A method and system for securely transferring work order data through one network

Abstract

The present invention discloses a method and system for managing the secure flow of work order data in one network, the method comprising: an administrator defines and creates system public parameters and generates a master key; then generates and distributes keys to processing personnel and customers respectively; after key distribution is completed, the processing personnel designates a work order receiving user, signs and encrypts the work order, and sends the ciphertext to the customer; if the customer only receives a single ciphertext, the ciphertext is directly verified and decrypted to access the work order data; if the customer receives multiple ciphertexts, multiple work order ciphertexts are aggregated to obtain an aggregated ciphertext; finally, the customer verifies and decrypts the aggregated ciphertext to obtain the specific contents of multiple work orders. The present invention designs an efficient identity-based signcryption algorithm to eliminate the problem of public key certificate management; constructs an offline / online signcryption algorithm to reduce the complexity of a single signcryption operation and improve real-time and concurrent processing capabilities; and solves the problem of decrypting batch data signcryption at the same time.

Description

Technical Field

[0001] The present invention relates to the field of information system security technology, and in particular to a method and system for managing the secure flow of work order data through a single network. Background Art

[0002] Work order management is a method or system for tracking, processing and monitoring workflows such as tasks, requests, and issues. Within an organization, especially an enterprise, institution or service provider, work order management helps to effectively organize and process various work tasks, thereby improving work efficiency, optimizing resource allocation, and providing a better customer service experience. Work order management is very important to ensure that tasks and processes within an organization can proceed in an orderly manner, especially in scenarios where a large number of tasks need to be processed and services need to be provided. With the rapid development of information technology, cloud computing, the Internet of Things, and 5G communication networks are integrated into all aspects of social development and people's production and life. One-network work order management is to uniformly manage, track and process various work orders through a network platform that integrates multiple devices and technologies to improve overall work efficiency and management quality.

[0003] The core of One-Network Work Order Management lies in the efficient and secure transfer of work order data. In order to ensure confidentiality and prevent tampering during the transfer of work order data, cryptographic methods are usually used. Currently, the main cryptographic methods used in One-Network Work Order Management and their characteristics are listed below:

[0004] Symmetric key encryption: represented by the national secret SM4 algorithm, the encryption and decryption parties in the symmetric key use the same key, which has the advantage of fast encryption and decryption speed. However, it relies on strict key negotiation, and the key is only held by the communicating parties, so it is difficult to effectively manage and maintain the key.

[0005] Public key encryption: represented by the national secret SM2 algorithm, in public key encryption, the user's public key is publicly released and used by other users to encrypt data. At the same time, a private key is secretly held for the user to decrypt data. Public key encryption does not require key negotiation. However, the efficiency is low, and the validity of the public key strictly depends on the public key certificate. The issuance and management of public key certificates will bring additional computing overhead to the system.

[0006] Digital signature: The national secret SM2 also stipulates a digital signature algorithm, which uses a private key to sign data, and any user can use the publicly released public key for verification. Attackers cannot forge signatures without private keys. However, it also has the problem of public key certificate management.

[0007] Signcryption: If you want to protect data confidentiality while preventing data tampering, you can use a direct "sign first, then encrypt" method. However, this method is a superposition of signature and encryption, which will cause a large computational overhead. For this reason, some technologies use the means of "signcryption", that is, through algorithm design, encryption and signing operations are completed simultaneously in one logical step. However, it also has the problem of low efficiency.

[0008] Combining the above theoretical analysis with the industry's application practice, it can be concluded that the shortcomings of the existing technology are as follows:

[0009] 1. Key negotiation and certificate management issues: Symmetric keys are highly efficient but rely on key negotiation. Public key encryption and digital signatures rely on the management of public key certificates. These shortcomings restrict their application in work order management.

[0010] 2. The conflict between low algorithm efficiency and large amount of work order management data processing: Although the signcryption technology can protect data confidentiality and integrity at the same time, its algorithm structure is based on public key encryption and has certificate management issues. In addition, the work order management system often has to process a large amount of work order data in a short period of time. Although the existing public key-based signcryption technology can process each data, it is difficult to cope with the heavy computational overhead caused by the signcryption and decryption of such high-frequency data. Summary of the invention

[0011] In view of the above-mentioned defects in the prior art, the present invention discloses a method and system for securely transferring work order data through a unified network, proposes an idea based on an identity-based cryptographic system, designs an efficient identity-based signcryption algorithm, eliminates the problem of public key certificate management, constructs an offline / online signcryption algorithm, reduces the complexity of a single signcryption operation, and improves real-time and concurrent processing capabilities; and solves the problem of decrypting batch data.

[0012] To achieve the above object, the present invention adopts the following technical solutions:

[0013] The present invention discloses a method for securely transferring work order data through a unified network, comprising:

[0014] The administrator initializes the work order password system through the system parameter setting algorithm, defines and creates the system public parameters, and generates a master key; then, using the system public parameters and the master key, the administrator generates and distributes keys to the processing personnel and customers respectively through the key generation algorithm;

[0015] After the key distribution is completed, the processing personnel use the work order data sign-encryption release algorithm, specify the work order receiving user, use the system public parameters to sign the work order, and send the ciphertext to the customer;

[0016] If the customer only receives a single ciphertext, the ciphertext is directly verified and decrypted through a single work order access algorithm to access the work order data; if the customer receives multiple ciphertexts, the multiple work order ciphertexts are aggregated through the work order ciphertext aggregation algorithm to obtain the aggregated ciphertext; finally, based on the aggregated ciphertext, the customer verifies and decrypts the aggregated ciphertext through the aggregated work order access algorithm to obtain the specific contents of multiple work orders.

[0017] Furthermore, the system parameter setting algorithm is specifically as follows:

[0018] Step 1-1: Given a system public parameter k that specifies the security level of the system, set k = 160; on this basis, specify a large prime number p with 160 decimal digits, and specify E as a prime number domain defined in the order Non-singular elliptic curves on ;

[0019] Step 1-2: Specify two prime p-factorial cyclic groups G and G T , P is a generator in the group G, and defines a bilinear map e:G×G→G T ;

[0020] Step 1-3: Construct four hash functions, defined as H0: H1: H2: H3: in is a p-order integer cyclic group;

[0021] Step 1-4: Pick a random number As the system master key, calculate P pub =sP as the system master public key; the administrator integrates and discloses the system public parameters PP = (p, G, G T ,e,P,H0,H1,H2,H3,P pub ).

[0022] Furthermore, the key generation algorithm has the following specific steps:

[0023] Step 2-1: Calculate the identity hash value of the handler On this basis, the private key of some processing personnel is calculated Calculate the client's identity hash Calculate partial customer key Where ID i and ID B the identities of the client and the handler, respectively;

[0024] Step 2-2: Draw two random numbers xi , And calculate the corresponding public key component X i =x i P, X B =x B ·P;

[0025] Step 2-3: Calculate the processor's private key component d i =(x i +s·q i ) mod q, where i = 1, ..., n is the processing personnel, n is the total number of processing personnel, q i =H0(ID i ||X i ) is the hash value of the processing personnel identity and public key, and calculates the customer key component d B =(x B +s·q B ) mod q, where q B =H0(ID B ||X B ) is the hash value of the client identity and public key;

[0026] Step 2-4: The public key PK of the processing personnel i =(X i ,q i ) and the client's public key PK B =(X B ,q B ) is published publicly and the processor's private key is and the customer key Sent confidentially to the processor and customer via a secure channel respectively.

[0027] Furthermore, the work order data signature publishing algorithm is specifically as follows:

[0028] Step 3-1: Draw a random number And calculate the corresponding two intermediate ciphertexts W i =r i ·P and

[0029] Step 3-2: Calculate the three signature ciphertext components h 1i =H1(R i ),h 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),h 3i =H3(m i ,IDi ,X i ,R i ,ID B ,X B ,h 2i );

[0030] Step 3-3: Calculate the three signature ciphertext components v i =(r i h 2i +d i h 3i )mod p,Z i =v i ·P,

[0031] Step 3-4: Generate the signed ciphertext as σ i =(C i ,W i ,Z i ,X i ) and send it to the handler ID B .

[0032] Furthermore, the single work order access algorithm is specifically as follows:

[0033] Step 4-1: First use your own customer key Calculate and recover the intermediate ciphertext

[0034] Step 4-2: Calculate the recovered ciphertext component h 1i =H1(R i ), and then calculate the intermediate value That is, the work order data is decrypted and restored, and the ciphertext component h is further calculated. 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i );

[0035] Step 4-3: Verify that the following equation holds true

[0036] v i P = h 2i ·W i +h3i ·X i +h 3i ·q i ·P pub

[0037] If true, the ciphertext is verified and the work order m is accepted i Otherwise, reject the work order directly. i .

[0038] Furthermore, the work order ciphertext aggregation algorithm is specifically as follows:

[0039] Step 5-1: Calculate the aggregate ciphertext components The ciphertext component Z i =v i ·P;

[0040] Step 5-2: Output aggregate ciphertext σ agg ={(C i ,W i ,Z i ,X i ) i＝1,...,n ,Z agg}.

[0041] Furthermore, the aggregated work order access algorithm is specifically as follows:

[0042] Step 6-1: First use your own client key Calculate and recover the intermediate ciphertext

[0043] Step 6-2: Calculate the recovered ciphertext component {h 1i =H1(R i )} i＝1,...,n , and then calculate the intermediate value Decryption restored all work order data {m i} i＝1,...,n , further calculate the following formula:

[0044] Ciphertext component {h 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),

[0045] Ciphertext component h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h2i )} i＝1,...,n ;

[0046] Step 6-3: Verify that the following equation holds true

[0047]

[0048] If true, all ciphertexts are verified and the work order is accepted. i} i＝1,...,n , otherwise, reject directly.

[0049] The present invention also proposes a one-network unified work order data security circulation system, comprising an administrator server, a processing staff server and a client connected to each other for communication, wherein:

[0050] The administrator server is used to initialize the work order password system through the system parameter setting algorithm, define and create system public parameters, and generate a master key; then use the system public parameters and the master key to generate and distribute keys to the processing personnel and customers respectively through the key generation algorithm;

[0051] The processing personnel server is used to, after the key distribution is completed, use the work order data sign-encryption publishing algorithm to specify the work order receiving user, use the system public parameters to sign the work order, and send the ciphertext to the customer;

[0052] The client is used to receive and process ciphertext. If only a single ciphertext is received, the ciphertext is directly verified and decrypted through a single work order access algorithm to access the work order data; if multiple ciphertexts are received, the multiple work order ciphertexts are aggregated through the work order ciphertext aggregation algorithm to obtain the aggregated ciphertext; finally, based on the aggregated ciphertext, the aggregated ciphertext is verified and decrypted through the aggregated work order access algorithm to obtain the specific contents of multiple work orders.

[0053] The present invention has the following technical effects:

[0054] 1. The present invention constructs an identity-based signcryption algorithm for one-network unified work order management, which not only avoids the reliance on key negotiation and public key certificate management, but also can simultaneously protect the confidentiality and integrity of work order data in one logical step;

[0055] 2. The present invention implements a work order data ciphertext aggregation, verification and decryption mechanism. Through this mechanism, customers can batch process encrypted work orders issued by multiple different processing personnel, thereby meeting the needs of high-frequency concurrent work order processing in actual scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 A flow chart of a method for securely transferring work order data through one network according to the present invention.

[0057] Figure 2 A schematic diagram of a system for securely transferring work order data through one network according to the present invention. DETAILED DESCRIPTION

[0058] The following describes the preferred embodiments of the present invention with reference to the accompanying drawings to make the technical content clearer and easier to understand. The present invention can be embodied in many different forms of embodiments, and the protection scope of the present invention is not limited to the embodiments mentioned in the text.

[0059] The present invention proposes a method for managing the secure transfer of work order data through a single network, and the specific method steps are shown in the following figure: Figure 1 As shown, specifically: first, in the system parameter setting algorithm, the administrator defines and creates the system public parameters, and generates a master key to prepare for subsequent operations; using the system public parameters and the master key, the administrator generates keys for the processing personnel and the customer respectively in the key generation algorithm; after the key distribution is completed, through the work order data signing and publishing algorithm, the processing personnel specifies the work order and the receiving user, and uses the system public parameters to sign the work order, and sends the ciphertext to the customer; if the customer only receives a single ciphertext, the single work order access algorithm is used to verify and decrypt the access work order data; if the customer receives multiple ciphertexts, the work order ciphertext aggregation algorithm is used to aggregate multiple work order ciphertexts; finally, on this basis, through the aggregated work order access algorithm, the customer verifies and decrypts the aggregated ciphertext to obtain the specific content of multiple work orders.

[0060] The data interaction in the present invention involves three types of entities: customers, system administrators, and processing personnel. The specific definitions of these entities are as follows:

[0061] Customer: The person or entity that submits a ticket, which can be an external customer, user, employee, etc.

[0062] Administrator: Create and maintain the work order management system and issue keys to customers;

[0063] Processing personnel: The person responsible for handling and resolving work orders, which can be technical support personnel, customer service representatives, etc.

[0064] The technical solutions of this application proposal are divided into system parameter setting algorithm, customer key generation algorithm, work order data signature and release algorithm, work order ciphertext aggregation algorithm and customer work order access algorithm. Specifically, their workflow is as follows:

[0065] 1. System parameter setting algorithm

[0066] This phase is performed by the administrator and is mainly used to initialize the work order password system, define common parameters for all systems, and generate a secret system master key. Specifically, this phase is divided into the following steps:

[0067] Step 1-1: Given a system public parameter k, which specifies the security level of the system, set it to k = 160; on this basis, specify a large prime number p with 160 decimal digits, and specify E as a prime number domain defined in the order Non-singular elliptic curves on ;

[0068] Step 1-2: Specify two p-order multiplicative cyclic groups G and G T , P is a generator in the group G, and defines a bilinear map e:G×G→G T ;

[0069] Step 1-3: Construct four hash functions, defined as H0: H1: H2: H3: in is a p-order integer cyclic group;

[0070] Step 1-4: Pick a random number As the system master key, calculate P pub =sP as the system master public key; the administrator integrates and discloses the system public parameters PP = (p, G, G T ,e,P,H0,H1,H2,H3,P pub ).

[0071] 2. Key generation algorithm

[0072] This algorithm is based on Algorithm 1 and is executed by the administrator using the processed identity ID i , Customer ID B The system public parameters PP and system master key s generated in Algorithm 1 are used to generate customer keys for processing personnel and customers. Specifically, this stage is divided into the following steps:

[0073] Step 2-1: Calculate the identity hash value of the handler On this basis, the private key of some processing personnel is calculated Calculate the client's identity hash On this basis, calculate the partial customer key

[0074] Step 2-2: Draw two random numbers x i , And calculate the corresponding two public key components X i =x i P, X B =x B ·P;

[0075] Step 2-3: Based on the above steps, calculate the processor's private key component d i =(x i +s·q i ) mod q, where i = 1, ..., n is the processing personnel, n is the total number of processing personnel, q i =H0(ID i ||X i ) is the hash value of the processing personnel identity and public key, and calculates the customer key component d B =(x B +s·q B ) mod q, where q B =H0(ID B ||X B ) is the hash value of the client identity and public key;

[0076] Step 2-4: Based on the above steps, the public key PK of the processing personnel i =(X i ,q i ) and the client's public key PK B =(X B ,q B ) is published publicly and the processor's private key is and the customer key Sent confidentially to the processor and customer via a secure channel respectively.

[0077] 3. Work order data signature and release algorithm

[0078] The algorithm is based on Algorithm 1 and Algorithm 2 and is executed by the processing personnel. i ,d i ,ID i ,ID B ) is input, used to issue work order m i Where X i ,d i ,ID i They have been clearly defined in Algorithm 2. B Indicates the identity of the person handling the process. Specifically, this stage is divided into the following steps:

[0079] Step 3-1: Draw a random number And calculate the corresponding two intermediate ciphertexts W i =r i ·P and

[0080] Step 3-2: Based on the above steps, calculate the three signature ciphertext components h 1i =H1(R i),h 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i );

[0081] Step 3-3: Based on the above steps, calculate the three signature ciphertext components v i =(r i h 2i +d i h 3i )mod p,

[0082] Step 3-4: Based on the above steps, generate the signature ciphertext σ i =(C i ,W i ,Z i ,X i ) and send it to the handler ID B .

[0083] 4. Single Ticket Access Algorithm

[0084] This algorithm is based on Algorithm 3 and is executed by the client. If the client only receives a single ciphertext σ i =(C i ,W i ,Z i ,X i ), directly verify and decrypt the ciphertext to access the work order data. Specifically, this stage is divided into the following steps:

[0085] Step 4-1: First use your own customer key Calculate and recover the intermediate ciphertext

[0086] Step 4-2: Based on the above steps, calculate the recovered ciphertext component h 1i =H1(R i ), and on this basis calculate the intermediate value That is, the work order data is decrypted and restored. On this basis, two intermediate ciphertexts h are further calculated. 2i =H2(m i ,ID i ,Xi ,R i ,ID B ,X B ),h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i );

[0087] Step 4-3: Based on the above steps, verify whether the following equation is true

[0088] v i P = h 2i ·W i +h 3i ·X i +h 3i ·q i ·P pub

[0089] If true, the ciphertext is verified and the work order m is accepted i Otherwise, reject the work order directly. i .

[0090] 5. Work Order Aggregation Algorithm

[0091] This stage is based on Algorithm 3 and is executed by the customer. If the customer receives multiple ciphertexts from multiple handlers {ID i} i＝1,...,n The ciphertext {σ i =(C i ,W i ,Z i ,X i )} i＝1,...,n , where is the number of ciphertexts of work orders sent by the processing personnel. Specifically, this stage is divided into the following steps:

[0092] Step 5-1: Calculate the aggregate ciphertext components The ciphertext component Z i =v i ·P;

[0093] Step 5-2: Output aggregate ciphertext σ agg ={(C i ,W i ,Z i ,X i ) i＝1,...,n ,Z agg}.

[0094] 6. Aggregate Ticket Access Algorithm

[0095] This phase is based on Algorithm 5 and is executed by the client. If the client only receives multiple ciphertexts {σ i =(C i ,W i ,Z i ,X i )} i＝1,...,n , and then run Algorithm 5 to obtain the aggregate ciphertext σ agg After that, follow the steps below to verify the aggregated ciphertext and decrypt it to obtain the work order data:

[0096] Step 6-1: First use your own client key Calculate and recover the intermediate ciphertext

[0097] Step 6-2: Based on the above steps, calculate the recovered ciphertext component {h 1i =H1(R i )} i＝1,...,n , and on this basis calculate the intermediate value That is, all the work order data is decrypted and restored. i} i＝1,...,n On this basis, the ciphertext component {h 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i )} i＝1,...,n ;

[0098] Step 6-3: Based on the above steps, verify whether the following equation is true

[0099]

[0100] If true, all ciphertexts are verified and the work order is accepted. i} i＝1,...,n , otherwise, reject directly.

[0101] like Figure 2 As shown, the present invention also proposes a one-network unified work order data security circulation system, including an administrator server, a processing staff server and a client that are connected to each other in communication, wherein:

[0102] The administrator server is used to initialize the work order password system through the system parameter setting algorithm, define and create system public parameters, and generate a master key; then use the system public parameters and the master key to generate and distribute keys to the processing personnel and customers respectively through the key generation algorithm;

[0103] The processing personnel server is used to, after the key distribution is completed, use the work order data sign-encryption publishing algorithm to specify the work order receiving user, use the system public parameters to sign the work order, and send the ciphertext to the customer;

[0104] The client is used to receive and process ciphertext. If only a single ciphertext is received, the ciphertext is directly verified and decrypted through a single work order access algorithm to access the work order data; if multiple ciphertexts are received, the multiple work order ciphertexts are aggregated through the work order ciphertext aggregation algorithm to obtain the aggregated ciphertext; finally, based on the aggregated ciphertext, the aggregated ciphertext is verified and decrypted through the aggregated work order access algorithm to obtain the specific contents of multiple work orders.

[0105] The preferred specific embodiments of the present invention are described in detail above. It should be understood that ordinary technicians in the field can make many modifications and changes based on the concept of the present invention without creative work. Therefore, all technical solutions that can be obtained by technicians in the technical field based on the concept of the present invention through logical analysis, reasoning or limited experiments on the basis of the prior art should be within the scope of protection determined by the claims.

Claims

1. A method for securely transferring work order data through a unified network, characterized in that: include: The administrator initializes the work order password system through the system parameter setting algorithm, defines and creates the system public parameters, and generates a master key; then, using the system public parameters and the master key, the administrator generates and distributes keys to the processing personnel and customers respectively through the key generation algorithm; After the key distribution is completed, the processing personnel use the work order data sign-encryption release algorithm, specify the work order receiving user, use the system public parameters to sign the work order, and send the ciphertext to the customer; If the customer only receives a single ciphertext, the ciphertext is directly verified and decrypted through a single work order access algorithm to access the work order data; if the customer receives multiple ciphertexts, the work order ciphertext aggregation algorithm is used to aggregate the multiple work order ciphertexts to obtain the aggregated ciphertext; finally, based on the aggregated ciphertext, the customer verifies and decrypts the aggregated ciphertext through the aggregated work order access algorithm to obtain the specific contents of multiple work orders; wherein: The system parameter setting algorithm is specifically as follows: Step 1-1: Given a system public parameter k that specifies the security level of the system, set k = 160; on this basis, specify a large prime number p with 160 decimal digits, and specify E as a prime number domain defined in the order Non-singular elliptic curves on ; Step 1-2: Specify two prime p-factorial cyclic groups G and G T , P is a generator in the group G, and defines a bilinear map e:G×G→G T ; Step 1-3: Construct four hash functions, defined as H0: H1:{ H2: H3: in is a p-order integer cyclic group; Step 1-4: Pick a random number As the system master secret key, Ppub=sP is calculated as the system master public key; the administrator integrates and discloses the system public parameters PP=(p,G,G T ,e,P,H0,H1,H2,H3,Ppub); The key generation algorithm is specifically: Step 2-1: Calculate the identity hash value of the handler On this basis, the private key of some processing personnel is calculated Calculate the client's identity hash ID B ), calculate the partial customer key Where IDi and ID B the identities of the client and the handler, respectively; Step 2-2: Draw two random numbers And calculate the corresponding two public key components Xi = xi·P, X B =x B ·P; Step 2-3: Calculate the private key component of the processing personnel di = (xi + s·qi) mod q, where i = 1, ..., n is the processing personnel, n is the total number of processing personnel, qi = H0 (IDi||Xi) is the hash value of the processing personnel identity and public key, and calculate the customer key component d B =(x B +s·q B ) mod q, where q B =H0(ID B ||X B ) is the hash value of the client identity and public key; Step 2-4: The processing personnel public key PKi = (Xi, qi) and the customer public key PK B =(X B ,q B ) is published publicly and the processor's private key is and the customer key Sent confidentially to the processor and the client through a secure channel respectively; The work order data sign-encryption publishing algorithm is specifically as follows: Step 3-1: Draw a random number And calculate the corresponding two intermediate ciphertext components Wi = ri·P and Step 3-2: Calculate three signcryption components h1i=H1(Ri),h2i=H2(mi,IDi,Xi,Ri,ID B ,X B ),h3i=H3(mi,IDi,Xi,Ri,ID B ,X B ,h2i), where mi is the work order; Step 3-3: Calculate three signcryption ciphertext components vi = (rih2i + dih3i) mod p, Step 3-4: Based on the above steps, generate the signature ciphertext σ i =(C i ,W i ,Z i ,X i ) and send it to the handler ID B ; The single work order access algorithm is specifically: Step 4-1: First use your own customer key Calculate and recover the intermediate ciphertext Step 4-2: Calculate the recovered ciphertext component h 1i =H1(R i ), and then calculate the intermediate value That is, the work order data is decrypted and restored, and other ciphertext components h are further calculated. 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ),h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i ); Step 4-3: Verify whether the following equation holds true v i ·P=h 2i ·W i +h 3i ·X i +h 3i ·q i ·P pub If true, the ciphertext is verified and the work order m is accepted i Otherwise, reject the work order directly. i ; The work order ciphertext aggregation algorithm is specifically: Step 5-1: Calculate the aggregate ciphertext components Where Z i =v i ·P; Step 5-2: Output aggregate ciphertext σ agg ={(C i ,W i ,Z i ,X i ) i＝1,...,n ,Z agg }; The aggregated work order access algorithm is specifically as follows: Step 6-1: First use your own client key Calculate and recover the intermediate ciphertext Step 6-2: Calculate the recovered ciphertext component {h 1i =H1(R i )} i＝1,...,n , and then calculate the intermediate value Decrypt and restore all work order data {m i } i＝1,...,n , further calculate the following formula: Ciphertext component {h 2i =H2(m i ,ID i ,X i ,R i ,ID B ,X B ), Ciphertext component h 3i =H3(m i ,ID i ,X i ,R i ,ID B ,X B ,h 2i )} i＝1,...,n ; Step 6-3: Verify that the following equation holds true If true, all ciphertexts are verified and the work order is accepted. i } i＝1,...,n , otherwise, reject directly.

2. A system using the one-network unified work order data secure transfer method according to claim 1, characterized in that: It includes an administrator server, a processing server, and a client that communicate with each other, wherein: The administrator server is used to initialize the work order password system through the system parameter setting algorithm, define and create system public parameters, and generate a master key; then use the system public parameters and the master key to generate and distribute keys to the processing personnel and customers respectively through the key generation algorithm; The processing personnel server is used to, after the key distribution is completed, use the work order data sign-encryption publishing algorithm to specify the work order receiving user, use the system public parameters to sign the work order, and send the ciphertext to the customer; The client is used to receive and process ciphertext. If only a single ciphertext is received, the ciphertext is directly verified and decrypted through a single work order access algorithm to access the work order data; if multiple ciphertexts are received, the multiple work order ciphertexts are aggregated through the work order ciphertext aggregation algorithm to obtain the aggregated ciphertext; finally, based on the aggregated ciphertext, the aggregated ciphertext is verified and decrypted through the aggregated work order access algorithm to obtain the specific contents of multiple work orders.

Images