A method and device for Beidou identity encryption authentication and information encryption transmission

Abstract

The present invention discloses a method for Beidou identity encryption authentication and information encryption transmission, and relates to computer software technology. The account and password are obtained from the server for the client by pre-assigning an authentication key, and a token with identity authentication information of pre-assigned authentication key, Beidou number, and validity period is distributed to the client corresponding to the account and password; the token is used as the unique identifier for information encryption transmission, and the identity authentication information is analyzed by the national secret algorithm to obtain a symmetric key; the client and the server transmit information through the symmetric key. The present invention also discloses a Beidou identity encryption authentication and information encryption transmission device. The present invention realizes that the Beidou network and the telecommunications network can perform secure information transmission, and the timeliness of information communication is not affected while ensuring secure communication.

Description

Technical Field

[0001] The present invention relates to computer software technology, and more specifically, to a Beidou identity encryption authentication and information encryption transmission method and device. Background Art

[0002] Since Beidou-3 completed its networking in 2020, Beidou has provided the world with basic satellite navigation functions such as high-precision positioning, timing, and international search, as well as additional short message communication services. Beidou short messages are divided into two types: professional short messages and civilian short messages. Among them, civilian short messages are mainly used by ordinary people in emergency situations and in areas where public mobile communication base stations are not covered. They can provide short message communication services similar to mobile phone terminals. The current Beidou short message communication is based on the Beidou-3 system short message communication civilian application service platform. The platform is divided into three layers from top to bottom, namely the core business layer, the data service layer, and the operation management layer.

[0003] As for the data service layer, up to now, the telecommunications network and the Beidou network have not yet been interoperable based on the data service layer. In order to improve and ensure the secure communication between the two networks, a method and device for identity encryption authentication and information encryption transmission between the Beidou network and the telecommunications network are designed. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a method and device for Beidou identity encryption authentication and information encryption transmission in view of the deficiencies in the prior art, so as to realize safe information transmission between the Beidou network and the telecommunication network, while ensuring the timeliness of information communication is not affected under the premise of ensuring safe communication.

[0005] The method of Beidou identity encryption authentication and information encryption transmission described in the present invention includes:

[0006] The identity authentication step is used to obtain the account and password for the client from the server through the pre-assigned authentication key, and distribute a token with the identity authentication information of the pre-assigned authentication key, Beidou number and validity period to the client corresponding to the account and password;

[0007] The information encryption step is used to use the token as the unique identifier for information encryption transmission, analyze the identity authentication information through the national secret algorithm to obtain a symmetric key; the client and the server transmit information through the symmetric key.

[0008] The identity authentication step includes:

[0009] In the first step, the client uses the telecommunications gateway Beidou short number and the pre-assigned authentication key to initiate a network access request to the server, and the server returns an account and password to the client according to the network access request information;

[0010] In the second step, the client sends the account number and password to the server through the HTTPS protocol for identity authentication;

[0011] Step 3: After the identity authentication is passed, the server uses the national secret asymmetric encryption algorithm SM2 to encrypt the identity authentication information to generate a token;

[0012] Step 4: Return the token to the client.

[0013] The identity authentication step also includes:

[0014] Step 5: After returning the token to the client, start the timer; if the timer exceeds the validity period, the token is deemed invalid.

[0015] If the token is invalid and the server receives the invalid token, it returns a prompt message to the client to prompt the client to re-authenticate.

[0016] After the identity authentication is passed, an interference code is added to the identity authentication information and then a token is generated.

[0017] The interference code is a telecommunications gateway number.

[0018] The steps of information encryption transmission include:

[0019] The first step is that the client sends the token to the server to request the public key from the server;

[0020] Step 2: If the token is valid, the identity authentication information is calculated using the national secret summary algorithm SM3 to obtain a summary; the summary is calculated using the national secret asymmetric encryption algorithm SM2 to obtain a public-private key pair; and the summary and the public key in the public-private key pair are returned to the client;

[0021] Step 3: After receiving the summary and public key, the client confirms the correctness of the summary; if the summary is confirmed to be correct, the pre-assigned authentication key and the validity period are calculated using the national secret symmetric encryption algorithm SM4 to obtain a symmetric key; the symmetric key is encrypted using the public key; and the encrypted symmetric key is transmitted to the server;

[0022] Step 4: The server decrypts the encrypted symmetric key using the private key in the public-private key pair; the server and the client encrypt and transmit the short message using the symmetric key.

[0023] After the server decrypts the encrypted symmetric key, it checks the pre-assigned authentication key and validity period in the symmetric key; and after the verification is passed, it performs encrypted transmission of the short message.

[0024] A Beidou identity encryption authentication and information encryption transmission device, comprising:

[0025] The identity authentication module is used to obtain the account and password for the client from the server through the pre-assigned authentication key, and distribute a token with the identity authentication information of the pre-assigned authentication key, Beidou number and validity period to the client corresponding to the account and password;

[0026] The information encryption module is used to use the token as the unique identifier for information encryption transmission, analyze the identity authentication information through the national secret algorithm to obtain a symmetric key; the client and the server transmit information through the symmetric key.

[0027] It also includes a key management module for managing the life cycle of the key.

[0028] Beneficial Effects

[0029] The advantages of the present invention are: the client obtains the corresponding account and password from the server through the pre-assigned authentication key, and then obtains the token required for information transmission and with a valid time limit through the account and password. The token is used as the unique identifier for information encryption transmission, and the identity authentication information is analyzed through the national secret algorithm to obtain the symmetric key. The client and the server transmit information securely through the symmetric key, thereby realizing the Beidou network and the telecommunications network to be able to transmit information securely, while ensuring the timeliness of information communication is not affected under the premise of ensuring secure communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 This is a flow chart of an implementation method of the identity authentication step of the present invention;

[0031] Figure 2 It is a schematic diagram of the implementation flow of the information encryption step of the present invention. DETAILED DESCRIPTION

[0032] The present invention will be further described below in conjunction with the embodiments, but it does not constitute any limitation to the present invention. Any limited number of modifications made by anyone within the scope of the claims of the present invention are still within the scope of the claims of the present invention.

[0033] See also Figure 1-Figure 2 The present invention discloses a Beidou identity encryption authentication and information encryption transmission method, which includes an identity authentication step and an information encryption step.

[0034] Among them, the identity authentication step is used to obtain the account and password for the client from the server through the pre-assigned authentication key, and distribute a token with the identity authentication information of the pre-assigned authentication key, Beidou number, and validity period to the client corresponding to the account and password. Figure 1 As described above, it is specifically implemented by the following steps.

[0035] In the first step, the client uses the telecom gateway Beidou short number and the pre-assigned authentication key to initiate a network access request to the server. The server returns an account and password to the client based on the network access request information. It is mainly for clients who are accessing the network for the first time. For clients who already have an account and password, the identity authentication step can be performed directly. As for the acquisition of the telecom gateway Beidou short number and the pre-assigned authentication key, users can directly apply to the operator to obtain them. The application of pre-assigned authentication keys can meet the access and application of multiple devices on the server, and can achieve a good cross-platform effect.

[0036] In the second step, the client sends the account and password to the server through the HTTPS protocol for identity authentication.

[0037] Step 3: After receiving the account number and password and passing the identity authentication, the server will use the national secret asymmetric encryption algorithm SM2 to encrypt the identity authentication information to generate a token.

[0038] Before encrypting the identity authentication information, first add the telecom gateway number as an interference code, and then encrypt it. Combining the characteristics of Beidou satellites and telecom gateways, by adding their unique elements as interference sources, the security of the business data transmission process can be effectively increased.

[0039] Step 4: Return the token to the client.

[0040] After that, when the client communicates with the server, it needs to attach the token to ensure the validity of the identity.

[0041] Step 5: After returning the token to the client, start the timer. If the timer exceeds the valid time, the token is considered invalid. If the token is invalid and the server receives the invalid token, it returns a prompt message to the client to prompt the client to re-authenticate. Repeat the above steps 2, 3, and 4.

[0042] The premise of encrypted transmission of information (such as business data / short message) is the security of the key. Therefore, the server and client need to clarify the security of the negotiation process for the key. After the negotiation process is secure, the secure transmission of business information can be ensured. The specific key negotiation process is implemented through the information encryption step.

[0043] like Figure 2 As shown, the information encryption transmission steps specifically include:

[0044] The first step is that the client sends the token to the server to request the public key from the server.

[0045] In the second step, after the server determines that the token is valid, it uses the national secret summary algorithm SM3 to calculate the identity authentication information to obtain a summary. Here, the identity authentication information should also be added with an interference code to ensure the security of the generated summary. The national secret asymmetric encryption algorithm SM2 is used to calculate the summary to obtain a public-private key pair. The summary and the public key in the public-private key pair are returned to the client.

[0046] Step 3: After the client receives the summary and public key, it must first confirm the correctness of the summary. If the summary is confirmed to be correct, the national secret symmetric encryption algorithm SM4 is used to calculate the pre-assigned authentication key and validity period to obtain the symmetric key. The symmetric key is then encrypted with the public key. Finally, the encrypted symmetric key is transmitted to the server.

[0047] Confirmation of the correctness of the summary. The summary is mainly generated through identity authentication information. The token distributed to the client already has identity authentication information. That is, the client has identity authentication information. Therefore, the client can also use the national secret summary algorithm SM3 to calculate the identity authentication information to obtain the summary. At this time, the client only needs to compare the summary generated by itself with the received summary to know the correctness of the received summary.

[0048] Step 4: The server uses the private key in the public-private key pair to decrypt the encrypted symmetric key to obtain the symmetric key. At this point, both the server and the client have the symmetric key. The server and the client can encrypt and transmit short messages through the symmetric key, thereby achieving secure information transmission between the Beidou network and the telecommunications network, and ensuring the timeliness of information communication while ensuring secure communication.

[0049] To further ensure the security and reliability of the key, after the server decrypts the received encrypted symmetric key, it needs to verify the pre-assigned authentication key and validity period in the symmetric key; and after the verification is passed, the short message can be encrypted and transmitted.

[0050] A Beidou identity encryption authentication and information encryption transmission device comprises an identity authentication module, an information encryption module and a key management module.

[0051] The identity authentication module is deployed on the server through Linux and provides an API interface to the outside world through the HTTPS protocol. The client obtains the corresponding account and password from the server through the pre-assigned authentication key, and then obtains the token required for information transmission through the account and password. If any of the above links goes wrong, the interaction will be terminated.

[0052] The information encryption module is used to use token as the unique identifier for information encryption transmission, and analyze the identity authentication information through the national secret algorithm to obtain the symmetric key. The client and server use the symmetric key to transmit information securely.

[0053] Regarding the specific implementation process of the identity authentication module and the information encryption module, it is consistent with the specific implementation methods of the identity authentication step and the information encryption step in the above-mentioned Beidou identity encryption authentication and information encryption transmission method, so it will not be repeated here.

[0054] The key management module is mainly used to manage the life cycle of keys, such as key generation, distribution, replacement, storage, backup, and destruction.

[0055] It should be noted that the national secret asymmetric encryption algorithm SM2, the national secret summary algorithm SM3 and the national secret symmetric encryption algorithm SM4 involved in the present invention are all existing technologies, and the present invention does not improve them.

[0056] The above is only a preferred embodiment of the present invention. It should be pointed out that for those skilled in the art, several modifications and improvements can be made without departing from the structure of the present invention, which will not affect the effect of the implementation of the present invention and the practicality of the patent.

Claims

1. A Beidou identity encryption authentication and information encryption transmission method, characterized in that: include, The identity authentication step is used to obtain the account and password for the client from the server through the pre-assigned authentication key, and distribute a token with the identity authentication information of the pre-assigned authentication key, Beidou number, and validity period to the client corresponding to the account and password; An information encryption step is used to use the token as a unique identifier for information encryption transmission, and analyze the identity authentication information through a national secret algorithm to obtain a symmetric key; The client and the server transmit information through the symmetric key; The information encryption steps include: The first step is that the client sends the token to the server to request the public key from the server; Step 2: If the token is valid, the identity authentication information is calculated using the national secret summary algorithm SM3 to obtain a summary; the summary is calculated using the national secret asymmetric encryption algorithm SM2 to obtain a public-private key pair; and the summary and the public key in the public-private key pair are returned to the client; Step 3: After receiving the summary and public key, the client confirms the correctness of the summary; if the summary is confirmed to be correct, the pre-assigned authentication key and the validity period are calculated using the national secret symmetric encryption algorithm SM4 to obtain a symmetric key; the symmetric key is encrypted using the public key; and the encrypted symmetric key is transmitted to the server; Step 4: The server decrypts the encrypted symmetric key using the private key in the public-private key pair; The server and the client encrypt and transmit short messages through the symmetric key; After the server decrypts the encrypted symmetric key, it checks the pre-assigned authentication key and validity period in the symmetric key; After verification, the short message will be encrypted and transmitted.

2. A Beidou identity encryption authentication and information encryption transmission method according to claim 1, characterized in that: The identity authentication step includes: In the first step, the client uses the telecommunications gateway Beidou short number and the pre-assigned authentication key to initiate a network access request to the server, and the server returns an account and password to the client according to the network access request information; In the second step, the client sends the account number and password to the server through the HTTPS protocol for identity authentication; Step 3: After the identity authentication is passed, the server uses the national secret asymmetric encryption algorithm SM2 to encrypt the identity authentication information to generate a token; Step 4: Return the token to the client.

3. A Beidou identity encryption authentication and information encryption transmission method according to claim 2, characterized in that: The identity authentication step also includes: Step 5: After returning the token to the client, start the timer; if the timer exceeds the validity period, the token is deemed invalid.

4. A Beidou identity encryption authentication and information encryption transmission method according to claim 3, characterized in that: If the token is invalid and the server receives the invalid token, it returns a prompt message to the client to prompt the client to re-authenticate.

5. A Beidou identity encryption authentication and information encryption transmission method according to claim 2, characterized in that: After the identity authentication is passed, an interference code is added to the identity authentication information and then a token is generated.

6. A Beidou identity encryption authentication and information encryption transmission method according to claim 5, characterized in that: The interference code is a telecommunications gateway number.

7. A Beidou identity encryption authentication and information encryption transmission device, characterized in that: include, The identity authentication module is used to obtain the account and password for the client from the server through the pre-assigned authentication key, and distribute a token with the identity authentication information of the pre-assigned authentication key, Beidou number and validity period to the client corresponding to the account and password; An information encryption module is used to use the token as a unique identifier for information encryption transmission, analyze the identity authentication information through a national secret algorithm to obtain a symmetric key; the client and the server transmit information through the symmetric key; The information encryption module specifically performs the following process steps: The first step is that the client sends the token to the server to request the public key from the server; Step 2: If the token is valid, the identity authentication information is calculated using the national secret summary algorithm SM3 to obtain a summary; the summary is calculated using the national secret asymmetric encryption algorithm SM2 to obtain a public-private key pair; and the summary and the public key in the public-private key pair are returned to the client; Step 3: After receiving the summary and public key, the client confirms the correctness of the summary; if the summary is confirmed to be correct, the pre-assigned authentication key and the validity period are calculated using the national secret symmetric encryption algorithm SM4 to obtain a symmetric key; the symmetric key is encrypted using the public key; and the encrypted symmetric key is transmitted to the server; Step 4: The server decrypts the encrypted symmetric key using the private key in the public-private key pair; the server and the client encrypt and transmit the short message using the symmetric key; After the server decrypts the encrypted symmetric key, it checks the pre-assigned authentication key and validity period in the symmetric key; and after the verification is passed, it performs encrypted transmission of the short message.

8. The device for Beidou identity encryption authentication and information encryption transmission according to claim 7, characterized in that: It also includes a key management module for managing the life cycle of the key.

Images