub-item; Take the measurement uncertainty of the output of the previous step as the input index of the next higher level, continue to execute f () until the aggregation of three security evaluation projects is completed, and the measurement uncertainty of the three security evaluation projects is obtained.

7. A cryptographic security measure uncertainty evaluation device, characterized by, The device comprises a memory, a processor, and a computer program stored on the memory and executable on the processor, and the computer program is configured to implement the steps of the cryptographic security measurement uncertainty evaluation method according to any one of claims 1 to 5.

8. A storage medium, characterized by The storage medium is a computer readable storage medium, and the storage medium stores a computer program, and the computer program is executed by the processor to implement the steps of the cryptographic security measurement uncertainty evaluation method according to any one of claims 1 to 5. The storage medium is a computer readable storage medium, and the storage medium stores a computer program, and the computer program is executed by the processor to implement the steps of the cryptographic security measurement uncertainty evaluation method according to any one of claims 1 to 5.

Images