Group key generation method, apparatus and electronic device based on wireless channel characteristics
Patent Information
- Application Number
- CN202311570755.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-11-22
- Publication Date
- 2026-09-01
- Estimated Expiration
- 2043-11-22
AI Technical Summary
[0005]本发明提供一种基于无线信道特征的组密钥生成方法、装置、电子设备及存储介质,用以解决现有技术中组密钥安全系数较低,所有信息同时泄露的风险较大的缺陷,实现生成的密钥安全系数更高,传输过程中单一节点信息泄露不会导致全部节点信息泄露
[0059]本发明提供的基于无线信道特征的组密钥生成方法、装置和电子设备,通过中心节点与各子节点之间通道的第一无线信道特征参数分别确定了与各子节点对应的第一无线信道特征序列,进而中心节点根据各第一无线信道特征序列可以生成中心节点的组密钥,并针对各子节点,基于子节点对应的第一无线信道特征序列之外的所有第一无线信道特征序列,为子节点生成了加密序列,并将该加密序列发送给了对应的子节点,使得子节点根据该加密序列可以生成最终的组密钥。由于,针对每个子节点的加密序列是基于子节点对应的第一无线信道特征序列之外的所有第一无线信道特征序列生成的,因此中心节点针对各子节点生成加密序列采用的第一无线信道特征序列是不同的,进而即使窃听者获取了各子节点的加密序列,也难以通过解码处理来获得组密钥,因此提高了组密钥生成的安全性,降低了信息泄漏的风险。
Smart Images

Figure CN117750361B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of information security technology, and in particular to a group key generation method, apparatus and electronic device based on wireless channel characteristics. Background Technology
[0002] Key generation refers to the process of generating keys used for encrypting and decrypting data. In recent years, key generation techniques based on wireless channel characteristics have attracted widespread attention due to their low computational cost, low complexity, and real-time update capability.
[0003] The paper "Group secret key generation algorithm from wireless signal strength" by Wei Y. et al. (2012 Sixth International Conference on Internet Computing for Science and Engineering. IEEE, 2012, 239-245) proposes a group key generation scheme in a star network. The central node and the remaining child nodes generate paired keys through stages such as channel probing, feature quantization, information harmonicization, and privacy amplification. The central node XORs all paired keys to obtain the group key, and then XORs each child node's paired key with the group key before transmitting the result to all child nodes. In this group key generation scheme, when the number of child nodes in the star network is even, an eavesdropper can obtain the group key by XORing multiple received ciphertexts.
[0004] Chinese patent CN108696867 proposes a lightweight group key distribution method based on wireless channel characteristics. In this method, a central node and child nodes quantize measured channel characteristics to obtain paired keys. These paired keys are highly similar but may have minor differences. The central node XORs each key with an error-corrected encoded random number sequence and broadcasts the encrypted random number sequence to each child node using channel multiplexing. Each child node decrypts the demodulated random number sequence using its own generated channel characteristic sequence, then performs error correction decoding on the decrypted random number sequence to recover the random number sequence. Finally, the central node and each child node amplify the random number sequence for privacy purposes to obtain the final group key. However, this method involves multiple encryption transmissions of the same error-corrected encoded random number sequence. An eavesdropper could obtain multiple sets of ciphertexts and perform various XOR combinations and decoding, leading to the leakage of paired keys and ultimately the group key. Summary of the Invention
[0005] This invention provides a group key generation method, apparatus, electronic device, and storage medium based on wireless channel characteristics, which addresses the shortcomings of existing technologies such as low group key security and a high risk of simultaneous leakage of all information. The resulting key has a higher security level, and leakage of information from a single node during transmission will not lead to leakage of information from all nodes.
[0006] This invention provides a group key generation method based on wireless channel characteristics, applied to the central node of a star network, wherein the central node connects to multiple child nodes, and the method includes:
[0007] Pilot interaction is performed with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between each of the sub-nodes;
[0008] The first wireless channel feature sequence corresponding to each of the sub-nodes is determined based on the first wireless channel feature parameters of the channel between each of the sub-nodes.
[0009] The group key of the central node is determined based on the feature sequences of each of the first wireless channels;
[0010] For each of the child nodes, an encryption sequence is generated for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and the encryption sequence is sent to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0011] According to a group key generation method based on wireless channel features provided by the present invention, the step of generating an encryption sequence for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node includes:
[0012] XOR all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node to obtain the initial distribution sequence;
[0013] Based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node, the encryption sequence is generated for the child node.
[0014] According to a group key generation method based on wireless channel features provided by the present invention, the step of generating the encryption sequence for the child node based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node includes:
[0015] The initial distribution sequence is subjected to error correction encoding to generate an encoded distribution sequence;
[0016] The encoded distribution sequence is XORed with the first wireless channel feature sequence corresponding to the child node to obtain the encrypted sequence.
[0017] According to the present invention, a group key generation method based on wireless channel characteristics is provided, the method further comprising:
[0018] For each of the child nodes, a hash operation is performed on the distribution sequence corresponding to the child node to determine the first verification information corresponding to the child node;
[0019] The first verification information is sent to the corresponding sub-node. The first verification information is used by the sub-node to verify the recovered distribution sequence. The recovered distribution sequence is determined based on the encryption sequence and the second wireless channel feature sequence. The second wireless channel feature sequence is determined by the sub-node according to the second wireless channel feature parameters of the channel between the sub-node and the central node. The second wireless channel feature parameters are obtained by the sub-node through pilot interaction with the central node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0020] According to the present invention, a group key generation method based on wireless channel characteristics is provided, the method further comprising:
[0021] Receive verification failure information sent by the child node, wherein the failure verification information is sent by the child node when verifying that the recovered distribution sequence is incorrect;
[0022] Based on the verification failure information, the first wireless channel feature sequence corresponding to the sub-node is re-determined;
[0023] The encoded distribution sequence is XORed with the newly determined first wireless channel feature sequence to regenerate the encrypted sequence of the child node, and the regenerated encrypted sequence is sent to the child node.
[0024] According to a group key generation method based on wireless channel characteristics provided by the present invention, the step of determining the group key of the central node according to each of the first wireless channel characteristic sequences includes:
[0025] XORing all the first wireless channel feature sequences yields the group key of the central node.
[0026] This invention also provides a group key generation method based on wireless channel characteristics, applied to multiple child nodes in a star network, wherein the multiple child nodes are connected to a central node, and for each child node, the method includes:
[0027] The second wireless channel characteristic parameters of the channel between the central node and the central node are obtained by pilot interaction.
[0028] Based on the second wireless channel characteristic parameters of the channel between the central node and the child node, determine the second wireless channel characteristic sequence corresponding to the child node;
[0029] Receive the encryption sequence sent by the central node, and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence;
[0030] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0031] According to a group key generation method based on wireless channel features provided by the present invention, the step of determining the group key of the child node based on the encryption sequence and the second wireless channel feature sequence includes:
[0032] The encrypted sequence is XORed with the second wireless channel feature sequence to obtain the XOR result.
[0033] The XOR result is subjected to error correction decoding to generate the recovered distribution sequence;
[0034] The recovered distribution sequence is verified. If the recovered distribution sequence is verified to be correct, the group key of the child node is determined based on the recovered distribution sequence and the encryption sequence.
[0035] According to a group key generation method based on wireless channel characteristics provided by the present invention, the step of determining the group key of the child node based on the recovered distribution sequence and the encryption sequence includes:
[0036] The recovered distribution sequence is then subjected to error correction encoding to obtain the encoded recovered distribution sequence;
[0037] The encoded and recovered distribution sequence is XORed with the encrypted sequence to obtain the first wireless channel feature sequence corresponding to the child node;
[0038] The group key of the child node is obtained by XORing the first wireless channel feature sequence with the recovered distribution sequence.
[0039] According to a group key generation method based on wireless channel characteristics provided by the present invention, the verification of the recovered distribution sequence includes:
[0040] Receive the first verification information sent by the central node;
[0041] A hash operation is performed on the recovered distribution sequence to determine the second verification information corresponding to the child node. The recovered distribution sequence is then verified based on the first verification information and the second verification information. The first verification information is obtained by hashing the initial distribution sequence, which is obtained by XORing all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node.
[0042] According to the present invention, a group key generation method based on wireless channel characteristics is provided, the method further comprising:
[0043] If the recovered distribution sequence is found to be incorrect, a verification failure message is sent to the central node. The verification failure message is used by the central node to re-determine the first wireless channel feature sequence of the sub-node and regenerate the encryption sequence based on the re-determined first wireless channel feature sequence.
[0044] Receive the regenerated encrypted sequence sent by the central node;
[0045] Redetermine the second wireless channel feature sequence corresponding to the child node;
[0046] Based on the regenerated encryption sequence and the redefined second wireless channel feature sequence, the group key of the sub-node is redefined.
[0047] The present invention also provides a group key generation device based on wireless channel characteristics, applied to the central node of a star network, wherein the central node connects to multiple child nodes, and the device includes:
[0048] The interaction module is used to perform pilot interaction with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between the module and each of the sub-nodes.
[0049] The first determining module is used to determine the first wireless channel feature sequence corresponding to each of the sub-nodes based on the first wireless channel feature parameters of the channel between each of the sub-nodes;
[0050] The second determining module is used to determine the group key of the central node based on the feature sequences of each of the first wireless channels;
[0051] The generation module is configured to generate an encryption sequence for each of the child nodes based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and send the encryption sequence to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0052] The present invention also provides a group key generation device based on wireless channel characteristics, applied to multiple sub-nodes in a star network, wherein the multiple sub-nodes are connected to a central node, and for each sub-node, the device includes:
[0053] The interaction module is used to perform pilot interaction with the central node to obtain the second wireless channel characteristic parameters of the channel between the central node and the central node;
[0054] The first determining module is used to determine the second wireless channel feature sequence corresponding to the child node based on the second wireless channel feature parameters of the channel between the child node and the central node.
[0055] The second determining module is used to receive the encryption sequence sent by the central node and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence.
[0056] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0057] The present invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the group key generation method based on wireless channel characteristics as described above.
[0058] The present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the group key generation method based on wireless channel characteristics as described above.
[0059] The present invention provides a group key generation method, apparatus, and electronic device based on wireless channel characteristics. By determining the first wireless channel characteristic sequence corresponding to each sub-node through the first wireless channel characteristic parameters of the channel between the central node and each sub-node, the central node can generate its own group key based on each of these first wireless channel characteristic sequences. Furthermore, for each sub-node, an encryption sequence is generated based on all first wireless channel characteristic sequences other than the sub-node's own, and this encrypted sequence is sent to the corresponding sub-node, allowing the sub-node to generate the final group key. Since the encryption sequence for each sub-node is generated based on all first wireless channel characteristic sequences other than the sub-node's own, the central node uses different first wireless channel characteristic sequences to generate encryption sequences for each sub-node. Therefore, even if an eavesdropper obtains the encryption sequences of each sub-node, it is difficult to decode them to obtain the group key, thus improving the security of group key generation and reducing the risk of information leakage. Attached Figure Description
[0060] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.
[0061] Figure 1 This is one of the flowcharts illustrating the group key generation method based on wireless channel characteristics provided in this embodiment of the invention;
[0062] Figure 2 This is a schematic diagram of the star network structure provided in an embodiment of the present invention;
[0063] Figure 3 This is the second flowchart of the group key generation method based on wireless channel characteristics provided in this embodiment of the invention;
[0064] Figure 4 This is one of the structural schematic diagrams of a group key generation device based on wireless channel characteristics provided in an embodiment of the present invention;
[0065] Figure 5 This is a second schematic diagram of the structure of the group key generation device based on wireless channel characteristics provided in this embodiment of the invention;
[0066] Figure 6 This is a schematic diagram of the structure of the electronic device provided in an embodiment of the present invention. Detailed Implementation
[0067] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.
[0068] To address the problem that the group key generation process in existing technologies has a low security level and is easily decrypted by eavesdroppers, thus posing a significant risk of information leakage, this invention provides a group key generation method based on wireless channel characteristics, applied to the central node of a star network, wherein the central node connects to multiple child nodes. Figure 1 This is one of the flowcharts illustrating the group key generation method based on wireless channel characteristics provided in this embodiment of the invention, such as... Figure 1 As shown, the group key generation method based on wireless channel characteristics includes the following steps:
[0069] Step 100: Perform pilot interaction with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between each of the sub-nodes.
[0070] Specifically, the central node and each sub-node interact via pilot signals through each channel to extract the first wireless channel characteristic parameters of each sub-node.
[0071] For example, taking the amplitude portion of the estimated Channel State Information (CSI) as the first wireless channel characteristic parameter, the following detailed explanation is given using the i-th child node as an example:
[0072] The central node and the i-th child node exchange pilot signals through a channel between them, thereby extracting the first wireless channel characteristic parameter (CSI) of the i-th child node. i .
[0073] Figure 2 This is a schematic diagram of the star network structure provided in an embodiment of the present invention, as shown below. Figure 2 As shown, a star network consists of a central node and multiple child nodes, with the central node and each child node connected via channels.
[0074] Step 110: Determine the first wireless channel feature sequence corresponding to each of the child nodes based on the first wireless channel feature parameters of the channel between each of the child nodes.
[0075] Specifically, the central node determines the first wireless channel feature sequence corresponding to each sub-node based on the first wireless channel feature parameters corresponding to each sub-node. For each sub-node, when determining the first wireless channel feature sequence based on the first wireless channel feature parameters, the central node first preprocesses the first wireless channel feature parameters of each sub-node, and then quantizes the preprocessed first wireless channel feature parameters respectively, thereby determining the first wireless channel feature sequence of each sub-node.
[0076] For example, taking the amplitude portion of the estimated Channel State Information (CSI) as the first wireless channel characteristic parameter, the following detailed explanation is given using the i-th child node as an example:
[0077] The first wireless channel characteristic parameter (CSI) of the central node to the i-th child node i Preprocessing is performed to obtain the first preprocessed wireless channel characteristic parameter (CSI). norm,i The preprocessing includes energy normalization. The central node processes the preprocessed first radio channel characteristic parameters (CSI). norm,i Quantization is performed to determine the first wireless channel feature sequence K corresponding to the i-th child node. i .
[0078] Among them, the preprocessed first channel parameter CSI norm,i As shown in the following formula:
[0079]
[0080] Where K represents the number of subcarriers used for pilot interaction; for example, 512 subcarriers can be used for pilot interaction. CSI i (n) represents the amplitude of the nth subcarrier. CSI represents the sum of squares of the amplitudes of all subcarriers. i (j) represents the amplitude of the j-th subcarrier, j = 1, 2, 3, ..., n, ..., K.
[0081] Specifically, the central node processes the preprocessed first wireless channel characteristic parameter CSI. norm,i Perform second-order uniform quantization to determine the first wireless channel feature sequence K corresponding to the i-th child node. i The central node first determines the preprocessed first wireless channel characteristic parameter XSI. norm,i The maximum value (Max) and minimum value (Min) of the preprocessed first radio channel characteristic parameters on all subcarriers are used to determine the first radio channel characteristic parameter (CSI). norm,iThe preprocessed first wireless channel feature parameters on all subcarriers are uniformly divided into four intervals. The first wireless channel feature sequence K is determined according to the interval in which the preprocessed first wireless channel feature parameters on each subcarrier are located. i .
[0082] Specifically, for the nth subcarrier corresponding to the i-th child node, the preprocessed first wireless channel feature parameters on the nth subcarrier are... Quantized into two bits of information, the preprocessed first wireless channel feature parameters on the 512 subcarriers can be quantized to obtain a 1024-bit first wireless channel feature sequence K. i K i It is a binary sequence. Wherein, K is the first wireless channel characteristic sequence on the nth subcarrier. i The value of (n) is determined according to the following formula:
[0083]
[0084] Among them, X i (n) represents the preprocessed first radio channel characteristic parameter on the nth subcarrier. if indicates "if", for example, Indicates if X i (n) belongs to the interval Then K i The value of (n) is 00.
[0085] It should be noted that the first wireless channel characteristic parameter can also be the received signal strength, the remaining part of the estimated channel state information, channel phase information, channel delay, or channel deep fading information, without specific limitations here.
[0086] It should be noted that preprocessing may include one or more of the following transformation methods: synchronization correction, frequency offset correction, normalization, fingerprint compensation, channel feature parameter consistency improvement, and redundancy removal. These transformation methods include smoothing transformation, interpolation filtering transformation, KL transform, DCT transform, wavelet transform, and interleaving transform. The specific method used for preprocessing the channel feature parameters is not specifically limited here.
[0087] It should be noted that quantization includes one or more of the following: single-threshold quantization, multi-threshold quantization, adaptive threshold quantization, guard band-based quantization, cumulative distribution probability quantization, differential quantization, and clustering algorithm-based quantization. No specific limitation is made here.
[0088] Step 120: Determine the group key of the central node based on each of the first wireless channel feature sequences.
[0089] Specifically, the central node can obtain its initial group key K by performing an XOR operation on the first wireless channel feature sequences corresponding to all child nodes. GI This allows us to obtain the group key K of the central node. G .
[0090] Step 130: For each of the child nodes, based on all the first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, generate an encryption sequence for the child node and send the encryption sequence to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0091] Specifically, for each child node, the central node generates an encryption sequence for that child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to that child node and the first wireless channel feature sequence corresponding to the child node. For example, the central node XORs all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node to obtain an initial distribution sequence. Then, error-correcting encoding is performed on the initial distribution sequence to generate an encoded distribution sequence. Finally, the encoded distribution sequence is XORed with the first wireless channel feature sequence corresponding to the child node to obtain the encryption sequence. The central node sends the obtained encryption sequence to the corresponding child node, and this encryption sequence is used by the corresponding child node to determine the group key corresponding to that child node. For example, the central node sends the encryption sequence E of the i-th child node... i Send to the i-th child node, the i-th child node is based on the encrypted sequence E i Determine the group key K for the i-th child node G,i It is understandable that each child node corresponds to a unique encryption sequence, and the encryption sequences corresponding to each child node are not the same.
[0092] In the above embodiments, the encryption sequence for each child node is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node. Therefore, the first wireless channel feature sequences used by the central node to generate encryption sequences for each child node are different. Thus, even if an eavesdropper obtains the encryption sequences of each child node, it is difficult to obtain the group key through decoding. This improves the security of group key generation and reduces the risk of information leakage.
[0093] In one embodiment, generating an encryption sequence for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node includes:
[0094] XOR all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node to obtain the initial distribution sequence;
[0095] Based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node, the encryption sequence is generated for the child node.
[0096] For example, taking the i-th child node as an example, the central node sets the first wireless channel feature sequence K corresponding to the i-th child node. i All first wireless channel feature sequences K1, K2, ..., K other than i-1 K i+1 , ..., K N Perform an XOR operation to obtain the initial distribution sequence K. GI,i The initial distribution sequence K GI,i Determined by the following formula:
[0097]
[0098] As can be seen from the above formula, the result of XORing all the first wireless channel feature sequences is also equal to the initial group key K of the central node. GI The first wireless channel feature sequence K corresponding to the i-th child node i The result of XOR operation.
[0099] Furthermore, based on the initial distribution sequence K corresponding to the i-th child node GI,i The first wireless channel feature sequence K corresponding to the i-th child node i The central node can generate an encrypted sequence E for the i-th child node. i .
[0100] In the above embodiments, the central node performs an XOR operation on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node, so that different encryption sequences are generated for different child nodes. Compared with using the same encryption sequence for each child node, it is not easy to be decrypted by eavesdroppers, and thus the group key should not be leaked.
[0101] In one embodiment, generating the encryption sequence for the child node based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node includes:
[0102] The initial distribution sequence is subjected to error correction encoding to generate an encoded distribution sequence;
[0103] The encoded distribution sequence is XORed with the first wireless channel feature sequence corresponding to the child node to obtain the encrypted sequence.
[0104] Specifically, error correction coding is performed on the initial distribution sequence. When using polar codes to perform error correction coding on the initial distribution sequence, the initial distribution sequence needs to be uniformly extracted before error correction coding. The preset step size for uniform extraction of the initial distribution sequence is related to the code rate of the polar code. For example, when using a polar code with a code rate of 1 / 4 for error correction coding, the preset step size is 4.
[0105] For example, consider using a 1 / 4 code rate polar code to perform error correction coding on the initial distribution sequence. For the initial distribution sequence, the central node first pairs the initial distribution sequence K corresponding to the i-th child node with a preset step size of 4. GI,i Perform uniform extraction to obtain the distribution sequence K corresponding to the i-th child node. GC,i The distribution sequence K corresponding to the i-th child node GC,i Determined by the following formula:
[0106]
[0107] Among them, Samp(K) GI,i ) represents the initial distribution sequence K corresponding to the i-th child node. GI,i Perform uniform extraction.
[0108] Furthermore, the central node distributes the sequence K to the i-th child node. GC,i After performing 1 / 4-rate polar code error correction encoding, the encoded distribution sequence Enc corresponding to the i-th child node is generated. i The central node distributes the encoded sequence Enc corresponding to the i-th child node. i The first wireless channel feature sequence K corresponding to the i-th child node i Perform an XOR operation to obtain the encrypted sequence E. i Expressed mathematically, the encrypted sequence E of the i-th child node i As shown in the following formula:
[0109]
[0110] Enc() indicates that the content within the parentheses is subjected to error correction encoding.
[0111] It should be noted that when the central node performs error correction coding on the distributed sequence, the error correction coding method used may include one or more of the following: polar code with a 1 / 4 code rate, polar code with other code rates, Hamming code, BCH code, Reed-Solomen code, Turbo code, and LDPC code. No specific limitation is made here.
[0112] In the above embodiments, the central node generates an encryption sequence for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node, and sends the encryption sequence to the corresponding child node. This makes it difficult for an eavesdropper to obtain the group key by XOR decoding all the ciphertexts, thereby improving the security of the group key and making the information less likely to be leaked.
[0113] In one embodiment, the group key generation method based on wireless channel characteristics further includes:
[0114] For each of the child nodes, a hash operation is performed on the distribution sequence corresponding to the child node to determine the first verification information corresponding to the child node;
[0115] The first verification information is sent to the corresponding sub-node. The first verification information is used by the sub-node to verify the recovered distribution sequence. The recovered distribution sequence is determined based on the encryption sequence and the second wireless channel feature sequence. The second wireless channel feature sequence is determined by the sub-node according to the second wireless channel feature parameters of the channel between the sub-node and the central node. The second wireless channel feature parameters are obtained by the sub-node through pilot interaction with the central node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0116] For example, the distribution sequence K of the central node to the i-th child node GC,i The SM3 hash algorithm can be used to perform hash operations to obtain the first verification information H corresponding to the i-th child node. i .
[0117] It should be noted that the above embodiments use the SM3 hash algorithm for hashing, but the hash algorithm can also be SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SM2 or SM4, etc., and no specific limitation is made here.
[0118] Furthermore, the central node sends the determined first verification information to the corresponding child nodes, which then verify the recovered distribution sequence based on this first verification information. Optionally, the central node can send the first verification information and the encrypted sequence separately to the corresponding child nodes, or it can use time-division multiplexing to send the concatenated first information sequence and the encrypted sequence to the corresponding child nodes; no specific limitation is made here. It should be noted that multiplexing methods also include frequency-division multiplexing, code-division multiplexing, space-division multiplexing, etc., and are not limited to using time-division multiplexing.
[0119] For example, the central node will store the first verification information H corresponding to the i-th child node. iThe sequence K is sent to the i-th child node, and the i-th child node recovers the distribution sequence K. G ′ C,i The second verification information H corresponding to the i-th child node is obtained by performing a hash operation using the SM3 hash algorithm. i The child node will then send the second verification information H. i ′ and the first verification information H i Perform consistency verification. If the second verification information H... i ′ and the first verification information H i If the results are the same, it means that the distribution sequence recovered by the i-th child node is correct. If the i-th child node confirms that the recovered distribution sequence is correct, it can send a verification success message to the central node to inform the central node that the distribution sequence recovered by the child node is correct. If the second verification message H... i ′ and the first verification information H i If they are different, it means that the distribution sequence recovered by the i-th child node is incorrect. If the i-th child node determines that the recovered distribution sequence is incorrect, it sends a verification failure message to the central node to inform the central node that the distribution sequence recovered by the child node is incorrect.
[0120] Specifically, the distribution sequence recovered by the aforementioned sub-nodes is determined based on the encryption sequence and the second wireless channel feature sequence. The second wireless channel feature sequence is determined by the sub-nodes according to the second wireless channel feature parameters of the channel between them and the central node. The second wireless channel feature parameters are obtained by the sub-nodes through pilot interaction with the central node, and the first wireless channel feature parameters and the second wireless channel feature parameters are different. Further, each sub-node interacts with the central node through pilot interaction on each channel to extract its own second wireless channel feature parameters. Each sub-node preprocesses its own second wireless channel feature parameters and quantizes the preprocessed second wireless channel feature parameters to determine its own second wireless channel feature sequence. Each sub-node receives the corresponding encryption sequence sent by the central node. Each sub-node XORs its corresponding encryption sequence and its corresponding second wireless channel feature sequence to obtain the XOR result. Error correction decoding is then performed on the XOR result to generate the recovered distribution sequence.
[0121] In the above embodiments, the recovered distribution sequence is verified by verification information to identify erroneous recovered distribution sequences, laying the foundation for re-determining the channel feature sequence of the child nodes corresponding to the erroneous recovered distribution sequence, thus enabling accurate determination of the erroneous recovered distribution sequence.
[0122] In one embodiment, the group key generation method based on wireless channel characteristics further includes:
[0123] Receive verification failure information sent by the child node, wherein the failure verification information is sent by the child node when verifying that the recovered distribution sequence is incorrect;
[0124] Based on the verification failure information, the first wireless channel feature sequence corresponding to the sub-node is re-determined;
[0125] The encoded distribution sequence is XORed with the newly determined first wireless channel feature sequence to regenerate the encrypted sequence of the child node, and the regenerated encrypted sequence is sent to the child node.
[0126] For example, after receiving the verification failure information sent by the i-th child node, the central node and the i-th child node re-engage with pilot signals through their respective channels to redetermine the first wireless channel characteristic parameters of the i-th child node. The central node then preprocesses these re-determined first wireless channel characteristic parameters. Finally, the central node quantizes the pre-processed re-determined first wireless channel characteristic parameters to obtain the re-determined first wireless channel characteristic sequence K from the i-th child node. r,i .
[0127] The central node distributes the encoded sequence Enc corresponding to the i-th child node. i With the redefined first wireless channel characteristic sequence K r,i Perform an XOR operation to regenerate the encrypted sequence E of the i-th child node. r,i The central node will encrypt the sequence E. r,i Send to the i-th child node, where is expressed as a mathematical expression, and the regenerated encrypted sequence E corresponding to the i-th child node is... r,i Determined by the following formula:
[0128]
[0129] In the above embodiments, when the central node receives the verification failure information, it re-determines the first wireless channel feature sequence corresponding to the child node, and then regenerates the encryption sequence until the recovered distribution sequence corresponding to the child node is correct, thereby ensuring the correct generation of the child node group key.
[0130] In one embodiment, determining the group key of the central node based on each of the first wireless channel feature sequences includes:
[0131] XORing all the first wireless channel feature sequences yields the group key of the central node.
[0132] Specifically, the central node performs an XOR operation on all the first wireless channel feature sequences to obtain the central node's initial group key K. GIThe initial group key K of the central node, expressed mathematically, is... GI Determined according to the following formula:
[0133]
[0134] Furthermore, when the child nodes perform 1 / 4-rate polar code error correction encoding on the recovered distribution sequence, to ensure that the group key generated by the child nodes is the same as the group key generated by the central node, it is necessary to adjust the initial group key K. GI Perform uniform extraction to obtain the group key K of the central node. G The group key K of the central node G Determined according to the following formula:
[0135]
[0136] Among them, Samp(K) GI ) represents the initial group key K for the central node. GI Perform uniform extraction.
[0137] In the above embodiments, the central node performs XOR processing on the first wireless channel feature sequence to generate the central node's group key, which optimizes the process of the central node generating the group key, eliminating the need to generate a pair key first and saving computing resources.
[0138] This invention also provides a group key generation method based on wireless channel characteristics, applied to multiple sub-nodes in a star network, wherein the multiple sub-nodes are connected to a central node. Figure 3 This is a second schematic flowchart of the group key generation method based on wireless channel characteristics provided in this embodiment of the invention, as shown below. Figure 3 As shown, for each child node, the group key generation method based on wireless channel characteristics includes the following steps:
[0139] Step 300: Perform pilot interaction with the central node to obtain the second wireless channel characteristic parameters of the channel between the central node and the central node.
[0140] Figure 2 This is an example diagram of a star network provided in an embodiment of the present invention, such as... Figure 2 The star network shown includes a central node and multiple child nodes, with each child node connected to the central node via a channel.
[0141] Specifically, the child nodes and the central node interact via pilot signals through the channel to extract the characteristic parameters of the second wireless channel.
[0142] For example, taking the amplitude portion of the estimated Channel State Information (CSI) as the second wireless channel characteristic parameter, the following detailed explanation is given using the i-th child node as an example:
[0143] The i-th child node and the central node interact via pilot signals through a channel between them, thereby extracting the second wireless channel characteristic parameter K. i ′.
[0144] Step 310: Determine the second wireless channel feature sequence corresponding to the child node based on the second wireless channel feature parameters of the channel between the child node and the central node.
[0145] Specifically, the sub-node determines the corresponding second wireless channel feature sequence based on the second wireless channel feature parameters. When determining the corresponding second wireless channel feature sequence based on the second wireless channel feature parameters, the sub-node first preprocesses the second wireless channel feature parameters, then quantizes the preprocessed second wireless channel feature parameters, and then determines the second wireless channel feature sequence.
[0146] For example, taking the amplitude portion of the estimated Channel State Information (CSI) as the second wireless channel characteristic parameter, the following detailed explanation is given using the i-th child node as an example:
[0147] The i-th child node has this second wireless channel characteristic parameter CSI i Preprocessing is performed to obtain the preprocessed second wireless channel characteristic parameter CSI. norm,i The preprocessing includes energy normalization. The i-th child node processes the preprocessed second wireless channel characteristic parameter CSI′. norm,i Quantization is performed to determine the second wireless channel feature sequence K of the i-th child node. i Furthermore, the first wireless channel characteristic parameter CSI after preprocessing by the central node. norm,i The second wireless channel characteristic parameter CSI′ after preprocessing of the child nodes norm,i The average energy is consistent, and the central node determines the CSI based on the uplink channel amplitude information. norm,i The sub-node determines CSI′ based on downlink channel amplitude information. norm,i .
[0148] The preprocessed second wireless channel characteristic parameter CSI′ norm,i As shown in the following formula:
[0149]
[0150] Where K represents the number of subcarriers used for pilot interaction; for example, 512 subcarriers can be used for pilot interaction. CSI i ′(n) represents the amplitude of the nth subcarrier. CSI represents the sum of squares of the amplitudes of all subcarriers. i ′(j) represents the amplitude of the j-th subcarrier, j = 1, 2, 3, ..., n, ..., K.
[0151] For example, the i-th child node pairs the preprocessed second wireless channel feature parameter CSI′. norm,i Perform second-order uniform quantization to determine the second wireless channel feature sequence K corresponding to the i-th child node. i The i-th child node first determines the preprocessed second wireless channel characteristic parameter CSI′. norm,i The maximum value Max′ and minimum value Min′ of the preprocessed second radio channel characteristic parameters on all subcarriers are used to determine the second radio channel characteristic parameter CSI′. norm,i The preprocessed second wireless channel feature parameters on all subcarriers are uniformly divided into four intervals. The second wireless channel feature sequence K is determined based on the interval in which the preprocessed second wireless channel feature parameters on each subcarrier are located. i ′.
[0152] Specifically, for the nth subcarrier corresponding to the i-th child node, the preprocessed second wireless channel feature parameters on the nth subcarrier are... Quantized into two bits of information, the preprocessed second wireless channel feature parameters on the 512 subcarriers can be quantized to obtain a 1024-bit second wireless channel feature sequence K. i ′, where K i ′ is a binary sequence. Wherein, K is the second wireless channel characteristic sequence on the nth subcarrier. i The value of ′(n) is determined according to the following formula:
[0153]
[0154] Among them, X i ′(n) represents the preprocessed second wireless channel characteristic parameter on the nth subcarrier. if indicates if, for example, Indicates if X i ′(n) belongs to the interval Then K i The value of ′(n) is 00.
[0155] It should be noted that the second wireless channel characteristic parameter can also be the received signal strength, the remaining part of the estimated channel state information, channel phase information, channel delay, or channel deep fading information, without specific limitations here.
[0156] It should be noted that preprocessing may include one or more of the following transformation methods: synchronization correction, frequency offset correction, normalization, fingerprint compensation, channel feature parameter consistency improvement, and redundancy removal. These transformation methods include smoothing transformation, interpolation filtering transformation, KL transform, DCT transform, wavelet transform, and interleaving transform. The specific method used for preprocessing the channel feature parameters is not specifically limited here.
[0157] It should be noted that quantization includes one or more of the following: single-threshold quantization, multi-threshold quantization, adaptive threshold quantization, guard band-based quantization, cumulative distribution probability quantization, differential quantization, and clustering algorithm-based quantization. No specific limitation is made here.
[0158] Step 320: Receive the encryption sequence sent by the central node, and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence;
[0159] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0160] For example, let's take the i-th child node as an example for a detailed explanation. The i-th child node receives the encrypted sequence E sent by the central node. i For this encrypted sequence E i Second wireless channel characteristic sequence K i The XOR operation is performed followed by error correction decoding to generate the recovered distribution sequence K′. GC,i The i-th child node distributes the recovery sequence K′. GC,i Verification is performed on the recovered distribution sequence K′. GC,i If correct, the distribution sequence K′ based on this recovery GC,i and encrypted sequence E i Determine the group key for the i-th child node.
[0161] In the above embodiments, the central node generates encryption sequences for each child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to each child node. Therefore, the encryption sequences received by each child node are different. Thus, even if an eavesdropper obtains the encryption sequences of each child node, it is difficult to obtain the group key through decoding. This improves the security of group key generation and reduces the risk of information leakage.
[0162] In one embodiment, determining the group key of the child node based on the encryption sequence and the second wireless channel feature sequence includes:
[0163] The encrypted sequence is XORed with the second wireless channel feature sequence to obtain the XOR result.
[0164] The XOR result is subjected to error correction decoding to generate the recovered distribution sequence;
[0165] The recovered distribution sequence is verified. If the recovered distribution sequence is verified to be correct, the group key of the child node is determined based on the recovered distribution sequence and the encryption sequence.
[0166] For example, taking the i-th child node as an example, the i-th child node will encrypt the sequence E. i The second wireless channel feature sequence K corresponding to itself i Perform an XOR operation on the i-th child node to obtain the XOR result. The i-th child node then performs error correction decoding on this XOR result to generate the recovered distribution sequence K′. GC,i The recovered distribution sequence K′ GC,i Determined by the following formula:
[0167]
[0168] Dec() indicates that the content within the parentheses is subjected to error correction and decoding.
[0169] Furthermore, each child node can perform consistency verification on the recovered distribution sequence using its corresponding first verification information to obtain a verification result. This verification result includes verifying that the recovered distribution sequence is correct and verifying that the recovered distribution sequence is incorrect. If the recovered distribution sequence is verified to be correct, the group key for each child node is determined based on the correct recovered distribution sequence and the encryption sequence.
[0170] In the above embodiments, the child nodes XOR the received encrypted sequence with the second wireless channel feature sequence to obtain the recovered distribution sequence, and determine the group key for each child node based on the recovered distribution sequence and the encrypted sequence. By verifying the recovered distribution sequence, it is possible to accurately determine whether the recovered distribution sequence is correct or incorrect. Correctly recovered distribution sequences are used to generate the group key. Incorrectly recovered distribution sequences are re-determined to ensure the successful generation of the group key.
[0171] In one embodiment, determining the group key of the child node based on the recovered distribution sequence and the encryption sequence includes:
[0172] The recovered distribution sequence is then subjected to error correction encoding to obtain the encoded recovered distribution sequence;
[0173] The encoded and recovered distribution sequence is XORed with the encrypted sequence to obtain the first wireless channel feature sequence corresponding to the child node;
[0174] The group key of the child node is obtained by XORing the first wireless channel feature sequence with the recovered distribution sequence.
[0175] For example, taking the i-th child node as an example, the i-th child node distributes its corresponding recovery sequence K′. GC,i Perform 1 / 4 code rate polar code error correction coding to obtain the encoded recovered distribution sequence Enc. i The i-th child node will encode and recover the distribution sequence Enc. i ′ and encrypted sequence E i Perform an XOR operation to obtain the first wireless channel feature sequence K corresponding to the i-th child node. i The above process can be expressed mathematically as follows:
[0176]
[0177] Enc() indicates that the content within the parentheses is subjected to error correction encoding.
[0178] The i-th child node is based on the first wireless channel feature sequence K corresponding to the preset step size 4. i Uniform extraction is performed (it should be clarified that uniform extraction of the first wireless channel feature sequence is only necessary to ensure that the group key generated by the child nodes is the same as that generated by the central node when the child nodes perform 1 / 4 code rate polar code error correction encoding on the recovered distribution sequence), to obtain the sampling result. This sampling result is the 256-bit key K. sam,i The 256-bit key K sam,i Determined by the following formula:
[0179] K sam,i =Samp(K i )
[0180] Among them, Samp(K) i ) represents the first wireless channel characteristic sequence K i Uniform extraction is performed. It should be noted that the preset step size is the same for both the central node's uniform extraction of the initial distribution sequence and the child node's uniform extraction of the first wireless channel feature sequence. For example, if the central node performs uniform extraction of the initial distribution sequence with a preset step size of 4 points, then the child node will necessarily perform uniform extraction of the first wireless channel feature sequence with a preset step size of 4 points.
[0181] Furthermore, key K sam,i With the recovered distribution sequence K G ′ C,i Perform an XOR operation to obtain the group key K of the i-th child node. G,i The process can be expressed mathematically as follows:
[0182]
[0183] As can be seen from the formula above, the group key generated by each child node is the same as the group key generated by the central node. Therefore, all nodes in the entire star network generate a unified group key.
[0184] In the above embodiments, each sub-node determines its group key based on the recovered distribution sequence and encryption sequence, and the group key of each sub-node is the same as the group key of the central node, so that the entire star network system obtains a unified group key. Even if the ciphertext is different during transmission, the uniformity of the final group key is ensured, so that the security level can be guaranteed while the group key is accurately generated.
[0185] In one embodiment, verifying the recovered distribution sequence includes:
[0186] Receive the first verification information sent by the central node;
[0187] A hash operation is performed on the recovered distribution sequence to determine the second verification information corresponding to the child node. The recovered distribution sequence is then verified based on the first verification information and the second verification information. The first verification information is obtained by hashing the initial distribution sequence, which is obtained by XORing all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node.
[0188] For example, taking the i-th child node as an example, the i-th child node receives the first verification information H corresponding to it sent by the central node. i The i-th child node's recovered distribution sequence K G ′ C,i The second verification information H corresponding to the i-th child node is obtained by performing a hash operation using the SM3 hash algorithm. i The child node will then send the second verification information H. i Perform consistency verification with the first verification information H0; if the second verification information H... i ′ and the first verification information H i If the results are the same, it means that the distribution sequence recovered by the i-th child node is correct. If the i-th child node confirms that the recovered distribution sequence is correct, it can send a verification success message to the central node to inform the central node that the distribution sequence recovered by the child node is correct. If the second verification message H... i ′ and the first verification information H i If they are different, it means that the distribution sequence recovered by the i-th child node is incorrect. If the i-th child node determines that the recovered distribution sequence is incorrect, it sends a verification failure message to the central node to inform the central node that the distribution sequence recovered by the child node is incorrect.
[0189] In the above embodiments, the distribution sequence recovered by the child node is verified by the first verification information and the second verification information, so that the erroneous recovery distribution sequence is identified, which lays the foundation for the subsequent re-determination of the channel feature sequence for the child node corresponding to the erroneous recovery distribution sequence, and makes the error situation in the key generation process accurately determined.
[0190] In one embodiment, the group key generation method based on wireless channel characteristics further includes:
[0191] If the recovered distribution sequence is found to be incorrect, a verification failure message is sent to the central node. The verification failure message is used by the central node to re-determine the first wireless channel feature sequence of the sub-node and regenerate the encryption sequence based on the re-determined first wireless channel feature sequence.
[0192] Receive the regenerated encrypted sequence sent by the central node;
[0193] Redetermine the second wireless channel feature sequence corresponding to the child node;
[0194] Based on the regenerated encryption sequence and the redefined second wireless channel feature sequence, the group key of the sub-node is redefined.
[0195] For example, taking the i-th child node as an example, if the recovered distribution sequence is found to be incorrect, the i-th child node sends a verification failure message to the central node. Upon receiving this verification failure message, the central node interacts with the i-th child node via pilot communication through their channel to re-determine the first wireless channel characteristic parameters of the i-th child node. The central node then preprocesses the re-determined first wireless channel characteristic parameters of the i-th child node, quantizes the preprocessed re-determined first wireless channel characteristic parameters of the i-th child node, and finally obtains the re-determined first wireless channel characteristic sequence K corresponding to the i-th child node. r,i The central node distributes the encoded sequence Enc corresponding to the i-th child node. i With the redefined first wireless channel characteristic sequence K r,i Perform an XOR operation to regenerate the encrypted sequence E of the i-th child node. r,i Then the central node will encrypt the sequence E r,i Send to the i-th child node.
[0196] Furthermore, the i-th child node receives the regenerated encrypted sequence E sent by the central node. r,i The i-th child node and the central node exchange pilot signals through their respective channels. The i-th child node redetermines its second wireless channel characteristic parameters and then preprocesses these parameters. The i-th child node quantizes the preprocessed, redetermined second wireless channel characteristic parameters, ultimately obtaining the redetermined second wireless channel characteristic sequence K′. r,i .
[0197] The i-th child node generates a new encrypted sequence E. r,i and the redefined second wireless channel feature sequence K′ r,i Perform XOR processing and error correction decoding to generate the redefined and recovered distribution sequence K″. GC,i The i-th child node determines the restored distribution sequence K″. GC,i Verification is performed. The redefined recovery distribution sequence K″ is then verified. GC,i In the correct case, the i-th child node is based on the re-determined recovered distribution sequence K″. GC,i and the regenerated encrypted sequence E r,i Determine its group key.
[0198] It is understandable that, in verifying the redetermined recovery distribution sequence K″ GC,iIn case of an error, the child node also needs to send a verification failure message to the central node, and continue with the steps described in the above embodiment. The central node then re-determines the child node's first wireless channel feature sequence and regenerates the encryption sequence based on the re-determined first wireless channel feature sequence. The child node receives the regenerated encryption sequence from the central node and re-determines its corresponding second wireless channel feature sequence. Based on the re-generated encryption sequence and the re-determined second wireless channel feature sequence, the child node generates a re-determined recovered distribution sequence and verifies it until the re-determined recovered distribution sequence is verified to be correct.
[0199] In the above embodiments, the recovered distribution sequence is verified. If the recovered distribution sequence is found to be incorrect, the first wireless channel feature sequence, the encryption sequence, the second wireless channel feature sequence, and the group key of the child node are re-determined until the recovered distribution sequence is verified to be correct, so as to ensure the successful generation of the group key of the child node.
[0200] The group key generation device based on wireless channel characteristics provided by the present invention will be described below. The group key generation device based on wireless channel characteristics described below can be referred to in correspondence with the group key generation method based on wireless channel characteristics described above.
[0201] Figure 4 This is one of the structural schematic diagrams of a group key generation device based on wireless channel characteristics provided in an embodiment of the present invention, such as... Figure 4 As shown, the group key generation device 400 based on wireless channel characteristics is applied to the central node of a star network, wherein the central node connects to multiple child nodes. The device includes:
[0202] Interaction module 410 is used to perform pilot interaction with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between the sub-nodes;
[0203] The first determining module 420 is used to determine the first wireless channel feature sequence corresponding to each of the sub-nodes based on the first wireless channel feature parameters of the channel between each of the sub-nodes;
[0204] The second determining module 430 is used to determine the group key of the central node based on the feature sequences of each of the first wireless channels;
[0205] The generation module 440 is configured to generate an encryption sequence for each of the child nodes based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and send the encryption sequence to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0206] The group key generation device based on wireless channel characteristics provided by this invention determines the first wireless channel feature sequence corresponding to each child node through the first wireless channel feature parameters of the channel between the central node and each child node. Then, the central node can generate its own group key based on each of the first wireless channel feature sequences. For each child node, an encryption sequence is generated based on all first wireless channel feature sequences other than the one corresponding to the child node, and this encryption sequence is sent to the corresponding child node, allowing the child node to generate the final group key based on this encryption sequence. Since the encryption sequence for each child node is generated based on all first wireless channel feature sequences other than the one corresponding to the child node, the central node uses different first wireless channel feature sequences to generate encryption sequences for each child node. Therefore, even if an eavesdropper obtains the encryption sequences of each child node, it is difficult to obtain the group key through decoding, thus improving the security of group key generation and reducing the risk of information leakage.
[0207] In one embodiment, the generation module 440 is specifically used for:
[0208] XOR all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node to obtain the initial distribution sequence;
[0209] Based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node, the encryption sequence is generated for the child node.
[0210] In one embodiment, the generation module 440 is specifically used for:
[0211] The initial distribution sequence is subjected to error correction encoding to generate an encoded distribution sequence;
[0212] The encoded distribution sequence is XORed with the first wireless channel feature sequence corresponding to the child node to obtain the encrypted sequence.
[0213] In one embodiment, the apparatus further includes a verification module, which is specifically used for:
[0214] For each of the child nodes, a hash operation is performed on the distribution sequence corresponding to the child node to determine the first verification information corresponding to the child node;
[0215] The first verification information is sent to the corresponding sub-node. The first verification information is used by the sub-node to verify the recovered distribution sequence. The recovered distribution sequence is determined based on the encryption sequence and the second wireless channel feature sequence. The second wireless channel feature sequence is determined by the sub-node according to the second wireless channel feature parameters of the channel between the sub-node and the central node. The second wireless channel feature parameters are obtained by the sub-node through pilot interaction with the central node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0216] In one embodiment, the apparatus further includes a re-determination module, the re-determination module being specifically used for:
[0217] Receive verification failure information sent by the child node, wherein the failure verification information is sent by the child node when verifying that the recovered distribution sequence is incorrect;
[0218] Based on the verification failure information, the first wireless channel feature sequence corresponding to the sub-node is re-determined;
[0219] The encoded distribution sequence is XORed with the newly determined first wireless channel feature sequence to regenerate the encrypted sequence of the child node, and the regenerated encrypted sequence is sent to the child node.
[0220] In one embodiment, the second determining module 430 is specifically used for:
[0221] XORing all the first wireless channel feature sequences yields the group key of the central node.
[0222] Figure 5 This is a second schematic diagram of the structure of the group key generation device based on wireless channel characteristics provided in this embodiment of the invention, as shown below. Figure 5 As shown, the group key generation device 500 based on wireless channel characteristics is applied to multiple sub-nodes in a star network. These sub-nodes are connected to a central node. For each sub-node, the device includes:
[0223] Interaction module 510 is used to perform pilot interaction with the central node to obtain the second wireless channel characteristic parameters of the channel between the central node and the central node;
[0224] The first determining module 520 is used to determine the second wireless channel feature sequence corresponding to the child node based on the second wireless channel feature parameters of the channel between the central node and the central node.
[0225] The second determining module 530 is used to receive the encryption sequence sent by the central node and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence.
[0226] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0227] The group key generation device based on wireless channel characteristics provided by this invention determines the first wireless channel feature sequence corresponding to each child node through the first wireless channel feature parameters of the channel between the central node and each child node. Then, the central node can generate its own group key based on each of the first wireless channel feature sequences. For each child node, an encryption sequence is generated based on all first wireless channel feature sequences other than the one corresponding to the child node, and this encryption sequence is sent to the corresponding child node, allowing the child node to generate the final group key based on this encryption sequence. Since the encryption sequence for each child node is generated based on all first wireless channel feature sequences other than the one corresponding to the child node, the central node uses different first wireless channel feature sequences to generate encryption sequences for each child node. Therefore, even if an eavesdropper obtains the encryption sequences of each child node, it is difficult to obtain the group key through decoding, thus improving the security of group key generation and reducing the risk of information leakage.
[0228] In one embodiment, the second determining module 530 is specifically used for:
[0229] The encrypted sequence is XORed with the second wireless channel feature sequence to obtain the XOR result.
[0230] The XOR result is subjected to error correction decoding to generate the recovered distribution sequence;
[0231] The recovered distribution sequence is verified. If the recovered distribution sequence is verified to be correct, the group key of the child node is determined based on the recovered distribution sequence and the encryption sequence.
[0232] In one embodiment, the second determining module 530 is specifically used for:
[0233] The recovered distribution sequence is then subjected to error correction encoding to obtain the encoded recovered distribution sequence;
[0234] The encoded and recovered distribution sequence is XORed with the encrypted sequence to obtain the first wireless channel feature sequence corresponding to the child node;
[0235] The group key of the child node is obtained by XORing the first wireless channel feature sequence with the recovered distribution sequence.
[0236] In one embodiment, the second determining module 530 is specifically used for:
[0237] Receive the first verification information sent by the central node;
[0238] A hash operation is performed on the recovered distribution sequence to determine the second verification information corresponding to the child node. The recovered distribution sequence is then verified based on the first verification information and the second verification information. The first verification information is obtained by hashing the initial distribution sequence, which is obtained by XORing all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node.
[0239] In one embodiment, the apparatus further includes a re-determination module, the re-determination module being specifically used for:
[0240] If the recovered distribution sequence is found to be incorrect, a verification failure message is sent to the central node. The verification failure message is used by the central node to re-determine the first wireless channel feature sequence of the sub-node and regenerate the encryption sequence based on the re-determined first wireless channel feature sequence.
[0241] Receive the regenerated encrypted sequence sent by the central node;
[0242] Redetermine the second wireless channel feature sequence corresponding to the child node;
[0243] Based on the regenerated encryption sequence and the redefined second wireless channel feature sequence, the group key of the sub-node is redefined.
[0244] Figure 6 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 6 As shown, the electronic device may include: a processor 610, a communications interface 620, a memory 630, and a communication bus 640, wherein the processor 610, the communications interface 620, and the memory 630 communicate with each other via the communication bus 640. The processor 610 can call logical instructions in the memory 630 to execute a group key generation method based on wireless channel characteristics. This group key generation method based on wireless channel characteristics includes:
[0245] Pilot interaction is performed with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between each of the sub-nodes;
[0246] The first wireless channel feature sequence corresponding to each of the sub-nodes is determined based on the first wireless channel feature parameters of the channel between each of the sub-nodes.
[0247] The group key of the central node is determined based on the feature sequences of each of the first wireless channels;
[0248] For each of the child nodes, an encryption sequence is generated for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and the encryption sequence is sent to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0249] or,
[0250] The second wireless channel characteristic parameters of the channel between the central node and the central node are obtained by pilot interaction.
[0251] Based on the second wireless channel characteristic parameters of the channel between the central node and the child node, determine the second wireless channel characteristic sequence corresponding to the child node;
[0252] Receive the encryption sequence sent by the central node, and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence;
[0253] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0254] Furthermore, the logical instructions in the aforementioned memory 630 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.
[0255] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the group key generation method based on wireless channel characteristics provided by the above methods, the group key generation method based on wireless channel characteristics comprising:
[0256] Pilot interaction is performed with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between each of the sub-nodes;
[0257] The first wireless channel feature sequence corresponding to each of the sub-nodes is determined based on the first wireless channel feature parameters of the channel between each of the sub-nodes.
[0258] The group key of the central node is determined based on the feature sequences of each of the first wireless channels;
[0259] For each of the child nodes, an encryption sequence is generated for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and the encryption sequence is sent to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
[0260] or,
[0261] The second wireless channel characteristic parameters of the channel between the central node and the central node are obtained by pilot interaction.
[0262] Based on the second wireless channel characteristic parameters of the channel between the central node and the child node, determine the second wireless channel characteristic sequence corresponding to the child node;
[0263] Receive the encryption sequence sent by the central node, and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence;
[0264] The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
[0265] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.
[0266] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.
[0267] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.
Claims
1. A group key generation method based on wireless channel characteristics, characterized in that, The method, applied to the central node of a star network, wherein the central node connects to multiple child nodes, includes: Pilot interaction is performed with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between each of the sub-nodes; Based on the first wireless channel characteristic parameters of the channel between each of the sub-nodes, determine the first wireless channel characteristic sequence corresponding to each of the sub-nodes respectively; The group key of the central node is determined based on the feature sequences of each of the first wireless channels; For each of the child nodes, an encryption sequence is generated for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and the encryption sequence is sent to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
2. The group key generation method based on wireless channel characteristics according to claim 1, characterized in that, The step of generating an encryption sequence for the child node based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node includes: XOR all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node to obtain the initial distribution sequence; Based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node, the encryption sequence is generated for the child node.
3. The group key generation method based on wireless channel characteristics according to claim 2, characterized in that, The step of generating the encryption sequence for the child node based on the initial distribution sequence and the first wireless channel feature sequence corresponding to the child node includes: The initial distribution sequence is subjected to error correction encoding to generate an encoded distribution sequence; The encoded distribution sequence is XORed with the first wireless channel feature sequence corresponding to the child node to obtain the encrypted sequence.
4. The group key generation method based on wireless channel characteristics according to claim 3, characterized in that, The method further includes: For each of the child nodes, a hash operation is performed on the distribution sequence corresponding to the child node to determine the first verification information corresponding to the child node; The first verification information is sent to the corresponding sub-node. The first verification information is used by the sub-node to verify the recovered distribution sequence. The recovered distribution sequence is determined based on the encryption sequence and the second wireless channel feature sequence. The second wireless channel feature sequence is determined by the sub-node according to the second wireless channel feature parameters of the channel between the sub-node and the central node. The second wireless channel feature parameters are obtained by the sub-node through pilot interaction with the central node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
5. The group key generation method based on wireless channel characteristics according to claim 4, characterized in that, The method further includes: Receive verification failure information sent by the child node, wherein the verification failure information is sent by the child node when verifying that the recovered distribution sequence is incorrect; Based on the verification failure information, the first wireless channel feature sequence corresponding to the sub-node is re-determined; The encoded distribution sequence is XORed with the newly determined first wireless channel feature sequence to regenerate the encrypted sequence of the child node, and the regenerated encrypted sequence is sent to the child node.
6. The group key generation method based on wireless channel characteristics according to any one of claims 1 to 5, characterized in that, The step of determining the group key of the central node based on each of the first wireless channel feature sequences includes: XORing all the first wireless channel feature sequences yields the group key of the central node.
7. A group key generation method based on wireless channel characteristics, characterized in that, The method, applied to multiple child nodes in a star network, wherein the multiple child nodes are connected to a central node, includes the following for each child node: The second wireless channel characteristic parameters of the channel between the central node and the central node are obtained by pilot interaction. Based on the second wireless channel characteristic parameters of the channel between the central node and the central node, determine the second wireless channel characteristic sequence corresponding to the child node; Receive the encryption sequence sent by the central node, and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence; The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
8. The group key generation method based on wireless channel characteristics according to claim 7, characterized in that, Determining the group key of the child node based on the encryption sequence and the second wireless channel feature sequence includes: The encrypted sequence is XORed with the second wireless channel feature sequence to obtain the XOR result. The XOR result is subjected to error correction decoding to generate the recovered distribution sequence; The recovered distribution sequence is verified. If the recovered distribution sequence is verified to be correct, the group key of the child node is determined based on the recovered distribution sequence and the encryption sequence.
9. The group key generation method based on wireless channel characteristics according to claim 8, characterized in that, Determining the group key of the child node based on the recovered distribution sequence and the encryption sequence includes: The recovered distribution sequence is then subjected to error correction encoding to obtain the encoded recovered distribution sequence; The encoded and recovered distribution sequence is XORed with the encrypted sequence to obtain the first wireless channel feature sequence corresponding to the child node; The group key of the child node is obtained by XORing the first wireless channel feature sequence with the recovered distribution sequence.
10. The group key generation method based on wireless channel characteristics according to claim 8, characterized in that, The verification of the recovered distribution sequence includes: Receive the first verification information sent by the central node; A hash operation is performed on the recovered distribution sequence to determine the second verification information corresponding to the child node. The recovered distribution sequence is then verified based on the first verification information and the second verification information. The first verification information is obtained by hashing the initial distribution sequence, which is obtained by XORing all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node.
11. The group key generation method based on wireless channel characteristics according to any one of claims 8 to 10, characterized in that, The method further includes: If the recovered distribution sequence is found to be incorrect, a verification failure message is sent to the central node. The verification failure message is used by the central node to re-determine the first wireless channel feature sequence of the sub-node and regenerate the encryption sequence based on the re-determined first wireless channel feature sequence. Receive the regenerated encrypted sequence sent by the central node; Redetermine the second wireless channel feature sequence corresponding to the child node; Based on the regenerated encryption sequence and the redefined second wireless channel feature sequence, the group key of the sub-node is redefined.
12. A group key generation device based on wireless channel characteristics, characterized in that, A device for use as a central node in a star network, wherein the central node connects to multiple child nodes, the device comprising: The interaction module is used to perform pilot interaction with each of the sub-nodes to obtain the first wireless channel characteristic parameters of the channel between the module and each of the sub-nodes. The first determining module is used to determine the first wireless channel feature sequence corresponding to each of the sub-nodes based on the first wireless channel feature parameters of the channel between each of the sub-nodes; The second determining module is used to determine the group key of the central node based on the feature sequences of each of the first wireless channels; The generation module is configured to generate an encryption sequence for each of the child nodes based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node, and send the encryption sequence to the child node. The encryption sequence is used by the child node to determine the corresponding group key.
13. A group key generation device based on wireless channel characteristics, characterized in that, A device for use in a star network with multiple child nodes connected to a central node, wherein for each child node, the device includes: The interaction module is used to perform pilot interaction with the central node to obtain the second wireless channel characteristic parameters of the channel between the central node and the central node; The first determining module is used to determine the second wireless channel feature sequence corresponding to the child node based on the second wireless channel feature parameters of the channel between the child node and the central node. The second determining module is used to receive the encryption sequence sent by the central node and determine the group key of the sub-node based on the encryption sequence and the second wireless channel feature sequence. The encryption sequence is generated based on all first wireless channel feature sequences other than the first wireless channel feature sequence corresponding to the child node and the first wireless channel feature sequence corresponding to the child node. The first wireless channel feature sequence is determined by the central node based on the first wireless channel feature parameters of the channel between the central node and the child node. The first wireless channel feature parameters are obtained by the central node through pilot interaction with the child node. The first wireless channel feature parameters and the second wireless channel feature parameters are different.
14. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the group key generation method based on wireless channel characteristics as described in any one of claims 1 to 6, or when it executes the program, it implements the group key generation method based on wireless channel characteristics as described in any one of claims 7 to 11.
15. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the group key generation method based on wireless channel characteristics as described in any one of claims 1 to 6, or the group key generation method based on wireless channel characteristics as described in any one of claims 7 to 11.