5G terminal data verification method, encryption method, terminal and storage medium

Abstract

The embodiment of the present invention discloses a verification method, encryption method, terminal and storage medium of 5G terminal data, which belongs to the field of information security technology. The method includes: sending a request message to a second terminal, obtaining data information corresponding to the request message, wherein the data information includes ciphertext information, signature information and a first auxiliary parameter; generating a corresponding second auxiliary parameter based on the first auxiliary parameter and a preset parameter; decrypting the ciphertext according to the second auxiliary parameter to obtain the target information, verifying whether the signature information is valid according to the target information to determine the authenticity of the data information, thereby decrypting the ciphertext by the second auxiliary parameter obtained by the first auxiliary parameter, and verifying whether the signature information is valid with the obtained target information, so that in the process of decrypting and verifying the signature information, the secret parameter of the second terminal is not required, the communication environment security of the terminal is protected, and the first terminal can complete the verification of the signature information while decrypting, thereby improving work efficiency.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of information security technology, and in particular, to a method for verifying 5G terminal data, an encryption method, a terminal, and a storage medium. Background Art

[0002] Nowadays, 5G technology is attracting the attention of people from all walks of life such as academia and industry. Its application scenarios have expanded from mobile Internet to many fields such as Internet of Things (IoT), Internet of Vehicles (IoV), and industrial Internet. Its characteristics of high speed, low latency, high reliability, and wide coverage will greatly promote the vigorous development of smart city systems, remote medical systems, artificial intelligence technology, and Internet of Things technology. However, with the rapid development of wireless communication technology, the communication of smart devices is more vulnerable to potential security attacks. Due to the openness of the wireless channel, this data information exposed in the open environment is very likely to be stolen, interfered with, or even modified by attackers, thus bringing adverse effects to the device communication environment. Summary of the Invention

[0003] Embodiments of the present invention provide a method for verifying 5G terminal data, an encryption method, a terminal, and a storage medium to solve the technical problem that the existing open wireless channel cannot protect the communication environment security of smart devices.

[0004] To achieve the above object, an embodiment of the present invention provides a method for verifying 5G terminal data, which is applied to a first terminal. The method includes:

[0005] Sending a request message to a second terminal to obtain data information corresponding to the request message, where the data information includes ciphertext information, signature information, and a first auxiliary parameter;

[0006] Generating a corresponding second auxiliary parameter based on the first auxiliary parameter and a preset parameter;

[0007] Decrypting the ciphertext according to the second auxiliary parameter to obtain target information, and verifying whether the signature information is valid according to the target information to determine the authenticity of the data information.

[0008] To achieve the above object, an embodiment of the present invention provides an encryption method for 5G terminal data, which is applied to a second terminal. The method includes:

[0009] Receiving a request message sent by the first terminal, and determining the target information corresponding to the request message and the timestamp of the target information;

[0010] Obtaining a first auxiliary parameter and a second auxiliary parameter according to a preset public parameter;

[0011] According to the second auxiliary parameter and the target information, corresponding ciphertext and signature information are obtained, and the ciphertext, the signature information, the timestamp, and the first auxiliary parameter are sent as data information to the first terminal or the edge device.

[0012] To achieve the above object, an embodiment of the present invention further provides a terminal, including a memory and a processor. The memory is used to store a computer program; the processor is used to execute the computer program and, when executing the computer program, implement the steps of the foregoing method for verifying 5G terminal data and the steps of the foregoing method for encrypting 5G terminal data.

[0013] To achieve the above object, an embodiment of the present invention further provides a computer-readable storage medium for computer-readable storage. The storage medium is characterized in that it stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the foregoing method for verifying 5G terminal data and the steps of the foregoing method for encrypting 5G terminal data.

[0014] An embodiment of the present invention discloses a method for verifying 5G terminal data, an encryption method, a terminal, and a storage medium. By sending a request message to a second terminal, data information corresponding to the request message is obtained, where the data information includes ciphertext information, signature information, and a first auxiliary parameter; based on the first auxiliary parameter and a preset parameter, a corresponding second auxiliary parameter is generated; the ciphertext is decrypted according to the second auxiliary parameter to obtain target information, and whether the signature information is valid is verified according to the target information to determine the authenticity of the data information. Thus, the ciphertext is decrypted by the second auxiliary parameter obtained from the first auxiliary parameter, and whether the obtained target information verifies the signature information is valid, realizing that in the process of decrypting and verifying the signature information, the secret parameter of the second terminal is not required, protecting the security of the communication environment of the terminal, and the first terminal can complete the verification of the signature information while decrypting, improving the work efficiency. Description of the Drawings

[0015] Figure 1 is a schematic flowchart of a method for verifying 5G terminal data provided by an embodiment of the present invention.

[0016] Figure 2 is a schematic diagram of the first interaction scenario between the first terminal and the second terminal of the present invention.

[0017] Figure 3 is a schematic diagram of the second interaction scenario between the first terminal and the second terminal of the present invention.

[0018] Figure 4 is a schematic flowchart of a registration method provided by an embodiment of the present invention.

[0019] Figure 5It is a schematic flowchart of an encryption method for 5G terminal data provided by an embodiment of the present invention.

[0020] Figure 6 It is a schematic block diagram of the structure of a terminal provided by an embodiment of the present invention. Detailed implementation manners

[0021] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the embodiments of the present invention.

[0022] The flowchart shown in the accompanying drawings is only an example illustration, and does not necessarily include all contents and operations / steps, nor does it necessarily need to be executed in the described order. For example, some operations / steps can also be decomposed, combined, or partially merged. Therefore, the actual execution order may be changed according to the actual situation.

[0023] The embodiments of the present invention provide a verification method, an encryption method, a terminal, and a storage medium for 5G terminal data.

[0024] Next, some embodiments of the present invention will be described in detail in conjunction with the accompanying drawings. Without conflict, the embodiments of the invention and the features in the embodiments of the invention can be combined with each other.

[0025] Please refer to Figure 1 , Figure 1 It is a schematic flowchart of a verification method for 5G terminal data provided by an embodiment of the present invention.

[0026] As Figure 1 shown, this embodiment provides a verification method for 5G terminal data, and the method includes the following steps:

[0027] Step S110: Send a request message to a second terminal, and obtain data information corresponding to the request message, where the data information includes a ciphertext, a signature information, and a first auxiliary parameter.

[0028] Send a request message to a second terminal, where the number of the second terminals is at least one. For example, obtain the published information sent by the second terminal in the communication system, where the published information includes the second public key information and the second identity information of the second terminal, and send a request message to the second terminal according to the second identity information. When sending a request message to a single second terminal as Figure 2 shown or to multiple second terminals as Figure 3 shown, obtain the data information corresponding to the request message, where the data information includes a ciphertext, a signature information, and a first auxiliary parameter, etc.

[0029] In one embodiment, the signature information includes a signature or an aggregated signature; sending a request message to a second terminal to obtain data information corresponding to the request message, including: sending a request message to a second terminal to obtain data information corresponding to the request message sent by the second terminal, where the data information includes a ciphertext, a signature, and a first auxiliary parameter; or, sending a request message to multiple second terminals to obtain data information corresponding to the request message sent by the edge device, where the data information includes an aggregated tuple and a first auxiliary parameter, and the aggregated tuple includes multiple ciphertexts and an aggregated signature; where the edge device receives data information sent by each second terminal according to the request message, performs an aggregated signature on the signatures in each data information, and sends the data information obtained by the aggregated signature to the first terminal.

[0030] Exemplarily, as Figure 2 shown, the first terminal sends a request message to a single second terminal, receives the request message sent by the first terminal, and verifies whether the identity of the first terminal is legal according to the request message. The request message includes the first identity information and the first public key information of the first terminal, and verifies whether the identity of the first terminal is legal according to the first identity information and the first public key information. For example, comparing the obtained first identity information with the first preset identity information, and comparing the first public key information with the first preset public key information. If the first identity information is consistent with the first preset identity information, and the first public key information is consistent with the first preset public key information, it is determined that the identity of the first terminal is legal. Wherein, the first identity information and the first public key information, or the first preset identity information and the first preset public key information are in a corresponding relationship. For example, the first identity information is ID B , and the first public key information is PK B . If the first preset identity information is ID B , and the first preset public key information corresponding to the ID B is PK B , it is determined that the identity of the first terminal is legal. When determining that the identity of the first terminal is legal, based on the identification information in the request message, determine the target information and timestamp of the identification information. For example, the identification information includes character information or semantic identification, etc. Determine the target information corresponding to the request message according to the character information or semantic identification. When determining the target information, obtain the current time point and use the time point as the timestamp.

[0031] The preset public parameters include a randomly generated element and an integer group, and obtain the corresponding first auxiliary parameter according to the integer group and the randomly generated element. For example, obtain the integer group Z q , and randomly select a number r q from the Z A based on the preset random oracle model. According to the first preset auxiliary formula R A= r A p obtains a first auxiliary parameter, where R A is the first auxiliary parameter, r A is a random number in the integer group Z q and p is a randomly generated element. According to the preset public parameters and the first public key information, the corresponding second auxiliary parameter is obtained. An example is that the preset public parameters include the master public key information and a random number. Based on the second preset auxiliary formula J A = r A (PK B + p pub ) to obtain the second auxiliary parameter, where p pub is the master public key information, r A is a random number, PK B is the first public key information, and J A is the second auxiliary parameter.

[0032] Encrypt the target information according to the second auxiliary parameter to obtain the corresponding ciphertext. An example is to encrypt the target information based on the second auxiliary parameter, the preset public parameters, the identity information, and the time stamp to obtain the corresponding ciphertext. For example, the preset public parameters include a third hash function. Encrypt the target information according to the second auxiliary parameter, the third hash function, the first identity information, and the time stamp to obtain the corresponding ciphertext. For example, based on the preset encryption formula to obtain the ciphertext corresponding to the target information, where C A is the ciphertext, H 3 is the third hash function, ID B is the first identity information of the first terminal, J A is the second auxiliary parameter, T A is the time stamp, and m A is the target information. When obtaining the ciphertext corresponding to the target information, sign the ciphertext. An example is to obtain the corresponding third auxiliary parameter based on the preset public parameters, the second identity information of the second terminal, the second preset public key information, and the time stamp. For example, the preset public parameters include a fourth hash function. According to the fourth hash function, the second identity information, the second preset public key information, and the time stamp, obtain the corresponding third auxiliary parameter. For example, based on the third preset auxiliary formula h A = H 4 (ID A , m A , PK A , T A ) to obtain the third auxiliary parameter, where h A is the third auxiliary parameter, ID A is the second identity information of the second terminal, m A is the target information, PK A is the second preset public key information, and TA is a timestamp. The signature of the target information is obtained according to the third auxiliary parameter. In an embodiment, the signature of the target information is obtained according to the third auxiliary parameter, the preset secret value of the second terminal, the preset partial private key of the second terminal, and a random number. For example, based on the preset signature formula S A = r A / [h A (x A + d A )], the corresponding signature is obtained, where S A is the signature, r A is a random number in the integer group Z q , h A is the third auxiliary parameter, x A is the preset secret value of the second terminal, and d A is the preset partial private key of the second terminal. The obtained first auxiliary parameter, ciphertext, signature information, and timestamp are used as the data information corresponding to the request information, and the first terminal obtains the data information corresponding to the request information.

[0033] Alternatively, as Figure 3 shown, the first terminal sends a request information to multiple second terminals, and each second terminal sends each data information to the edge device based on the request information, where each data information includes a first auxiliary parameter, a ciphertext, signature information, and a timestamp. When the edge device receives multiple data information, it obtains the timestamps in each data information, and determines whether the second terminal corresponding to the timestamp is a valid terminal according to the timestamp. If the timestamp is verified to be valid, it determines that the second terminal corresponding to the timestamp is a valid terminal; if the timestamp is verified to be invalid, it determines that the second terminal corresponding to the timestamp is an invalid terminal. Obtain the signatures of each valid terminal, and perform an aggregate signature on the signatures of each valid terminal. For example, based on the preset aggregate signature formula, the corresponding aggregate signature is obtained according to the signatures of each valid terminal. For example, the preset aggregate signature formula is used to obtain the corresponding aggregate signature, where S is the aggregate signature, n is the number of signatures of valid terminals, and s i is the signature of a valid terminal. When the aggregate signature is obtained, the corresponding aggregate tuple is obtained according to the aggregate signature, the first auxiliary parameter of each valid terminal, and the ciphertext of each valid terminal. For example, the aggregate tuple is (R 1 , R 2 , …, R n , C 1 , C 2 , …, C n , S), where R 1 , R 2 , …, R n are the first auxiliary parameters of valid terminals, and C 1 , C2 …, C n is the ciphertext of the valid terminal, and S is the aggregated signature. Obtain the identity information of each valid terminal, and send the aggregated tuple, the second identity information of each valid terminal, and the timestamp of each valid terminal to the first terminal as data information.

[0034] Step S120: Generate a corresponding second auxiliary parameter based on the first auxiliary parameter and the preset parameter.

[0035] Exemplarily, the first terminal generates a corresponding second auxiliary parameter according to the first auxiliary parameter and the preset parameter, where the preset parameter is generated according to the public parameter published by the server when the first terminal registers with the server.

[0036] In one embodiment, the preset parameter includes a preset partial private key and a preset secret parameter. The generating of the corresponding second auxiliary parameter based on the first auxiliary parameter and the preset parameter includes: generating a corresponding second auxiliary parameter based on the first auxiliary parameter, the preset partial private key, and the preset secret parameter.

[0037] Exemplarily, obtain the preset partial private key and the preset secret parameter. Among them, the preset partial private key and the preset secret parameter are generated according to the preset public parameter when the first terminal registers with the server. According to the fourth preset auxiliary parameter J A = R A (x B + d B ), obtain the corresponding second auxiliary parameter. Among them, J A is the second auxiliary parameter, R A is the first auxiliary parameter, x B is the preset secret parameter of the first terminal, and d B is the preset partial private key of the first terminal.

[0038] Alternatively, when receiving the first auxiliary parameters of multiple second terminals, obtain the preset partial private key and the preset secret parameter. Among them, the preset partial private key and the preset secret parameter are generated according to the preset public parameter when the first terminal registers with the server. According to the fifth preset auxiliary parameter J i = R i (x B + d B ), obtain the corresponding second auxiliary parameters of each second terminal. Among them, J i is the second auxiliary parameter of each second terminal, R i is the first auxiliary parameter of each second terminal, x B is the preset secret parameter of the first terminal, and d B is the preset partial private key of the first terminal.

[0039] Step S130: Decrypt the ciphertext according to the second auxiliary parameter to obtain the target information.

[0040] After obtaining the second auxiliary parameter, decrypt the ciphertext according to the second auxiliary parameter to obtain the target information in the ciphertext. In one embodiment, the data information includes a timestamp. Decrypting the ciphertext according to the second auxiliary parameter to obtain the target information includes: decrypting the ciphertext based on the second auxiliary parameter, the timestamp, the preset public parameter, and the first preset identity information to obtain the target information.

[0041] Exemplarily, decrypt the ciphertext based on the second auxiliary parameter, the timestamp, the preset public parameter, and the first preset identity information to obtain the target information in the ciphertext, where the preset public parameter includes a third hash function, and the first preset identity information is the first identity information of the first terminal. For example, according to the first preset decryption formula where, m A is the target information, H 3 is the third hash function, ID B is the first preset identity information, J A is the second auxiliary parameter, T A is the timestamp, C A is the ciphertext. Substitute the third hash function, the identity information of the first terminal, the second auxiliary parameter, the timestamp, and the ciphertext into the preset decryption formula to obtain the target information in the ciphertext.

[0042] Alternatively, when there are multiple second terminals, obtain the second auxiliary parameters of each second terminal. Decrypt the ciphertexts of each second terminal according to the second auxiliary parameters of each second terminal, the respective timestamps, the preset public parameter, and the first preset identity information to obtain the target information in each ciphertext. For example, according to the second preset decryption formula where, m i is the target information, H 3 is the third hash function, ID B is the identity information of the first terminal, J i is the second auxiliary parameter, T i is the timestamp, C i is the ciphertext. Substitute the third hash function, the first preset identity information, the second auxiliary parameter, the timestamp, and the ciphertext into the preset decryption formula to obtain the target information in the ciphertext, where the number of target information is multiple.

[0043] Step S140: Verify whether the signature information is valid according to the target information to determine the authenticity of the data information.

[0044] When the target information is obtained, verify the signature information with the target information to determine whether the signature information is valid. If the signature information is valid, determine that the data information is authentic; if the signature information is invalid, determine that the data information is not authentic.

[0045] In one embodiment, the data information includes a timestamp; the decrypting the ciphertext according to the second auxiliary parameter to obtain the target information to determine the authenticity of the data information includes: obtaining a corresponding third auxiliary parameter according to the target information, the preset public parameter, the timestamp, a plurality of second preset public key information, and the second preset identity information; verifying whether a preset signature equation holds based on the third auxiliary parameter, the signature, the first auxiliary parameter, the second preset public key information, and the preset public parameter; if the preset signature equation holds, determine that the data information is authentic.

[0046] An example is that a corresponding third auxiliary parameter is obtained according to the target information, the preset public parameter, the timestamp, the second preset public key information, and the second preset identity information, where the preset public parameter includes a fourth hash function. For example, based on the preset sixth auxiliary formula h A =H 4 (ID A ,m A ,PK A ,T A ), a corresponding third auxiliary parameter is obtained according to the target information, the preset public parameter, the timestamp, the second preset public key information, and the second preset identity information, where h A is the third auxiliary parameter, H 4 is the fourth hash function, ID A is the second preset identity information, m A is the target information, PK A is the second preset public key information, and T A is the timestamp. When obtaining the third auxiliary parameter, verify whether the preset signature equation holds based on the third auxiliary parameter, the signature, the first auxiliary parameter, the second preset public key information, and the preset public parameter, where the preset public parameter includes the master public key. For example, obtain the preset signature equation h A S A (PK A +P pub )=R A , where h A is the third auxiliary parameter, S A is the signature, PK A is the second preset public key information of the second terminal, P pub is the master public key, and R Ais the first auxiliary parameter. Determine whether the preset signature equation holds according to the third auxiliary parameter, the signature, the second preset public key information, the master public key, and the first auxiliary parameter. If the preset signature equation holds, determine that the data information is authentic; if the preset signature equation does not hold, determine that the data information is not authentic.

[0047] In one embodiment, the data information obtained by aggregating signatures includes the timestamps of each second terminal. Verify whether the signature information is valid according to the target information to determine the authenticity of the data information, including: obtaining corresponding third auxiliary parameters according to multiple target information, preset public parameters, multiple second preset public key information, multiple timestamps, and multiple second preset identity information; verifying whether the preset aggregated signature equation holds based on the multiple third auxiliary parameters, the aggregated signature, the multiple second preset public key information, the multiple first auxiliary parameters, and the public parameters; if the preset aggregated signature equation holds, determine that the data information is authentic.

[0048] Exemplarily, for the data information obtained by aggregating signatures through an edge device, the data information obtained by the aggregation signature includes the timestamps of each second terminal. Corresponding third auxiliary parameters are obtained according to multiple target information, preset public parameters, multiple second preset public key information, multiple timestamps, and multiple second preset identity information. For example, based on the preset seventh auxiliary formula h i =H 4 (ID i , m i , PK i , T i ), where h i is each third auxiliary parameter, H 4 is the fourth hash function, ID i is the second preset identity information of each second terminal, m i is each target information, PK i is the second preset public key information of each second terminal, and T i is each timestamp, to obtain the third auxiliary parameter corresponding to each second terminal. After obtaining the auxiliary parameters of multiple second terminals, the second preset public key information of multiple second terminals, the first auxiliary parameter of multiple second terminals, the aggregated signature, and the preset public parameters, where the preset public parameters include the master public key, verify whether the preset aggregated signature equation holds. For example, based on the preset aggregated signature equation where S is the aggregated signature, h i is each third auxiliary parameter, PK i is the second preset public key information of each second terminal, P pub is the master public key, and R iThe first auxiliary parameter for each second terminal. Based on the auxiliary parameters of multiple second terminals, the first preset public keys of multiple second terminals, the first auxiliary parameters of multiple second terminals, the aggregated signature, and the master public key, determine whether the preset aggregated signature equation holds. If the preset aggregated signature equation holds, determine that the data information is authentic; if the preset aggregated signature equation does not hold, determine that the data information is not authentic.

[0049] In an embodiment of the present invention, a request message is sent to a second terminal, the data information corresponding to the request message is obtained, and a second auxiliary parameter is obtained through the first auxiliary parameter and the preset parameter in the data information. The ciphertext in the data information is decrypted using the second auxiliary parameter to obtain the target information, and whether the signature information in the data information is valid is verified through the target information to determine the authenticity of the data information. This realizes that during the process of decrypting and verifying the signature information, the secret parameter of the second terminal is not required, protecting the security of the data information. In addition, the first terminal can complete the verification of the signature information while decrypting, improving work efficiency. The elliptic curve public key cryptosystem is also adopted, and edge devices participate in the aggregated signature for batch message transmission, greatly reducing the computational amount and improving the execution efficiency.

[0050] Please refer to Figure 4 , Figure 4 which is a schematic flowchart of a registration method provided by an embodiment of the present invention. "Before sending a request message to the second terminal, it is necessary to register with the server."

[0051] Step S210: Receive the broadcast message sent after the server is initialized, where the broadcast message includes public parameters.

[0052] Receive the broadcast message sent after the server is initialized, where the broadcast message includes public parameters. For example, as Figure 2 or as Figure 3 shown, the first terminal and the server are in the same system, which includes second terminals and edge devices. There is at least one second terminal. The server generates a corresponding large prime number q according to the preset security parameters, and based on the preset elliptic curve public key cryptosystem and the large prime number q, obtains a cyclic additive group G of order q on the elliptic curve of the preset elliptic curve public key cryptosystem. A random generator p is obtained based on the cyclic additive group G. Four corresponding hash functions are obtained according to the cyclic additive group G. For example, the first hash function H 1 : G → {0, 1} * , the second hash function H 2 : {0, 1} * × G × G → Z q , the third hash function H 3 : {0, 1} * × G × {0, 1} * → {0, 1}l , the fourth hash function H 4 :{0,1} * ×{0,1} l ×G×{0,1} * →Z q , where G is a cyclic additive group, Z q is the integer group of large prime numbers, and l is the length of the pre-set message to be encrypted. The server obtains a number a in Z q as the master private key based on the pre-set random oracle model, and obtains the corresponding master public key according to the master private key a and the randomly generated element P. For example, based on the pre-set master public key formula p pub = ap, where a is the master private key, P is the randomly generated element, and p pub is the master public key. The server saves the obtained master private key a, and broadcasts the obtained large prime number q, the randomly generated element p, the master public key p pub , the integer group Z q , the first hash function H 1 :G→{0,1} * , the second hash function H 2 :{0,1} * ×G×G→Z q , the third hash function H 3 :{0,1} * ×G×{0,1} * →{0,1} l , the fourth hash function H 4 :{0,1} * ×{0,1} l ×G×{0,1} * →Z q as public parameters to each terminal in the system, so that the first terminal can obtain the public parameters in the broadcast information.

[0053] Step S220: Obtain the public parameters and send a registration application to the server based on the public parameters.

[0054] As Figure 2 or as Figure 3 shown, obtain the public parameters in the broadcast information and send a registration application to the server based on the public parameters. For example, when the first terminal receives the public parameters, it obtains the integer group Z q in the public parameters, randomly selects a number from the integer group Z q as the secret parameter of the first terminal, and obtains the public key of the first terminal according to the secret parameter and the randomly generated element. For example, based on the pre-set public key formula Y B = x B p, where Y B is the public key of the first terminal, and x Bis the secret parameter of the first terminal, and p is a randomly generated element. Generate the corresponding registration application information according to the public key of the first terminal. Exemplarily, obtain the first identity information of the first terminal, and generate the corresponding registration application information according to the first identity information and the public key. For example, based on the registration application formula REG B =(ID B ,Y B ), where ID B is the first identity information of the first terminal, Y B is the public key of the first terminal, REG B is the registration application information of the first terminal, and the registration application information of the first terminal includes the identity information of the first terminal and the public key of the first terminal. The first terminal sends a registration application to the server based on the registration application information, and saves the secret parameter x B to the tamper-proof hardware or tamper-proof software.

[0055] Step S230: Obtain the first part of the public key and the fourth auxiliary parameter sent by the server, generate the corresponding first public key information, and send the publication information, where the publication information includes the first public key information.

[0056] As Figure 2 or as Figure 3 shown, when the first terminal receives the fourth auxiliary parameter and the first part of the public key sent by the server, obtain the corresponding first part of the private key according to the fourth auxiliary parameter, the first part of the public key, the preset public parameter, and the secret parameter. For example, based on the first preset part of the private key formula obtain the corresponding first part of the private key, where d B is the first part of the private key of the first terminal, t B is the fourth auxiliary parameter corresponding to the first part of the private key, H B is the first hash function, x B is the secret parameter, U B is the first part of the public key of the first terminal. When obtaining the first part of the private key, determine the authenticity of the first part of the private key based on the preset part of the private key verification equation. If the preset part of the private key verification equation holds, determine that the first part of the private key is authentic; if the preset part of the private key verification equation does not hold, determine that the first part of the private key is not authentic. For example, obtain the preset part of the private key equation d B p = p pub +l B U B , where d B is the first part of the private key of the first terminal, p is the randomly generated element, p pub is the main public key, l B is H 2 (ID B ,U B ,YB ), U B is the first partial public key of the first terminal, where H 2 is the second hash function, ID B is the first identity information of the first terminal, U B is the first partial public key of the first terminal, Y B is the public key of the first terminal. When it is determined that the first partial private key is authentic, save the complete first public key information and announce the first public key information and the first identity information to other terminals in the system. For example, based on the first preset public key generation formula PK B = Y B + l B + U B , where PK B is the first public key information, l B is H 2 (ID B , U B , Y B ), where H 2 is the second hash function, ID B is the first identity information of the first terminal, U B is the first partial public key of the first terminal, Y B is the public key of the first terminal. If it is determined that the first partial private key is not authentic, resend the registration application information to the server.

[0057] Before obtaining the first partial public key and the fourth auxiliary parameter sent by the server, when the server receives the registration application information REG B sent by the first terminal, obtain the registration application information REG B and the identity information ID B of the first terminal and the public key Y B of the first terminal in it. Obtain the announced public parameters, randomly select a number from the integer group Z q in the public parameters as the parameter v B , and generate the first partial public key of the first terminal according to the parameter v B and the random generator p. For example, based on the preset first partial public key formula U B = v B p, obtain the first partial public key of the first terminal, where U B is the first partial public key of the first terminal, v B is the parameter, and p is the random generator.

[0058] When obtaining the first partial public key of the first terminal, determine the first partial private key of the first partial public key of the first terminal. In an embodiment, obtain the first partial private key of the first terminal according to the parameter and the public parameter. For example, based on the first preset partial private key formula dB = a + l B v B , to obtain the first partial private key of the first terminal, where d B is the first partial private key of the first terminal, a is the master private key, v B is a parameter, l B is H 2 (ID B , U B , Y B ), where H 2 is the second hash function, ID B is the identity information of the first terminal, U B is the first partial public key of the first terminal, Y B is the public key of the first terminal. When obtaining the first partial private key of the first terminal, the fourth auxiliary parameter of the first partial private key is obtained according to the public parameters. For example, based on the seventh preset auxiliary formula to obtain the fourth auxiliary parameter, and obtain the fourth auxiliary parameter corresponding to the first partial private key, where t B is the fourth auxiliary parameter corresponding to the first partial private key, d B is the first partial private key of the first terminal, H 1 is the second hash function, v B is a parameter, Y B is the public key of the first terminal. When obtaining the fourth auxiliary parameter, the fourth auxiliary parameter and the first partial public key are sent to the first terminal. Among them, registering with the server is not only for the first terminal, but also includes other terminals.

[0059] In the embodiments of the present invention, adaptively chosen plaintext unforgeability is achieved, and the effects of message authentication, unlinkability, resistance to modification attacks, resistance to replay attacks, and resistance to man-in-the-middle attacks can be realized.

[0060] Please refer to Figure 5 , Figure 5 which is the schematic flowchart of an encryption method for 5G terminal data provided by the embodiments of the present invention.

[0061] Step S310: Receive the request information sent by the first terminal, and determine the target information corresponding to the request information and the timestamp of the target information.

[0062] Such as Figure 2 or such as Figure 3Receives the request information sent by the first terminal, and verifies whether the identity of the first terminal is legal according to the request information. The request information includes the first identity information and the first public key information of the first terminal, and verifies whether the identity of the first terminal is legal according to the first identity information and the first public key information. For example, compare the obtained first identity information with the first preset identity information, and compare the first public key information with the first preset public key information. If the first identity information is consistent with the first preset identity information, and the first public key information is consistent with the first preset public key information, it is determined that the identity of the first terminal is legal. Among them, the first identity information and the first public key information, or the first preset identity information and the first preset public key information are in a corresponding relationship. For example, the first identity information is ID B , the first public key information is PK B . If the first preset identity information is ID B , and the first preset public key information corresponding to this ID B is PK B , it is determined that the identity of the first terminal is legal.

[0063] When determining that the identity of the first terminal is legal, based on the identification information in the request information, determine the target information and time stamp of the identification information. For example, the identification information includes character information or semantic identification, etc. Determine the target information corresponding to the request information according to the character information or semantic identification. When determining the target information, obtain the current time point and use this time point as the time stamp.

[0064] Step S320: Obtain a first auxiliary parameter and a second auxiliary parameter according to the preset public parameters.

[0065] The preset public parameters include a random generator and an integer group, and obtain the corresponding first auxiliary parameter according to the integer group and the random generator. For example, obtain the integer group Z q , and randomly select a number r q from this Z A based on the preset random oracle model. According to the first preset auxiliary formula R A = r A p to obtain the first auxiliary parameter, where R A is the first auxiliary parameter, r A is a random number in the integer group Z q , and p is the random generator. Obtain the corresponding second auxiliary parameter according to the preset public parameters and the first public key information. The demonstration example is that the preset public parameters include the master public key information and a random number. Based on the second preset auxiliary formula J A = r A (PK B + p pub ) to obtain the second auxiliary parameter, where p pub is the master public key information, rA Random number, PK B Is the first public key information, J A Is the second auxiliary parameter.

[0066] Step S330: Obtain the corresponding ciphertext and signature information according to the second auxiliary parameter and the target information, and send the ciphertext, signature information, timestamp, and the first auxiliary parameter to the first terminal or edge device as data information.

[0067] Encrypt the target information according to the second auxiliary parameter to obtain the corresponding ciphertext. A demonstration example is to encrypt the target information based on the second auxiliary parameter, preset public parameters, identity information, and timestamp to obtain the corresponding ciphertext. For example, the preset public parameters include a third hash function, and the target information is encrypted according to the second auxiliary parameter, the third hash function, the first identity information, and the timestamp to obtain the corresponding ciphertext. For example, based on the preset encryption formula Obtain the ciphertext corresponding to the target information, where C A Is the ciphertext, H 3 Is the third hash function, ID B Is the first identity information of the first terminal, J A Is the second auxiliary parameter, T A Is the timestamp, m A Is the target information. When obtaining the ciphertext corresponding to the target information, sign the ciphertext. A demonstration example is to obtain the corresponding third auxiliary parameter based on the preset public parameters, the second identity information of the second terminal, the second preset public key information, and the timestamp. For example, the preset public parameters include a fourth hash function, and the corresponding third auxiliary parameter is obtained according to the fourth hash function, the second identity information, the second preset public key information, and the timestamp. For example, based on the third auxiliary formula h A =H 4 (ID A ,m A ,PK A ,T A ) to obtain the third auxiliary parameter, where h A Is the third auxiliary parameter, ID A Is the second identity information of the second terminal, m A Is the target information, PK A Is the second preset public key information, T A Is the timestamp. Obtain the signature of the target information according to the third auxiliary parameter. An example is to obtain the signature of the target information according to the third auxiliary parameter, the preset secret value of the second terminal, the preset partial private key of the second terminal, and the random number. For example, based on the preset signature formula S A =r A / [h A (x A+d A ) to obtain the corresponding signature, where S A is the signature, r A is a random number in the integer group Z q , h A is the third auxiliary parameter, x A is the preset secret value of the second terminal, d A is the preset partial private key of the second terminal. Take the obtained first auxiliary parameter, ciphertext, signature information, and timestamp as the data information corresponding to the request information, and send it to Figure 2 the first terminal shown or to Figure 3 the edge device shown.

[0068] In the embodiments of the present invention, signing and encrypting the target information are achieved within one logical step, reducing the total computational amount and communication cost of encryption and signature. Using the key of the end-user and its own identity information as the generation parameter, the cumbersome certificate management and key escrow transactions are removed, simplifying the system settings, and also avoiding the certificate management and key escrow problems caused by single-point failures.

[0069] Please refer to Figure 6 , Figure 6 which is a schematic block diagram of the structure of a terminal provided by the embodiments of the present invention.

[0070] The terminal includes a first terminal and a second terminal. Among them, the first terminal or the second terminal includes a mobile terminal or a fixed terminal. The mobile terminal includes a mobile phone, etc., and the fixed terminal includes a desktop computer, etc.

[0071] Exemplarily, the terminal further includes a processor and a memory, and the memory is used to store a computer program.

[0072] The processor is used to execute the computer program and implement the foregoing two-layer service status detection method provided by the embodiments of the present invention when executing the computer program.

[0073] It should be understood that the processor may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0074] In an embodiment of the present invention, a computer-readable storage medium is further provided. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the processor implements any one of the verification method and the encryption method for 5G terminal data provided by the embodiments of the present invention.

[0075] Those of ordinary skill in the art can understand that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices, can be implemented as software, firmware, hardware, and appropriate combinations thereof. In the hardware implementation, the division of the functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be executed by several physical components in cooperation. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or may be implemented as hardware, or may be implemented as an integrated circuit, such as an application-specific integrated circuit. Such software can be distributed on a computer-readable storage medium, which may include a computer-readable storage medium (or non-transitory medium) and a communication medium (or transitory medium).

[0076] As is well known to those of ordinary skill in the art, the term computer-readable storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, program modules, or other data. The computer-readable storage medium includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, tape, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, as is well known to those of ordinary skill in the art, a communication medium typically contains computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium.

[0077] Exemplarily, the computer-readable storage medium may be an internal storage unit of the electronic device in the foregoing embodiment, such as the hard disk or memory of the electronic device. The computer-readable storage medium may also be an external storage device of the electronic device, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc., equipped on the electronic device.

[0078] The electronic device and computer-readable storage medium provided in the foregoing embodiments obtain data information corresponding to the request information by sending request information to a second terminal, where the data information includes ciphertext information, signature information, and a first auxiliary parameter; generate a corresponding second auxiliary parameter based on the first auxiliary parameter and a preset parameter; decrypt the ciphertext according to the second auxiliary parameter to obtain target information, and verify whether the signature information is valid according to the target information to determine the authenticity of the data information. Thus, the ciphertext is decrypted by the second auxiliary parameter obtained from the first auxiliary parameter, and it is verified whether the obtained target information is valid for the signature information, realizing that the secret parameter of the second terminal is not required during the processes of decrypting and verifying the signature information, protecting the security of the communication environment of the terminal, and enabling the first terminal to complete the verification of the signature information while decrypting, improving the work efficiency.

[0079] The above are only specific implementation manners of the embodiments of the present invention, but the protection scope of the embodiments of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed in the embodiments of the present invention can easily think of various equivalent modifications or substitutions, and these modifications or substitutions should all be covered within the protection scope of the embodiments of the present invention. Therefore, the protection scope of the embodiments of the present invention shall be subject to the protection scope of the claims.

Claims

1. A method for verifying 5G terminal data, applied to a first terminal, the method comprising: Sending request information to the second terminal to obtain data information corresponding to the request information, wherein the data information includes ciphertext, signature information, timestamp and first auxiliary parameter; Based on the first auxiliary parameter and the preset parameter, generating a corresponding second auxiliary parameter; Decrypting the ciphertext according to the second auxiliary parameter to obtain target information; Verify whether the signature information is valid according to the target information to determine the authenticity of the data information; The decrypting the ciphertext according to the second auxiliary parameter to obtain target information to determine the authenticity of the data information includes: Obtaining a corresponding third auxiliary parameter according to the target information, the preset public parameter, the timestamp, the second preset public key information, and the second preset identity information; Verify whether a preset signature equation holds true based on the third auxiliary parameter, the signature, the first auxiliary parameter, the second preset public key information, and the preset public parameter; If the preset signature equation holds true, the data information is determined to be authentic.

2. The 5G terminal data verification method according to claim 1, characterized in that: The signature information includes a signature or an aggregate signature; The sending request information to the second terminal to obtain data information corresponding to the request information includes: Sending a request message to a second terminal, and obtaining data information corresponding to the request message sent by the second terminal, wherein the data information includes a ciphertext, a signature, and a first auxiliary parameter; or, Sending request information to multiple second terminals, and obtaining data information corresponding to the request information sent by the edge device, wherein the data information includes an aggregate tuple and a first auxiliary parameter, and the aggregate tuple includes multiple ciphertexts and an aggregate signature; The edge device receives data information sent by each of the second terminals according to the request information, performs an aggregate signature on the signatures in each of the data information to obtain the data information, and sends the data information obtained by the aggregate signature to the first terminal.

3. The 5G terminal data verification method according to claim 1, characterized in that: The preset parameters include a preset partial private key and a preset secret parameter, and the generating a corresponding second auxiliary parameter based on the first auxiliary parameter and the preset parameter includes: Based on the first auxiliary parameter, the preset partial private key and the preset secret parameter, a corresponding second auxiliary parameter is generated.

4. The 5G terminal data verification method according to claim 1, characterized in that: The decrypting the ciphertext according to the second auxiliary parameter to obtain the target information includes: The ciphertext is decrypted based on the second auxiliary parameter, the timestamp, the preset public parameter, and the first preset identity information to obtain the target information.

5. The 5G terminal data verification method according to claim 2, characterized in that: The data information obtained by the aggregate signature includes the timestamp of each second terminal, and the verifying whether the signature information is valid according to the target information to determine the authenticity of the data information includes: Obtaining corresponding third auxiliary parameters according to the plurality of target information, the preset public parameters, the plurality of second preset public key information, the plurality of timestamps and the plurality of second preset identity information; Verify whether a preset aggregate signature equation holds true based on the plurality of third auxiliary parameters, the aggregate signature, the plurality of the second preset public key information, the plurality of the first auxiliary parameters and the public parameter; If the preset aggregate signature equation holds true, it is determined that the data information is authentic.

6. The 5G terminal data verification method according to claim 2, characterized in that: The data information includes the second identity information and the second public key information, and after sending the request information to the second terminal and obtaining the data information corresponding to the request information sent by the second terminal, the method further includes: determining the validity of the timestamp; Compare the second preset identity information with the second identity information, and compare the second preset public key information with the second public key information If the second preset identity information is consistent with the second identity information, and the second preset public key information is consistent with the second public key information, the timestamp is determined to be valid.

7. The 5G terminal data verification method according to claim 1, characterized in that: Before sending the request information to the second terminal, the method further includes: Receiving broadcast information sent by the server after initialization, wherein the broadcast information includes public parameters; Acquire the public parameters, and send a registration application to the server based on the public parameters; The first part of the public key and the fourth auxiliary parameter sent by the server are obtained, the corresponding first public key information is generated, and the publication information is sent, wherein the publication information includes the first public key information.

8. A method for encrypting 5G terminal data, applied to a second terminal, the method comprising: Receiving request information sent by the first terminal, and determining target information corresponding to the request information and a timestamp of the target information; Obtaining a first auxiliary parameter and a second auxiliary parameter according to a preset common parameter; Obtain corresponding ciphertext and signature information according to the second auxiliary parameter and the target information, and send the ciphertext, the signature information, the timestamp and the first auxiliary parameter as data information to the first terminal or edge device; The signature information is obtained by the following method: Obtaining a third auxiliary parameter corresponding to the target information based on the preset public parameter, the second identity information of the second terminal, the second preset public key information, and the timestamp; The signature information of the target information is obtained according to the third auxiliary parameter.

9. A terminal comprising a memory and a processor, wherein the memory is used to store a computer program; The processor is used to execute the computer program and implement the steps of the 5G terminal data verification method as described in any one of claims 1 to 7 and the steps of the 5G terminal data encryption method as described in claim 8 when executing the computer program.

10. A computer-readable storage medium for computer-readable storage, wherein the storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the 5G terminal data verification method as described in any one of claims 1 to 7, and the steps of the 5G terminal data encryption method as described in claim 8.

Images