Secure interaction method, apparatus and related device

Abstract

The application provides a secure interaction method and device and related equipment, which are executed by a first network element of a digital twin network. The method comprises the following steps: acquiring a policy sending message, wherein the policy sending message comprises information of a network element device address and a policy used for communication of a second network element; performing integrity protection and encryption on the policy sending message to obtain a first object file; sending the first object file to the second network element; and receiving a policy response message fed back by the second network element based on the first object file, wherein the policy response message comprises an interaction success message or an interaction failure message. Thus, the first network element sends the interaction content after integrity protection and encryption to the second network element, thereby realizing the effect of secure interaction of the first network element and the second network element.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of communication technology, and in particular to an interaction method and device and related equipment. BACKGROUND

[0002] Digital twin is a real-time mirror of physical entities in the digital world, and is becoming a new focus of global information technology development and industrial digital transformation. Digital twin network (DTN) is a network system with physical network entities and virtual twin bodies, and the two can be real-time interactive mapping. In this system, various network management and applications can use the network virtual twin body constructed by digital twin technology to efficiently analyze, diagnose, simulate and control the physical network based on data and models. In the prior art, the interaction between the digital twin network and the physical network layer is not configured from the security perspective, and thus the problem of how the digital twin network and the physical network interact securely arises. SUMMARY

[0003] The embodiments of the present application provide a secure interaction method, device and related equipment to solve the problem of how the digital twin network and the physical network interact securely.

[0004] To solve the above problems, the present application is implemented as follows:

[0005] In a first aspect, the embodiments of the present application provide a secure interaction method, which is executed by a first network element of a digital twin network, and the method comprises:

[0006] Obtaining a policy sending message, wherein the policy sending message comprises information of a network element device address and a policy used by a second network element for communication;

[0007] Performing integrity protection and encryption on the policy sending message to obtain a first object file;

[0008] Sending the first object file to the second network element;

[0009] Receiving a policy response message fed back by the second network element based on the first object file, wherein the policy response message comprises an interaction success message or an interaction failure message.

[0010] Optionally, before the policy sending message is obtained, the method further comprises:

[0011] Determining a shared key with the second network element;

[0012] Determining a communication connection between the first network element and the second network element according to the shared key.

[0013] Optionally, the sending the first object file to the second network element comprises:

[0014] sending the first object file to the second network element through a communication device, wherein the communication device is configured to check and modify the first object file.

[0015] In a second aspect, an embodiment of the present application provides a secure interaction method, which is executed by a second network element of a physical network, and the method comprises the following steps:

[0016] receiving a first object file sent by a first network element, wherein the first object file is obtained by performing integrity protection and encryption on a policy sending message;

[0017] decrypting and verifying the first object file to obtain a policy response message, wherein the policy response message comprises an interaction success message or an interaction failure message;

[0018] sending the policy response message to the first network element.

[0019] Optionally, before the receiving the first object file sent by the first network element, the method further comprises the following steps:

[0020] determining a shared key with the first network element;

[0021] determining a communication connection between the first network element and the second network element according to the shared key.

[0022] Optionally, the receiving the first object file sent by the first network element comprises:

[0023] receiving the first object file sent by the first network element through a communication device, wherein the communication device is configured to check and modify the first object file.

[0024] In a third aspect, an embodiment of the present application further provides a secure interaction method, which is executed by a communication device, and the method comprises the following steps:

[0025] receiving a first object file sent by a first network element;

[0026] checking and modifying the first object file;

[0027] sending the first object file after the checking and modifying to a second network element.

[0028] Optionally, the checking and modifying the first object file comprises:

[0029] determining a security level corresponding to the second network element;

[0030] checking and modifying the first object file according to the security level and historical data.

[0031] In a fourth aspect, an embodiment of the present application further provides a secure interaction device, comprising:

[0032] a first processor configured to obtain a policy sending message, wherein the policy sending message comprises a network element device address and policy information for a second network element to communicate; perform integrity protection and encryption on the policy sending message to obtain a first object file;

[0033] a first transceiver configured to send the first object file to the second network element; and receive a policy response message fed back by the second network element based on the first object file, wherein the policy response message comprises an interaction success message or an interaction failure message.

[0034] In a fifth aspect, an embodiment of the present application further provides a secure interaction device, comprising:

[0035] a second processor configured to perform decryption and verification on the first object file to obtain a policy response message, wherein the policy response message comprises an interaction success message or an interaction failure message;

[0036] a second transceiver configured to receive the first object file sent by a first network element, wherein the first object file is obtained by performing integrity protection and encryption on a policy sending message; and send the policy response message to the first network element.

[0037] In a sixth aspect, an embodiment of the present application further provides a secure interaction device, comprising:

[0038] a third processor configured to perform verification and modification on the first object file;

[0039] a third transceiver configured to receive the first object file sent by a first network element; and send the first object file after verification and modification to a second network element.

[0040] In a seventh aspect, an embodiment of the present application further provides a communication device, comprising a transceiver, a memory, a processor and a program stored in the memory and executable on the processor; and the processor is configured to read the program in the memory to implement the steps in the method of the first aspect, or the steps in the method of the second aspect, or the steps in the method of the third aspect.

[0041] In an eighth aspect, an embodiment of the present application further provides a readable storage medium for storing a program, wherein the program is executable by a processor to implement the steps in the method of the first aspect, or the steps in the method of the second aspect, or the steps in the method of the third aspect.

[0042] In the embodiment of the present application, an interaction method, device and related equipment are provided, the method is executed by a first network element of a digital twin network, and the method comprises the following steps: acquiring a policy sending message, the policy sending message comprising a network element device address and policy information used by a second network element for communication; performing integrity protection and encryption on the policy sending message to obtain a first object file; sending the first object file to the second network element; and receiving a policy response message fed back by the second network element based on the first object file, the policy response message comprising an interaction success message or an interaction failure message. Thus, the first network element sends the interaction content after integrity protection and encryption to the second network element, thereby realizing the effect of safe interaction between the first network element and the second network element. BRIEF DESCRIPTION OF DRAWINGS

[0043] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the description of the embodiments of the present application will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0044] Figure 1 is one of the flowcharts of the safe interaction method provided by the embodiments of the present application;

[0045] Figure 2 is an interaction diagram of a digital twin network and a physical network provided by the embodiments of the present application;

[0046] Figure 3 is the second flowchart of the safe interaction method provided by the embodiments of the present application;

[0047] Figure 4 is the third flowchart of the safe interaction method provided by the embodiments of the present application;

[0048] Figure 5 is a TSC flowchart provided by the embodiments of the present application;

[0049] Figure 6 is a structure diagram of a digital twin network and a physical network provided by the embodiments of the present application;

[0050] Figure 7 is one of the structure diagrams of the safe interaction device provided by the embodiments of the present application;

[0051] Figure 8 is the second structure diagram of the safe interaction device provided by the embodiments of the present application;

[0052] Figure 9 is the third structure diagram of the safe interaction device provided by the embodiments of the present application;

[0053] Figure 10 FIG. 1 is a structural schematic diagram of a communication device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0054] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some of the embodiments of the present application, but not all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0055] The terms "first", "second", and the like in the embodiments of the present application are used to distinguish similar objects, and do not necessarily indicate a specific order or a chronological sequence. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device that includes a series of steps or units does not necessarily limit to only those steps or units clearly listed, but can include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. In addition, "and / or" is used in the present application to represent at least one of the connected objects, for example, A and / or B and / or C represents 7 cases including A alone, B alone, C alone, A and B both exist, B and C both exist, A and C both exist, and A, B and C all exist.

[0056] The safety interaction method provided by the embodiments of the present application is described below.

[0057] Referring to Figure 1 , Figure 1 FIG. 1 is a structural schematic diagram of a communication device provided by an embodiment of the present application. Figure 1 The safety interaction method shown can be performed by a first network element of a digital twin network.

[0058] As Figure 1 shown, the safety interaction method can include the following steps:

[0059] Step 101, a policy sending message is acquired, and the policy sending message includes information of a network element device address and a policy for a second network element to communicate.

[0060] In the embodiment, the first network element of the digital twin network and the second network element of the physical network are both communication devices. For example, the first network element device can be a server, a data center, etc., and the second network element device can be a computer, a terminal, etc. Taking the first network element and the second network element as examples, in order to ensure the security of data interaction between the digital twin network and the physical network, a matching digital twin border proxy (DTBP) is added in the digital twin network and the physical network. The DTBP is responsible for message filtering and security policy management on the interface between the digital twin network and the physical network, and mainly serves as a border gateway of the two networks. The DTBP device is deployed in pairs and is mainly used to support authentication of the identities of both parties and provide confidentiality and integrity protection for the interactive information: all messages should be protected by integrity, and important messages should be transmitted by encryption. The DTBP device should support message filtering, attack detection and defense. For example, Figure 2 Figure 2 FIG. 1 is a schematic diagram of interaction between the digital twin network and the physical network in the embodiment, in which D-DTBP and I-DTBP represent the DTBP devices in the digital twin network and the physical network, respectively. The digital twin network generation policy (PDE) in the digital twin network sends a policy sending message to the D-DTBP in the digital twin network, and the policy sending message includes the address of the network element device of the physical network and the policy.

[0061] Optionally, before the policy sending message is acquired, the method further includes determining a shared key with the second network element and determining the communication connection between the first network element and the second network element according to the shared key.

[0062] Specifically, before the first network element and the second network element communicate, the D-DTBP and the I-DTBP negotiate a shared key through a certificate or a secure tunnel, and the communication connection between the first network element and the second network element is determined through the shared key.

[0063] Step 102: The policy sending message is integrity-protected and encrypted to obtain a first object file.

[0064] ​In the embodiment, the DTBP can provide encryption or integrity protection for the interactive message using an application layer security protection (JSON Web Encryption, JWE) mechanism, and provide a signature for the signaling modification required by the intermediate node twin security center (TWIN Security Center, TSC) on the interface using an application layer signature (JSON Web Signature, JWS) mechanism. Specifically, when the physical network is a single-domain network, i.e., there is only one physical network, the DTBP in the digital twin network receives a message and provides independent encryption and integrity protection for each JSON object in the message using a symmetric key, and generates a first object file, i.e., a JWE object.

[0065] Step 103: sending the first object file to the second network element.

[0066] In the embodiment, the D-DTBP sends the generated JWE object to the I-DTBP for subsequent verification and decryption. Optionally, the sending of the first object file to the second network element includes sending the first object file to the second network element through a communication device configured to check and modify the first object file. Specifically, when the physical network is a cross-domain network, i.e., there are multiple physical networks, the DTBP of the digital twin network receives a message and provides independent encryption and integrity protection for each JSON object in the message using a symmetric key, and sends the generated JWE object to the TSC. The TSC is responsible for cross-domain content checking, such as policy secondary verification and policy traceability, and the process is optional. The TSC can verify and modify the sent content, and the end DTBP can verify the authenticity of the policy modification. After the message is modified, the TSC signs the modified content and attaches a JWS object containing the signature and modified content to the back of the message, and sends it to the I-DTBP.

[0067] Step 104: receiving a policy response message fed back by the second network element based on the first object file, the policy response message including an interaction success message or an interaction failure message.

[0068] In the embodiment, after the I-DTBP of the physical network receives the first object file, the first object file is verified for confidentiality and integrity. Specifically, the first object file, i.e., the JWE object, is received from the TSC or the DTBP, so as to recover the original message from the digital twin network. The signature in the JWS object is continuously verified, and the corresponding content in the message is updated in combination with the modification of the intermediate node. The message is filtered, and whether the message is sent to the physical network is judged based on the access control policy. If all the verifications pass, an interaction success message is returned, and if the verification fails, an interaction failure message is returned. It should be noted that the steps in the embodiment are also applicable to the case where the physical network sends a message to the digital twin network, which is not described herein again.

[0069] The security interaction method of the embodiment of the present application solves the security problem of policy distribution by introducing a pair of matched border gateway proxy devices and twin security centers. The border gateway proxy device can provide confidentiality and integrity of the distributed message, and to some extent, prevent internal and external attacks. The twin security center can verify, audit and trace the policy, thereby ensuring the security of the distributed policy.

[0070] Referring to Figure 3 , Figure 3 is a flowchart of the security interaction method provided by the embodiment of the present application. The security interaction method of the embodiment of the present application can be executed by the second network element of the physical network.

[0071] As Figure 3 shown, the security interaction method can include the following steps:

[0072] Step 301, receiving a first object file sent by a first network element, the first object file being obtained after a message sent according to a policy is protected for integrity and encrypted.

[0073] In the embodiment, the D-DTBP sends the generated JWE object to the I-DTBP for subsequent verification and decryption. Optionally, the sending the first object file to the second network element includes: sending the first object file to the second network element through a communication device, and the communication device is configured to check and modify the first object file. The receiving the first object file sent by the first network element includes: receiving the first object file sent by the first network element through a communication device, and the communication device is configured to check and modify the first object file. Specifically, when the physical network is a cross-domain network, that is, there are multiple physical networks, at this time, the DTBP of the digital twin network receives the message and provides independent encryption and integrity protection for each JSON object in the message using a symmetric key, and sends the generated JWE object to the TSC. The TSC is responsible for cross-domain content checking, such as policy secondary verification and policy traceability, and the process is optional. The TSC can verify and modify the sent content, and the end DTBP can verify the authenticity of the policy modification. After the message is modified, the TSC signs the modified content and attaches the JWS object containing the signature and the modified content to the back of the message, and sends it to the I-DTBP.

[0074] Optionally, before the receiving the first object file sent by the first network element, the method further includes: determining a shared key with the first network element; and determining a communication connection between the first network element and the second network element according to the shared key. Specifically, before the first network element and the second network element communicate, the D-DTBP and the I-DTBP will negotiate a shared key through a certificate or a secure tunnel, and determine the communication connection between the first network element and the second network element through the shared key.

[0075] Step 302, decrypting and verifying the first object file to obtain a policy response message, the policy response message including an interaction success message or an interaction failure message.

[0076] In the embodiment, after the I-DTBP of the physical network receives the first object file, the first object file is verified for confidentiality and integrity. Specifically, the first object file, that is, the JWE object, is received from the TSC or the DTBP, so as to recover the original message from the digital twin network. The signature in the JWS object is continuously verified, and the corresponding content in the message is updated in combination with the modification of the intermediate node. The message is filtered, and it is judged whether the message is sent to the physical network based on an access control policy. After obtaining the verification result, a policy response message is returned to the digital twin network.

[0077] Step 303, sending the policy response message to the first network element.

[0078] In the embodiment, if all verifications pass, an interaction success message is returned, and if the verifications fail, an interaction failure message is returned. It should be noted that the steps in the embodiment are also applicable to the case where the physical network sends a message to the digital twin network, and will not be described herein again.

[0079] The data decryption method of the embodiment solves the security problem of policy distribution by introducing a pair of matched border gateway proxy devices and twin security centers. The border gateway proxy device can provide confidentiality and integrity of the distributed message and prevent internal and external attacks to a certain extent, and the twin security center can verify, audit and trace the policy, thereby ensuring the security of the distributed policy.

[0080] Referring to Figure 4 , Figure 4 is a flowchart of a security interaction method provided by the embodiment of the application. The security interaction method of the embodiment can be executed by a communication device.

[0081] Step 401: receiving a first object file sent by a first network element.

[0082] In the embodiment, the communication device is a TSC. Specifically, when the physical network is a cross-domain network, i.e., there are multiple physical networks, the DTBP of the digital twin network receives the message and provides independent encryption and integrity protection for each JSON object in the message using a symmetric key, and sends the generated JWE object to the TSC. The TSC is responsible for cross-domain content verification, such as policy secondary verification and policy tracing, and the process is optional. The TSC can verify and modify the sent content, and the opposite DTBP can verify the authenticity of the policy modification. After the message is modified, the TSC signs the modified content and attaches the JWS object containing the signature and the modified content to the back of the message, and sends it to the I-DTBP.

[0083] Step 402: verifying and modifying the first object file.

[0084] Step 403: sending the first object file after verification and modification to a second network element.

[0085] In the embodiment, referring to Figure 5 , Figure 5For the TSC flow diagram in the embodiment, optionally, the verifying and modifying the first object file comprises: determining a security level corresponding to the second network element; and verifying and modifying the first object file according to the security level and historical data. Specifically, the digital twin physical network can be a cellular access network, a cellular core network, or a data center network, a campus network. Objects A, B and C in the following figure represent respective cross-domain networks, and the cross-domain networks have different security levels. For heterogeneous cross-domain networks, when the policy is sent to the network border security gateway by the control center of the digital twin network layer, the twin security center can perform differential security configuration according to the different security levels of the physical network, and schedule and combine different security policies, thereby improving the efficiency of policy distribution.

[0086] TSC is mainly used for supplementary verification of the sent message. For example, secondary verification of the policy, TSC can compare the sending address and identity of the policy based on the historical policy library, and whether the sender of the policy matches the content of the policy. When the policy verification is correct, the verified information is signed by using a private key, indicating that the verification is correct. When the policy verification is suspicious, TSC selects the modified policy for distribution, signs the modified information by using a private key, and attaches it to the original information for distribution. When the policy verification fails, TSC directly sends a policy response message to the D-DTBP, and carries a interaction failure message.

[0087] The security interaction method of the embodiment of the application solves the security problem of policy distribution by introducing a pair of matching border gateway proxy devices and twin security centers. The border gateway proxy device can provide confidentiality and integrity of the distributed message, and to some extent, prevent internal and external attacks. The twin security center can verify, audit and trace the policy, thereby ensuring the security of the distributed policy.

[0088] The various optional implementation manners introduced in the embodiment of the application can be combined with each other to be implemented, or can be implemented alone, and the embodiment of the application does not limit this.

[0089] For the convenience of understanding, the following is illustrated by examples:

[0090] As shown in Figure 6 , Figure 6 The figure is a structure diagram of the digital twin network and the physical network in the embodiment. In order to ensure the security of the interaction between the digital twin network and the physical network, DTBP and TSC are introduced.

[0091] DTBP is responsible for message filtering and security policy management on the interface between the digital twin network and the physical network, and mainly serves as the border gateway of the two networks. The DTBP devices are deployed in pairs, and the main functions are as follows:

[0092] Supports authentication of both parties, provides message confidentiality and integrity protection for interactive information: all messages should be with integrity protection, important messages should be transmitted by encryption. DTBP device should support message filtering, attack detection and defense.

[0093] TSC is responsible for cross-domain content verification, such as policy secondary verification, policy traceability, etc. The process is optional. TSC can verify and modify the sent content, and the end DTBP can verify the authenticity of the policy modification.

[0094] Referring to Figure 7 , Figure 7 is one of the structural diagrams of the secure interaction device provided by the embodiments of the present application. As shown in Figure 7 , the secure interaction device 700 comprises:

[0095] The first processor 710 is configured to obtain a policy sending message, wherein the policy sending message comprises a network element device address and policy information for communication of a second network element; perform integrity protection and encryption on the policy sending message to obtain a first object file;

[0096] The first transceiver 720 is configured to send the first object file to the second network element, and receive a policy response message fed back by the second network element based on the first object file, wherein the policy response message comprises an interaction success message or an interaction failure message.

[0097] Optionally, the first processor 710 is further configured to determine a shared key with the second network element.

[0098] The communication connection between the first network element and the second network element is determined according to the shared key.

[0099] Optionally, the first transceiver 720 is further configured to send the first object file to the second network element through a communication device, wherein the communication device is configured to verify and modify the first object file.

[0100] The secure interaction device 700 can implement each process of the method embodiments in the embodiments of the present application Figure 1 and achieve the same beneficial effects. To avoid repetition, they will not be described here.

[0101] Referring to Figure 8 , Figure 8 is the second structural diagram of the secure interaction device provided by the embodiments of the present application. As shown in Figure 8 , the secure interaction device 800 comprises:

[0102] The second processor 810 is configured to decrypt and verify the first object file, and obtain a policy response message, wherein the policy response message comprises an interaction success message or an interaction failure message.

[0103] The second transceiver 820 is configured to receive the first object file sent by the first network element, and send the policy response message to the first network element.

[0104] Optionally, the second processor 810 is further configured to determine a shared key with the first network element.

[0105] The communication connection between the first network element and the second network element is determined according to the shared key.

[0106] Optionally, the second transceiver 820 is further configured to receive the first object file sent by the first network element through a communication device, wherein the communication device is configured to check and modify the first object file.

[0107] The security interaction apparatus 800 can implement various processes of the method embodiments and achieve the same beneficial effects. To avoid repetition, details are not described herein. Figure 3 The method embodiments and achieve the same beneficial effects. To avoid repetition, details are not described herein.

[0108] Referring to Figure 9 , Figure 9 is a structure diagram of a security interaction apparatus provided by the embodiments of the present application. As shown in Figure 9 , the security interaction apparatus 900 comprises:

[0109] The third processor 910 is configured to check and modify the first object file.

[0110] The third transceiver 920 is configured to receive the first object file sent by the first network element, and send the first object file after the check and modification to the second network element.

[0111] Optionally, the third processor 910 is further configured to determine a security level corresponding to the second network element.

[0112] The first object file is checked and modified according to the security level and historical data.

[0113] The embodiments of the present application further provide a communication device. Referring to Figure 10 , the communication device can comprise a processor 1001, a memory 1002, and a program 10021 stored in the memory 1002 and executable on the processor 1001.

[0114] In the case of the communication device being a first network element of a digital twin network, the program 10021 can implement the following steps when executed by the processor 1001:Figure 1 Steps in a corresponding method embodiment:

[0115] The method is executed by a first network element of a digital twin network, and the method comprises:

[0116] Obtaining a policy sending message, the policy sending message comprising a network element device address for the second network element to communicate and information of a policy;

[0117] Performing integrity protection and encryption on the policy sending message to obtain a first object file;

[0118] Sending the first object file to the second network element;

[0119] Receiving a policy response message fed back by the second network element based on the first object file, the policy response message comprising an interaction success message or an interaction failure message.

[0120] Optionally, before the policy sending message is obtained, the method further comprises:

[0121] Determining a shared key with the second network element;

[0122] Determining a communication connection between the first network element and the second network element according to the shared key.

[0123] Optionally, the first object file is sent to the second network element, comprising:

[0124] Sending the first object file to the second network element through a communication device, the communication device being used for checking and modifying the first object file.

[0125] In the case where the communication device is a second network element of a physical network, the program 10021 is executed by the processor 1001 to implement Figure 3 Steps in a corresponding method embodiment:

[0126] The method is executed by a second network element of a physical network, and the method comprises:

[0127] Receiving a first object file sent by a first network element, the first object file being obtained according to integrity protection and encryption on a policy sending message;

[0128] Decrypting and verifying the first object file to obtain a policy response message, the policy response message comprising an interaction success message or an interaction failure message;

[0129] Sending the policy response message to the first network element.

[0130] Optionally, before the first object file sent by the first network element is received, the method further comprises:

[0131] determining a shared key with the first network element;

[0132] determining a communication connection between the first network element and the second network element according to the shared key.

[0133] Optionally, the receiving the first object file sent by the first network element comprises:

[0134] receiving the first object file sent by the first network element through a communication device, wherein the communication device is configured to check and modify the first object file.

[0135] In the case of the communication device, the program 10021 is executed by the processor 1001 to implement Figure 4 corresponding method embodiments:

[0136] executed by the communication device, and the method comprises:

[0137] receiving the first object file sent by the first network element;

[0138] checking and modifying the first object file;

[0139] sending the first object file after the check and modification to the second network element.

[0140] Optionally, the checking and modifying the first object file comprises:

[0141] determining a security level corresponding to the second network element;

[0142] checking and modifying the first object file according to the security level and historical data.

[0143] The communication device of the embodiment of the application solves the security problem of policy distribution by introducing a pair of matched border gateway agent devices and twin security centers. The border gateway agent devices can provide confidentiality and integrity of the distributed message and prevent internal and external attacks to a certain extent. The twin security center can verify, audit and trace the policy, thereby ensuring the security of the distributed policy.

[0144] Those skilled in the art can understand that all or part of the steps of the above-mentioned embodiment methods can be completed by program instructions related to hardware. The program can be stored in a readable medium. The embodiment of the application also provides a readable storage medium, wherein the readable storage medium stores a computer program, and the computer program is executed by a processor to implement the above-mentioned Figure 1 or Figure 3 or Figure 4 corresponding method embodiments:

[0145] The method is executed by a first network element of a digital twin network, and comprises the following steps:

[0146] obtaining a policy sending message, wherein the policy sending message comprises a network element device address used for communication of a second network element and information of a policy;

[0147] performing integrity protection and encryption on the policy sending message to obtain a first object file;

[0148] sending the first object file to the second network element;

[0149] receiving a policy response message fed back by the second network element based on the first object file, wherein the policy response message comprises an interaction success message or an interaction failure message.

[0150] Optionally, before the step of obtaining the policy sending message, the method further comprises the following steps:

[0151] determining a shared key with the second network element;

[0152] determining a communication connection between the first network element and the second network element according to the shared key.

[0153] Optionally, the step of sending the first object file to the second network element comprises the following steps:

[0154] sending the first object file to the second network element through a communication device, wherein the communication device is used for checking and modifying the first object file.

[0155] Or, the method is executed by a second network element of a physical network, and comprises the following steps:

[0156] receiving a first object file sent by a first network element, wherein the first object file is obtained according to integrity protection and encryption on a policy sending message;

[0157] decrypting and verifying the first object file to obtain a policy response message, wherein the policy response message comprises an interaction success message or an interaction failure message;

[0158] sending the policy response message to the first network element.

[0159] Optionally, before the step of receiving the first object file sent by the first network element, the method further comprises the following steps:

[0160] determining a shared key with the first network element;

[0161] determining a communication connection between the first network element and the second network element according to the shared key.

[0162] Or, the method is executed by a communication device, and comprises the following steps:

[0163] receiving a first object file sent by a first network element;

[0164] checking and modifying the first object file;

[0165] sending the first object file after checking and modifying to a second network element.

[0166] Optionally, the checking and modifying the first object file comprises:

[0167] determining a security level corresponding to the second network element;

[0168] checking and modifying the first object file according to the security level and historical data.

[0169] The computer readable storage medium of the embodiments of the present application can adopt any combination of one or more computer readable media. The computer readable medium can be a computer readable signal medium or a computer readable storage medium. The computer readable storage medium may, for example, but is not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. More specific examples (non-exhaustive list) of the computer readable storage medium include: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, the computer readable storage medium can be any tangible medium containing or storing a program that can be used by or in connection with an instruction execution system, device or apparatus.

[0170] The computer readable signal medium can include a data signal propagated in a baseband or as a part of a carrier wave, in which a computer readable program code is carried. Such a propagated data signal can take multiple forms, including but not limited to an electromagnetic signal, an optical signal or any suitable combination thereof. The computer readable signal medium can also be any computer readable medium other than the computer readable storage medium, which can send, propagate or transmit a program for use by or in connection with an instruction execution system, device or apparatus.

[0171] The program code contained on the storage medium can be transmitted in any suitable medium, including but not limited to wireless, wire, optical cable, RF, etc., or any suitable combination thereof.

[0172] Computer program code for carrying out operations of the present application can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0173] The readable storage medium of the embodiments of the present application solves the security problem of policy distribution by introducing a pair of matched border gateway agent devices and twin security centers. The border gateway agent devices can provide confidentiality and integrity of the distribution message and prevent internal and external attacks to a certain extent. The twin security centers can verify, audit and trace the policy, thereby ensuring the security of the distributed policy.

[0174] The above describes the preferred embodiments of the present application. It should be noted that, for those skilled in the art, without departing from the principles of the present application, a number of improvements and refinements can be made, which should also be considered as the protection scope of the present application.

Claims

1. A secure interaction method, executed by a first network element of a digital twin network, characterized in that, The method includes: Obtain a policy sending message, the policy sending message including network element device address and policy information for communication with the second network element, the first network element and the second network element include a matching digital twin border proxy DTBP, the DTBP is the border gateway between the first network element and the second network element, the first network element includes D-DTBP, and the second network element includes I-DTBP; The DTBP performs integrity protection and encryption on the policy-sent messages to obtain a first object file. The DTBP uses the application layer security protection JWE mechanism to perform integrity protection and encryption on the policy-sent messages. The first object file is sent to the second network element via a communication device TSC, wherein the communication device TSC is used to verify and modify the first object file; Receive a policy response message fed back by the second network element based on the first object file, the policy response message including an interaction success message or an interaction failure message; Before sending the message according to the acquisition strategy, the method further includes: determining a shared key with the second network element; determining the communication connection between the first network element and the second network element according to the shared key, wherein the shared key is generated through negotiation between the D-DTBP and the I-DTBP via a certificate or a secure tunnel.

2. The method according to claim 1, characterized in that, Sending the first object file to the second network element includes: The first object file is sent to the second network element via a communication device TSC, which is used to verify and modify the first object file.

3. A secure interaction method, executed by a second network element of a physical network, characterized in that, The method includes: The system receives a first object file sent by a first network element through a communication device TSC. The first object file is obtained after integrity protection and encryption of the policy-sent messages. A matching digital twin border proxy (DTBP) is included between the first network element and the second network element. The DTBP is the border gateway between the first network element and the second network element. The first network element includes a D-DTBP, and the second network element includes an I-DTBP. The DTBP uses the application layer security protection (JWE) mechanism to perform integrity protection and encryption of the policy-sent messages. The communication device TSC is used to verify and modify the first object file. The first object file is decrypted and verified to obtain a policy response message. The policy response message includes an interaction success message or an interaction failure message. The DTBP uses the JWE application layer security protection mechanism to protect the integrity of the policy sending message and encrypt it. Before sending the policy response message to the first network element and receiving the first object file sent by the first network element, the method further includes: determining a shared key with the first network element; determining a communication connection between the first network element and the second network element based on the shared key, wherein the shared key is generated through negotiation between the D-DTBP and the I-DTBP via a certificate or a secure tunnel.

4. The method according to claim 3, characterized in that, The first object file sent by the first network element includes: The first network element receives a first object file sent by a communication device TSC, wherein the communication device TSC is used to verify and modify the first object file.

5. A secure interaction method, executed by a communication device TSC, characterized in that, The method includes: The system receives a first object file sent by a first network element through a communication device TSC. A matching digital twin border proxy (DTBP) is included between the first network element and the second network element. The DTBP is the border gateway between the first network element and the second network element. The first network element includes a D-DTBP, and the second network element includes an I-DTBP. The DTBP uses the application layer security protection (JWE) mechanism to perform integrity protection and encryption on the policy-sent messages. The communication device TSC is used to verify and modify the first object file. The first object file is verified and modified, which includes: determining the security level corresponding to the second network element; and verifying and modifying the first object file according to the security level and historical data. The verified and modified first object file is sent to the second network element.

6. A secure interactive device, characterized in that, include: A first processor is configured to acquire a policy sending message, the policy sending message including information about the network element device address and the policy used for communication with the second network element; The policy-sending messages are protected and encrypted for integrity to obtain a first object file. A matching digital twin border proxy (DTBP) is included between the first network element and the second network element. The DTBP is the border gateway between the first network element and the second network element. The first network element includes a D-DTBP and the second network element includes an I-DTBP. The DTBP uses the application layer security protection (JWE) mechanism to protect the integrity of the policy-sending messages and encrypt them. The first transceiver is used to send the first object file to the second network element via the communication device TSC; The second network element receives a policy response message based on the first object file. The policy response message includes an interaction success message or an interaction failure message. The communication device TSC is used to verify and modify the first object file. The DTBP uses the application layer security protection JWE mechanism to perform integrity protection and encryption on the policy sending message. The first processor is further configured to determine a shared key with the second network element; and to determine the communication connection between the first network element and the second network element based on the shared key, wherein the shared key is generated through negotiation between the D-DTBP and the I-DTBP via a certificate or a secure tunnel.

7. A secure interactive device, characterized in that, include: The second processor is used to decrypt and verify the first object file to obtain a policy response message. The policy response message includes an interaction success message or an interaction failure message. A matching digital twin border proxy (DTBP) is included between the first network element and the second network element. The DTBP is the border gateway between the first network element and the second network element. The first network element includes a D-DTBP, and the second network element includes an I-DTBP. The DTBP uses the application layer security protection (JWE) mechanism to perform integrity protection and encryption on the policy transmission message. The communication device TSC is used to verify and modify the first object file. The DTBP uses the application layer security protection (JWE) mechanism to perform integrity protection and encryption on the policy transmission message. The second transceiver is used to receive the first object file sent by the first network element through the communication device TSC, wherein the first object file is obtained after integrity protection and encryption of the policy sending message; and to send the policy response message to the first network element. The second processor is further configured to determine a shared key with the first network element; and to determine a communication connection between the first network element and the second network element based on the shared key, wherein the shared key is generated through negotiation between the D-DTBP and the I-DTBP via a certificate or a secure tunnel.

8. A secure interactive device, characterized in that, include: The third processor is used to verify and modify the first object file; The third transceiver is used to receive the first object file sent by the first network element through the communication device TSC; and to send the verified and modified first object file to the second network element. The first network element and the second network element are connected by a matching digital twin border proxy (DTBP). The DTBP is the border gateway between the first network element and the second network element. The first network element includes a D-DTBP, and the second network element includes an I-DTBP. The DTBP uses the application layer security protection (JWE) mechanism to perform integrity protection and encryption on the policy-sent messages. The communication device TSC is used to verify and modify the first object file. The third processor is also used to determine the security level corresponding to the second network element; The first object file is verified and modified based on the security level and historical data.

9. A communication device, comprising: A transceiver, a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that the processor is configured to read the program in the memory to implement the steps of the secure interaction method as described in any one of claims 1 to 2; or, the steps of the secure interaction method as described in any one of claims 3 to 4; or, the steps of the secure interaction method as described in claim 5.

10. A readable storage medium for storing a program, characterized in that, When the program is executed by the processor, it implements the steps of the secure interaction method as described in any one of claims 1 to 2; or, it implements the steps of the secure interaction method as described in any one of claims 3 to 4. Alternatively, the steps in the secure interaction method as described in claim 5.

Images