Method and device for secure exchange of keys, encryption and decryption in mesh network without center
By acquiring time and location information, randomly generating symmetric key bytes and broadcasting the public key, and combining symmetric and asymmetric encryption technologies, the security problem of decentralized management in Mesh networks is solved, enabling seamless access to real-time secure communication and device management.
Patent Information
- Application Number
- CN202210381162.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-04-12
- Publication Date
- 2025-11-18
- Estimated Expiration
- 2042-04-12
AI Technical Summary
The lack of centralized management in existing Mesh networks leads to insufficient security, and lost devices cannot be automatically deactivated, making it impossible to achieve effective information confidentiality and device management.
By acquiring the current time and location information, determining whether preset conditions are met, randomly generating and broadcasting symmetric key bytes, updating and saving the device public key, and realizing decentralized secure key exchange, encryption and decryption methods, the system utilizes symmetric and asymmetric encryption technologies to ensure information security.
It enables real-time secure communication in a decentralized network, ensuring that lost devices cannot decrypt information and can be seamlessly reconnected after loss, thus guaranteeing information security and the integrity of device management.
Smart Images
Figure CN114980085B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of wireless communication technology, specifically to a decentralized secure key exchange, encryption, and decryption method and device in a Mesh network. Background Technology
[0002] Mesh networks, also known as wireless mesh networks, are multi-hop networks evolved from ad hoc networks and are a key technology for solving the "last mile" problem. Wireless is an indispensable technology in the evolution towards next-generation networks. Wireless mesh can communicate collaboratively with other networks, offering a dynamic and continuously expandable network architecture where any two devices can maintain wireless interconnection.
[0003] However, existing Mesh networks are wireless self-organizing networks with dynamically changing network nodes. There is no central hub or server for forwarding, and broadcast data packets are not encrypted, so anyone can receive them. Moreover, when devices are used in the field, if a user loses the device, there is no central server to automatically disable the lost device. Summary of the Invention
[0004] Therefore, this application provides a decentralized secure key exchange, encryption, and decryption method and device for Mesh networks, to solve the problems of existing technologies such as the inability to manage Mesh networks, lack of security and confidentiality, and the inability to automatically disable lost devices.
[0005] To achieve the above objectives, this application provides the following technical solution:
[0006] Firstly, a decentralized secure key exchange method for a mesh network includes:
[0007] Get the current time and location information;
[0008] Determine whether the time and location information meet preset conditions;
[0009] If the time and location information meet the preset conditions, a symmetric key byte is randomly generated and the symmetric key byte and its own public key are broadcast periodically.
[0010] Receive symmetric key bytes and public key broadcast by other devices, update the corresponding byte bits of the symmetric encryption key according to the symmetric key bytes broadcast by the other devices, and record and save the public key broadcast by the other devices.
[0011] Furthermore, the symmetric encryption key is 32 bytes.
[0012] Furthermore, the missing byte of the symmetric encryption key is defaulted to 0xFF.
[0013] Furthermore, the time mentioned is the charging time.
[0014] Furthermore, the location mentioned is the location of the command center.
[0015] Secondly, a decentralized security encryption method for Mesh networks involves encrypting the information to be sent sequentially using a symmetric encryption key, one's own private key, and the public key of the receiving device.
[0016] Thirdly, a decentralized secure decryption method for Mesh networks is proposed, which decrypts the received information sequentially using the user's private key, the sending device's public key, and the symmetric encryption key.
[0017] Fourthly, a decentralized secure encryption method for Mesh networks encrypts the information to be sent sequentially using a symmetric encryption key and the user's private key.
[0018] Fifthly, a decentralized secure decryption method for Mesh networks is proposed, which decrypts the received information sequentially using the public key and symmetric encryption key of the sending device.
[0019] Sixthly, a decentralized security device for a mesh network includes:
[0020] The information acquisition module is used to acquire current time and location information;
[0021] The judgment module is used to determine whether the time and location information meets the preset conditions; if the time and location information meets the preset conditions, a symmetric key byte is randomly generated.
[0022] The broadcast module is used to periodically broadcast the symmetric key bytes and its own public key;
[0023] The receiving module is used to receive symmetric key bytes and public keys broadcast by other devices, update the corresponding byte bits of the symmetric encryption key according to the symmetric key bytes broadcast by the other devices, and record and save the public key broadcast by the other devices.
[0024] The encryption module is used to encrypt the information to be sent sequentially using a symmetric encryption key, its own private key, and the public key of the receiving device.
[0025] Alternatively, the information to be sent can be encrypted sequentially using a symmetric encryption key and one's own private key;
[0026] The decryption module is used to decrypt the received information sequentially using its own private key, the sending device's public key, and the symmetric encryption key.
[0027] Alternatively, the received information can be decrypted sequentially using the public key and symmetric encryption key of the sending device.
[0028] Compared with the prior art, this application has at least the following beneficial effects:
[0029] This application provides a decentralized secure key exchange, encryption, and decryption method and device in a Mesh network. The key exchange method includes: obtaining current time and location information; determining whether the time and location information meet preset conditions; if the time and location information meet the preset conditions, randomly generating a symmetric key byte and periodically broadcasting the symmetric key byte and its own public key; receiving symmetric key bytes and public keys broadcast by other devices, updating the corresponding bytes of the symmetric encryption key according to the symmetric key bytes broadcast by other devices, and recording and saving the public keys broadcast by other devices. This application achieves secure and confidential real-time communication without a central endpoint, and even if a device is lost, there is no fear of information leakage; if a lost device is found immediately, seamless access can be restored. Attached Figure Description
[0030] To more intuitively illustrate the prior art and this application, several exemplary figures are provided below. It should be understood that the specific shapes and structures shown in the figures should not generally be regarded as limiting conditions for implementing this application; for example, based on the technical concept disclosed in this application and the exemplary figures, those skilled in the art are able to easily make conventional adjustments or further optimizations to the addition / reduction / classification, specific shapes, positional relationships, connection methods, size ratios, etc. of certain units (components).
[0031] Figure 1 This is a flowchart of a decentralized secure key exchange method in a Mesh network, as provided in Embodiment 1 of this application. Detailed Implementation
[0032] The present application will be further described in detail below with reference to the accompanying drawings and specific embodiments.
[0033] In the description of this application: unless otherwise stated, "a plurality of" means two or more. The terms "first," "second," "third," etc., in this application are intended to distinguish the objects referred to and do not have any special meaning in terms of technical connotation (e.g., they should not be construed as an emphasis on importance or order). Expressions such as "comprising," "including," and "having" also mean "not limited to" (certain units, components, materials, steps, etc.).
[0034] The terms used in this application, such as "upper," "lower," "left," "right," and "middle," are generally used to facilitate intuitive understanding by referring to the accompanying drawings, and are not absolute limitations on the positional relationships in the actual product. Changes in these relative positional relationships, without departing from the technical concept disclosed in this application, should also be considered within the scope of this application.
[0035] Example 1
[0036] This embodiment provides a decentralized secure key exchange method in a Mesh network, including:
[0037] S1: Obtain current time and location information;
[0038] S2: Determine whether the time and location information meet the preset conditions;
[0039] Specifically, it involves determining whether the time coincides with the time when the equipment returns to the command center for unified charging at night, and determining whether the location information of the equipment is the command center based on GPS positioning.
[0040] S3: If the time and location information meet the preset conditions, a symmetric key byte is randomly generated and the symmetric key byte and its own public key are broadcast periodically;
[0041] S4: Receive the symmetric key bytes and public key broadcast by other devices, update the corresponding bytes of the symmetric encryption key according to the symmetric key bytes broadcast by other devices, and record and save the public key broadcast by other devices.
[0042] Specifically, if the time coincides with the time when devices return to the command center for unified charging and the device's location is the command center, then a key exchange mode is entered. In this mode, each device periodically broadcasts its public key multiple times, and other devices record and save this information. Simultaneously, each device randomly generates a byte and broadcasts it periodically multiple times. For example, the first device generates the first byte, the second device generates the second byte, and so on. Other devices receiving this message update the corresponding byte. Assuming there are 32 device terminals in the group, a 32-bit symmetric encryption key will be generated. If there are fewer than 32 devices, the missing bytes default to 'F'. After all devices have broadcast, a unified symmetric encryption key (Key) is generated across the network. If there are fewer than 32 devices, the missing bytes default to 0xFF. If a device is lost during the daytime operation, it cannot participate in the nighttime key exchange, cannot obtain the current Key, and will be unable to operate the following day.
[0043] If a new device joins the network, it can also obtain the public keys of other devices on the network when exchanging keys.
[0044] Example 2
[0045] The next day, when the field work was carried out, each device had the public key of the other devices, and each device had the symmetric unified encryption key Key that was jointly generated the night before.
[0046] Therefore, this embodiment provides a decentralized security encryption method for Mesh networks, namely, when sending a message one-to-one, the information to be sent is encrypted sequentially using a symmetric encryption key, one's own private key, and the public key of the receiving device.
[0047] For example, when the first device sends information to the second device, the pattern is as follows:
[0048] First, encrypt the information to be sent using a symmetric encryption key Key. Then, encrypt it again using the private key of the first device. Finally, encrypt it again using the public key of the second device.
[0049] Correspondingly, this embodiment provides a decentralized secure decryption method for Mesh networks, which decrypts the received information sequentially using the user's private key, the sending device's public key, and the symmetric encryption key.
[0050] For example, when the second device receives information sent by the first device, the pattern is as follows:
[0051] After receiving the information sent by the first device, the second device decrypts it using its private key, then the first device's public key, and finally the symmetric encryption key.
[0052] The decentralized security encryption and decryption method for Mesh networks provided in this embodiment implements a unified symmetric encryption key to ensure that the device has exchanged keys with the command center the night before last. Lost devices cannot decrypt the message. The private key of the first device is encrypted to ensure that the second device recognizes that the message was sent from the first device. The public key of the second device is encrypted to ensure that no other device can decrypt the message, thus achieving the effect of private transmission.
[0053] Example 3
[0054] The next day, when the field work was carried out, each device had the public key of the other devices, and each device had the symmetric unified encryption key Key that was jointly generated the night before.
[0055] Therefore, this embodiment provides a decentralized secure encryption method for Mesh networks, namely, mass messaging, in which the information to be sent is encrypted sequentially using a symmetric encryption key and one's own private key.
[0056] For example, when the first device sends a group message to all devices, the pattern is as follows:
[0057] The information to be sent is encrypted using a symmetric encryption key, and then encrypted again using the private key of the first device.
[0058] Correspondingly, this embodiment provides a decentralized secure decryption method for Mesh networks, which decrypts the received information sequentially using the public key of the sending device and the symmetric encryption key.
[0059] For example, when other devices receive the group message from the first device, the pattern is as follows:
[0060] The received information is first decrypted using the public key of the first device, and then decrypted again using the symmetric encryption key Key.
[0061] The decentralized security encryption and decryption method for Mesh networks provided in this embodiment addresses the issue that lost devices, having not participated in the key exchange process the previous night, cannot be decrypted using the unified symmetric encryption key. Instead, the message is decrypted using the public key of the first device to ensure it originated from that device.
[0062] Example 4
[0063] Embodiments of this application provide a decentralized security device for a Mesh network, comprising:
[0064] The information acquisition module is used to acquire current time and location information;
[0065] The judgment module is used to determine whether the time and location information meets the preset conditions; if the time and location information meets the preset conditions, a symmetric key byte is randomly generated.
[0066] The broadcast module is used to periodically broadcast the symmetric key bytes and its own public key;
[0067] The receiving module is used to receive symmetric key bytes and public keys broadcast by other devices, update the corresponding byte bits of the symmetric encryption key according to the symmetric key bytes broadcast by the other devices, and record and save the public key broadcast by the other devices.
[0068] The encryption module is used to encrypt the information to be sent sequentially using a symmetric encryption key, its own private key, and the public key of the receiving device.
[0069] Alternatively, the information to be sent can be encrypted sequentially using a symmetric encryption key and one's own private key;
[0070] The decryption module is used to decrypt the received information sequentially using its own private key, the sending device's public key, and the symmetric encryption key.
[0071] Alternatively, the received information can be decrypted sequentially using the public key and symmetric encryption key of the sending device.
[0072] In the Mesh network provided in this embodiment, there is no centralized security device. Each device has a private key and a public key. Each device has its own unique private key, which is stored in the device's secure area and cannot be cracked or read by outsiders. It also has its own unique public key, which is broadcast to everyone. Encryption with the private key must be decrypted with the public key, and encryption with the public key must be decrypted with the private key.
[0073] The Mesh network-based secure key exchange, encryption, and decryption method and device provided in this application achieve secure and confidential instant messaging without any central endpoint through asymmetric and symmetric encryption. Furthermore, it does not fear data leakage even if the device is lost, and can be seamlessly reconnected if the lost device is found immediately.
[0074] The technical features of the above embodiments can be combined in any way (as long as there is no contradiction in the combination of these technical features). For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described; these embodiments not explicitly written should also be considered to be within the scope of this specification.
[0075] The present application has been described in a relatively specific and detailed manner above through general descriptions and specific embodiments. It should be understood that, based on the technical concept of the present application, several conventional adjustments or further innovations can be made to these specific embodiments; however, as long as they do not depart from the technical concept of the present application, the technical solutions obtained by these conventional adjustments or further innovations also fall within the protection scope of the claims of the present application.
Claims
1. A method for secure key exchange without a central authority in a Mesh network, characterized in that, include: Get the current time and location information; The time mentioned is the charging time, and the location mentioned is the location of the command center. Determine whether the time and location information meet preset conditions; If the time and location information meet the preset conditions, a symmetric key byte is randomly generated and the symmetric key byte and its own public key are broadcast periodically; the symmetric encryption key is 32 bytes; the missing bytes of the symmetric encryption key are defaulted to 0xFF; Receive symmetric key bytes and public key broadcast by other devices, update the corresponding byte bits of the symmetric encryption key according to the symmetric key bytes broadcast by the other devices, and record and save the public key broadcast by the other devices.
2. A decentralized secure encryption method for Mesh networks, characterized in that, Obtain the updated symmetric encryption key, your own private key, and the public key of the receiving device in the Mesh network decentralized secure key exchange method described in claim 1. Then, encrypt the information to be sent sequentially using the symmetric encryption key, your own private key, and the public key of the receiving device.
3. A decentralized secure decryption method for Mesh networks, characterized in that, Obtain the updated symmetric encryption key, your own private key, and the public key of the sending device in the Mesh network decentralized secure key exchange method described in claim 1, and decrypt the received information sequentially using your own private key, the public key of the sending device, and the symmetric encryption key.
4. A decentralized secure encryption method for Mesh networks, characterized in that, Obtain the updated symmetric encryption key and your own private key in the Mesh network decentralized secure key exchange method described in claim 1, and encrypt the information to be sent sequentially using the symmetric encryption key and your own private key.
5. A decentralized secure decryption method for Mesh networks, characterized in that, Obtain the updated symmetric encryption key and the public key of the sending device in the Mesh network decentralized secure key exchange method described in claim 1, and decrypt the received information sequentially using the public key of the sending device and the symmetric encryption key.
6. A decentralized security device for a mesh network, characterized in that, include: The information acquisition module is used to acquire current time and location information; The time mentioned is the charging time, and the location mentioned is the location of the command center. The judgment module is used to determine whether the time and location information meets preset conditions; If the time and location information meets the preset conditions, a symmetric key byte is randomly generated. The broadcast module is used to periodically broadcast the symmetric key bytes and its own public key; the symmetric encryption key is 32 bytes; the missing bytes of the symmetric encryption key are defaulted to 0xFF; The receiving module is used to receive symmetric key bytes and public keys broadcast by other devices, update the corresponding byte bits of the symmetric encryption key according to the symmetric key bytes broadcast by the other devices, and record and save the public key broadcast by the other devices. The encryption module is used to encrypt the information to be sent sequentially using a symmetric encryption key, its own private key, and the public key of the receiving device; Alternatively, the information to be sent can be encrypted sequentially using a symmetric encryption key and one's own private key; The decryption module is used to decrypt the received information sequentially using its own private key, the sending device's public key, and the symmetric encryption key. Alternatively, the received information can be decrypted sequentially using the public key and symmetric encryption key of the sending device.