A transmission method, device and storage medium based on input and output system files

Abstract

The present invention discloses a transmission method, device and storage medium based on input-output system files, and relates to the technical field of firmware update, including: performing Arnold transformation on the original binary based on input-output system files to be transmitted to obtain the transformed binary based on input-output system files; using a Lagrange polynomial-based secret sharing algorithm to segment the transformed binary based on input-output system files to obtain each plaintext sub-binary file; digitally signing each plaintext sub-binary file to obtain each ciphertext sub-binary file; distributing each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal; using each secret participating terminal to transmit each sub-binary file pair. The present invention improves the security factor of the binary based on input-output system files during transmission, and ensures the authenticity, integrity and concealment of the binary based on input-output system file transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of firmware update, and in particular to a transmission method, device, computer-readable storage medium and computer program product based on input and output system files. Background Art

[0002] Encrypting the binary file of the Basic Input Output System (BIOS) can significantly improve the security of the system, ensure that the data is not tampered with during the BIOS update process, and protect the computer from potential firmware attacks.

[0003] At present, digital signature technology is usually used to encrypt basic input and output system files. As an important means to ensure the security of secret information, the security of encryption technology currently depends mainly on the confidentiality strength of its key. As the key to the security of encrypted data, key management still has many security risks. The betrayal of the key custodian will directly lead to the loss of security of secret data. The key may be lost or damaged due to various accidents, and the secret information cannot be recovered at this time. If you simply add a key administrator, although the risk of key loss can be reduced, it will increase more risks for untrusted administrators. In order to obtain the encryption key, the attacker will attack the key custodian by various means. If the key is obtained by the attacker, the security of the data will be completely lost.

[0004] In summary, how to effectively solve the problem of low data security in the current basic input and output system file transmission method is a problem that technicians in this field urgently need to solve. Summary of the invention

[0005] The object of the present invention is to provide a transmission method based on input-output system files, which improves the security factor of binary files based on input-output system files during transmission, and effectively ensures the authenticity, integrity and confidentiality of binary files based on input-output system files during transmission and sharing; another object of the present invention is to provide a transmission device based on input-output system files, a computer-readable storage medium and a computer program product.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] A transmission method based on input and output system files, comprising:

[0008] Performing Arnold transformation on the original binary based input-output system file to be transmitted to obtain the transformed binary based input-output system file;

[0009] Using a Lagrange polynomial-based secret sharing algorithm to segment the transformed binary file based on the input and output system file to obtain plaintext sub-binary files;

[0010] Digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file;

[0011] Distribute each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal;

[0012] Each sub-binary file pair is transmitted using each secret participant.

[0013] In a specific implementation of the present invention, the original binary to be transmitted is subjected to Arnold transformation based on the input and output system file, including:

[0014] Read the raw binary to be transmitted based on the input and output system file;

[0015] Arrange each binary value in the original binary-based input-output system file according to the original order in the original binary-based input-output system file to obtain an original two-dimensional matrix;

[0016] Substituting the original coordinates of each binary value in the original two-dimensional matrix into the Arnold transformation matrix to obtain the transformed coordinates corresponding to each binary value;

[0017] According to the transformed coordinates corresponding to each binary value, each binary value is stored in the corresponding coordinate position in the original two-dimensional matrix to obtain a transformed two-dimensional matrix;

[0018] The binary values ​​in the transformed two-dimensional matrix are taken out and arranged according to the arrangement order when the original two-dimensional matrix is ​​generated.

[0019] In a specific implementation of the present invention, the transformed binary is segmented based on the input and output system file using a Lagrange polynomial-based secret sharing algorithm to obtain plaintext sub-binary files, including:

[0020] Selecting a first prime number based on each binary value in the input-output system file according to the original binary;

[0021] Obtaining the number of copies to be split based on the input and output system files and the file recovery threshold value of the original binary; wherein the number of copies to be split can be divided by the file recovery threshold value;

[0022] According to the arrangement order of each binary value in the transformed binary-based input-output system file, the binary value of the file recovery threshold value quantity is selected from the transformed binary-based input-output system file;

[0023] The selected binary values ​​are used as coefficients of the Lagrange interpolation polynomial to generate a Lagrange interpolation polynomial;

[0024] Taking each integer value between 1 and the number of portions to be divided as an independent variable of the Lagrange interpolation polynomial, and generating a function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial according to the first prime number;

[0025] When there are unselected binary values ​​in the transformed binary-based input-output system file, according to the arrangement order of the binary values ​​in the transformed binary-based input-output system file, the binary values ​​of the file recovery threshold value quantity are selected starting from the first unselected binary value, and the step of using the selected binary values ​​as coefficients of the Lagrangian interpolation polynomial to generate the Lagrangian interpolation polynomial is repeatedly performed until there are no unselected binary values ​​in the transformed binary-based input-output system file;

[0026] Generates a plaintext sub-binary file of the function value with the same arguments.

[0027] In a specific implementation of the present invention, using each secret participant to transmit each sub-binary file pair includes:

[0028] Selecting from each secret participant terminal a secret participant terminal whose value is greater than or equal to the file recovery threshold value and less than or equal to the number of shares to be split;

[0029] The sub-binary file pairs in each selected secret participant are transmitted.

[0030] In a specific implementation of the present invention, selecting a secret participant terminal that is greater than or equal to the file recovery threshold value and less than or equal to the number of shares to be split from each secret participant terminal includes:

[0031] The secret participating terminals with the file recovery threshold value number are selected from the secret participating terminals.

[0032] In a specific implementation of the present invention, after each pair of sub-binary files is transmitted by each secret participating terminal, the method further includes:

[0033] The ciphertext sub-binary file in each sub-binary file pair that has been transmitted is verified.

[0034] In a specific implementation of the present invention, verifying the ciphertext sub-binary file in each sub-binary file pair that has been transmitted includes:

[0035] A one-way hash function is used to calculate the digest of the plaintext sub-binary file in each sub-binary file pair that has been transmitted, so as to obtain the digest of each transmitted information;

[0036] Decrypting the ciphertext sub-binary files in each sub-binary file pair using the published public key to obtain the pre-signature information digest corresponding to each ciphertext sub-binary file;

[0037] Each post-transmission information digest is compared bit by bit with the corresponding pre-signature information digest to obtain a bit by bit comparison result.

[0038] In a specific embodiment of the present invention, after obtaining the bit-by-bit comparison result, the method further includes:

[0039] When the bit-by-bit comparison result corresponding to a secret participant terminal is inconsistent, a secret information re-presentation instruction is sent to the secret participant terminal with the inconsistent bit-by-bit comparison result, so that the secret participant terminal with the inconsistent bit-by-bit comparison result retransmits the sub-binary file pair;

[0040] Re-verify the ciphertext sub-binary file in the retransmitted sub-binary file pair.

[0041] In a specific embodiment of the present invention, after obtaining the bit-by-bit comparison result, the method further includes:

[0042] When the bit-by-bit comparison results corresponding to each secret participant are consistent, the plaintext sub-binary files in each sub-binary file pair that has been transmitted are used to perform original binary file recovery based on the input-output system.

[0043] In a specific implementation of the present invention, the original binary input-output system file recovery is performed using the plaintext sub-binary files in each sub-binary file pair that has been transferred, including:

[0044] Using the Lagrangian interpolation method to restore the Lagrangian interpolation polynomial according to the plaintext sub-binary files in each sub-binary file pair, to obtain a restored Lagrangian interpolation polynomial;

[0045] Arrange the coefficients of the restored Lagrange interpolation polynomial in order from low to high according to the power corresponding to the coefficients to obtain an initial restored two-dimensional matrix;

[0046] The inverse transformation of the Arnold transformation is performed on the initial restored two-dimensional matrix to obtain the original binary input-output system file.

[0047] In a specific implementation of the present invention, performing an inverse transformation of the Arnold transformation on the initial restored two-dimensional matrix includes:

[0048] Substituting each first coordinate of the initial restored two-dimensional matrix into the Arnold inverse transformation matrix to obtain the second coordinates corresponding to each first coordinate;

[0049] Migrating the binary values ​​corresponding to the first coordinates in the initial restored two-dimensional matrix to the corresponding second coordinates to obtain a target restored two-dimensional matrix;

[0050] The binary values ​​in the target restored two-dimensional matrix are arranged according to the arrangement order of the coefficients of the restored Lagrange interpolation polynomial in the initial restored two-dimensional matrix.

[0051] In a specific implementation of the present invention, digitally signing each plaintext sub-binary file includes:

[0052] Each plaintext sub-binary file is digitally signed using the RSA signature algorithm.

[0053] A transmission device based on input and output system files, comprising:

[0054] Memory for storing computer programs;

[0055] A processor is used to implement the steps of the transmission method based on input and output system files as described above when executing the computer program.

[0056] A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the transmission method based on input and output system files as described above are implemented.

[0057] A computer program product comprises a computer program, which, when executed by a processor, implements the steps of the above-mentioned transmission method based on input-output system files.

[0058] The transmission method based on input-output system files provided by the present invention performs Arnold transformation on the original binary based on input-output system files to be transmitted to obtain the transformed binary based on input-output system files; uses a secret sharing algorithm based on Lagrange polynomials to divide the transformed binary based on input-output system files to obtain various plaintext sub-binary files; digitally signs each plaintext sub-binary file to obtain each ciphertext sub-binary file; distributes each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal; and uses each secret participating terminal to transmit each sub-binary file pair.

[0059] It can be seen from the above technical solution that by using Arnold transform to pre-process the original binary-based input-output system file to be transmitted, the information looks like a meaningless file, which improves the concealment of secret information during transmission. The transformed binary-based input-output system file is divided into multiple plaintext sub-binary files through a secret sharing algorithm based on Lagrange interpolation polynomials. If an attacker wants to attack the original binary-based input-output system file to be transmitted, he needs to obtain multiple plaintext sub-binary files, which increases the difficulty of file attack and improves the security factor of binary-based input-output system files during transmission. Use a digital signature algorithm to sign the message digest of the information. When restored, the authenticity and integrity of the sub-secret information can be verified. The authenticity, integrity and concealment of binary-based input-output system file transmission and sharing are effectively guaranteed.

[0060] Correspondingly, the present invention also provides a transmission device based on input-output system files, a computer-readable storage medium and a computer program product corresponding to the above-mentioned transmission method based on input-output system files, which have the above-mentioned technical effects and are not repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0062] Figure 1 It is a flow chart of an implementation of a transmission method based on input and output system files in an embodiment of the present invention;

[0063] Figure 2 Another implementation flow chart of the transmission method based on input and output system files in an embodiment of the present invention;

[0064] Figure 3 It is a structural block diagram of a transmission device based on input and output system files in an embodiment of the present invention;

[0065] Figure 4 It is a structural block diagram of a transmission device based on input and output system files in an embodiment of the present invention;

[0066] Figure 5 A schematic diagram of the specific structure of a transmission device based on input and output system files provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0067] In order to enable those skilled in the art to better understand the scheme of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific implementation methods. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0068] See also Figure 1 , Figure 1 This is a flow chart of an implementation method of a transmission method based on an input / output system file in an embodiment of the present invention. The method may include the following steps:

[0069] S101: Performing Arnold transformation on the original binary based on the input-output system file to be transmitted to obtain a transformed binary based on the input-output system file.

[0070] The original binary based on the input-output system file to be transmitted is obtained, and the original binary based on the input-output system file to be transmitted is subjected to Arnold transformation, thereby disrupting the original binary based on the input-output system file and making it look meaningless, which will not attract the attention of the attacker, thus realizing information hiding, and obtaining the transformed binary based on the input-output system file.

[0071] S102: using a Lagrange polynomial-based secret sharing algorithm to segment the transformed binary file based on the input and output system file to obtain plaintext sub-binary files.

[0072] After obtaining the transformed binary-based input-output system file, the transformed binary-based input-output system file is segmented using a Lagrange polynomial-based secret sharing algorithm (Shamir) to obtain various plaintext sub-binary files, thereby segmenting the overall transformed binary-based input-output system file with a large amount of data into multiple relatively small plaintext sub-binary files.

[0073] S103: Digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file.

[0074] After the plaintext sub-binary files are divided, each plaintext sub-binary file is digitally signed. For example, the RSA (Rivest-Shamir-Adleman) signature algorithm, SM2 national encryption algorithm, etc. can be used to digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file, thereby realizing encryption protection of each plaintext sub-binary file.

[0075] S104: Distribute each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal.

[0076] The same number of secret participants can be set in advance according to the number of sub-binary file segments. After obtaining each ciphertext sub-binary file, a sub-binary file pair is constructed using each plaintext sub-binary file and the corresponding ciphertext sub-binary file. The sub-binary file pairs composed of each plaintext sub-binary file and each ciphertext sub-binary file are distributed to each secret participant, so that each secret participant holds a sub-binary file pair.

[0077] S105: Utilize each secret participating terminal to transmit each sub-binary file pair.

[0078] After distributing each sub-binary file pair to each secret participant, each secret participant transmits each sub-binary file pair. For example, a threshold value can be pre-set, and the number of secret participants participating in the sub-binary file transmission is determined according to the threshold value. This paper combines the Lagrange interpolation polynomial secret sharing algorithm with the information hiding technology based on Arnold transform and applies it to the input-output system file, effectively ensuring the authenticity, integrity and concealment of the binary input-output system file transmission and sharing.

[0079] It can be seen from the above technical solution that by using Arnold transform to pre-process the original binary-based input-output system file to be transmitted, the information looks like a meaningless file, which improves the concealment of secret information during transmission. The transformed binary-based input-output system file is divided into multiple plaintext sub-binary files through a secret sharing algorithm based on Lagrange interpolation polynomials. If an attacker wants to attack the original binary-based input-output system file to be transmitted, he needs to obtain multiple plaintext sub-binary files, which increases the difficulty of file attack and improves the security factor of binary-based input-output system files during transmission. Use a digital signature algorithm to sign the message digest of the information. When restored, the authenticity and integrity of the sub-secret information can be verified. The authenticity, integrity and concealment of binary-based input-output system file transmission and sharing are effectively guaranteed.

[0080] It should be noted that, based on the above embodiment, the embodiment of the present invention also provides corresponding improved solutions. In the subsequent embodiments, the same steps or corresponding steps as those in the above embodiment can be referenced to each other, and the corresponding beneficial effects can also be referenced to each other, which will not be repeated one by one in the following improved embodiments.

[0081] See also Figure 2 , Figure 2 Another implementation flow chart of the method for transmitting files based on the input and output system in an embodiment of the present invention is shown. The method may include the following steps:

[0082] S201: Read the original binary file to be transmitted based on the input and output system file.

[0083] When there is an original binary-based input-output system file to be transmitted, the original binary-based input-output system file to be transmitted is read.

[0084] S202: Arrange the binary values ​​in the original binary-based input-output system file according to the original order in the original binary-based input-output system file to obtain an original two-dimensional matrix.

[0085] After reading the original binary-based input-output system file to be transmitted, the binary values ​​in the original binary-based input-output system file are arranged according to the original order in the original binary-based input-output system file to obtain an original two-dimensional matrix.

[0086] S203: Substitute the original coordinates of each binary value in the original two-dimensional matrix into the Arnold transformation matrix to obtain the transformed coordinates corresponding to each binary value.

[0087] After the original two-dimensional matrix is ​​obtained through arrangement, the original coordinates of each binary value in the original two-dimensional matrix are substituted into the Arnold transformation matrix to obtain the transformed coordinates corresponding to each binary value.

[0088] The Arnold transformation matrix is ​​set to:

[0089] ;

[0090] in, refers to the original two-dimensional matrix horizontal coordinate, Refers to the original two-dimensional matrix ordinate. and b are self-set values ​​and can be any value. is the ordinate of the matrix value after transformation, is the horizontal coordinate of the matrix value after the transformation, mod is the modulus operation, and N is the side length of the original two-dimensional square matrix.

[0091] S204: storing each binary value into a corresponding coordinate position in the original two-dimensional matrix according to the transformed coordinates corresponding to each binary value, to obtain a transformed two-dimensional matrix.

[0092] After obtaining the transformed coordinates corresponding to each binary value, each binary value is stored in a corresponding coordinate position in the original two-dimensional matrix according to the transformed coordinates corresponding to each binary value, so as to obtain a transformed two-dimensional matrix.

[0093] S205: taking out and arranging the binary values ​​in the transformed two-dimensional matrix according to the arrangement order when the original two-dimensional matrix is ​​generated, and obtaining a transformed binary-based input-output system file.

[0094] After obtaining the transformed two-dimensional matrix, the binary values ​​in the transformed two-dimensional matrix are taken out and arranged in the order of arrangement when the original two-dimensional matrix is ​​generated, and the transformed binary based on the input-output system file is obtained, thereby realizing the scrambling of the original binary based on the input-output system file, making the information look like a meaningless file, and improving the concealment of secret information during transmission.

[0095] S206: Select a first prime number based on each binary value in the input-output system file according to the original binary.

[0096] The first prime number p is selected according to each binary value in the original binary based input-output system file. Since the file value of the original binary based input-output system file is between 0 and 1, in order to ensure that the file value is within this range, the first prime number is selected as 2.

[0097] S207: Obtain the number of copies to be split based on the input and output system files and the file recovery threshold value of the original binary.

[0098] The number of copies to be split can be divided evenly by the file recovery threshold.

[0099] The number of copies n to be split based on the input and output system files and the file recovery threshold k are preset, and the number of copies to be split is set to be divisible by the file recovery threshold. The number of copies to be split based on the input and output system files and the file recovery threshold are obtained.

[0100] S208: According to the arrangement order of each binary value in the transformed binary-based input-output system file, a binary value of the number of file recovery threshold values ​​is selected from the transformed binary-based input-output system file.

[0101] After obtaining the number of copies to be split and the file recovery threshold value of the original binary based on the input-output system file, the binary values ​​of the number of file recovery threshold values ​​are selected from the transformed binary based on the input-output system file according to the arrangement order of the binary values ​​in the transformed binary based on the input-output system file.

[0102] S209: Generate a Lagrange interpolation polynomial by using the selected binary values ​​as coefficients of the Lagrange interpolation polynomial.

[0103] After selecting binary values ​​of the number of file recovery threshold values ​​from the transformed binary-based input-output system file, each selected binary value is used as a coefficient of the Lagrangian interpolation polynomial to generate a Lagrangian interpolation polynomial.

[0104] S210: taking each integer value between 1 and the number of portions to be divided as an independent variable of a Lagrange interpolation polynomial, and generating a function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial according to the first prime number.

[0105] After generating the Lagrange interpolation polynomial, each integer value between 1 and the number of portions to be divided is used as the independent variable of the Lagrange interpolation polynomial, and the function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial is generated according to the first prime number. The formula is as follows:

[0106] ;

[0107] in, , …, It is k binary values, k is the recovery threshold value, which is determined by the distributor. , …, are the Lagrange interpolation polynomial coefficients, is a function that generates n function values ​​according to n values, that is, , …, , is the first prime number, is the modulo operator.

[0108] S211: When there are unselected binary values ​​in the transformed binary-based input-output system file, according to the arrangement order of the binary values ​​in the transformed binary-based input-output system file, select binary values ​​of the file recovery threshold value quantity starting from the first unselected binary value, and return to execute step S209.

[0109] After taking each integer value between 1 and the number of shares to be divided as the independent variable of the Lagrange interpolation polynomial, and generating the function value of the number of shares to be divided corresponding to the Lagrange interpolation polynomial according to the first prime number, it is determined whether there are any unselected binary values ​​in the transformed binary-based input-output system file, and when there are unselected binary values ​​in the transformed binary-based input-output system file, according to the arrangement order of each binary value in the transformed binary-based input-output system file, binary values ​​of the number of file recovery threshold values ​​are selected from the first unselected binary value, and the selected binary values ​​are again used as coefficients of the Lagrange interpolation polynomial to generate the Lagrange interpolation polynomial, and each integer value between 1 and the number of shares to be divided is taken as the independent variable of the Lagrange interpolation polynomial, and the function value of the number of shares to be divided corresponding to the Lagrange interpolation polynomial is generated according to the first prime number. Thus, each independent variable corresponds to at least one function value.

[0110] S212: When there is no unselected binary value in the transformed binary-based input-output system file, the function value with the same independent variable is generated as a plaintext sub-binary file.

[0111] When there are no unselected binary values ​​in the transformed binary-based input-output system file, the function value with the same independent variable is generated as a plaintext sub-binary file, thereby splitting the binary-based input-output system file with a larger data volume into plaintext sub-binary files with a smaller data volume. Each plaintext sub-binary file is 1 / k of the size of the original binary-based input-output system file, reducing the amount of data in the data distribution process.

[0112] S213: Digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file.

[0113] When digitally signing each plaintext sub-binary file, two prime numbers p1 and q with the same number of digits are randomly generated so that the product of the two prime numbers is The length of is 1024 bits. Calculate the Euler function and the modular inverse to obtain the public key and private key, store the public key and private key for easy distribution and subsequent call.

[0114] Use the private key to digitally sign each plaintext sub-binary file. The formula is as follows:

[0115] ;

[0116] Where sign refers to the ciphertext sub-binary file, s refers to the ciphertext sub-binary file, the (D, n1) array refers to the public key, and D is an integer less than two prime numbers.

[0117] S214: Distribute each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal.

[0118] S215: Utilize each secret participating terminal to transmit each sub-binary file pair.

[0119] In a specific implementation of the present invention, step S215 may include the following steps:

[0120] Step 1: Select from all secret participants a secret participant whose number is greater than or equal to the file recovery threshold and less than or equal to the number of copies to be split;

[0121] Step 2: Transmit the sub-binary file pairs in each selected secret participant.

[0122] For the convenience of description, the above two steps can be combined for explanation.

[0123] When using each secret participant to transmit each sub-binary file pair, select a secret participant whose number is greater than or equal to the file recovery threshold value and less than or equal to the number of copies to be split from each secret participant, such as selecting any one between k and n, and transmit the sub-binary file pairs in each selected secret participant. Only when there are greater than or equal to k secret participants can the sub-binary file pairs be used to restore the original binary input-output system file, which greatly reduces the security risks of untrusted secret participants, effectively prevents attacks on the original binary input-output system file, improves the security of the input-output system file in the information transmission process, and reduces the amount of data in the data distribution process.

[0124] In a specific implementation of the present invention, selecting a secret participant terminal whose value is greater than or equal to the file recovery threshold and less than or equal to the number of shares to be split from each secret participant terminal may include the following steps:

[0125] A number of secret participants with a file recovery threshold value are selected from each secret participant.

[0126] When selecting secret participating terminals, secret participating terminals with a file recovery threshold value are selected from various secret participating terminals, so that the minimum number of secret participating terminals that meet the set threshold value are selected to participate in file transmission, which greatly reduces the file transmission amount and improves the file transmission efficiency.

[0127] S216: Verify the ciphertext sub-binary file in each sub-binary file pair that has been transmitted.

[0128] After each sub-binary file pair is transmitted by each secret participant, the ciphertext sub-binary file in each sub-binary file pair that has been transmitted is verified. By verifying each ciphertext sub-binary file separately, it can be determined whether each secret participant has transmitted the correct sub-binary file. It ensures that each binary file will not be modified in any way during the transmission process, ensuring the integrity and authenticity of the information.

[0129] In a specific implementation of the present invention, step S216 may include the following steps:

[0130] Step 1: Use a one-way hash function to calculate the digest of the plaintext sub-binary files in each sub-binary file pair that has been transmitted, and obtain the digest of each transmitted information;

[0131] Step 2: Decrypt the ciphertext sub-binary files in each sub-binary file pair using the published public key to obtain the pre-signature information digest corresponding to each ciphertext sub-binary file;

[0132] Step 3: Compare each post-transmission information digest with the corresponding pre-signature information digest bit by bit to obtain a bit by bit comparison result.

[0133] For the convenience of description, the above three steps can be combined for explanation.

[0134] When verifying the ciphertext sub-binary file, a one-way hash function is used to calculate the digest of the plaintext sub-binary file in each sub-binary file pair that has been transmitted, and each post-transmission information digest is obtained. The ciphertext sub-binary file in each sub-binary file pair is decrypted using the published public key to obtain the pre-signature information digest corresponding to each ciphertext sub-binary file, such as decryption using the following formula:

[0135] ;

[0136] Among them, E and N are the public keys published by the signer. Secret is the information summary before signing, sign is the ciphertext sub-binary file, and E is the modular inverse of D in the public key with respect to the Euler function. is the product of prime numbers p1 and q.

[0137] The digest of each transmitted information is compared bit by bit with the corresponding digest of the information before signing to obtain the bit by bit comparison result. By comparing the digest information calculated from the plaintext sub-binary file with the digest information obtained by decryption, it is possible to determine whether each sub-binary file has been attacked during the transmission process, thus achieving rapid and accurate detection of the validity of the sub-binary file.

[0138] In a specific embodiment of the present invention, after obtaining the bit-by-bit comparison result, the method may further include the following steps:

[0139] Step 1: When the bit-by-bit comparison result corresponding to a secret participant terminal is inconsistent, a secret information re-presentation instruction is sent to the secret participant terminal with the inconsistent bit-by-bit comparison result, so that the secret participant terminal with the inconsistent bit-by-bit comparison result retransmits the sub-binary file pair;

[0140] Step 2: Re-verify the ciphertext sub-binary file in the retransmitted sub-binary file pair.

[0141] For the convenience of description, the above two steps can be combined for explanation.

[0142] After comparing each post-transmission information digest with the corresponding pre-signature information digest bit by bit and obtaining the bit by bit comparison result, when there is a secret participant terminal whose bit by bit comparison result is inconsistent, a secret information re-presentation instruction is sent to the secret participant terminal whose bit by bit comparison result is inconsistent, so that the secret participant terminal whose bit by bit comparison result is inconsistent retransmits the sub-binary file pair, and re-verifies the ciphertext sub-binary file in the retransmitted sub-binary file pair. When it is identified that the bit by bit comparison result corresponding to the secret participant terminal is inconsistent, it means that the sub-binary file pair is damaged, or the secret participant terminal presents a false sub-binary file pair, then the sub-binary file pair is invalid, and the secret participant terminal is required to retransmit the sub-binary file, thereby realizing the monitoring of the credibility of each secret participant terminal, and prompting each secret participant terminal to transmit the correct sub-binary file.

[0143] In a specific embodiment of the present invention, after obtaining the bit-by-bit comparison result, the method may further include the following steps:

[0144] When the bit-by-bit comparison results corresponding to each secret participant are consistent, the plaintext sub-binary files in each sub-binary file pair that has been transmitted are used to perform original binary file recovery based on the input-output system.

[0145] After comparing each post-transmission information digest with the corresponding pre-signature information digest bit by bit and obtaining the bit-by-bit comparison result, when the bit-by-bit comparison results corresponding to each secret participant are consistent, it means that each plaintext sub-binary file transmitted by each secret participant is credible, and the sub-binary file pair is valid, and the original binary-based input-output system file recovery can be continued, and the original binary-based input-output system file recovery is performed using the plaintext sub-binary files in each sub-binary file pair that has been transmitted, thereby realizing the recovery of the original binary-based input-output system file using multiple sub-binary files. By dividing it into multiple plaintext sub-binary files, an attacker needs to obtain multiple plaintext sub-binary files if he wants to attack the original binary-based input-output system file to be transmitted, which increases the difficulty of file attack and improves the security factor of binary-based input-output system files during transmission.

[0146] In a specific implementation of the present invention, the original binary input-output system file recovery is performed using the plaintext sub-binary files in each sub-binary file pair that has been transferred, which may include the following steps:

[0147] Step 1: Using the Lagrange interpolation method to restore the Lagrange interpolation polynomial according to the plaintext sub-binary files in each sub-binary file pair, to obtain a restored Lagrange interpolation polynomial;

[0148] Step 2: Arrange the coefficients of the restored Lagrange interpolation polynomial in order from low to high according to the power corresponding to the coefficients to obtain the initial restored two-dimensional matrix;

[0149] Step 3: Perform inverse Arnold transformation on the initial restored two-dimensional matrix to obtain the original binary input-output system file.

[0150] For the convenience of description, the above three steps can be combined for explanation.

[0151] When restoring the original binary input-output system file, the Lagrange interpolation method is used to restore the Lagrange interpolation polynomial according to the plaintext sub-binary files in each sub-binary file pair to obtain the restored Lagrange interpolation polynomial. The coefficients of the restored Lagrange interpolation polynomial are arranged in order from low to high according to the corresponding powers of the coefficients to obtain an initial restored two-dimensional matrix. The initial restored two-dimensional matrix is ​​subjected to an inverse transformation of the Arnold transformation to obtain the original binary input-output system file, thereby realizing the rapid restoration of the disrupted original binary input-output system file.

[0152] In a specific implementation of the present invention, performing an inverse transformation of the Arnold transformation on the initial restored two-dimensional matrix may include the following steps:

[0153] Step 1: Substitute each first coordinate of the initial restored two-dimensional matrix into the Arnold inverse transformation matrix to obtain the second coordinates corresponding to each first coordinate;

[0154] Step 2: Migrate the binary values ​​corresponding to each first coordinate in the initial restored two-dimensional matrix to the corresponding second coordinate to obtain the target restored two-dimensional matrix;

[0155] Step 3: Arrange the binary values ​​in the target restored two-dimensional matrix according to the arrangement order of the coefficients of the restored Lagrange interpolation polynomial in the initial restored two-dimensional matrix.

[0156] For the convenience of description, the above three steps can be combined for explanation.

[0157] When the inverse transformation of the Arnold transformation is performed on the initial restored two-dimensional matrix, the first coordinates of the initial restored two-dimensional matrix are substituted into the inverse Arnold transformation matrix to obtain the second coordinates corresponding to the first coordinates. The transformation formula of the Arnold transformation is set as:

[0158] ;

[0159] The binary values ​​corresponding to the first coordinates in the initial restored two-dimensional matrix are transferred to the corresponding second coordinates to obtain the target restored two-dimensional matrix, and the binary values ​​in the target restored two-dimensional matrix are arranged in the order of the coefficients of the restored Lagrange interpolation polynomial in the initial restored two-dimensional matrix. This achieves the re-positioning of the shuffled binary values.

[0160] When the file recovery threshold is k, in order to recover the secret information, k sub-binary file pairs are needed to recover the original binary based on the input and output system file. The k sub-binary file pairs take a value in turn to participate in the operation. Now there is a Need to be restored. Use Lagrange interpolation to restore the polynomial. For an n-degree polynomial, it can be uniquely determined by n+1 points and their corresponding values. It is obtained by the Lagrange interpolation formula, as follows:

[0161] ;

[0162] The Lagrange interpolation polynomial can be determined by the degree plus 1 point and its corresponding value. The xi and xj in the formula refer to the x values ​​of each point. Refers to the y value of each point, the product of the lower half and It can be directly calculated as a constant. The continuous products of the upper part are violently expanded and finally combined to get the answer.

[0163] It is worth noting that because the division operation of mod p in the original formula is quite unique, the little Fermat theorem needs to be used in the calculation. Here a refers to a certain number, and any number can be substituted in.

[0164] ; And then we can conclude:

[0165] ;

[0166] It can be concluded that:

[0167] ;

[0168] Therefore, each integer value between 1 and the number of portions to be divided is used as the independent variable of the Lagrange interpolation polynomial, and the function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial is generated according to the first prime number using the little Fermat theorem, thereby realizing the conversion of the function value of the Lagrange interpolation polynomial into a binary value, thereby improving the accuracy and convenience of converting the function value into a binary value.

[0169] Let's illustrate this with a practical example:

[0170] For the secret sharing scheme based on Lagrange interpolation polynomial, suppose n=4, threshold k=3, and at least 3 people are required to recover the secret. Let the prime number p=23. Construct the following polynomial:

[0171] ;

[0172] Substitute x1=1, x2=2, x3=3, x4=4 into the polynomial, and we get y1=7, y2=16, y3=6, y4=0. Use three of these groups to restore them using the Lagrange interpolation polynomial:

[0173] ;

[0174] The division is calculated using the Little Fermat Theorem mentioned above. The original polynomial can be calculated by taking the modulo of the multiplication term in the ordinary Lagrange interpolation polynomial and replacing the division term with the above formula through the Little Fermat Theorem. After restoring the secret polynomial, all the coefficients in the polynomial are taken out and stored. This is the value to be restored. All the values ​​of the k sub-secret information are calculated in sequence. By storing them in the corresponding positions of the information, the restored information can be obtained, and the original secret information after Arnold permutation can be obtained.

[0175] The transformation formula of Arnold transformation is:

[0176] ;

[0177] Assumptions:

[0178] ;

[0179] Where t1 and t2 are unknown integers, then:

[0180] ;

[0181] The inverse transform of the Arnold transform can be obtained:

[0182] ;

[0183] Then the original binary based input and output system files are restored.

[0184] In a specific implementation of the present invention, digitally signing each plaintext sub-binary file may include the following steps:

[0185] Each plaintext sub-binary file is digitally signed using the RSA signature algorithm.

[0186] When digitally signing each plaintext sub-binary file, the RSA (Rivest Shamir Adleman) signature algorithm is used to digitally sign each plaintext sub-binary file. The advantages of the RSA signature algorithm, such as high security, unforgeable digital signatures, high verification efficiency, and separation of public and private keys, are fully utilized.

[0187] Corresponding to the above method embodiment, the present invention also provides a transmission device based on input-output system files. The transmission device based on input-output system files described below and the transmission method based on input-output system files described above can refer to each other.

[0188] See also Figure 3 , Figure 3 This is a structural block diagram of a transmission device based on input and output system files in an embodiment of the present invention. The device may include:

[0189] An Arnold transformation module 31 is used to perform an Arnold transformation on the original binary based input-output system file to be transmitted to obtain a transformed binary based input-output system file;

[0190] A plaintext sub-binary file obtaining module 32 is used to segment the transformed binary based input and output system file using a Lagrange polynomial-based secret sharing algorithm to obtain each plaintext sub-binary file;

[0191] A digital signature module 33 is used to digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file;

[0192] A sub-binary file pair distribution module 34, used to distribute each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal;

[0193] The file transmission module 35 is used to transmit each sub-binary file pair using each secret participating terminal.

[0194] It can be seen from the above technical solution that by using Arnold transform to pre-process the original binary-based input-output system file to be transmitted, the information looks like a meaningless file, which improves the concealment of secret information during transmission. The transformed binary-based input-output system file is divided into multiple plaintext sub-binary files through a secret sharing algorithm based on Lagrange interpolation polynomials. If an attacker wants to attack the original binary-based input-output system file to be transmitted, he needs to obtain multiple plaintext sub-binary files, which increases the difficulty of file attack and improves the security factor of binary-based input-output system files during transmission. Use a digital signature algorithm to sign the message digest of the information. When restored, the authenticity and integrity of the sub-secret information can be verified. The authenticity, integrity and concealment of binary-based input-output system file transmission and sharing are effectively guaranteed.

[0195] In a specific embodiment of the present invention, the Arnold transformation module 31 includes:

[0196] The file reading submodule is used to read the original binary input and output system file to be transmitted;

[0197] The original two-dimensional matrix obtaining submodule is used to arrange each binary value in the original binary input-output system file according to the original order in the original binary input-output system file to obtain the original two-dimensional matrix;

[0198] The transformed coordinate obtaining submodule is used to substitute the original coordinates of each binary value in the original two-dimensional matrix into the Arnold transformation matrix to obtain the transformed coordinates corresponding to each binary value;

[0199] The transformed two-dimensional matrix obtaining submodule is used to store each binary value to the corresponding coordinate position in the original two-dimensional matrix according to the transformed coordinates corresponding to each binary value, so as to obtain the transformed two-dimensional matrix;

[0200] The binary value arrangement submodule is used to take out and arrange the binary values ​​in the transformed two-dimensional matrix according to the arrangement order when the original two-dimensional matrix is ​​generated.

[0201] In a specific implementation of the present invention, the plaintext sub-binary file obtaining module 32 includes:

[0202] A prime number selection submodule, used for selecting a first prime number based on each binary value in the input and output system file according to the original binary;

[0203] The submodule for obtaining the number of copies to be split and the threshold value is used to obtain the number of copies to be split and the file recovery threshold value of the original binary file based on the input and output system file; wherein the number of copies to be split can be divided by the file recovery threshold value;

[0204] The binary value first selection submodule is used to select the binary value of the file recovery threshold value quantity from the transformed binary based input-output system file according to the arrangement order of each binary value in the transformed binary based input-output system file;

[0205] A Lagrange interpolation polynomial generation submodule, used for generating a Lagrange interpolation polynomial by using the selected binary values ​​as coefficients of the Lagrange interpolation polynomial;

[0206] A function value generation submodule, used to use each integer value between 1 and the number of portions to be divided as an independent variable of the Lagrange interpolation polynomial, and to generate a function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial according to the first prime number;

[0207] A binary value repeated selection submodule is used for selecting binary values ​​of the file recovery threshold value quantity from the first unselected binary value according to the arrangement order of each binary value in the transformed binary based input-output system file when there are unselected binary values ​​in the transformed binary based input-output system file, and repeatedly executing the step of using each selected binary value as the coefficient of the Lagrangian interpolation polynomial to generate the Lagrangian interpolation polynomial until there are no unselected binary values ​​in the transformed binary based input-output system file;

[0208] The plaintext sub-binary file generating sub-module is used to generate the function value with the same independent variable into a plaintext sub-binary file.

[0209] In a specific implementation of the present invention, the file transmission module 35 includes:

[0210] A secret participant selection submodule is used to select a secret participant whose value is greater than or equal to the file recovery threshold and less than or equal to the number of copies to be split from each secret participant;

[0211] The file transmission submodule is used to transmit the sub-binary file pairs selected from each secret participant.

[0212] In a specific implementation of the present invention, the secret participant selection submodule is specifically a module for selecting secret participant terminals with a file recovery threshold number from among the secret participant terminals.

[0213] In a specific embodiment of the present invention, the device may further include:

[0214] The file verification module is used to verify the ciphertext sub-binary file in each sub-binary file pair after each sub-binary file pair is transmitted using each secret participating end.

[0215] In a specific embodiment of the present invention, the file verification module includes:

[0216] The post-transmission information digest obtaining submodule is used to use a one-way hash function to perform digest calculations on the plaintext sub-binary files in each sub-binary file pair that has been transmitted, to obtain each post-transmission information digest;

[0217] A pre-signature information digest obtaining submodule is used to decrypt the ciphertext sub-binary files in each sub-binary file pair using the published public key to obtain the pre-signature information digest corresponding to each ciphertext sub-binary file;

[0218] The bit-by-bit comparison result obtaining submodule is used to compare each post-transmission information digest with the corresponding pre-signature information digest bit-by-bit to obtain a bit-by-bit comparison result.

[0219] In a specific embodiment of the present invention, the device may further include:

[0220] A file pair retransmission module is used for, after obtaining the bit-by-bit comparison result, when the bit-by-bit comparison result corresponding to a secret participant terminal is inconsistent, sending a secret information re-presentation instruction to the secret participant terminal with the inconsistent bit-by-bit comparison result, so that the secret participant terminal with the inconsistent bit-by-bit comparison result retransmits the sub-binary file pair;

[0221] The re-verification module is used to re-verify the ciphertext sub-binary file in the retransmitted sub-binary file pair.

[0222] In a specific embodiment of the present invention, the device may further include:

[0223] The file recovery module is used to recover the original binary file based on the input-output system by using the plaintext sub-binary files in each sub-binary file pair that has been transmitted after obtaining the bit-by-bit comparison result, when the bit-by-bit comparison results corresponding to each secret participant are consistent.

[0224] In a specific implementation of the present invention, the file recovery module includes:

[0225] A Lagrange interpolation polynomial restoration submodule is used to restore the Lagrange interpolation polynomial according to the plaintext sub-binary files in each sub-binary file pair using the Lagrange interpolation method to obtain a restored Lagrange interpolation polynomial;

[0226] The initial restored two-dimensional matrix obtaining submodule is used to arrange the coefficients of the restored Lagrange interpolation polynomial in order from low to high according to the power corresponding to the coefficients, so as to obtain the initial restored two-dimensional matrix;

[0227] The original file acquisition submodule is used to perform inverse transformation of Arnold transformation on the initial restored two-dimensional matrix to obtain the original binary input-output system file.

[0228] In a specific implementation of the present invention, the original file obtaining submodule includes:

[0229] A coordinate obtaining unit, used for substituting each first coordinate of the initial restored two-dimensional matrix into the Arnold inverse transformation matrix to obtain second coordinates corresponding to each first coordinate;

[0230] A target restored two-dimensional matrix obtaining unit is used to transfer the binary values ​​corresponding to the first coordinates in the initial restored two-dimensional matrix to the corresponding second coordinates to obtain a target restored two-dimensional matrix;

[0231] The binary value arrangement unit is used to arrange the binary values ​​in the target restored two-dimensional matrix according to the arrangement order of the coefficients of the restored Lagrange interpolation polynomial in the initial restored two-dimensional matrix.

[0232] In a specific implementation of the present invention, the digital signature module 33 is specifically a module that uses the RSA signature algorithm to digitally sign each plaintext sub-binary file.

[0233] Corresponding to the above method embodiment, see Figure 4 , Figure 4 This is a schematic diagram of a transmission device based on input and output system files provided by the present invention, and the device may include:

[0234] A memory 332, for storing computer programs;

[0235] The processor 322 is used to implement the steps of the transmission method based on the input and output system files of the above method embodiment when executing the computer program.

[0236] For details, please refer to Figure 5 , Figure 5 A specific structural diagram of a transmission device based on input-output system files provided in this embodiment, the transmission device based on input-output system files may have relatively large differences due to different configurations or performances, and may include a processor (central processing units, CPU) 322 (for example, one or more processors) and a memory 332, and the memory 332 stores one or more computer programs 342 or data 344. Among them, the memory 332 can be a temporary storage or a permanent storage. The program stored in the memory 332 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations in the data processing device. Furthermore, the processor 322 can be configured to communicate with the memory 332, and execute a series of instruction operations in the memory 332 on the transmission device 301 based on the input-output system files.

[0237] The input-output system file-based transmission device 301 may also include one or more power supplies 326 , one or more wired or wireless network interfaces 350 , one or more input-output interfaces 358 , and / or one or more operating systems 341 .

[0238] The steps in the above-described transmission method based on input-output system files can be implemented by the structure of a transmission device based on input-output system files.

[0239] Corresponding to the above method embodiment, the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the following steps can be implemented:

[0240] Performing Arnold transformation on the original binary-based input-output system file to be transmitted to obtain a transformed binary-based input-output system file; using a Lagrange polynomial-based secret sharing algorithm to segment the transformed binary-based input-output system file to obtain plaintext sub-binary files; digitally signing each plaintext sub-binary file to obtain each ciphertext sub-binary file; distributing each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participant; and using each secret participant to transmit each sub-binary file pair.

[0241] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0242] For an introduction to the computer-readable storage medium provided by the present invention, please refer to the above method embodiment, and the present invention will not be elaborated here.

[0243] Corresponding to the above method embodiment, the present invention further provides a computer program product, including a computer program, which implements the steps of the above input-output system file-based transmission method when executed by a processor.

[0244] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device, computer-readable storage medium, and computer program product disclosed in the embodiment, since they correspond to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

[0245] The principles and implementation methods of the present invention are described in this article using specific examples. The description of the above embodiments is only used to help understand the technical solution and core ideas of the present invention. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present invention, the present invention can also be improved and modified, and these improvements and modifications also fall within the scope of protection of the present invention.

Claims

1. A transmission method based on input and output system files, characterized in that: include: Performing Arnold transformation on the original binary based input-output system file to be transmitted to obtain the transformed binary based input-output system file; Using a Lagrange polynomial-based secret sharing algorithm to segment the transformed binary file based on the input and output system file to obtain plaintext sub-binary files; Digitally sign each plaintext sub-binary file to obtain each ciphertext sub-binary file; Distribute each sub-binary file pair consisting of each plaintext sub-binary file and each ciphertext sub-binary file to each secret participating terminal; Using each secret participant to transmit each pair of sub-binary files; Perform an Arnold transform on the raw binary to be transmitted based on the input and output system files, including: Read the raw binary to be transmitted based on the input and output system file; Arrange each binary value in the original binary-based input-output system file according to the original order in the original binary-based input-output system file to obtain an original two-dimensional matrix; Substituting the original coordinates of each binary value in the original two-dimensional matrix into the Arnold transformation matrix to obtain the transformed coordinates corresponding to each binary value; According to the transformed coordinates corresponding to each binary value, each binary value is stored in the corresponding coordinate position in the original two-dimensional matrix to obtain a transformed two-dimensional matrix; Taking out and arranging each binary value in the transformed two-dimensional matrix according to the arrangement order when the original two-dimensional matrix is ​​generated; The transformed binary is segmented based on the input and output system file using a Lagrange polynomial-based secret sharing algorithm to obtain plaintext sub-binary files, including: Selecting a first prime number based on each binary value in the input-output system file according to the original binary; Obtaining the number of copies to be split based on the input and output system files and the file recovery threshold value of the original binary; wherein the number of copies to be split can be divided by the file recovery threshold value; According to the arrangement order of each binary value in the transformed binary-based input-output system file, the binary value of the file recovery threshold value quantity is selected from the transformed binary-based input-output system file; The selected binary values ​​are used as coefficients of the Lagrange interpolation polynomial to generate a Lagrange interpolation polynomial; Taking each integer value between 1 and the number of portions to be divided as an independent variable of the Lagrange interpolation polynomial, and generating a function value of the number of portions to be divided corresponding to the Lagrange interpolation polynomial according to the first prime number; When there are unselected binary values ​​in the transformed binary-based input-output system file, according to the arrangement order of the binary values ​​in the transformed binary-based input-output system file, the binary values ​​of the file recovery threshold value quantity are selected starting from the first unselected binary value, and the step of using the selected binary values ​​as coefficients of the Lagrangian interpolation polynomial to generate the Lagrangian interpolation polynomial is repeatedly performed until there are no unselected binary values ​​in the transformed binary-based input-output system file; Generates a plaintext sub-binary file of the function value with the same arguments.

2. The method for transmitting files based on an input and output system according to claim 1, characterized in that: Utilizing each secret participant to transmit each sub-binary file pair includes: Selecting from each secret participant terminal a secret participant terminal whose value is greater than or equal to the file recovery threshold value and less than or equal to the number of shares to be split; The sub-binary file pairs in each selected secret participant are transmitted.

3. The method for transmitting files based on an input and output system according to claim 2, characterized in that: Selecting a secret participant terminal whose value is greater than or equal to the file recovery threshold value and less than or equal to the number of shares to be split from each secret participant terminal includes: The secret participating terminals with the file recovery threshold value number are selected from the secret participating terminals.

4. The method for transmitting files based on an input and output system according to claim 1, characterized in that: After each pair of sub-binary files is transmitted using each secret participant, it also includes: The ciphertext sub-binary file in each sub-binary file pair that has been transmitted is verified.

5. The method for transmitting files based on an input-output system according to claim 4, characterized in that: Verify the ciphertext sub-binary file in each sub-binary file pair that has been transmitted, including: A one-way hash function is used to calculate the digest of the plaintext sub-binary file in each sub-binary file pair that has been transmitted, so as to obtain the digest of each transmitted information; Decrypting the ciphertext sub-binary files in each sub-binary file pair using the published public key to obtain the pre-signature information digest corresponding to each ciphertext sub-binary file; Each post-transmission information digest is compared bit by bit with the corresponding pre-signature information digest to obtain a bit by bit comparison result.

6. The method for transmitting files based on an input-output system according to claim 5, characterized in that: After getting the bit-by-bit comparison result, it also includes: When the bit-by-bit comparison result corresponding to a secret participant terminal is inconsistent, a secret information re-presentation instruction is sent to the secret participant terminal with the inconsistent bit-by-bit comparison result, so that the secret participant terminal with the inconsistent bit-by-bit comparison result retransmits the sub-binary file pair; Re-verify the ciphertext sub-binary file in the retransmitted sub-binary file pair.

7. The method for transmitting files based on an input-output system according to claim 5, characterized in that: After getting the bit-by-bit comparison result, it also includes: When the bit-by-bit comparison results corresponding to each secret participant are consistent, the plaintext sub-binary files in each sub-binary file pair that has been transmitted are used to perform original binary file recovery based on the input-output system.

8. The method for transmitting files based on an input-output system according to claim 7, characterized in that: The plaintext sub-binary files in each sub-binary file pair that has been transferred are used to perform original binary-based input and output system file recovery, including: Using the Lagrangian interpolation method to restore the Lagrangian interpolation polynomial according to the plaintext sub-binary files in each sub-binary file pair, to obtain a restored Lagrangian interpolation polynomial; Arrange the coefficients of the restored Lagrange interpolation polynomial in order from low to high according to the power corresponding to the coefficients to obtain an initial restored two-dimensional matrix; The inverse transformation of the Arnold transformation is performed on the initial restored two-dimensional matrix to obtain the original binary input-output system file.

9. The method for transmitting files based on an input-output system according to claim 8, characterized in that: Performing an inverse transformation of the Arnold transformation on the initial restored two-dimensional matrix comprises: Substituting each first coordinate of the initial restored two-dimensional matrix into the Arnold inverse transformation matrix to obtain the second coordinates corresponding to each first coordinate; Migrating the binary values ​​corresponding to the first coordinates in the initial restored two-dimensional matrix to the corresponding second coordinates to obtain a target restored two-dimensional matrix; The binary values ​​in the target restored two-dimensional matrix are arranged according to the arrangement order of the coefficients of the restored Lagrange interpolation polynomial in the initial restored two-dimensional matrix.

10. The method for transmitting files based on an input-output system according to claim 1, characterized in that: Digitally sign each plaintext sub-binary file, including: Each plaintext sub-binary file is digitally signed using the RSA signature algorithm.

11. A transmission device based on input and output system files, characterized in that: include: Memory for storing computer programs; A processor, configured to implement the steps of the input-output system file transmission method according to any one of claims 1 to 10 when executing the computer program.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the input-output system file transmission method according to any one of claims 1 to 10 are implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the input-output system file transmission method according to any one of claims 1 to 10 are implemented.

Images