A key agreement system and method in a medical digital twin environment

Abstract

The application discloses a kind of medical digital twinborn environment under key negotiation system and method, comprising: trusted agency, patient, digital twinborn cloud server and hospital.Trusted agency is responsible for generating main public key / private key pair and system parameter, and help patient and hospital generate partial private key.Patients use wearable devices to collect medical data, transmit data to digital twinborn cloud server.Patients can also authorize digital twinborn cloud server to share data with hospital.Digital twinborn cloud server simulates physical space and stores data, receives medical data, and carries out the simulation of digital twinborn body.Digital twinborn cloud server shares the result of simulation with patient, and shares digital twinborn data with hospital.Hospital requests data as needed, remotely analyzes the health status of patient, and arranges treatment plan for patient.The application has the advantages that: accurate, real-time visual data is provided, and the security of patient's medical data and the authenticity of data source are ensured.

Description

Technical Field

[0001] This invention relates to the field of medical environment technology, and in particular to a certificateless key negotiation authentication system and method in a digital twin telemedicine environment. Background Technology

[0002] Digital twin (digital twin cloud server) technology integrates physical and digital systems, enabling real-time monitoring, prediction, optimization, and control of the physical system. The concept of digital twins was first proposed by NASA in its space technology roadmap in 2010; it involves creating a virtual digital model to reflect a physical entity. However, the implementation of digital twin technology involves massive data collection, processing, and sharing, raising serious privacy concerns. While the privacy issues of digital twin technology have not been fully resolved, ongoing research and initiatives promise to address this challenge in the near future. Despite these challenges, digital twin technology has the potential to transform various industries and sectors, including smart cities and smart healthcare. Applying digital twin technology to these areas can help managers achieve smart city operations and planning, and help healthcare institutions achieve precision medicine and personalized treatment. Digital twins promise to provide more efficient, accurate, and intelligent solutions for various industries and sectors. Supporting digital twin environments requires the collection, storage, transmission, and analysis of massive amounts of real-time data from sensors, devices, and systems in the physical world. Cloud computing technology plays a crucial role in enabling these functions by providing high-speed data transmission and processing capabilities. However, using cloud servers carries the potential risk of plaintext exposure during data transmission because cloud servers are untrusted third-party entities. Furthermore, storing data on servers provided by third-party cloud service providers raises concerns about data privacy and security. Therefore, developing a secure method to protect data privacy in digital twins is essential. Ensuring data integrity is a critical consideration in secure digital twin data sharing. When requesting data from a digital twin cloud server, users cannot guarantee data integrity. Since data may be tampered with, corrupted, or lost during transmission, users cannot guarantee data integrity, thus impacting the predictive capabilities and application value of the digital twin system. Various types of attacks, such as man-in-the-middle attacks and data tampering, can occur during real-time data transmission between users and cloud servers.

[0003] To protect the security, integrity, and confidentiality of communication data, as well as the authenticity of the identities of the communicating parties, security measures such as encryption and authentication must be taken to prevent these attacks. To implement these security measures, the communicating parties must negotiate and share keys used for encryption and decryption. These keys are then used for encryption and decryption operations. Therefore, to achieve secure digital twin data sharing, a certificateless keyagreement authentication scheme (CKAA) that meets the above requirements needs to be proposed.

[0004] Existing technology 1

[0005] In telemedicine information systems (TMIS), Khatoon et al. proposed a key negotiation mechanism between the client and the server [S. Khatoon, S.M. R. Ahman, M. Alrubaian and A. Alamri, "Provability-Preserved, Provable Secure, Mutually Authenticated Key Agreement Protocol for Healthcare in a Smart City Environment," in IEEE Access, vol.7, pp.47962-47971, 2019, doi:10.1109 / ACCESS.2019.2909556].

[0006] Disadvantages of existing technology 1

[0007] This technical solution lacks a data verification mechanism, making it vulnerable to attacks based on temporary information specific to known sessions. Furthermore, it incurs high computational and storage costs, and is unsuitable for client devices with limited storage space and functionality.

[0008] Existing technology 2

[0009] Wang et al. proposed a revocable certificateless authentication scheme [Y.Wang and Y.Liu, "RC2 Patient S: Revocable Certificateless Conditional Privacy-Preserving Authentication Scheme in WBANs," in IEEE Systems Journal, vol.16, no.4, pp.5675-5685, Dec.2022, doi:10.1109 / JSYST.2022.3152742]. This scheme utilizes the Elliptic Curve Discrete Logarithm (ECDL) method, significantly reducing computational costs. It also minimizes the overhead of real-time data transmission to the cloud and communication overhead.

[0010] Disadvantages of existing technology 2

[0011] If a random number can be chosen to replace the public key, thus replacing V... i and W i This allows attackers to impersonate legitimate customers and communicate with application providers. They can then obtain plaintext messages transmitted by the client. Therefore, this approach is vulnerable to public-key substitution attacks and fails to protect customer data privacy. Summary of the Invention

[0012] This invention addresses the shortcomings of existing technologies by providing a key negotiation system and method in a medical digital twin environment. In telemedicine, it utilizes a digital twin to provide accurate and real-time visualized data, while employing key negotiation for identity authentication during the sharing process of medical data, ensuring the security of patient medical data and the authenticity of the data source.

[0013] To achieve the above-mentioned objectives, the technical solution adopted by the present invention is as follows:

[0014] A key negotiation system in a medical digital twin environment includes: a trusted institution, a patient, a digital twin cloud server, and a hospital;

[0015] Trusted Authority: This is a registry where patients, hospitals, and digital twin cloud servers need to complete offline registration. It is considered fully trusted. It is responsible for generating master public / private key pairs and system parameters, helping patients and doctors generate their partial private keys.

[0016] Patients: Patients use mobile wearable devices to collect their own medical data. After real-time mutual authentication, the medical data is transmitted to a digital twin cloud server, facilitating remote monitoring of the patient's health by doctors. Furthermore, when a patient receives a request from the hospital to view their medical data, the patient can authorize the digital twin cloud server to share the data with the hospital.

[0017] Digital twin cloud server: The digital twin cloud server simulates a physical space and stores the generated data. After mutual authentication, it receives medical data from the patient's physical space. Then, the digital twin cloud server uses this data to simulate a digital twin in virtual space, and the simulation results are shared between the digital twin cloud server and the patient. Furthermore, after receiving confirmation from the patient, the digital twin cloud server can share the digital twin data with the hospital.

[0018] Hospital: The hospital requests data from the digital twin cloud server as needed. After mutual authentication between the patient and the hospital, the hospital can access the patient's medical data from the digital twin cloud server. Subsequently, the hospital remotely analyzes the patient's health, assesses the patient's condition based on this information, and arranges an appropriate treatment plan.

[0019] The present invention also discloses a certificateless key negotiation authentication method, which is implemented based on the above-mentioned certificateless key negotiation authentication system;

[0020] Symbol definition used: s TA P is the system's private key. TA s is the system's public key. i For the patient's private key, P i For the patient's private / public key, ID i For the patient's real identity, ID j For the true identity of the digital twin cloud server, id i Forged identity for the patient, ID j Forged identities for digital twin cloud servers, PK i =(X i Y i ) is the patient's full public key, sk i =(x i y i T is the patient's full private key. i / T j Req is the current timestamp. h The request information sent by the hospital, Res i The reply message sent to the patient, E(·) for encryption, D(·) for decryption, SK ij SK provides session keys between patients and digital twin cloud servers. hi H serves as the session key between patients and hospitals. i For a safe hash function,

[0021] The specific steps are as follows:

[0022] Step 1: System initialization;

[0023] The system performs initial setup, including generating the parameters and master key required by the system.

[0024] First, the trusted institution selects a random number s. TA As the system master key Then calculate the public key P. TA =s TA P; secondly, the trusted institution selects several secure hash functions. Finally, the trusted organization will assign the system's common parameters {P, P}. TA H i Broadcast, and to s TA Keep it confidential.

[0025] Step 2: Identity Registration;

[0026] Each patient, hospital, and digital twin cloud server registers with a trusted authority before joining the network. Patients and hospitals register, create identities, and register these identities with the system. During registration, each patient and hospital generates and stores their own private and public keys.

[0027] Step 3: Patient and digital twin cloud server authentication and session key generation;

[0028] A trusted institution issues private and public keys to patients and digital twin cloud servers, and broadcasts the corresponding public keys.

[0029] The patient obtains the public key of the digital twin cloud server and the public key of the region;

[0030] The patient selects a random number α i And calculate the verification parameter V i and unforgeable proof U i V i Used to verify patient identity, U i Used to verify server identity; patient calculates key length l i and random number v i ;

[0031] Patient uses session key k i The data is encrypted to obtain the encrypted result G. i The patient encrypted the message result G. i Verification parameter V i and timestamp T i Send to the digital twin cloud server;

[0032] After receiving the message, the digital twin cloud server calculates and verifies the parameter U. i and session key k i and using k i Decrypting G i To obtain the raw data;

[0033] Digital twin cloud server calculates key length l i and random number v i The system then verifies the information, and upon successful verification, the digital twin cloud server generates a response message (Res). j And calculate the verification parameter V j ;

[0034] Digital twin cloud server computing unforgeable proof U j Key length l j and random number v j and using session key k j The data is encrypted to obtain the encrypted result G. j ;

[0035] The digital twin cloud server will send the message: encrypted result G j Verification parameter V j and timestamp T i Send to the patient;

[0036] After receiving the message, the patient calculates the validation parameter U. j and session key k j and using k j Decrypting G j The raw data is obtained, the patient verifies it, and when the verification is successful, the patient and the digital twin cloud server share the session key SK. ij This is used for subsequent encryption and decryption operations;

[0037] Patients using SK ij Data generated in the physical space is encrypted, and the encrypted data is transmitted to the digital twin cloud server. Upon receiving the encrypted data, the digital twin cloud server uses SK... ij Decrypt the data and use it to create a digital twin of the physical space for simulation and analysis.

[0038] Step 4: Patient and hospital authentication and session key generation phase;

[0039] The hospital generates a request message (Req). h And calculate the verification parameter V h This is used to verify the patient's identity;

[0040] Hospital calculates non-forgeable certificate U h Key length l h and random number v h ;

[0041] Hospital calculates session key k h and using k h The data is encrypted to obtain the encrypted result G.h ;

[0042] The hospital will encrypt the message {result G} h Verify parameter V h timestamp T h Send to the patient;

[0043] After receiving the message, the patient calculates the validation parameter V. h and session key k h and using k h Decrypting G h To obtain the raw data;

[0044] Patient calculates key length l h and random number r h And verify that when the equation is successfully verified, the patient generates a response message Res. i And calculate the verification parameter V hi ;

[0045] Patient calculates non-forgeable proof U hi Key length l hi and random number v hi and using session key k hi The data is encrypted to obtain the encrypted result G. hi ;

[0046] The patient will send the message: Encrypted result G hi Verification parameter V hi and timestamp T h Send to the hospital;

[0047] After receiving the message, the hospital calculated and verified the parameter V. hi and session key k hi and using k hi Decrypting G hi This yields the raw data.

[0048] The hospital performs verification; upon successful verification, the hospital calculates the session key SK. hi This is used for subsequent encryption and decryption operations.

[0049] Furthermore, the specific process for identity registration in step 2 is as follows:

[0050] The patient selects a random number. Set X i =x i P, and submit its public key X to a trusted authority. i and real identity ID i Then the trusted authority will verify the identity ID. i The validity of the identity is verified. After verifying the identity, the trusted institution will select a random number. And calculate id i =H0(a i ID i X i ), Y i =a i P, calculate h i =H1(id) i P TA X i Y i ) and y i =(a i +h i s TA )mod q. Then use a secure channel to send {y i Y i id i}Sent to the patient. The patient will check equation y i P = Y i +h i P TA The validity of the data is verified by checking its validity. The registration process for the digital twin cloud server and the hospital is the same as that for the patient. The digital twin cloud server will send the public key (X). j Y j The hospital will send a public key (X). h Y h ).

[0051] Furthermore, the specific steps of step 3 are as follows:

[0052] 31) A trusted institution issues the private key s for the patient's area. i and broadcast the corresponding public key P i =s i P. Similarly, private key s i It will be sent to the digital twin cloud server, along with the corresponding public key P. j It will be broadcast to the digital twin cloud server.

[0053] 32) The patient obtains the public key X of the digital twin cloud server. j and the region's public key P j This is used for subsequent encryption and verification operations.

[0054] 33) The patient will choose a random number. And calculate V i =α i P, U i =α i X j , l i =H2(V i P i X i Yi T i ), v i =(α i H3(V i )+l i x i +s i +y i )mod q and k i =H4(V i U i T i The numerical value of the calculation result will be used in subsequent calculations.

[0055] 34) Patients using k i Encrypted data {v i id i X i Y i Get G i The patient will then send information {G} to the digital twin cloud server. i V i T i}

[0056] 35) The digital twin cloud server received information {G i V i T i At that time, the digital twin cloud server calculates relevant data U based on the received information. i =x j Q i k i =Hx(V i U i T i ) and through k i For G i Decrypt and retrieve data {v i id i X i Y i Then the digital twin cloud server calculates h. i =H1(id) i P TA X i Y i ) and l i =H2(V i P i X i Y i T i Finally, the digital twin cloud server will verify whether equation (1) holds true.

[0057] v i P = Vi H3(V i )+l i X i +P i +Y i +h i P TA (1)

[0058] 36) When equation (1) holds true, the digital twin cloud server will select a random number. The digital twin cloud server will calculate V j =β j P, U j =β j V i SK ij =H4(id) j id i U j ), l j =H2(V j P j X j Y j T i ) and v j =(β) j H3(V j )+l j x j +s j +y j The result of the calculation modulo q will be used in subsequent calculations. Where k... j =H4(V j U j T i ), and then by using k j For data {v j id j} Encryption to obtain G j Subsequently, the digital twin cloud server sent information {G} to the patient. j V j T i}. Among them, SK ij It serves as a session key between the patient and the digital twin cloud server.

[0059] 37) When the patient receives the message {G} j V j T i After that, the patient calculated U j =α i V j and k j =H4(V j U j Ti ) and through k j For G j Decrypt and obtain data {v j id j}, and calculate h j =H1(id) j P TA X j Y j ) and l j =H2(V j P j X j Y j T i If equation (2) holds, the patient will calculate SK. ij =H4(id) j id i U j ).

[0060] v j P = V j H3(V j )+l j X j +P j +Y j +h j P TA (2)

[0061] 38) After the patient and the digital twin cloud server complete mutual verification, they obtain the shared session key SK. ij The patient uses this key to encrypt data generated in the physical space, and then transmits the encrypted data to the digital twin cloud server. Upon receiving the data, the digital twin cloud server uses this data to create a virtual twin of the physical space for simulation and analysis.

[0062] Furthermore, the specific steps of step 4 are as follows:

[0063] 41) Before accessing the patient's data on the digital twin cloud server, the hospital needs to obtain two public keys: the patient's public key X. h and the public key P of the patient's region i These public keys will be used for subsequent encryption and verification operations. First, the hospital needs to generate a request message. The hospital calculates the following value based on predefined algorithms and rules: V h =Req h P, U h , l h and v h =(Req h H3(Vh )+l h x h +s h +y h () mod q, these values ​​will be used for subsequent calculations and verification. The hospital calculates k. h For data {v h id h X h Y h} Encryption to obtain G h Subsequently, the hospital sent the message {G} h V h T h Send it to the patient.

[0064] 42) The patient received the message {G} h V h T h After that, calculate the relevant data V. h and k h By using k h For G h Decrypt and obtain data {v h id h X h Y h}, then the patient calculates l h and r h =H1(id) h P TA X h Y h Finally, the patient will verify whether equation (3) holds true.

[0065] v h P = V h H3(V h )+l h X h +P h +Y h +r h P TA (3)

[0066] 43) When equation (3) is true, the patient generates a response message. The patient will calculate V hi =Re s i P, U hi SK hi , l hi and v hi =(Re s h H3(V hi )+l hi x i +s i+y i ) mod q, then by using k hi For {v hi id i} Encryption yields G hi Subsequently, the patient will send the information {G} hi V hi T h}Sent to the hospital. The session key between the hospital and the patient is SK. hi .

[0067] 44) When the hospital receives information from the patient {G} hi V hi T h After that, the hospital can calculate U. hi k hi By using k hi For G hi Decrypt and obtain data {v hi id i}, and calculate {v hi id i If equation (4) holds, the hospital will calculate SK. hi .

[0068] v hi P = V hi H3(V hi )+l hi X i +P i +Y i +h i P TA (4)

[0069] After successful authentication, the hospital and patient use the session key SK hi Encryption and decryption are performed to ensure the secure transmission of data.

[0070] Compared with the prior art, the advantages of the present invention are as follows:

[0071] This invention applies digital twin technology to the medical environment, enabling patients to receive remote, efficient, accurate, and real-time medical care, while using a certificateless key negotiation scheme to protect the privacy of patients' medical data.

[0072] By using digital twins to map physical entities, patients can save a lot of time when seeking medical treatment. Doctors can also obtain accurate and real-time visualized data to assist in the diagnosis of their condition. Virtual surgery can even be performed, reducing the risks of traditional surgery. At the same time, doctors can develop more intelligent and effective surgical plans.

[0073] This certificateless key negotiation authentication scheme does not rely on traditional public key infrastructure and certificate management, reducing storage costs for resource-constrained wearable devices, and uses elliptic curve discrete logarithm methods to reduce computational costs. Through key negotiation, the privacy of medical data and the integrity of the data source can be ensured during transmission. Attached Figure Description

[0074] Figure 1 This is a schematic diagram of the certificateless key negotiation identity authentication system in a digital twin telemedicine environment according to an embodiment of the present invention. Detailed Implementation

[0075] To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and examples.

[0076] I. Certificate-free key negotiation authentication system

[0077] like Figure 1 As shown, the system is simplified into four entities: trusted institution, patient, digital twin cloud server, and hospital. Detailed descriptions of each entity are as follows:

[0078] Trusted Authority: This is a registry where patients, hospitals, and digital twin cloud servers need to complete offline registration. It is considered fully trusted. Its main responsibility is generating master / public key pairs and system parameters, helping patients and doctors generate their partial private keys.

[0079] Patients: Patients use physical assets such as mobile wearable devices to collect their own medical data. After real-time mutual authentication, the medical data is transmitted to the digital twin cloud server, facilitating doctors' remote monitoring of the patient's health. Furthermore, when a patient receives a request from the hospital to view their medical data, the patient can authorize the digital twin cloud server to share the data with the hospital.

[0080] Digital twin cloud server: The digital twin cloud server has sufficient computing power to simulate the physical space and store the generated data. After mutual authentication, it receives medical data from the patient's physical space. Then, the digital twin cloud server uses this data to simulate a digital twin in virtual space, and the simulation results are shared between the digital twin cloud server and the patient. Furthermore, after receiving confirmation from the patient, the digital twin cloud server can share the digital twin data with the hospital.

[0081] Hospital: The hospital requests data from the digital twin cloud server as needed. After mutual authentication between the patient and the hospital, the hospital can access the patient's medical data from the digital twin cloud server. Subsequently, the hospital remotely analyzes the patient's health, assesses the patient's condition based on this information, and arranges an appropriate treatment plan.

[0082] II. Security Model

[0083] The CKAA scheme should meet multiple security requirements, including anonymity, unforgeability, authentication, and non-repudiation. Therefore, the following two types of adversaries should be considered.

[0084] 1) Type 1: Simulate a malicious user who can replace the public key of any patient, but cannot obtain the master key of a trusted institution.

[0085] 2) Type 2: Simulate a malicious trusted institution that can obtain the master key but cannot replace any patient's public key.

[0086] In a given game, if the opponent cannot win with a non-negligible advantage in probabilistic polynomial time (PPT), then CKAA is considered existentially unforgeable under adaptive choice messages and identity attacks.

[0087] III. Design Objectives

[0088] First, a communication model using cloud computing was established. This model enables data sharing in digital twin telemedicine.

[0089] Secondly, a certificateless key negotiation authentication method is proposed to ensure the integrity and privacy of data sharing in the digital twin environment. Due to the use of the elliptic curve discrete logarithm method, computational and verification costs are significantly reduced.

[0090] Finally, a comprehensive security proof and detailed performance evaluation of the certificateless key negotiation authentication method are provided, demonstrating its security and effectiveness.

[0091] IV. Certificate-Free Key Negotiation Authentication Method

[0092] 4.1 Design Overview

[0093] The certificateless key negotiation authentication method includes four stages: 1) system initialization; 2) patient and hospital registration; 3) patient and digital twin authentication and session key generation; 4) patient authentication with the hospital and generation of session key.

[0094] Table 1 lists the symbol definitions used throughout the plan. To gain a comprehensive understanding of the proposed protocol, we will use local patients and hospitals as examples. The entire process will be explained step-by-step below.

[0095] Table 1: Symbols and Explanations

[0096]

[0097] The steps of the certificateless key negotiation authentication method are as follows:

[0098] Step 1: System Initialization

[0099] During this stage, the system performs initial setup, including generating the parameters and master key required by the system.

[0100] First, the trusted institution selects a random number s. TA As the system master key Then calculate the public key P. TA =s TA P; secondly, the trusted institution selects several secure hash functions. Finally, the trusted organization will assign the system's common parameters {P,P} TA H i Broadcast, and to s TA Keep it confidential.

[0101] Step 2: Patient and Digital Twin Cloud Server Registration

[0102] Patients and hospitals register. They create their own identity and register it with the system. During the registration process, they also generate and save their private and public keys.

[0103] Each entity must register with a trusted authority to participate in the network. The process is as follows: The patient selects a random number. Set X i =x i P, and submit its public key X to a trusted authority. i and real identity ID i Then the trusted authority will verify the identity ID. i The validity of the identity is verified. After verifying the identity, the trusted institution will select a random number. And calculate id i =H0(a i ID i X i ), Y i =a i P, calculate h i =H1(id) i P TA X i Y i ) and y i =(a i +h i s TA )mod q. Then use a secure channel to send {y i Y i id i} Send to the patient. The patient will check equation y iP = Y i +h i P TA The validity of the data is verified by checking its validity. The registration process for the digital twin cloud server and the hospital is the same as that for the patient. The digital twin cloud server will send the public key (X). j Y j The hospital will send a public key (X). h Y h ).

[0104] Step 3: Patient and Digital Twin Cloud Server Authentication and Session Key Generation Phase

[0105] To securely transmit data generated in the physical space, the patient must authenticate with the digital twin cloud server. To ensure the legitimacy of both parties' identities, authentication is achieved through key negotiation, involving the issuance of private and public keys. During this phase, the patient and the digital twin cloud server authenticate with each other and generate a session key for encrypted communication. The patient signs the challenge sent by the digital twin cloud server using their private key and sends the signature along with their public key to the server. The digital twin cloud server uses the patient's public key to verify the validity of the signature and generates a new session key.

[0106] Prior to the authentication phase, the trusted authority issues the private key for the patient's region. i and broadcast the corresponding public key P i =s i P. Similarly, private key s i It will be sent to the digital twin cloud server, along with the corresponding public key P. j This information is broadcast to the digital twin cloud server. To verify the identity of the digital twin cloud server, the verification process includes exchanging information and generating a shared key using Diffie-Hellman key negotiation. The shared key is then used to verify the authenticity of data transmission between the patient and the digital twin cloud server.

[0107] 1) Before accessing the digital twin cloud server, the patient must first obtain the public key X of the digital twin cloud server. j and the region's public key P j These public keys will be used for subsequent encryption and verification operations. The patient will choose a random number. And calculate V i =α i P, U i =α i X j , l i =H2(V i P i X i Y i Ti ), v i =(α i H3(V i )+l i x i +s i +y i )mod q and k i =H4(V i U i T i These values ​​will be used in subsequent calculations. Then, by using k... i Encrypted data {v i id i X i Y i Get G i The patient will then send information {G} to the digital twin cloud server. i V i T i The patient has completed the first step of identity authentication with the digital twin cloud server through the above calculations. The next steps will involve further authentication and session key generation.

[0108] 2) The digital twin cloud server received information {G i V i T i At that time, the digital twin cloud server calculates relevant data U based on the received information. i =x j Q i k i =H4(V i U i T i ) and through k i For G i Decrypt and retrieve data {v i id i X i Y i Then the digital twin cloud server calculates h. i =H1(id) i P TA X i Y i ) and l i =H2(V i P i X i Y i T i Finally, the digital twin cloud server will verify whether (1) is true.

[0109] v i P = Vi H3(V i )+l i X i +P i +Y i +h i P TA (1)

[0110] 3) When (1) is true, the digital twin cloud server will select a random number. The digital twin cloud server will calculate V j =β j P, U j =β j V i SK ij =H4(id) j id i U j ), l j =H2(V j P j X j Y j T i ) and v j =(β) j H3(V j )+l j x j +s j +y j ) mod q, these values ​​will be used in subsequent calculations. Where k j =H4(V j U j T i ), and then by using k j For data {v j id j} Encryption to obtain G j Subsequently, the digital twin cloud server sent information {G} to the patient. j V j T i}. Among them, SK ij It serves as a session key between the patient and the digital twin cloud server.

[0111] 4) When the patient receives the message {G} j V j T i After that, the patient can calculate U. j =α i V j and k j =H4(V j U j T i) and through k j For G j Decrypt and obtain data {v j id j}, and calculate h j =H1(id) j P TA X j Y j ) and l j =H2(V j P j X j Y j T i If (2) is true, the patient will calculate SK. ij =H4(id) j id i U j ).

[0112] v j P = V j H3(V j )+l j X j +P j +Y j +h j P TA (2)

[0113] After the patient and the digital twin cloud server complete mutual authentication, they can obtain a shared session key SK. ij The patient uses this key to encrypt data generated in the physical space, and then transmits the encrypted data to the digital twin cloud server. Upon receiving the data, the digital twin cloud server uses this data to create a virtual twin of the physical space for simulation and analysis.

[0114] Step 4: Patient and Hospital Authentication and Session Key Generation Phase

[0115] When a hospital needs to access a patient's digital twin data for disease diagnosis, authentication through key negotiation is used to ensure the legitimacy of both parties in the communication. In this stage, the patient signs the challenge sent by the hospital using their session key and sends the signature to the hospital. The hospital verifies the validity of the signature using the patient's public key and generates the same session key. Before the authentication phase, the trusted institution issues a private key to the hospital. h and broadcast the corresponding public key P h =s h P.

[0116] 1) Before accessing the patient's data on the digital twin cloud server, the hospital needs to obtain two public keys: the patient's public key X. hand the public key P of the patient's region i These public keys will be used for subsequent encryption and verification operations. First, the hospital needs to generate a request message. The hospital calculates the following value based on predefined algorithms and rules: V h =Req h P, U h , l h and v h =(Req h H3(V h )+l h x h +s h +y h () mod q, these values ​​will be used for subsequent calculations and verification. The hospital calculates k. h For data {v h id h X h Y h} Encryption to obtain G h The specific calculation process is the same as step 1) in the patient and digital twin cloud server authentication. Subsequently, the hospital will send message {G} h V h T h This information is then sent to the patient. Through these steps, the hospital has completed the first step of patient authentication. The next steps will involve further authentication and session key generation.

[0117] 2) The patient receives information {G} h V h T h After that, calculate the relevant data V. h and k h By using k h For G h Decrypt and obtain data {v h id h X h Y h}, then the patient calculates l h and r h =H1(id) h P TA X h Y h The calculation process is the same as step 2) in the patient and digital twin cloud server authentication. Finally, the patient will verify whether equation (3) holds true.

[0118] v h P = V h H3(V h )+l h Xh +P h +Y h +r h P TA (3)

[0119] 3) When (3) is true, the patient generates a response message. The patient will calculate V hi =Re s i P, U hi SK hi , l hi and v hi =(Re s h H3(V hi )+l hi x i +s i +y i ) mod q, then by using k hi For {v hi id i} Encryption yields G hi The specific calculation process is the same as step 3) in the patient and digital twin cloud server authentication. Subsequently, the patient will transfer the information {G} hi V hi T h}Sent to the hospital. The session key between the hospital and the patient is SK. hi .

[0120] 4) When the hospital receives information from the patient {G} hi V hi T h After that, the hospital can calculate U hi k hi By using k hi For G hi Decrypt and obtain data {v hi id i}, and calculate {v hi id i If equation (4) holds, the hospital will calculate SK. hi .

[0121] v hi P = V hi H3(V hi )+l hi X i +P i +Y i +h i P TA (4)

[0122] After successful authentication, the hospital and the patient obtain the session key SK through key negotiation. hi The session key is shared between the patient and the digital twin cloud server, which uses it to encrypt medical data on the patient's digital twin. The encrypted data is then transmitted to the hospital, which uses SK... hi The data is then decrypted, and the decrypted medical data is analyzed and processed to make a more accurate and effective diagnosis of the patient's condition. This part of the authentication process is similar to the authentication process between the patient and the digital twin cloud server.

[0123] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0124] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0125] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0126] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1The steps of the function specified in one or more boxes.

[0127] Those skilled in the art will recognize that the embodiments described herein are intended to help the reader understand the implementation methods of the present invention, and should be understood that the scope of protection of the present invention is not limited to such specific statements and embodiments. Those skilled in the art can make various other specific modifications and combinations based on the technical teachings disclosed in this invention without departing from the spirit of the invention, and these modifications and combinations are still within the scope of protection of the present invention.

Claims

1. A key negotiation method in a medical digital twin environment, characterized in that: Symbol definitions used: For the system's private key, For the system's public key, For the patient's private key, For the patient's private / public key, To reveal the patient's true identity, To determine the true identity of the digital twin cloud server, To fabricate the patient's identity, Forged identities for digital twin cloud servers For the patient's entire public key, For the patient's full private key, / The current timestamp, The request message sent by the hospital The reply message sent to the patient. For encryption, To decrypt, For the session key between the patient and the digital twin cloud server, For the session key between patients and hospitals, For a safe hash function, ; The specific steps are as follows: Step 1: System initialization; The system performs initial setup, including generating the parameters and master key required by the system; First, the trusted institution selects a random number. As the system master key Then calculate the public key. Secondly, the trusted institution selects several secure hash functions. i = 1,2,3,4; finally, the trusted organization will assign the system's common parameters. Broadcast, and to Confidential; Step 2: Identity Registration; Each patient, hospital, and digital twin cloud server registers with a trusted authority before joining the network; patients and hospitals register; create identities, and register these identities with the system; During the registration process, the patient's and hospital's private and public keys are generated and saved. Step 3: Patient and digital twin cloud server authentication and session key generation; A trusted institution issues private and public keys to patients and digital twin cloud servers, and broadcasts the corresponding public keys. The patient obtains the public key of the digital twin cloud server and the public key of the region; The patient selects a random number. And calculate the verification parameters. and unforgeable certificates , Used to verify patient identity Used to verify server identity; patient calculates key length. and random numbers ; Patients use session keys Encrypt the data to obtain the encrypted result. The patient encrypted the message result. Verification parameters and timestamp Send to the digital twin cloud server; After receiving the message, the digital twin cloud server calculates and verifies the parameters. and session key and use Decryption To obtain the raw data; Digital twin cloud server calculates key length and random numbers The system then verifies the information, and upon successful verification, the digital twin cloud server generates a response message. And calculate the verification parameters. ; Digital twin cloud server computing unforgeable proof Key length and random numbers and using session keys Encrypt the data to obtain the encrypted result. ; The digital twin cloud server will send the message: encrypted result. Verification parameters and timestamp Send to the patient; After receiving the message, the patient calculates the validation parameters. and session key and use Decryption The raw data is obtained, the patient verifies it, and when the verification is successful, the patient and the digital twin cloud server share a session key. This is used for subsequent encryption and decryption operations; Patient use Data generated in the physical space is encrypted, and the encrypted data is transmitted to the digital twin cloud server. Upon receiving the encrypted data, the digital twin cloud server uses... Decrypt the data and use it to create a digital twin of the physical space for simulation and analysis; Step 4: Patient and hospital authentication and session key generation phase; Hospital generates request information And calculate the verification parameters. This is used to verify the patient's identity; Hospital calculation of non-forgeable certificates Key length and random numbers ; Hospital calculates session key and use Encrypt the data to obtain the encrypted result. ; The hospital will encrypt the message result. Verify parameters timestamp Send to the patient; After receiving the message, the patient calculates the validation parameters. and session key and use Decryption To obtain the raw data; Patient calculates key length and random numbers And verify that when the equation is successfully verified, the patient generates a response message. And calculate the verification parameters. ; Patient calculation of non-forgeable proof Key length and random numbers and using session keys Encrypt the data to obtain the encrypted result. ; The patient will send a message: encrypted results. Verification parameters and timestamp Send to the hospital; After receiving the message, the hospital calculated and verified the parameters. and session key and use Decryption To obtain the raw data; The hospital performs verification; upon successful verification, the hospital calculates the session key. This is used for subsequent encryption and decryption operations.

2. The key negotiation method in a medical digital twin environment according to claim 1, characterized in that: The specific process for identity registration in step 2 is as follows: The patient selects a random number. , set up and submit its public key to a trusted institution. and real identity Then the trusted institution will verify the identity. The validity of the identity will be verified; after verifying the identity, the trusted institution will select a random number. And calculate , , calculate and ; Then use a secure channel to Send to the patient; the patient will pass the examination equation. To check its correctness, we need to determine whether it is true or false. The registration process for digital twin cloud servers and hospitals is the same as that for patients; The digital twin cloud server will send the public key. The hospital will send a public key. .

3. The key negotiation method in a medical digital twin environment according to claim 1, characterized in that: The specific steps for step 3 are as follows: 31) A trusted institution issues the private key for the patient's area. and broadcast the corresponding public key. Similarly, the private key It will be sent to the digital twin cloud server, along with the corresponding public key. It will broadcast to the digital twin cloud server; 32) The patient obtains the public key of the digital twin cloud server. and the region's public key This is used for subsequent encryption and verification operations; 33) The patient will choose a random number. and calculate , , , and The numerical value of the calculation result will be used in subsequent calculations; 34) Patient use Encrypted data Get The patient will then send information to the digital twin cloud server. ; 35) The digital twin cloud server received the information. At that time, the digital twin cloud server calculates relevant data based on the received information. , and through right Decrypt to obtain data Then the digital twin cloud server calculates and Finally, the digital twin cloud server will verify whether equation (1) holds true. (1) 36) When equation (1) holds true, the digital twin cloud server will select a random number. Digital twin cloud servers will perform calculations , , , and The numerical value of the calculation result will be used in subsequent calculations; where Then by using Data Encryption ; Subsequently, the digital twin cloud server sent information to the patient. ;in As a session key between the patient and the digital twin cloud server; 37) When the patient receives the information Afterwards, the patient calculated and and through right Decrypt and obtain data and calculate and If equation (2) holds, the patient will calculate ; (2) 38) After the patient and the digital twin cloud server complete mutual verification, they obtain a shared session key. The patient uses this key to encrypt data generated in the physical space, and then transmits the encrypted data to the digital twin cloud server. After receiving the data, the digital twin cloud server uses this data to build a twin of the physical space in the virtual space to simulate and analyze the results.

4. The key negotiation method in a medical digital twin environment according to claim 1, characterized in that: The specific steps for step 4 are as follows: 41) Before accessing data from the patient's digital twin cloud server, the hospital needs to obtain two public keys: the patient's public key. Public key of the patient's location These public keys will be used for subsequent encryption and verification operations; first, the hospital needs to generate a request message. The hospital calculates the following values ​​based on predefined algorithms and rules: and These values ​​will be used for subsequent calculations and verifications; hospital calculations Data Encryption ; Subsequently, the hospital sent the message Send to the patient; 42) The patient received the information Then, calculate the relevant data. and By using right Decrypt and obtain data Then the patient calculates and Finally, the patient will verify whether equation (3) is true. (3) 43) When equation (3) is true, the patient generates a response message. The patient will calculate and Then by using right Encryption obtained ; Subsequently, the patient will provide the information. Send to the hospital; the session key between the hospital and the patient is... ; 44) When the hospital receives information from the patient Afterwards, the hospital can calculate By using right Decrypt and obtain data and calculate ; If equation (4) holds, the hospital will calculate ; (4) After successful authentication, the hospital and patient use the session key. Encryption and decryption are performed to ensure the secure transmission of data.

5. A key negotiation system in a medical digital twin environment, used to execute the key negotiation method in a medical digital twin environment as described in any one of claims 1 to 4, characterized in that, include: Trusted institutions, patients, digital twin cloud servers, and hospitals; Trusted Authority: This is a registry where patients, hospitals, and digital twin cloud servers need to complete offline registration. It is considered fully trusted. It is responsible for generating master public / private key pairs and system parameters, helping patients and doctors generate their partial private keys. Patients: Patients use mobile wearable devices to collect their own medical data. After real-time mutual authentication, the medical data is transmitted to the digital twin cloud server, which allows doctors to remotely monitor the patient's health. In addition, when a patient receives a request from the hospital to view medical data, the patient can authorize the digital twin cloud server to share the data with the hospital. Digital twin cloud server: The digital twin cloud server simulates the physical space and stores the generated data; it receives medical data from the patient's physical space after mutual authentication is completed; Then, the digital twin cloud server uses this data to simulate a digital twin in virtual space, and the simulation results are shared between the digital twin cloud server and the patient. Furthermore, after receiving confirmation from the patient, the digital twin cloud server can share the digital twin data with the hospital. Hospital: The hospital requests data from the digital twin cloud server as needed; after mutual authentication between the patient and the hospital, the hospital can obtain the patient's medical data from the digital twin cloud server; Subsequently, the hospital conducted a remote analysis of the patient's health, assessed the patient's condition based on this information, and arranged an appropriate treatment plan for the patient.

Images