Data encryption method and device and data decryption method and device based on terahertz wave detection signal

Abstract

The invention provides a data encryption method and device and a data decryption method and device based on a terahertz wave detection signal, and relates to the field of electrical engineering and the field of information security. The method comprises the steps that a terahertz wave detection signal of target measurement equipment and a target timestamp corresponding to the terahertz wave detection signal are obtained, the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement equipment based on terahertz waves, and the target timestamp corresponds to the terahertz wave detection signal; the target particle distribution label is provided with a plurality of randomly distributed particles; performing encryption operation on the message plaintext based on the device identification key to obtain a device fingerprint ciphertext; processing the device identification key based on the target timestamp to obtain device identification key auxiliary information; performing data confusion on the equipment identification key auxiliary information, the equipment fingerprint ciphertext and the random matrix abstract based on a reversible data confusion function to obtain a message ciphertext; and sending the message ciphertext to the information demand end.

Description

Technical Field

[0001] The present invention relates to the fields of electrical engineering and information security, and more specifically, to a data encryption method, a decryption method and a device based on a terahertz wave detection signal. Background Art

[0002] With the rapid popularization of smart devices such as smart meters in the distribution network, multiple smart devices in the distribution network provide a basis for the operation decision of the distribution network system through information exchange. At the same time, relevant personnel can also use handheld smart inspection equipment and other detection equipment to inspect the power equipment in the distribution network, and report power equipment data such as equipment detection data and equipment maintenance data through information exchange with smart devices in the distribution network. This requires that the information exchange between devices related to the distribution network needs to ensure information security and privacy to avoid information leakage affecting the stable operation of the distribution network. Summary of the invention

[0003] In view of this, the present invention provides a data encryption method, a decryption method and a device based on a terahertz wave detection signal.

[0004] One aspect of the present invention provides a data encryption method based on a terahertz wave detection signal, which is applied to a target measurement device. The method comprises:

[0005] Acquire a terahertz wave detection signal of a target measurement device, and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on a terahertz wave, and the target particle distribution label sets a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device; perform an encryption operation on a message plaintext based on a device identification key to obtain a device fingerprint ciphertext, wherein the device identification key is obtained by performing data conversion on the terahertz wave detection signal; process the device identification key based on the target timestamp to obtain device identification key auxiliary information; perform data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext and a random matrix summary based on a reversible data obfuscation function to obtain a message ciphertext, wherein the random matrix summary is determined based on a random matrix held by the target measurement device; and send the message ciphertext to an information demander.

[0006] Another aspect of the present invention provides a data decryption method based on a terahertz wave detection signal, which is applied to an information demand end, and the method includes: obtaining a message ciphertext from a target measurement device, wherein the message ciphertext is determined based on the data encryption method based on the terahertz wave detection signal; processing the message ciphertext based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext and random matrix summary, and the preset inverse function is the inverse function of the data obfuscation function; processing the device identification key auxiliary information based on a target timestamp corresponding to the message ciphertext to obtain a device identification key; performing identity authentication based on the random matrix summary and the sample random matrix summary to obtain an identity authentication result; and in response to the identity authentication result indicating that the authentication is passed, decrypting the device fingerprint ciphertext based on the device identification key to obtain a message plaintext.

[0007] Another aspect of the present invention provides a data encryption device based on a terahertz wave detection signal, which is applied to a target measurement device. The device includes: a first acquisition module, which is used to acquire a terahertz wave detection signal of a target measurement device, and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on a terahertz wave, and the target particle distribution label is provided with a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device; an encryption module, which is used to encrypt a message plaintext based on a device identification key operation, obtaining a device fingerprint ciphertext, wherein the device identification key is obtained by data conversion of the terahertz wave detection signal; a device identification key auxiliary information acquisition module, used to process the device identification key based on the target timestamp to obtain device identification key auxiliary information; a message ciphertext acquisition module, used to perform data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext and a random matrix summary based on a reversible data obfuscation function to obtain a message ciphertext, wherein the random matrix summary is determined based on a random matrix held by the target measurement device; and a sending module, used to send the message ciphertext to an information demand end.

[0008] Another aspect of the present invention provides a data decryption device based on a terahertz wave detection signal, which is applied to an information demand end, and the device includes: a second acquisition module, used to obtain a message ciphertext from a target measurement device, wherein the message ciphertext is determined based on the data encryption method based on the terahertz wave detection signal; a message ciphertext processing module, used to process the message ciphertext based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext and random matrix summary, and the preset inverse function is the inverse function of the data obfuscation function; a device identification key acquisition module, used to process the device identification key auxiliary information based on a target timestamp corresponding to the message ciphertext to obtain a device identification key; an identity authentication module, used to perform identity authentication based on the random matrix summary and the sample random matrix summary to obtain an identity authentication result; and a decryption module, used to decrypt the device fingerprint ciphertext based on the device identification key in response to the identity authentication result indicating that the authentication is passed, to obtain a message plaintext.

[0009] Another aspect of the present invention provides a communication system, comprising: a target measurement device, including: a target particle distribution label, the target particle distribution label is provided with a plurality of randomly distributed particles, the distribution results of the plurality of particles correspond to the target measurement device, the target particle distribution label is configured to generate a terahertz wave detection signal in response to a terahertz wave scan; and the data encryption device based on the terahertz wave detection signal; an information demand end, which is communicatively connected to the target measurement device, and the information demand end includes: the data decryption device based on the terahertz wave detection signal.

[0010] Another aspect of the present invention provides an electronic device, comprising:

[0011] one or more processors;

[0012] a memory for storing one or more programs,

[0013] When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described above.

[0014] Another aspect of the present invention provides a computer-readable storage medium storing computer-executable instructions, which are used to implement the above method when executed.

[0015] Another aspect of the present invention provides a computer program product, the computer program product comprising computer executable instructions, the instructions being used to implement the method as described above when being executed.

[0016] According to an embodiment of the present invention, since the distribution results of multiple particles in the target particle distribution label correspond to the target measurement device one by one, the distribution results of multiple particles will change when the target particle distribution label is stolen or destroyed, thereby avoiding the counterfeiting of the target measurement device by disassembling and forging the target particle distribution label of the target measurement device. The device identification key generated based on the terahertz detection signal can more accurately represent the integrity and uniqueness of the target measurement device. At the same time, the device identification key is processed based on the target timestamp, so that the device identification key auxiliary information can be called the ciphertext information that integrates the device identification and the message transmission time attribute. By sending the message ciphertext containing the device identification key auxiliary information, the message ciphertext and the device fingerprint ciphertext to the information demand end, the privacy fusion of the message transmission event and the device identity can be achieved, and the accuracy and security of the message authentication can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The above and other objects, features and advantages of the present invention will become more apparent through the following description of the embodiments of the present invention with reference to the accompanying drawings, in which:

[0018] Figure 1 An exemplary system architecture to which a data encryption method, a decryption method and a device based on a terahertz wave detection signal can be applied according to an embodiment of the present invention is shown.

[0019] Figure 2 A flow chart of a data encryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0020] Figure 3 A flow chart of a data decryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0021] Figure 4 A similarity curve diagram between device identification keys determined under different segmentation metrics for a target measurement device and an imposter measurement device according to an embodiment of the present invention is shown.

[0022] Figure 5 A comparison chart of the computational time of a data encryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0023] Figure 6 A comparison chart of communication overheads of a data encryption method and a data decryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0024] Figure 7 A block diagram of a data encryption device based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0025] Figure 8A block diagram of a data decryption device based on a terahertz wave detection signal according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0026] Below, embodiments of the present invention will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present invention. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of embodiments of the present invention. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of concepts of the present invention.

[0027] The terms used herein are only for describing specific embodiments and are not intended to limit the present invention. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0028] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0029] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0030] In the embodiments of the present invention, the collection, updating, analysis, processing, use, transmission, provision, disclosure, storage and other aspects of the data involved (for example, including but not limited to user personal information) are in compliance with the provisions of relevant laws and regulations, are used for legitimate purposes, and do not violate public order and good morals. In particular, necessary measures are taken for user personal information to prevent illegal access to user personal information data and maintain the security of user personal information, network security and national security.

[0031] In the embodiment of the present invention, before obtaining or collecting the user's personal information, the user's authorization or consent is obtained.

[0032] The inventors have found that in modern power systems, with the widespread application of power measurement terminal equipment, how to ensure the reliability and safety of the equipment has become a focus of industry attention. Traditional measurement equipment inspection methods usually rely on manual operation, which is cumbersome and inefficient. Especially in identity authentication operations, manual recording and manual verification methods for manual authentication are prone to human errors, resulting in inaccurate equipment information, which poses a hidden danger to the safe operation of the distribution network. In addition, with the digitalization and intelligent development of power systems, the security issues of equipment identity authentication are becoming increasingly prominent. Traditional authentication methods often lack sufficient encryption measures and identity authentication mechanisms, which may cause equipment to face security risks such as forgery and tampering, and may even become an entry point for malicious attacks, affecting the overall security of the power grid. Therefore, how to develop an efficient and secure equipment inspection and identity authentication mechanism to meet the challenges of expanding the scale of the power grid and increasing security requirements has become an urgent problem to be solved in the current power industry.

[0033] In view of the risk of malicious identity impersonation caused by replay attacks, man-in-the-middle attacks, and other attacks when inspecting new power measurement terminals under conditions where computing resources, storage, and running space are limited in handheld inspection equipment, the inventors proposed a data encryption method based on terahertz wave detection signals to perform identity authentication operations, thereby ensuring the security of the identity identification privacy information of the measurement terminal.

[0034] The embodiment of the present invention provides a data encryption method, a decryption method and a device based on a terahertz wave detection signal. The data encryption method based on a terahertz wave detection signal is applied to a target measurement device, and the method includes:

[0035] Acquire a terahertz wave detection signal of a target measurement device and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on the terahertz wave, and the target particle distribution label sets a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device; perform an encryption operation on a message plaintext based on a device identification key to obtain a device fingerprint ciphertext, wherein the device identification key is obtained by performing data conversion on the terahertz wave detection signal; process the device identification key based on the target timestamp to obtain device identification key auxiliary information; perform data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext and the random matrix summary based on a reversible data obfuscation function to obtain a message ciphertext, wherein the random matrix summary is determined based on the random matrix held by the target measurement device; and send the message ciphertext to the information demand end.

[0036] According to an embodiment of the present invention, since the distribution results of multiple particles in the target particle distribution label correspond to the target measurement device one by one, the distribution results of multiple particles will change when the target particle distribution label is stolen or destroyed, thereby avoiding the counterfeiting of the target measurement device by disassembling and forging the target particle distribution label of the target measurement device. The device identification key generated based on the terahertz detection signal can more accurately represent the integrity and uniqueness of the target measurement device. At the same time, the device identification key is processed based on the target timestamp, so that the device identification key auxiliary information can be called the ciphertext information that integrates the device identification and the message transmission time attribute. By sending the message ciphertext containing the device identification key auxiliary information, the message ciphertext and the device fingerprint ciphertext to the information demand end, the privacy fusion of the message transmission event and the device identity can be achieved, and the accuracy and security of the message authentication can be improved.

[0037] Figure 1 The exemplary system architecture of the data encryption method, decryption method and device based on terahertz wave detection signal according to the embodiment of the present invention is shown. It should be noted that: Figure 1 The examples shown are merely examples of system architectures to which the embodiments of the present invention may be applied, to help those skilled in the art understand the technical content of the present invention, but do not mean that the embodiments of the present invention may not be used in other devices, systems, environments or scenarios.

[0038] like Figure 1 As shown, the system architecture 100 according to this embodiment may include a first measurement device 101, a second measurement device 102, a third measurement device 103, a network 104, and a server 105. The network 104 is used to provide a medium for communication links between the first measurement device 101, the second measurement device 102, the third measurement device 103, and the server 105. The network 104 may include various connection types, such as wired and / or wireless communication links, etc.

[0039] The user can use the first measurement device 101, the second measurement device 102, and the third measurement device 103 to interact with the server 105 through the network 104 to receive or send messages, etc. Various communication client applications, such as wireless communication service applications, can be installed on the first measurement device 101, the second measurement device 102, and the third measurement device 103.

[0040] The first measuring device 101 , the second measuring device 102 , and the third measuring device 103 may be various electric power devices having a display screen and supporting information browsing, including but not limited to a handheld inspection device, a smart meter device, and the like.

[0041] The server 105 may be a server that provides various services, such as a background management server (only as an example) that provides support for websites browsed by users using the first measurement device 101, the second measurement device 102, and the third measurement device 103. The background management server may analyze and process the received data such as user requests, and generate a distribution network operation strategy or operation instruction based on the processing results.

[0042] It should be noted that the data encryption method based on the terahertz wave detection signal provided in the embodiment of the present invention can also be performed by the first measurement device 101, the second measurement device 102 or the third measurement device 103, or can also be performed by other measurement devices different from the first measurement device 101, the second measurement device 102 or the third measurement device 103. Correspondingly, the data encryption device based on the terahertz wave detection signal provided in the embodiment of the present invention can also be set in the first measurement device 101, the second measurement device 102 or the third measurement device 103, or can be set in other measurement devices different from the first measurement device 101, the second measurement device 102 or the third measurement device 103.

[0043] Or the data encryption method and decryption method based on the terahertz wave detection signal provided in the embodiment of the present invention can generally be executed by the server 105. Accordingly, the data decryption device based on the terahertz wave detection signal provided in the embodiment of the present invention can generally be arranged in the server 105. The data decryption method based on the terahertz wave detection signal provided in the embodiment of the present invention can also be executed by a server or server cluster that is different from the server 105 and can communicate with the first measurement device 101, the second measurement device 102, the third measurement device 103 and / or the server 105. Accordingly, the data decryption device based on the terahertz wave detection signal provided in the embodiment of the present invention can also be arranged in a server or server cluster that is different from the server 105 and can communicate with the first measurement device 101, the second measurement device 102, the third measurement device 103 and / or the server 105.

[0044] It should be understood that Figure 1 The number of measurement devices, networks and servers in the embodiment is only for illustration. Any number of measurement devices, networks and servers may be provided according to the implementation requirements.

[0045] Figure 2 A flow chart of a data encryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0046] like Figure 2 As shown, the data encryption method based on the terahertz wave detection signal is applied to a target measurement device, and the method includes operations S210 to S250.

[0047] In operation S210 , a terahertz wave detection signal of a target measurement device and a target timestamp corresponding to the terahertz wave detection signal are acquired.

[0048] In operation S220, an encryption operation is performed on the message plaintext based on the device identification key to obtain a device fingerprint ciphertext.

[0049] In operation S230, the device identification key is processed based on the target timestamp to obtain device identification key auxiliary information.

[0050] In operation S240, data obfuscation is performed on the device identification key auxiliary information, the device fingerprint ciphertext, and the random matrix digest based on a reversible data obfuscation function to obtain a message ciphertext.

[0051] In operation S250, a ciphertext message is sent to the information demander.

[0052] According to an embodiment of the present invention, the target measurement device may be a power measurement device such as a smart meter device, a handheld smart detection device, etc. in a power grid system.

[0053] According to an embodiment of the present invention, the terahertz wave detection signal is obtained by detecting the target particle distribution label of the target measurement device based on the terahertz wave, and the target particle distribution label is provided with a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device. The distribution results of the plurality of particles can be used as the unique representation of the device identification of the target measurement device, so that the target particle distribution label is difficult to restore after being destroyed or disassembled, thereby ensuring the security of the device identification.

[0054] According to an embodiment of the present invention, by adding metal particles to a target particle distribution tag installed in a target measurement device such as a smart meter, and using terahertz waves to detect a random distribution pattern (distribution results of multiple target particles) formed on the surface of the target particle distribution tag, the random distribution pattern can be used as a fingerprint of the target measurement device, which has uniqueness and can be used as the basis for identity authentication of the target measurement device. Once the target particle distribution tag is peeled off and re-pasted, the distribution results of the metal particles in the glue will inevitably change, resulting in the destruction of the pattern, so that tampering behavior can be accurately identified.

[0055] According to an embodiment of the present invention, since the target particle distribution label has low manufacturing cost and compact structure, it has wide application potential, especially suitable for the field of power engineering. In order to improve the anti-tampering performance of the target particle distribution label, a notch can also be set in the label structure of the target particle distribution label, so that the terahertz wave can penetrate the surface of the target particle distribution label through the notch and irradiate into the glue mixed with metal particles. Due to the short wavelength characteristics of the terahertz wave, it can detect the particle distribution at the micron level, so that the distribution results of multiple target particles obtained are more accurate. By detecting the terahertz wave reflection signal under different metal particle distribution results, accurate verification information can be obtained. In addition, by integrating multiple notches on the chip of the target particle distribution label, multiple position detection using terahertz waves can be realized, further improving the efficiency of obtaining particle distribution information and the accuracy of identity verification.

[0056] According to an embodiment of the present invention, the device identification key is obtained by performing data conversion on the terahertz wave detection signal.

[0057] In one example, the device identification key E K It is generated based on the following operations: extract the features of the terahertz wave detection signal to obtain the device identification vector of the target measurement device. The string obtained by converting the device identification vector into binary data (or decimal data) can be used as the device identification key E K .

[0058] According to an embodiment of the present invention, the device identification key and the message plaintext can be processed based on any type of algorithm such as a symmetric encryption algorithm or an asymmetric encryption algorithm to obtain device identification key auxiliary information. The embodiment of the present invention does not limit the specific algorithm type for implementing the encryption operation.

[0059] According to an embodiment of the present invention, the random matrix digest is determined based on a random matrix held by the target measurement device.

[0060] According to an embodiment of the present invention, the random matrix Q secretly stored by the target measurement device R Can be used to protect the device identification key E K In order to prevent attackers from combining illegal random matrices and illegal regeneration device identification keys to meet the device identification key E of the legitimate target measurement device K , the preset summary function can be used to process the random matrix to obtain the random matrix summary. And by sending the random matrix summary, the device identification key E is further protected. K .

[0061] In one example, the random matrix Q is processed according to the SHA256 hash function R, and obtain the random matrix summary. For example, the random matrix summary can be obtained based on formula (1).

[0062] (1);

[0063] Among them, H (Q R ) is the random matrix digest, SHA256() is the SHA256 hash function, and the Bin() function is used to convert the random matrix into a binary string.

[0064] According to an embodiment of the present invention, the target timestamp may represent the event timestamp of generating the terahertz wave detection signal, or the target timestamp may also represent the sending event timestamp of sending the message ciphertext. The embodiment of the present invention does not limit the specific setting method of the target timestamp, as long as it can have a corresponding relationship with the terahertz wave detection signal.

[0065] According to an embodiment of the present invention, operation S220, performing an encryption operation on the message plaintext based on the device identification key to obtain the device fingerprint ciphertext may include: encoding the message plaintext to obtain a message plaintext string in a binary data format; and encrypting the message plaintext string using the device identification key to obtain the device fingerprint ciphertext.

[0066] According to an embodiment of the present invention, the data length of the message plaintext character string is an integer multiple of the data length of the device identification key.

[0067] According to an embodiment of the present invention, encrypting a message plaintext string using a device identification key to obtain a device fingerprint ciphertext may include: dividing the message plaintext string into integer multiples to obtain a message plaintext substring; and encrypting the message plaintext substring using the device identification key to obtain a device fingerprint ciphertext data block; and determining the device fingerprint ciphertext based on multiple device fingerprint ciphertext data blocks.

[0068] In one example, the device fingerprint ciphertext E can be obtained based on the following operations: R0 .

[0069] The target measurement device needs to send a plaintext message r to the information demand side. The plaintext message r needs to be encrypted before it is transmitted to the information demand side. For example, the plaintext message r can be processed based on the data conversion function Bin() to obtain a binary string R T =Bin(r). Use the Boolean values ​​"0" and "1" to bin the binary string R. T Perform high-order supplement to obtain the plaintext string of the message.

[0070] For example, the message plaintext string R can be obtained based on the following formula (2): S .

[0071] (2);

[0072] Formula (2) represents the binary string R T The high bits are supplemented with multiple "0" and one "1", so that the plain text string R S The data length is the device identification key E K An integer multiple of the data length. Thus, the following formula (3) can be satisfied.

[0073] (3);

[0074] It should be understood that in the binary string R T The data length is the device identification key E K If the data length is an integer multiple, the binary string R T As the message plaintext string R S Finally, according to the device identification key E K Data length message plaintext string R S Split by integer multiples to get the message plaintext substring. Use the device identification key E K Encrypt each message plaintext substring using the encryption algorithm to obtain the device fingerprint ciphertext data block E R0i . Multiple device fingerprint ciphertext data blocks E R0i Splice and get the device fingerprint ciphertext E R0 The device fingerprint ciphertext data block can be determined based on the following formula (4).

[0075] E R0 =Encrypt(R S , E K )(4)

[0076] Among them, Encrypt() represents the encryption algorithm, E R0 The device fingerprint ciphertext.

[0077] According to an embodiment of the present invention, by using terahertz wave detection signals to create non-counterfeitable device fingerprint ciphertexts, and using target timestamps to determine the uniqueness and non-repudiation of communication events between target measurement devices and information demand ends, combined with the timestamp to process device identification keys, and obtain device identification key auxiliary information, it is possible to implement "one-time one-key" authentication of message sending events based on device identification key auxiliary information, device fingerprint ciphertexts, and random matrix digests, so that each message is sent and the message ciphertext is changed, thereby improving the security of the message ciphertext. The data encryption method provided according to an embodiment of the present invention combines the non-counterfeitability of terahertz wave detection signals and the uniqueness of message sending events determined by target timestamps, reducing the possibility of information deception by false agents, thereby effectively resisting man-in-the-middle attacks between target measurement devices and information demand ends, and improving anti-counterfeiting attack performance.

[0078] According to an embodiment of the present invention, operation S230, processing the device identification key based on the target timestamp to obtain the device identification key auxiliary information may include: fusing the target timestamp with the set negotiation information to obtain intermediate negotiation information; processing the intermediate negotiation information based on a hash function to obtain an intermediate negotiation summary value; aligning the character length of the intermediate negotiation summary value with the device identification key to obtain intermediate device identification key auxiliary information; and performing logical operations on the intermediate device identification key auxiliary information and the device identification key to obtain the device identification key auxiliary information.

[0079] In one example, the target timestamp T S It can be a 12-digit decimal number and can be determined based on the Greenwich Mean Time when the communication event occurs. Set negotiation information F N Can be a decimal number with 6 or more digits.

[0080] When a communication event occurs, the target timestamp T corresponding to the communication event between the target measurement device and the information demand end needs to be S The set negotiation information F pre-agreed with the target measurement device and the information demand side N The intermediate negotiation information obtained after the connection is processed by the SHA256 hash function to generate the intermediate negotiation summary value H(FT). The length of the intermediate negotiation summary value H(FT) is 256 bits. The intermediate negotiation summary value H(FT) is truncated or bit-extended to align the character length of the intermediate negotiation summary value with the device identification key to obtain the intermediate device identification key auxiliary information F S . Intermediate device identification key auxiliary information F S The data length and the device identification key E of the target measurement device K The data length is consistent. By identifying the key auxiliary information F of the intermediate device Sand device identification key E K Performing logical operations can protect the device identification key E K Even if it is stolen or exposed during transmission, it will not be known by the attacker, thus realizing the device identification key E K For protection.

[0081] In one example, the inverse function of the XOR operation may be used to process the intermediate device identification key auxiliary information F S and device identification key E K , to achieve the intermediate device identification key auxiliary information F S and device identification key E K Performs logical operations.

[0082] According to an embodiment of the present invention, operation S240, performing data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext and the random matrix summary based on a reversible data obfuscation function to obtain the message ciphertext may include the following operations.

[0083] According to an embodiment of the present invention, the target measurement device obtains the device fingerprint ciphertext E R0 , random matrix Q R The random matrix summary H(Q R ) and device identification key auxiliary information S carrying the target timestamp K Together as the plaintext data set E R Formula (5) can represent the plaintext data set E R .

[0084] E R =(E R0 , S K , H(Q R ))(5);

[0085] Based on the definition of a reversible random permutation function π( ) as a data obfuscation function, the data obfuscation function transforms the plaintext data set E R The data is obfuscated by rearranging the elements in the data. For example, the plaintext message π(E R ).

[0086] (6);

[0087] Among them, π( ) represents the symmetry group S n Select a random replacement element to replace the device fingerprint ciphertext E R0 , random matrix summary H(Q R ) and device identification key auxiliary information S KThe random permutation function π( ) can be expressed based on formula (7).

[0088] (7);

[0089] For the plaintext message π(E R ) is encrypted using a symmetric encryption algorithm to obtain the message ciphertext. R Multiple data elements in the text are randomly arranged so that the plaintext data set E R The original data structure in the encrypted data is disrupted, thereby increasing the complexity and unpredictability of the data, which can effectively prevent unauthorized entities from obtaining the structural information of the data when it is not encrypted.

[0090] Figure 3 A flow chart of a data decryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0091] like Figure 3 As shown, the data decryption method based on terahertz wave detection signal is applied to the information demand side, and the method includes operations S310~S350.

[0092] In operation S310 , a message ciphertext is obtained from a target measurement device.

[0093] According to an embodiment of the present invention, the message ciphertext is determined according to the data encryption method based on the terahertz wave detection signal provided by the above embodiment, and the embodiment of the present invention will not be described in detail here.

[0094] In operation S320, the message ciphertext is processed based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext, and random matrix digest.

[0095] According to an embodiment of the present invention, the preset inverse function is the inverse function of the data obfuscation function, for example, it may be the inverse function of the random permutation function π().

[0096] In operation S330, the device identification key auxiliary information is processed based on the target timestamp corresponding to the message ciphertext to obtain a device identification key.

[0097] In operation S340, identity authentication is performed based on the random matrix digest and the sample random matrix digest to obtain an identity authentication result.

[0098] In operation S350, in response to the identity authentication result indicating that the authentication is successful, the device fingerprint ciphertext is decrypted based on the device identification key to obtain a message plaintext.

[0099] According to an embodiment of the present invention, operation S330, based on the target timestamp corresponding to the message ciphertext, processing the device identification key auxiliary information to obtain the device identification key may include the following operations.

[0100] The target timestamp is merged with the set negotiation information to obtain the intermediate negotiation information; the intermediate negotiation information is processed based on the hash function to obtain the intermediate negotiation summary value; the intermediate negotiation summary value is aligned with the device identification key by character length to obtain the intermediate device identification key auxiliary information; and logical operations are performed on the intermediate device identification key auxiliary information and the device identification key auxiliary information to obtain the device identification key.

[0101] In one example, the information demander uses the set negotiation information F agreed upon in advance by both parties to communicate. N and the target timestamp T of the communication event S The intermediate negotiation information obtained after the connection is processed by the SHA256 hash function to generate the intermediate negotiation summary value H(FT). The length of the intermediate negotiation summary value H(FT) is 256 bits. The intermediate negotiation summary value H(FT) is truncated or bit-extended to align the character length of the intermediate negotiation summary value with the device identification key to obtain the intermediate device identification key auxiliary information F S Then the intermediate device identification key auxiliary information F S The received device identification key auxiliary information S K Perform bit-by-bit XOR operations to obtain the device identification key E from the target measurement device. K For example, the XOR operation of obtaining the device identification key can be expressed based on the following formula (8).

[0102] (8);

[0103] According to an embodiment of the present invention, the device fingerprint ciphertext E R0 The device identification key E K The data length is divided into pieces, and the device fingerprint ciphertext data block E is obtained. R0i . Use the device identification key E of the target measurement device K Sequentially perform multiple device fingerprint ciphertext data blocks E R0i Perform cryptographic algorithm decryption to obtain the message plaintext string R S For example, the message plaintext string R can be obtained based on the following formula (9): S .

[0104] (9);

[0105] Among them, Encrypt() represents the decryption algorithm.

[0106] Finally, the message plaintext string R S The high-order supplementary characters are removed to obtain the binary string R in binary form. T , convert the binary string R T Perform data conversion to obtain the message plaintext r.

[0107] It should be noted that, when the reversible data obfuscation function is a random permutation function π( ), the preset inverse function is defined as π -1 ( ). Restore the plaintext data set E obtained before data obfuscation by using the preset inverse function R . Plaintext data set E R It can be expressed as formula (10);

[0108] E R =π -1 (r) (10);

[0109] According to an embodiment of the present invention, operation S340, performing identity authentication based on the random matrix digest and the sample random matrix digest, and obtaining the identity authentication result may include the following operations.

[0110] Compare the random matrix summary with the sample random matrix summary to obtain a comparison result; calculate the similarity between the device identification key and the sample device identification key to obtain key similarity; and in response to satisfying the identity authentication condition, determine an identity authentication result representing that the authentication is passed.

[0111] According to an embodiment of the present invention, the sample random matrix summary may be private data stored at the information demand end. The sample random matrix summary may be obtained by processing the random matrix based on a hash function.

[0112] According to an embodiment of the present invention, the identity authentication condition includes at least one of a first identity authentication condition and a second identity authentication condition.

[0113] According to an embodiment of the present invention, the first identity authentication condition characterizes that the comparison result characterizes that the random matrix digest matches the sample random matrix digest. When the similarity between the random matrix digest and the sample random matrix digest is greater than a preset summary similarity threshold, it can be indicated that the random matrix digest matches the sample random matrix digest.

[0114] According to an embodiment of the present invention, in order to prevent a counterfeiter from generating a device identification key E of a real target measurement device by combining an illegal device identification and an illegal random matrix, KR After entering the identity authentication phase, the information demander needs the target measurement device to share the sample random matrix summary of its random matrix. The information demander will receive the random matrix summary H (Q R) is compared with the sample random matrix summary. When the two random matrix summaries H(Q R ) is completely equal to the sample random matrix summary, the first identity authentication condition is met.

[0115] According to an embodiment of the present invention, the second identity authentication condition indicates that the key similarity is greater than or equal to a preset similarity threshold. The key similarity may indicate the similarity between the device identification key decrypted by the information demander and the device identification key shared by the target measurement device.

[0116] In an example, the key similarity can be calculated based on the following formula (11).

[0117] (11);

[0118] In the formula, HM() represents the Hamming distance calculation formula, and Score() represents the key similarity score. K1 The device identification key obtained by decryption at the information demand end, E K2 The shared device identification key is obtained by the information demand end from the target measurement terminal. If the key similarity score is greater than the preset similarity threshold, the second identity authentication condition can be met.

[0119] In one example, the distribution network may include a wireless private network power communication system consisting of advanced measurement equipment, communication base stations, communication terminals, business master stations and core distribution networks. There are a large number of intelligent measurement and control terminal devices in the AMI power information collection wireless communication private network. Their wide distribution, large number and diverse communication methods lead to them facing more types of security risks, and their levels are deeper and the scope is larger. Data analysis is conducted on the authenticatability of power measurement terminals as target measurement devices and related influencing factors. The experimental data is based on the laboratory terminal representation database HD-FP2021, including 42-bit terminal device fingerprint information, device ID sequence and power measurement terminal metering data packet.

[0120] Figure 4 A similarity curve diagram between device identification keys determined under different segmentation metrics for a target measurement device and an imposter measurement device according to an embodiment of the present invention is shown.

[0121] In this example, as shown in Table 1, when generating the device identification key, using different segmentation metrics can generate device fingerprint ciphertexts of different lengths. By statistically analyzing the similarity value distribution between the device identification keys sent by the target measurement device of the real sender and the measurement device of the counterfeiter under multiple groups of different segmentation metrics, we can obtain the following: Figure 4 The similarity value curve shown in . Figure 4It can be seen that from the similarity value, in the six segmentation metrics, the similarity values ​​of the real sender and the imposter are quite different. The similarity value of the real sender's regenerated fingerprint key is higher than 58 points, accounting for more than 97%, while the similarity value of the imposter's regenerated fingerprint key is only less than 1% higher than 58 points, and more than 99% of the similarity values ​​are lower than 58 points.

[0122] Table 1

[0123]

[0124] Table 1 shows different device identification key data lengths, the Genuine Acceptance Rates (GAR) and False Acceptance Rates (FAR) under different segmentation indicators. According to the data encryption method and data decryption method provided by the embodiment of the present invention, the construction of device identification keys of different data lengths can be realized by taking different segmentation metrics to meet the cryptographic algorithms with different key length requirements. For example, a variable-length device identification key can be realized based on the 128 bit, 192 bit, and 256 bit required by the AES (advanced encryption standard) algorithm. In addition, even in the case of different segmentation metrics, there are obvious differences in the distribution of similarity values ​​of the keys between the real sender and the impostor. Therefore, the identity of the real sender and the impostor can be distinguished by the similarity value, the identity of the real sender is authenticated and the authentication of the impostor is rejected, and the authenticability of the sender's key in this scheme is also verified.

[0125] As shown in Table 1 and Table 2, the data encryption method based on terahertz wave detection signal provided by the embodiment of the present invention combines the communication data encryption of the target timestamp and the random matrix, which can significantly improve the security of the identity authentication of the advanced metering terminal equipment, and effectively prevent illegal equipment from impersonating the identity to carry out selective attacks and defamation attacks on the power Internet of Things, thereby greatly improving the access reliability and security of the power measurement equipment.

[0126] Table 2

[0127]

[0128] Figure 5 A comparison chart of the computational time of a data encryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0129] Figure 6 A comparison chart of communication overheads of a data encryption method and a data decryption method based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0130] Combination Figure 5 and Figure 6 As shown, the elliptic curve algorithm, the non-supersingular elliptic curve algorithm, the PUF (Physical Unclonable Function) algorithm, the bilinear mapping algorithm and the data encryption method and data decryption method based on the terahertz wave detection signal of the embodiment of the present invention are compared. The lightness of the data encryption method and data decryption method based on the terahertz wave detection signal of the embodiment of the present invention can be explained from the two aspects of computational economy and communication economy. First, since the data encryption method and data decryption method based on the terahertz wave detection signal of the embodiment of the present invention do not require complex calculations, the computational economy and communication economy are good, which is more suitable for power measurement terminal equipment. Secondly, fast identity authentication makes the timestamp interval shorter, greatly reduces the risk of replay attacks, and improves security.

[0131] The comparison results of economic calculation are as follows: Figure 5 As shown, the data encryption method and the data decryption method based on terahertz wave detection signals in the embodiments of the present invention reduce the total time consumption by 82.5% compared with the classic elliptic curve algorithm; and reduce the total time consumption by 96% compared with the non-supersingular elliptic curve algorithm; and save 94.6% of the time compared with the Physical Unclonable Function (PUF) algorithm that requires hardware support, because PUF needs to respond to inquiries multiple times, which greatly increases the time consumption; and reduce the time by 86% compared with the bilinear pairing.

[0132] like Figure 6 As shown in the figure, in the comparison of communication overhead, the short ciphertext of the data encryption method and data decryption method based on terahertz wave detection signal in the embodiment of the present invention is reduced by 18.75%, 7.14%, 48%, and 27.78% respectively compared with the elliptic curve algorithm, non-supersingular curve, PUF, and bilinear mapping algorithm. The advantage of the method provided by the embodiment of the present invention in communication overhead is not as obvious as the computational economy, because the ciphertext length after calculation has no obvious advantage, but it still surpasses the elliptic curve algorithm, non-supersingular curve, PUF, and bilinear mapping algorithm.

[0133] In summary, the method provided by the disclosed embodiment has obvious advantages in terms of computational economy and communication overhead, both of which are of great significance to power measurement terminals, because measurement equipment usually needs to undertake real-time measurement tasks and upload data and receive instructions from power system operators at regular intervals. The heavy computational burden and communication overhead in identity authentication will greatly reduce the ability of the measurement equipment to perform measurement tasks, and even interfere with the real-time nature of the measurement data. Therefore, the proposed method is very suitable for power measurement equipment.

[0134] Figure 7A block diagram of a data encryption device based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0135] like Figure 7 As shown, the data encryption device 700 based on the terahertz wave detection signal is applied to the target measurement equipment, including: a first acquisition module 710, an encryption module 720, a device identification key auxiliary information acquisition module 730, a message ciphertext acquisition module 740 and a sending module 750.

[0136] The first acquisition module 710 is used to acquire a terahertz wave detection signal of a target measurement device and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on the terahertz wave, and the target particle distribution label is provided with a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device.

[0137] The encryption module 720 is used to perform an encryption operation on the message plaintext based on the device identification key to obtain the device fingerprint ciphertext, wherein the device identification key is obtained by performing data conversion on the terahertz wave detection signal.

[0138] The device identification key auxiliary information obtaining module 730 is used to process the device identification key based on the target timestamp to obtain the device identification key auxiliary information.

[0139] The message ciphertext obtaining module 740 is used to perform data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext and the random matrix digest based on a reversible data obfuscation function to obtain the message ciphertext, wherein the random matrix digest is determined based on the random matrix held by the target measurement device.

[0140] The sending module 750 is used to send the encrypted message to the information demander.

[0141] According to an embodiment of the present invention, the device identification key auxiliary information obtaining module 730 includes: a fusion unit, an intermediate negotiation digest value obtaining unit, an alignment unit and a logic operation execution unit.

[0142] The fusion unit is used to fuse the target timestamp with the set negotiation information to obtain the intermediate negotiation information.

[0143] The intermediate negotiation summary value obtaining unit is used to process the intermediate negotiation information based on a hash function to obtain the intermediate negotiation summary value.

[0144] The alignment unit is used to align the character length of the intermediate negotiation summary value with the device identification key to obtain the intermediate device identification key auxiliary information.

[0145] The logic operation execution unit is used to perform a logic operation on the intermediate device identification key auxiliary information and the device identification key to obtain the device identification key auxiliary information.

[0146] According to an embodiment of the present invention, the encryption module 720 includes: an encoding unit and a first encryption unit.

[0147] The encoding unit is used to encode the message plaintext to obtain a message plaintext string in a binary data format, wherein the data length of the message plaintext string is an integral multiple of the data length of the device identification key.

[0148] The first encryption unit is used to encrypt the message plaintext string using the device identification key to obtain the device fingerprint ciphertext.

[0149] According to an embodiment of the present invention, the first encryption unit includes: a slicing subunit, a first encryption subunit and a first determination subunit.

[0150] The segmentation subunit is used to segment the message plaintext string according to integer multiples to obtain the message plaintext substrings.

[0151] The first encryption subunit is used to encrypt the message plaintext substring using the device identification key to obtain a device fingerprint ciphertext data block.

[0152] The first determining subunit is used to determine the device fingerprint ciphertext based on multiple device fingerprint ciphertext data blocks.

[0153] Figure 8 A block diagram of a data decryption device based on a terahertz wave detection signal according to an embodiment of the present invention is shown.

[0154] like Figure 8 As shown, a data decryption device 800 based on terahertz wave detection signals is applied to the information demand end, and the data decryption device includes: a second acquisition module 810, a message ciphertext processing module 820, a device identification key acquisition module 830, an identity authentication module 840 and a decryption module 850.

[0155] The second acquisition module 810 is used to acquire a message ciphertext from a target measurement device, wherein the message ciphertext is determined by the data encryption method based on the terahertz wave detection signal provided by an embodiment of the present invention.

[0156] The message ciphertext processing module 820 is used to process the message ciphertext based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext and random matrix summary. The preset inverse function is the inverse function of the data obfuscation function.

[0157] The device identification key obtaining module 830 is used to process the device identification key auxiliary information based on the target timestamp corresponding to the message ciphertext to obtain the device identification key.

[0158] The identity authentication module 840 is used to perform identity authentication based on the random matrix digest and the sample random matrix digest to obtain an identity authentication result.

[0159] The decryption module 850 is used to decrypt the device fingerprint ciphertext based on the device identification key to obtain a message plaintext in response to the identity authentication result indicating that the authentication is successful.

[0160] It should be noted that the data encryption device based on terahertz wave detection signal in the embodiment of the present invention corresponds to the data encryption method based on terahertz wave detection signal in the embodiment of the present invention. The description of the data encryption device based on terahertz wave detection signal specifically refers to the data encryption method based on terahertz wave detection signal, which will not be repeated here.

[0161] It should be noted that the data decryption device based on terahertz wave detection signal in the embodiment of the present invention corresponds to the data decryption method based on terahertz wave detection signal in the embodiment of the present invention. The description of the data decryption device based on terahertz wave detection signal specifically refers to the data decryption method based on terahertz wave detection signal, which will not be repeated here.

[0162] An embodiment of the present invention further provides a communication system, which includes: a target measurement device and an information demand end.

[0163] The target measurement device includes a target particle distribution label and a data encryption device based on a terahertz wave detection signal provided by an embodiment of the present invention.

[0164] The target particle distribution tag sets a plurality of randomly distributed particles, the distribution results of the plurality of particles correspond to the target measurement device, and the target particle distribution tag is configured to generate a terahertz wave detection signal in response to terahertz wave scanning.

[0165] The information demand side is connected to the target measurement equipment for communication, and the information demand side includes a data decryption device based on the terahertz wave detection signal.

[0166] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present invention. In this regard, each box in the flowchart or block diagram may represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions. It can be understood by those skilled in the art that the features recorded in the various embodiments of the present invention can be combined and / or combined in various ways, even if such a combination or combination is not explicitly recorded in the present invention. In particular, without departing from the spirit and teachings of the present invention, the features recorded in the various embodiments of the present invention can be combined and / or combined in various ways. All these combinations and / or combinations fall within the scope of the present invention.

[0167] The embodiments of the present invention are described above. However, these embodiments are only for the purpose of illustration, and are not intended to limit the scope of the present invention. Although each embodiment is described above, it does not mean that the measures in each embodiment cannot be used in combination. The present invention does not depart from the scope of the present invention, and those skilled in the art may make various substitutions and modifications, which should all fall within the scope of the present invention.

Claims

1. A data encryption method based on terahertz wave detection signal, characterized in that: Applied to a target measurement device, the method comprises: Acquire a terahertz wave detection signal of a target measurement device and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on the terahertz wave, the target particle distribution label is provided with a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device; Performing an encryption operation on the message plaintext based on the device identification key to obtain a device fingerprint ciphertext, wherein the device identification key is obtained by performing data conversion on the terahertz wave detection signal; Processing the device identification key based on the target timestamp to obtain device identification key auxiliary information; Obfuscating the device identification key auxiliary information, the device fingerprint ciphertext and the random matrix digest based on a reversible data obfuscation function to obtain a message ciphertext, wherein the random matrix digest is determined based on a random matrix held by the target measurement device; and The message ciphertext is sent to the information demander.

2. The method according to claim 1, characterized in that Processing the device identification key based on the target timestamp to obtain device identification key auxiliary information includes: Merging the target timestamp with the set negotiation information to obtain intermediate negotiation information; Processing the intermediate negotiation information based on a hash function to obtain an intermediate negotiation summary value; Aligning the intermediate negotiation digest value with the device identification key by character length to obtain intermediate device identification key auxiliary information; and A logical operation is performed on the intermediate device identification key auxiliary information and the device identification key to obtain the device identification key auxiliary information.

3. The method according to claim 1, characterized in that The message plaintext is encrypted based on the device identification key, and the device fingerprint ciphertext obtained includes: Encoding the message plaintext to obtain a message plaintext string in a binary data format, wherein the data length of the message plaintext string is an integer multiple of the data length of the device identification key; The message plaintext string is encrypted using the device identification key to obtain the device fingerprint ciphertext.

4. The method according to claim 3, characterized in that The message plaintext string is encrypted using the device identification key to obtain the device fingerprint ciphertext including: Splitting the message plaintext string according to the integer multiples to obtain message plaintext substrings; Encrypting the message plaintext substring using the device identification key to obtain a device fingerprint ciphertext data block; and The device fingerprint ciphertext is determined based on the plurality of device fingerprint ciphertext data blocks.

5. A data decryption method based on terahertz wave detection signal, characterized in that: Applied to the information demand side, the method includes: Obtaining a message ciphertext from a target measurement device, wherein the message ciphertext is determined based on the method according to any one of claims 1 to 4; Processing the message ciphertext based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext and random matrix summary, wherein the preset inverse function is an inverse function of the data obfuscation function; Processing the device identification key auxiliary information based on a target timestamp corresponding to the message ciphertext to obtain a device identification key; Performing identity authentication based on the random matrix digest and the sample random matrix digest to obtain an identity authentication result; and In response to the identity authentication result indicating that the authentication is successful, the device fingerprint ciphertext is decrypted based on the device identification key to obtain a message plaintext.

6. The method according to claim 5, characterized in that Processing the device identification key auxiliary information based on a target timestamp corresponding to the message ciphertext to obtain the device identification key includes: Merging the target timestamp with the set negotiation information to obtain intermediate negotiation information; Processing the intermediate negotiation information based on a hash function to obtain an intermediate negotiation summary value; Aligning the intermediate negotiation digest value with the device identification key by character length to obtain intermediate device identification key auxiliary information; and A logical operation is performed on the intermediate device identification key auxiliary information and the device identification key auxiliary information to obtain the device identification key.

7. The method according to claim 5, characterized in that Based on the random matrix digest and the sample random matrix digest, identity authentication is performed, and the identity authentication result obtained includes: Compare the random matrix summary with the sample random matrix summary to obtain a comparison result; Calculating the similarity between the device identification key and the sample device identification key to obtain key similarity; and In response to satisfying an identity authentication condition, determining an identity authentication result indicating that the authentication is successful, wherein the identity authentication condition includes at least one of the following: A first identity authentication condition, indicating that the comparison result indicates that the random matrix digest matches the sample random matrix digest; The second identity authentication condition indicates that the key similarity is greater than or equal to a preset similarity threshold.

8. A data encryption device based on terahertz wave detection signal, characterized in that: Applied to a target measurement device, the device comprises: A first acquisition module is used to acquire a terahertz wave detection signal of a target measurement device and a target timestamp corresponding to the terahertz wave detection signal, wherein the terahertz wave detection signal is obtained by detecting a target particle distribution label of the target measurement device based on the terahertz wave, and the target particle distribution label is provided with a plurality of randomly distributed particles, and the distribution results of the plurality of particles correspond to the target measurement device; An encryption module, used to perform an encryption operation on the message plaintext based on a device identification key to obtain a device fingerprint ciphertext, wherein the device identification key is obtained by performing data conversion on the terahertz wave detection signal; A device identification key auxiliary information obtaining module, used for processing the device identification key based on the target timestamp to obtain device identification key auxiliary information; a message ciphertext obtaining module, configured to perform data obfuscation on the device identification key auxiliary information, the device fingerprint ciphertext, and a random matrix digest based on a reversible data obfuscation function to obtain a message ciphertext, wherein the random matrix digest is determined based on a random matrix held by the target measurement device; and The sending module is used to send the message ciphertext to the information demand end.

9. A data decryption device based on terahertz wave detection signal, characterized in that: Applied to the information demand side, the device comprises: A second acquisition module, used to acquire a message ciphertext from a target measurement device, wherein the message ciphertext is determined based on the method according to any one of claims 1 to 4; A message ciphertext processing module, used to process the message ciphertext based on a preset inverse function to obtain device identification key auxiliary information, device fingerprint ciphertext and random matrix summary, wherein the preset inverse function is an inverse function of the data obfuscation function; A device identification key obtaining module, used to process the device identification key auxiliary information based on a target timestamp corresponding to the message ciphertext to obtain a device identification key; an identity authentication module, used to perform identity authentication based on the random matrix digest and the sample random matrix digest to obtain an identity authentication result; and The decryption module is used to decrypt the device fingerprint ciphertext based on the device identification key in response to the identity authentication result indicating that the authentication is passed, so as to obtain a message plaintext.

10. A communication system, characterized in that: include: Target measurement equipment, including: a target particle distribution tag, wherein the target particle distribution tag is provided with a plurality of randomly distributed particles, the distribution results of the plurality of particles correspond to the target measurement device, and the target particle distribution tag is configured to generate a terahertz wave detection signal in response to a terahertz wave scan; The data encryption device based on terahertz wave detection signal as claimed in claim 8; An information demand side is connected to the target measurement device in communication, and the information demand side includes: The data decryption device based on terahertz wave detection signal as claimed in claim 9.

Images