Multi-application secure communication method, system, device and medium based on encryption algorithm

Abstract

The present application discloses a multi-application secure communication method, system, device and medium based on encryption algorithm, which mainly relates to the field of multi-application secure communication technology, and is used to solve the problems of existing solutions of mutual two-way authentication, too many repeated authentications, and the need to establish protocol channels between multiple applications on one device and multiple applications on another device, resulting in waste of communication resources. It includes: creating a preset communication authentication center server, and then establishing two-way authentication between the node performing two-way authentication and the preset communication authentication center server; transmitting data between nodes completing two-way authentication through communication lines; creating two-way authentication components in each node; establishing two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component; the node transmits application information to the corresponding receiving node or receiving application sub-node through the communication line.

Description

Technical Field

[0001] The present application relates to the technical field of multi-application secure communication, and in particular to a multi-application secure communication method, system, device and medium based on an encryption algorithm. Background Art

[0002] Existing encryption algorithms similar to the TLS handshake protocol require two-way authentication and communication key exchange between the client and the server during the encryption process. For example, TLCP (Transport Layer Cryptographic Protocol) is a cryptographic protocol designed specifically to meet China's domestic security needs. It provides strong protection for transport layer communications by using domestic cryptographic algorithms and strict security measures.

[0003] The existing algorithmic two-way authentication method is as follows: Key generation: The communicating parties (such as the client and the server) each generate a pair of SM2 key pairs, including a public key and a private key. The public key can be made public, while the private key needs to be kept confidential. Public key exchange: Both parties send their respective public keys to each other. This is usually done through a secure channel or an existing security mechanism to prevent the public key from being tampered with or replaced during transmission. Identity verification: Use the other party's public key to encrypt a random number, timestamp, or other information and send it to the other party. The receiver uses its own private key to decrypt the encrypted information, verify the correctness and integrity of the information, and thus confirm the identity of the sender.

[0004] However, the existing encryption algorithms similar to the TLS handshake protocol require multiple nodes to communicate with each other and perform two-way authentication during operation, which results in too many repeated authentications. Multiple applications on one device and multiple applications on another device need to establish their own protocol channels, resulting in a waste of communication resources. Summary of the invention

[0005] In view of the above-mentioned deficiencies in the prior art, the present application provides a multi-application secure communication method, system, device and medium based on an encryption algorithm to solve the problems that the existing solutions require multiple nodes to communicate with each other, require mutual two-way authentication, too many repeated authentications, and multiple applications on one device need to establish protocol channels with multiple applications on another device, resulting in a waste of communication resources.

[0006] In the first aspect, the present application provides a multi-application secure communication method based on an encryption algorithm, the method comprising: creating a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function; obtaining a node for two-way authentication, and then establishing two-way authentication between the node for two-way authentication and the preset communication authentication center server; establishing a communication line between the node that has completed the two-way authentication and the preset communication authentication center server, and then transmitting data between the nodes that have completed the two-way authentication through the communication line; creating a two-way authentication component in each node; establishing two-way authentication between an application sub-node for two-way authentication in the node and the two-way authentication component; and then obtaining application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line.

[0007] Furthermore, two-way authentication is established between the node performing two-way authentication and the preset communication authentication center server, specifically including: the node performing two-way authentication accesses the preset communication authentication center server through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication; two-way authentication is established between the application sub-node performing two-way authentication in the node and the two-way authentication component, specifically including: the application sub-node performing two-way authentication accesses the two-way authentication component through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

[0008] Furthermore, before establishing two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component, the method also includes: through local communication, any node accesses one or more application sub-nodes, and then the accessed one or more application sub-nodes constitute the application sub-nodes in the node.

[0009] Furthermore, both the node and the application sub-node contain a unique IP; the application information uploaded by each application sub-node in the node is obtained, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line, specifically including: obtaining the application information uploaded by each application sub-node in the node; reading the target IP in the application information, and determining the node or application sub-node corresponding to the target IP; when the target IP corresponds to the node, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; when the target IP corresponds to the application sub-node, the node corresponding to the application sub-node is determined based on the corresponding relationship between the preset application sub-node and the node; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then the application information is transmitted to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

[0010] On the second aspect, the present application provides a multi-application secure communication system based on an encryption algorithm, and the system includes: a creation module, used to create a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function; a node authentication module, used to obtain a node for two-way authentication, and then establish a two-way authentication between the node for two-way authentication and the preset communication authentication center server; establish a communication line between the node that has completed the two-way authentication and the preset communication authentication center server, and then transmit data between the nodes that have completed the two-way authentication through the communication line; an application sub-node authentication module, used to create a two-way authentication component in each node; establish a two-way authentication between the application sub-node that has performed two-way authentication in the node and the two-way authentication component; and then obtain the application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line.

[0011] Furthermore, the node authentication module includes a first two-way authentication unit, which is used for the node performing two-way authentication to access the preset communication authentication center server through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication; the application sub-node authentication module includes a second two-way authentication unit, which is used for the application sub-node performing two-way authentication to access the two-way authentication component through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

[0012] Furthermore, the node includes a sub-node access interface for local communication. Any node accesses one or more application sub-nodes through the node access interface, and then accesses one or more application sub-nodes to constitute an application sub-node within the node.

[0013] Furthermore, the application sub-node authentication module includes an information sending unit, and both the node and the application sub-node contain a unique IP; it is used to obtain application information uploaded by each application sub-node in the node; read the target IP in the application information, and determine the node or application sub-node corresponding to the target IP; when the target IP corresponds to the node, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; when the target IP corresponds to the application sub-node, based on the corresponding relationship between the preset application sub-node and the node, the node corresponding to the application sub-node is determined; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then transmits the application information to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

[0014] In the third aspect, the present application provides a multi-application secure communication device based on an encryption algorithm, the device comprising: a processor; and a memory on which executable code is stored, and when the executable code is executed, the processor executes a multi-application secure communication method based on an encryption algorithm such as any one of the above.

[0015] In a fourth aspect, the present application provides a non-volatile computer storage medium having computer instructions stored thereon, which when executed implement a multi-application secure communication method based on an encryption algorithm as described above.

[0016] Those skilled in the art can understand that the present application has at least the following beneficial effects:

[0017] The present application discloses a multi-application secure communication method, system, device and medium based on an encryption algorithm. A node can be used as a master node for access by multiple application sub-nodes. A single device only needs one protocol authentication and can use a high-security encrypted communication channel. The node only needs to access a preset communication authentication center server to realize information transmission between multiple nodes. A two-way authentication is established between the application sub-node and the two-way authentication component, and then multiple application sub-nodes can transmit data between application sub-nodes through the two-way authentication component. It solves the problem that the existing solution requires multiple nodes to communicate with each other, and needs to perform two-way authentication on each other, and there are too many repeated authentications. The problem that multiple applications on one device need to establish protocol channels with multiple applications on another device, resulting in a waste of communication resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Some embodiments of the present disclosure are described below with reference to the accompanying drawings, in which:

[0019] Figure 1 This is a flow chart of a multi-application secure communication method based on an encryption algorithm provided in an embodiment of the present application.

[0020] Figure 2 It is a schematic diagram of the internal structure of a multi-application secure communication system based on an encryption algorithm provided in an embodiment of the present application.

[0021] Figure 3 It is a schematic diagram of the internal structure of a multi-application secure communication device based on an encryption algorithm provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] It should be understood by those skilled in the art that the embodiments described below are only preferred embodiments of the present disclosure, and do not mean that the present disclosure can only be implemented through the preferred embodiments. The preferred embodiments are only used to explain the technical principles of the present disclosure, and are not used to limit the protection scope of the present disclosure. Based on the preferred embodiments provided by the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work should still fall within the protection scope of the present disclosure.

[0023] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0024] The technical solution proposed in the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0025] The present application embodiment provides a multi-application secure communication method based on an encryption algorithm, such as Figure 1 As shown, the method provided in the embodiment of the present application mainly includes the following steps:

[0026] Step 110: Create a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function.

[0027] It should be noted that the node routing function enables data transmission between nodes through a preset communication authentication center server. The encryption algorithm can be a national encryption algorithm.

[0028] Step 120: Obtain a node for performing two-way authentication, and then establish two-way authentication between the node for performing two-way authentication and a preset communication authentication center server.

[0029] Wherein, a two-way authentication is established between the node performing the two-way authentication and the preset communication authentication center server, which can be specifically:

[0030] The node performing two-way authentication accesses the preset communication authentication center server through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

[0031] Step 130: establish a communication line between the node that has completed the two-way authentication and a preset communication authentication center server, and then transmit data between the nodes that have completed the two-way authentication through the communication line.

[0032] It should be noted that the communication line can be used for node transmission to a preset communication authentication center server, and the preset communication authentication center server then transmits to other nodes.

[0033] Step 140, create a two-way authentication component in each node; establish two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component; then obtain the application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line.

[0034] Among them, establishing two-way authentication between the application sub-node that performs two-way authentication in the node and the two-way authentication component may be specifically:

[0035] The application sub-node performing two-way authentication accesses the two-way authentication component through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

[0036] Before establishing two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component, the method may further include:

[0037] Through local communication, any node accesses one or more application sub-nodes, and then accesses one or more application sub-nodes to constitute the application sub-nodes within the node.

[0038] It should be noted that both nodes and application subnodes contain unique IP addresses.

[0039] The application information uploaded by each application sub-node in the node is obtained, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line. Specifically, it can be:

[0040] Obtain application information uploaded by each application sub-node in the node; read the target IP in the application information, and determine the node or application sub-node corresponding to the target IP; when the target IP corresponds to the node, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; when the target IP corresponds to the application sub-node, determine the node corresponding to the application sub-node based on the preset correspondence between the application sub-node and the node; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then transmits the application information to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

[0041] besides, Figure 2 A multi-application secure communication system based on an encryption algorithm is provided in an embodiment of the present application. Figure 2 As shown, the system provided in the embodiment of the present application mainly includes:

[0042] The creation module 210 is used to create a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function.

[0043] The node authentication module 220 is used to obtain a node that performs two-way authentication, and then establish two-way authentication between the node that performs two-way authentication and a preset communication authentication center server; establish a communication line between the node that completes the two-way authentication and the preset communication authentication center server, and then transmit data between the nodes that complete the two-way authentication through the communication line.

[0044] The node authentication module 220 includes a first two-way authentication unit, which is used for the node that performs two-way authentication to access a preset communication authentication center server through TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

[0045] The node includes a sub-node access interface for local communication. Any node accesses one or more application sub-nodes through the node access interface, and then accesses one or more application sub-nodes to constitute an application sub-node within the node.

[0046] The application sub-node authentication module 230 is used to create a two-way authentication component in each node; establish two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component; and then obtain the application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line.

[0047] The application sub-node authentication module 230 includes a second bidirectional authentication unit, which is used for the application sub-node that performs bidirectional authentication to access the bidirectional authentication component through the TLCP protocol bidirectional authentication, thereby completing the establishment of bidirectional authentication.

[0048] The application sub-node authentication module 230 includes an information sending unit, and both the node and the application sub-node contain a unique IP; it is used to obtain the application information uploaded by each application sub-node in the node; read the target IP in the application information, and determine the node or application sub-node corresponding to the target IP; when the target IP corresponds to the node, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; when the target IP corresponds to the application sub-node, based on the corresponding relationship between the preset application sub-node and the node, the node corresponding to the application sub-node is determined; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then transmits the application information to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

[0049] The above is a method embodiment of the present application. Based on the same inventive concept, the present application embodiment also provides a multi-application secure communication device based on an encryption algorithm. Figure 3 As shown, the device includes: a processor; and a memory on which executable codes are stored. When the executable codes are executed, the processor executes a multi-application secure communication method based on an encryption algorithm as in the above-mentioned embodiment.

[0050] Specifically, the server side creates a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function to obtain the node for two-way authentication, and then establishes two-way authentication between the node for two-way authentication and the preset communication authentication center server; establishes a communication line between the node that completes the two-way authentication and the preset communication authentication center server, and then transmits data between the nodes that complete the two-way authentication through the communication line; creates a two-way authentication component in each node; establishes two-way authentication between the application sub-node for two-way authentication in the node and the two-way authentication component; and then obtains the application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line.

[0051] In addition, an embodiment of the present application further provides a non-volatile computer storage medium on which executable instructions are stored. When the executable instructions are executed, a multi-application secure communication method based on an encryption algorithm as described above is implemented.

[0052] So far, the technical solutions of the present disclosure have been described in combination with the above multiple embodiments, but it is easy for those skilled in the art to understand that the protection scope of the present disclosure is not limited to these specific embodiments. Without departing from the technical principles of the present disclosure, those skilled in the art can split and combine the technical solutions in the above-mentioned various embodiments, and can also make equivalent changes or replacements to the relevant technical features. Any changes, equivalent replacements, improvements, etc. made within the technical concept and / or technical principle of the present disclosure will fall within the protection scope of the present disclosure.

Claims

1. A multi-application secure communication method based on encryption algorithm, characterized in that: The method comprises: Create a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of encryption algorithms, and the preset communication authentication center server has a node routing function; Acquire a node for two-way authentication, and then establish two-way authentication between the node for two-way authentication and a preset communication authentication center server; Establishing a communication line between the node that has completed the two-way authentication and a preset communication authentication center server, and then transmitting data between the nodes that have completed the two-way authentication through the communication line; Create a two-way authentication component in each node; establish two-way authentication between the application sub-node that performs two-way authentication in the node and the two-way authentication component; then obtain the application information uploaded by each application sub-node in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application sub-node through the communication line; wherein both the node and the application sub-node contain a unique IP; Specifically include: Obtain application information uploaded by each application sub-node in the node; read the target IP in the application information, and determine the node or application sub-node corresponding to the target IP; when the target IP corresponds to the node, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; when the target IP corresponds to the application sub-node, determine the node corresponding to the application sub-node based on the preset correspondence between the application sub-node and the node; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then transmits the application information to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

2. The multi-application secure communication method based on encryption algorithm according to claim 1, characterized in that: Establishing two-way authentication between the node performing two-way authentication and the preset communication authentication center server, specifically including: The node that performs two-way authentication accesses the preset communication authentication center server through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication; Establish two-way authentication between the application sub-node and the two-way authentication component in the node, including: The application sub-node performing two-way authentication accesses the two-way authentication component through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

3. The multi-application secure communication method based on encryption algorithm according to claim 1, characterized in that: Before establishing two-way authentication between the application sub-node performing two-way authentication in the node and the two-way authentication component, the method further includes: Through local communication, any node accesses one or more application sub-nodes, and then accesses one or more application sub-nodes to constitute the application sub-nodes within the node.

4. A multi-application secure communication system based on encryption algorithm, characterized in that: The system comprises: A creation module is used to create a preset communication authentication center server, and the preset communication authentication center server supports two-way authentication of the encryption algorithm, and the preset communication authentication center server has a node routing function; The node authentication module is used to obtain a node for two-way authentication, and then establish two-way authentication between the node for two-way authentication and a preset communication authentication center server; establish a communication line between the node that has completed two-way authentication and the preset communication authentication center server, and then transmit data between the nodes that have completed two-way authentication through the communication line; The application subnode authentication module is used to create a two-way authentication component in each node; establish a two-way authentication between the application subnode that performs two-way authentication in the node and the two-way authentication component; and then obtain the application information uploaded by each application subnode in the node through the two-way authentication component, and then the node transmits the application information to the corresponding receiving node or receiving application subnode through the communication line; Among them, the application sub-node authentication module includes an information delivery unit, and both the node and the application sub-node contain a unique IP; Used to obtain application information uploaded by each application sub-node in the node; Read the target IP in the application information and determine the node or application subnode corresponding to the target IP; When the target IP corresponds to a node, the node corresponding to the application subnode of the uploaded application information transmits the application information to the node corresponding to the target IP through the communication line; When the target IP corresponds to an application sub-node, the node corresponding to the application sub-node is determined based on the correspondence between the preset application sub-node and the node; through the communication line, the node corresponding to the application sub-node of the uploaded application information transmits the application information to the node corresponding to the target IP application sub-node, and then transmits the application information to the application sub-node corresponding to the target IP through the two-way authentication component in the node.

5. The multi-application secure communication system based on encryption algorithm according to claim 4 is characterized in that: The node authentication module includes a first two-way authentication unit, The node used for two-way authentication accesses the preset communication authentication center server through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication; The application subnode authentication module includes a second two-way authentication unit, The application subnode used for two-way authentication accesses the two-way authentication component through the TLCP protocol two-way authentication, thereby completing the establishment of two-way authentication.

6. The multi-application secure communication system based on encryption algorithm according to claim 4, characterized in that: The node includes a sub-node access interface, It is used for local communication, and any node accesses one or more application sub-nodes through the node access interface, and then accesses one or more application sub-nodes to constitute the application sub-nodes within the node.

7. A multi-application secure communication device based on an encryption algorithm, characterized in that: The device comprises: processor; and a memory having executable codes stored thereon, which, when the executable codes are executed, enable the processor to execute a multi-application secure communication method based on an encryption algorithm as described in any one of claims 1-3.

8. A non-volatile computer storage medium, characterized in that: Computer instructions are stored thereon, and when the computer instructions are executed, the multi-application secure communication method based on encryption algorithm as described in any one of claims 1-3 is implemented.

Images