A Key Synchronization Method and System Based on Multidimensional Factors

Abstract

This invention discloses a key synchronization method and system based on multi-dimensional factors. The self-updating module automatically updates the synchronization key IV factor and the synchronization key KEY factor, while the synchronization key generation module obtains the synchronization key broadcast factor. Combined with the synchronization key IV factor and the synchronization key KEY factor, a three-dimensional factor is used to achieve key synchronization, thereby achieving zero interaction between the two parties in encrypted communication. The key changes and automatic synchronization are maintained according to the configured time and frequency requirements, strengthening the security dimension of the synchronization key and preventing the loss of a key at a certain node from causing the entire communication system to collapse. It also ensures that the synchronization keys of each level of node can be obtained when communicating across multiple levels of nodes.

Description

Technical Field

[0001] This invention relates to the field of secure communication technology, and more specifically to a key synchronization method and system based on multidimensional factors. Background Technology

[0002] Currently, symmetric key synchronization is a critical technology in encrypted communication networks. In current key synchronization processes, excessive interaction between the communicating parties disrupts normal encrypted communication. Furthermore, some solutions pre-load too much data; if a node or device loses its key, it could compromise the security of the entire encrypted communication network.

[0003] Therefore, how to improve the security of key synchronization is a problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0004] In view of this, the present invention provides a key synchronization method and system based on multi-dimensional factors. By employing a three-dimensional factor approach—synchronization key IV factor, synchronization key KEY factor, and synchronization key broadcast factor—key synchronization is achieved, enabling zero interaction between the encrypted communication parties. The key changes according to configured time and frequency requirements, and key synchronization is automatic. This strengthens the security dimension of the synchronization key and resolves the situation where the loss of a key at a single node leads to the collapse of the entire communication system.

[0005] To achieve the above objectives, the present invention adopts the following technical solution:

[0006] A key synchronization method based on multidimensional factors includes the following steps:

[0007] Step 1: Initially set the synchronization key IV, and perform self-update through cryptographic calculation to obtain the synchronization key IV factor;

[0008] Step 2: Initially set the synchronization key KEY, and perform self-update through encrypted calculation to obtain the synchronization key KEY factor;

[0009] Step 3: Obtain the synchronization key broadcast factor from the business system;

[0010] Step 4: Using the synchronization key KEY factor as the key, the synchronization key IV factor as the initialization vector, and the synchronization key broadcast factor as the plaintext, the plaintext is encrypted and calculated according to the key and the initialization vector to obtain the synchronization key;

[0011] Step 5: Store the synchronization key in the business system and return to Step 1.

[0012] Preferably, the initial synchronization key IV is set, and the synchronization key IV factor is obtained through cryptographic calculation and self-updating. The specific process is as follows:

[0013] Preset synchronization key IV, initial time, self-update frequency, and current time;

[0014] The number of self-updates is calculated based on the initial time, the self-update frequency, and the current time.

[0015] Using the synchronization key IV as the key, a preset initialization vector and plaintext are used, and a symmetric cryptographic operation serial method is employed to iteratively encrypt the plaintext according to the number of self-updates to obtain the synchronization key IV factor.

[0016] Preferably, the synchronization key IV factor is the ciphertext encrypted after iterative encryption operations.

[0017] Preferably, the initial synchronization key KEY is set, and the synchronization key KEY factor is obtained through cryptographic calculation and self-updating. The specific process is as follows:

[0018] Preset synchronization key KEY, initial time, self-update frequency, and current time;

[0019] The number of self-updates is calculated based on the initial time, the self-update frequency, and the current time.

[0020] Using the synchronization key KEY as the key, a preset initialization vector and plaintext are used, and the plaintext is iteratively encrypted using a symmetric cryptographic serial method according to the number of self-updates to obtain the synchronization key KEY factor.

[0021] Preferably, the synchronization key KEY factor is the ciphertext encrypted after iterative encryption operations.

[0022] A key synchronization system based on multidimensional factors includes: a self-updating module and a synchronization key generation module;

[0023] The self-update module initially sets the synchronization key IV and synchronization key KEY, and performs self-update through cryptographic calculations to generate synchronization key IV factor and synchronization key KEY factor, which are then sent to the synchronization key generation module.

[0024] The synchronization key generation module obtains the synchronization key broadcast factor and calculates the synchronization key by combining the synchronization key IV factor and the synchronization key KEY factor.

[0025] Preferably, the synchronization key broadcast factor is obtained in real time, and the synchronization key changes with the synchronization key broadcast factor; in the self-update module, the corresponding initialization time, self-update frequency, current time, initialization vector and plaintext are set for the synchronization key IV factor and the synchronization key KEY factor respectively, and the synchronization key IV factor and the synchronization key KEY factor are automatically updated through iterative encryption operation.

[0026] As can be seen from the above technical solution, compared with the prior art, the present invention discloses a key synchronization method and system based on multi-dimensional factors. The self-updating module automatically updates the synchronization key IV factor and the synchronization key KEY factor, and the synchronization key generation module obtains the synchronization key broadcast factor. Combined with the synchronization key IV factor and the synchronization key KEY factor, the three-dimensional factors are used to realize key synchronization, thereby achieving zero interaction between the two parties in encrypted communication. The key changes and automatic synchronization are maintained according to the configured time and frequency requirements, the security dimension of the synchronization key is strengthened, and the loss of a key at a certain node can prevent the entire communication system from collapsing. It also ensures that the synchronization keys of each level of node can be obtained when communicating across multiple levels of nodes. Attached Figure Description

[0027] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0028] Figure 1 The attached figure is a schematic diagram of the key synchronization system based on multidimensional factors provided by the present invention. Detailed Implementation

[0029] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0030] This invention discloses a key synchronization method based on multi-dimensional factors. It designs a synchronization key IV factor, a synchronization key KEY factor, and a synchronization key broadcast factor, employing three-dimensional factors to achieve key synchronization. This enables zero-interaction between the encrypted communication parties, maintaining key changes and automatic key synchronization according to configured time and frequency requirements. It strengthens the security dimension of the synchronization key, resolving the situation where the loss of a key at a single node leads to the collapse of the entire communication system.

[0031] A key synchronization method based on multidimensional factors includes the following steps:

[0032] S1: Initially set the synchronization key IV, and then perform self-update through cryptographic calculation to obtain the synchronization key IV factor;

[0033] S11: Preset synchronization key IV, initial time, self-update frequency, and current time;

[0034] S12: Calculate the number of self-updates based on the initial time, self-update frequency, and current time;

[0035] S13: Using the synchronization key IV as the key, preset the initialization vector and plaintext, and use the symmetric cryptographic operation serial method to iteratively encrypt the plaintext according to the number of self-updates to obtain the synchronization key IV factor;

[0036] S2: Initially set the synchronization key KEY, and then perform self-update through encrypted calculation to obtain the synchronization key KEY factor;

[0037] S21: Preset synchronization key KEY, initial time, self-update frequency and current time;

[0038] S22: Calculate the number of self-updates based on the initial time, self-update frequency, and current time;

[0039] S23: Using the synchronization key KEY as the key, preset the initialization vector and plaintext, and use the symmetric cryptographic operation serial method to iteratively encrypt the plaintext according to the number of self-updates to obtain the synchronization key KEY factor;

[0040] S3: Obtain the synchronization key broadcast factor from the business system;

[0041] S4: Use the synchronization key KEY factor as the key, the synchronization key IV factor as the initialization vector, and the synchronization key broadcast factor as the plaintext. Calculate the synchronization key by encrypting the plaintext based on the key and the initialization vector.

[0042] S5: Store the synchronization key in the business system and return it to S1, then update the synchronization key following the synchronization key broadcast factor.

[0043] To further optimize the above technical solution, the synchronization key IV factor is the ciphertext encrypted after iterative encryption operations.

[0044] To further optimize the above technical solution, the synchronization key KEY factor is the ciphertext encrypted after iterative encryption operations.

[0045] The corresponding synchronization method includes a multi-dimensional factor-based key synchronization system with a self-updating module and a synchronization key generation module. The self-updating module contains a synchronization key IV factor and a synchronization key KEY factor. The synchronization key generation module contains a synchronization key broadcast factor.

[0046] A key synchronization system based on multidimensional factors includes: a self-updating module and a synchronization key generation module;

[0047] The self-update module initially sets the synchronization key IV and synchronization key KEY, and performs self-update through cryptographic calculations to generate synchronization key IV factor and synchronization key KEY factor, which are then sent to the synchronization key generation module.

[0048] The synchronization key generation module obtains the synchronization key broadcast factor and calculates the synchronization key by combining the synchronization key IV factor and the synchronization key KEY factor.

[0049] To further optimize the above technical solution, the synchronization key broadcast factor is obtained in real time, and the synchronization key follows the change of the synchronization key broadcast factor. In the self-update module, the initialization time, self-update frequency, current time, initialization vector and plaintext are set for the synchronization key IV factor and the synchronization key KEY factor respectively. Through iterative encryption operation, the synchronization key IV factor and the synchronization key KEY factor are automatically updated respectively. Example

[0050] Before system startup, the system initial time T0 and factor self-update frequency Self_Fr need to be configured.

[0051] Synchronization key IV factor: This synchronization method is based on the preset synchronization key IV in the system; the synchronization key IV factor is automatically updated according to the configuration time, self-update frequency, and the current time obtained.

[0052] Self-updating method: Using the synchronization key IV as the key, the initialization vector is set to 0 or other fixed values, and the plaintext is set to 0 or other fixed values. Sequential encryption operations in symmetric cryptography are performed. The ciphertext obtained from each encryption operation is used as the synchronization key IV factor for the current update, and as the initialization vector for the next encryption operation. The ciphertext obtained from the first encryption operation is the first ciphertext, which is used as the first self-updating synchronization key IV factor. The second encryption operation uses the first ciphertext as the initialization vector and the synchronization key IV as the key, with the plaintext set to 0 or other fixed values, and performs encryption to obtain the second ciphertext, which is used as the second self-updating synchronization key IV factor, and as the initialization vector for the next encryption operation. This process continues until all iterations of encryption operations are completed, and the ciphertext is used as the initialization vector for the next encryption operation, ensuring the correlation between the ciphertexts.

[0053] The number of self-updates is calculated based on the initial time T0, the self-update frequency, and the current time T1.

[0054] That is: Self-update count (Self_Ti) = (t1-t0) / Self_Fr.

[0055] In summary: The synchronization key IV factor is the ciphertext encrypted using the synchronization key IV as the key and then encrypted a certain number of times using Self_Ti encryption.

[0056] Self_Ti takes values ​​of 1, 2, 3, 4, ...

[0057] Synchronization Key Factor: This synchronization method uses a preset synchronization key (KEY) in the system. The synchronization key factor is automatically updated based on the configured time, self-update frequency, and the current time.

[0058] Self-updating method: Same as the synchronization key IV factor, that is, using the synchronization key KEY as the key, setting the initialization vector to 0 or other fixed values, setting the plaintext to 0 or other fixed values, and performing symmetric cryptographic operations in serial mode, requiring correlation between the ciphertext blocks. The first ciphertext block is the first self-updating key synchronization key factor.

[0059] The number of self-updates is calculated based on the initial time T0, the self-update frequency (the self-update frequencies of the synchronization key IV factor and the synchronization key KEY factor can be different), and the current time T1.

[0060] That is: Self-update count (Self_Ti) = (t1-t0) / Self_Fr.

[0061] In summary: The synchronization key KEY factor is the ciphertext encrypted using the synchronization key KEY as the key and then encrypted a certain number of times using Self_Ti encryption.

[0062] Self_Ti takes values ​​of 1, 2, 3, 4...

[0063] The synchronization key IV factor and synchronization key KEY factor in each system are automatically updated according to the self-update frequency.

[0064] The self-update module ensures that newly joined systems, after updating and calculating the synchronization key IV factor and synchronization key KEY factor according to the above logic, directly jump to the current key state, that is, maintain synchronization with the synchronization key IV factor and synchronization key KEY factor of the already online business system. No multi-party interaction or communication is required. If the business system started running at 00:00 on January 1, 2000, newly joined devices need to maintain self-update synchronization with the already running system (i.e., the numerical values ​​of the synchronization key IV factor and synchronization key KEY factor). If the new device joins on January 1, 2001, a year later than the already online system, and if the update frequency is set to once a month, then the newly joined device, according to calculations, needs to update 12 times to maintain key state synchronization with the already online system.

[0065] Synchronization key generation module: The synchronization key generation module includes a synchronization key broadcast factor and uses the synchronization key IV factor and the synchronization key KEY factor to perform cryptographic operations to obtain the synchronization key.

[0066] Synchronization key broadcast factor: This factor is a 16-byte or multiple-of-16-byte data set that can be publicly disclosed. This factor is broadcast throughout the network and changed periodically.

[0067] Synchronization key calculation method: All systems use the same calculation method, that is: use the current synchronization key KEY factor as the key, use the synchronization key IV factor as the initialization vector, and use the synchronization key broadcast factor as the plaintext for encryption (the encryption operation of the serial mode of symmetric cryptography requires that the ciphertext be correlated before and after).

[0068] This invention features a multi-level node network with a tree-like topology, where a root node derives from multiple nodes, and each node further derives from others. Each level of node has a unique key, and keys are synchronized within the same level. For example, when encrypting 32 bytes of plaintext, the ciphertext of the first block (the first 16 bytes of the encrypted plaintext) can be used as the synchronization key for the first-level node, and the ciphertext of the second block (the last 16 bytes of the encrypted plaintext) can be used as the synchronization key for the second-level node, which can then be used across multiple levels of nodes. During cross-level node communication, the synchronization keys for other levels are obtained by encrypting the corresponding synchronization key broadcast factor based on the corresponding level block.

[0069] After the synchronization key is generated, it is stored in each system and automatically synchronizes with the periodic change of the synchronization key broadcast factor, without requiring interaction between the communicating parties. The synchronization key IV factor and the synchronization key KEY factor are automatically updated according to a set frequency, that is, the synchronization key is automatically updated according to a set frequency, and the synchronization key broadcast factor is used for calculation during the update.

[0070] like Figure 1 The diagram shows the block composition of a key synchronization system, including a self-updating module and a synchronization key generation module. The specific process of key synchronization in the key synchronization system is as follows:

[0071] 1) The self-update module includes the synchronization key IV factor and the synchronization key KEY factor. The self-update module needs to be initialized and configured, setting the initialization time and the self-update frequency. Then the module carrying the system can be shipped from the factory. After the module is powered on, the system will automatically run the synchronization key IV factor and the synchronization key KEY factor to update automatically.

[0072] 2) The update frequency of the synchronization key IV factor and the update frequency of the synchronization key KEY factor can be different. The two factors are updated according to their respective frequencies.

[0073] 3) The synchronization key generation module includes a synchronization key broadcast factor, which calls the synchronization key IV factor and the synchronization key KEY factor to calculate the synchronization key.

[0074] 4) The synchronization key is recalculated based on the change in the synchronization key broadcast factor.

[0075] 5) The synchronization key IV factor and the synchronization key KEY factor are updated separately.

[0076] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to the method section.

[0077] The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for key synchronization based on multi-dimensional factors, characterized in that, The method comprises the following steps: Step 1: initially setting a synchronization key IV, self-updating through encryption calculation, and obtaining a synchronization key IV factor; Step 2: initially setting a synchronization key KEY, self-updating through encryption calculation, and obtaining a synchronization key KEY factor; Step 3: obtaining a synchronization key broadcast factor from a business system; Step 4: encrypting a plaintext according to a key and an initialization vector to obtain a synchronization key, wherein the key is the synchronization key KEY factor, the initialization vector is the synchronization key IV factor, and the plaintext is the synchronization key broadcast factor; Step 5: storing the synchronization key into the business system and returning to step 1; The specific process of initially setting a synchronization key IV, self-updating through encryption calculation, and obtaining a synchronization key IV factor is as follows: presetting a synchronization key IV, an initial time, a self-updating frequency and a current time; calculating a self-updating number of times according to the initial time, the self-updating frequency and the current time; iteratively encrypting a plaintext according to the self-updating number of times to obtain a synchronization key IV factor, wherein the key is the synchronization key IV, the initialization vector and the plaintext are preset, and a symmetric cipher operation serial method is adopted; the synchronization key IV factor is encrypted ciphertext after the iteratively encrypting operation; The specific process of initially setting a synchronization key KEY, self-updating through encryption calculation, and obtaining a synchronization key KEY factor is as follows: presetting a synchronization key KEY, an initial time, a self-updating frequency and a current time; calculating a self-updating number of times according to the initial time, the self-updating frequency and the current time; iteratively encrypting a plaintext according to the self-updating number of times to obtain a synchronization key KEY factor, wherein the key is the synchronization key KEY, the initialization vector and the plaintext are preset, and a symmetric cipher operation serial method is adopted; the synchronization key KEY factor is encrypted ciphertext after the iteratively encrypting operation.

2. A key synchronization system based on the key synchronization method of claim 1, characterized by, The method comprises the following steps: a self-updating module and a synchronization key generation module; the self-updating module initially sets a synchronization key IV and a synchronization key KEY, respectively self-updating through encryption calculation, generates a synchronization key IV factor and a synchronization key KEY factor, and sends the synchronization key IV factor and the synchronization key KEY factor to the synchronization key generation module; the synchronization key follows a synchronization key broadcast factor in real time; the self-updating module sets corresponding initial times, self-updating frequencies, current times, initialization vectors and plaintexts for the synchronization key IV factor and the synchronization key KEY factor, respectively, and automatically updates the synchronization key IV factor and the synchronization key KEY factor through iteratively encrypting operation; the synchronization key generation module obtains a synchronization key broadcast factor, and calculates a synchronization key by combining the synchronization key IV factor and the synchronization key KEY factor; The specific process of initially setting a synchronization key IV, self-updating through encryption calculation, and obtaining a synchronization key IV factor is as follows: presetting a synchronization key IV, an initial time, a self-updating frequency and a current time; calculating a self-updating number of times according to the initial time, the self-updating frequency and the current time; The synchronous key IV is taken as a key, preset initialization vector and plaintext, and the plaintext is iteratively encrypted according to the self-updating times by using a symmetric cipher operation serial method to obtain a synchronous key IV factor; The synchronous key IV factor is encrypted ciphertext after the iteratively encryption operation; The specific process for obtaining the synchronous key KEY factor by self-updating through encryption calculation is as follows: The synchronous key KEY, initial time, self-updating frequency and current time are preset; The self-updating times are calculated according to the initial time, the self-updating frequency and the current time; The synchronous key KEY is taken as a key, preset initialization vector and plaintext, and the plaintext is iteratively encrypted according to the self-updating times by using a symmetric cipher operation serial method to obtain a synchronous key KEY factor; The synchronous key KEY factor is encrypted ciphertext after the iteratively encryption operation.

Images