LBS information retrieval method based on NTRU algorithm and inadvertent transmission in zero trust environment

Abstract

The application discloses a kind of LBS information retrieval methods based on NTRU algorithm and inadvertent transmission under zero trust environment, comprising: server divides target area into several blocks and distributes corresponding index;Server packs all point of interest data of each block as dataset, generates encryption key pair data set by symmetric encryption algorithm, and is stored to roadside unit by the way of inadvertent transmission after encryption;Target vehicle generates private key and public key by NTRU algorithm;Target vehicle obtains corresponding dataset ciphertext from roadside unit according to the index of required query;Target vehicle sends to server by the way of inadvertent transmission after index is disassembled and public key encryption;Server calculates response ciphertext by ciphertext data and returns to target vehicle;Target vehicle calculates symmetric key of encryption key by private key and response ciphertext to decrypt dataset ciphertext and obtain corresponding point of interest data plaintext.The application effectively balances user privacy demand and LBS service quality.

Description

Technical Field

[0001] This invention relates to the field of location privacy-preserving LBS information retrieval, specifically to an LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment. Background Technology

[0002] The development of Location Based Services (LBS) stems from the increasing demand for location information. With the widespread adoption of mobile internet and smart devices, users' need for location-related information such as their surroundings and real-time dynamics is growing daily.

[0003] With the development of mobile internet technology, smartphones, tablets, and other mobile devices have rapidly become widespread, allowing people to access the internet anytime, anywhere. This has drastically changed the way people obtain information and services. Mobile devices have built-in positioning modules such as GPS, Bluetooth, and Wi-Fi, enabling them to obtain users' location information in real time. This has laid the foundation for the development of Location-Based Information Retrieval Systems (LBS), making it possible to provide personalized, real-time information services based on user location.

[0004] Currently, various location-based applications are emerging. These include map navigation, nearby business searches, and real-time traffic information queries, all of which require accurate location information. These location-aware applications are gradually becoming an indispensable part of people's daily lives. At the same time, massive amounts of location data are constantly being generated and accumulated. This data contains valuable information such as users' behavioral trajectories and interests, becoming an important resource in the era of big data. LBS information retrieval systems can extract users' location-related needs and preferences from this big data, thereby providing users with more personalized and intelligent information services.

[0005] However, the acquisition and utilization of user location information by LBS information retrieval systems also brings new challenges to user privacy and security. If user location information is leaked or misused, it will seriously infringe on personal privacy. To address this challenge, location privacy protection technologies have emerged. Common location privacy protection technologies include anonymization and perturbation. Anonymization protects privacy by hiding the user's real identity, but if attackers have enough background information, they may still be able to re-identify the user through correlation analysis, and anonymization also reduces data availability and service quality. Perturbation techniques blur the user's true location information by introducing noise or random errors, but this reduces the accuracy of location data, thus affecting the performance of LBS services, and excessive perturbation may also cause the service to fail.

[0006] Therefore, designing a method that can effectively balance user privacy needs and LBS service quality is an urgent technical problem that needs to be solved. Summary of the Invention

[0007] To address the shortcomings of the existing technologies, the technical problem to be solved by this invention is: how to provide an LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment. By combining NTRU encryption with unintentional transmission protocol, the method ensures that location information is effectively protected during transmission and retrieval without significantly affecting LBS services, thereby effectively balancing user privacy needs and LBS service quality.

[0008] To solve the above-mentioned technical problems, the present invention adopts the following technical solution:

[0009] LBS information retrieval methods based on the NTRU algorithm and unintentional transmission in a zero-trust environment include:

[0010] S1: The server divides the target area into several blocks and assigns a corresponding index to each block;

[0011] S2: The server packages all the points of interest data in each block into a dataset, generates an encryption key using a symmetric encryption algorithm to encrypt the dataset, and then stores the encrypted dataset ciphertext in the roadside unit through unintentional transmission.

[0012] S3: The target vehicle generates a private key and a public key using the NTRU algorithm;

[0013] S4: The target vehicle retrieves the corresponding encrypted dataset from the roadside cell according to the index queried as needed;

[0014] S5: After the target vehicle disassembles the index and encrypts it with the public key, it sends the ciphertext data to the server in an unintentional transmission.

[0015] S6: The server calculates the response ciphertext using the ciphertext data and returns it to the target vehicle;

[0016] S7: The target vehicle uses its private key and the response ciphertext to calculate the symmetric key of the encryption key to decrypt the dataset ciphertext and obtain the corresponding point of interest data plaintext.

[0017] Preferably, in step S1, the target area is divided into n blocks, and a corresponding index value i is assigned to each block.

[0018] Preferably, in step S2, the specific processing steps of the server are as follows:

[0019] S101: For the block with index i, package all the point of interest data of that block into a dataset y. i ;

[0020] S102: Decompose index i into binary form to obtain the bit string {t0,t1,…,t}. l-1},in

[0021] S103: Randomly select two sets of numbers K 1 ,K -1 ∈Z p Z is the root key. p Represents the integer field;

[0022] The formula is expressed as:

[0023]

[0024] S104: Calculate the encryption key sk of the symmetric encryption algorithm by selecting a value from the root key based on the bit string at index i. AES ; where, if t i =0, then choose K. -1 The i-th value in t, if t j =1, then choose K. 1 The j-th value in;

[0025] The formula is expressed as:

[0026]

[0027] In the formula: Hash represents hash operation;

[0028] S105: Using encryption key sk AES For dataset y i Encryption is performed to generate ciphertext c of the dataset. i ;

[0029] The formula is expressed as:

[0030]

[0031] In the formula: Enc represents encryption processing;

[0032] S106: Encrypt the dataset c i It is stored in the roadside unit through unintentional transmission.

[0033] Preferably, in step S2, the server also obtains the public key sent by the target vehicle and uses the public key to verify the root key K. 1 K -1 After encryption, the root key ciphertext is stored.

[0034] Preferably, in step S3, the NTRU algorithm processing steps are as follows:

[0035] S301: Randomly select two polynomials f, g∈L g The polynomial f is invertible modulo p and modulo q, and its inverse is represented as Fi. q and F p That is: Fq*f≡1(modq) and Fp*f≡1(modp); where L g Indicates a ring;

[0036] S302: Calculate h≡Fq*g(mod q);

[0037] S303: Generate private key sk NTRU PK with public key ntru ;

[0038] The formula is expressed as:

[0039] sk NTRU =f;

[0040] pk ntru =h.

[0041] Preferably, in step S5, the specific processing steps for the target vehicle are as follows:

[0042] S501: Decompose the index i to be queried into binary form to obtain the bit string {t0,t1,…,t}. l-1};

[0043] S502: Using the public key to pair the bit string {t0,t1,…,t} l-1 The character t in} j Encryption is performed to generate character ciphertext.

[0044] S503: Encrypting characters through unintentional transmission Send to the server.

[0045] Preferably, in step S6, the specific processing steps of the server are as follows:

[0046] S601: Encrypting via character ciphertext Calculate the encrypted root key C j ;

[0047] The formula is expressed as:

[0048]

[0049] S602: Based on the encrypted root key C j Calculate the ciphertext of the response

[0050] The formula is expressed as:

[0051]

[0052] S603: Response ciphertext Return to the target vehicle.

[0053] Preferably, in step S7, the specific processing steps for the target vehicle are as follows:

[0054] S701: By responding to ciphertext and private key sk NTRU Calculate the symmetric key sk of the encryption key AES ;

[0055] The formula is expressed as:

[0056]

[0057] In the formula: Hash represents hash operation; Dec represents decryption processing;

[0058] S702: via symmetric key sk AES Decrypt and restore the ciphertext of the dataset c i Obtain the corresponding plaintext data m of the points of interest. i ;

[0059] The formula is expressed as:

[0060]

[0061] Compared with existing technologies, the LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment presented in this invention has the following advantages:

[0062] This invention divides the target area into multiple blocks on the server and assigns a corresponding index to each block. Then, all point-of-interest (POI) data from each block is packaged into a dataset, which is finally encrypted. First, by dividing the target area into multiple blocks and assigning an index to each block, the direct exposure of the user's precise location information can be effectively avoided. Even if an attacker intercepts the data, they cannot directly pinpoint the user's exact location; they can only know that the user is located within a certain block, thus increasing the layer of protection for user location privacy. Second, packaging and encrypting the PPO data for each block ensures data security. Even if the data is intercepted during transmission or storage, it cannot be decrypted without the correct key, preventing the leakage of sensitive information. Finally, the partitioning and indexing mechanism makes the data organization more orderly, facilitating management and querying. Compared to complete anonymization and excessive perturbation, this method protects user privacy while preserving data accuracy and availability, ensuring that LBS services can provide high-quality location information services.

[0063] In this invention, the target vehicle generates a private key and a public key using the NTRU algorithm, and then uses these keys for subsequent encryption, symmetric key generation, and decryption. First, the NTRU algorithm is a lattice-based public-key encryption algorithm with a short key length and fast encryption / decryption speed. Therefore, the NTRU algorithm can reduce computational resource consumption and accelerate key generation and encryption / decryption processes while ensuring security, thereby improving the efficiency of LBS information retrieval. Second, compared with traditional public-key encryption algorithms, the NTRU algorithm maintains high security even in a quantum computing environment, protecting user location information even with future improvements in computing power. Finally, the NTRU algorithm's public and private keys are scalable, allowing NTRU to adapt to various security requirements and application scenarios.

[0064] This invention, based on the use of the NTRU algorithm to generate public-private key pairs, further transmits data through a stealth transmission method. First, the stealth transmission protocol allows users to selectively retrieve specific information from a set of data without revealing their choices, ensuring privacy and security during data transmission and preventing information leakage. Second, even if the transmission is monitored or intercepted, attackers will find it difficult to deduce the user's true intentions or choices from the transmitted data, further enhancing data security. Finally, by combining NTRU encryption with the stealth transmission protocol, location information is effectively protected during transmission and retrieval without significantly impacting LBS services, thus effectively balancing user privacy needs and LBS service quality.

[0065] In this invention, the server generates an encryption key using a symmetric encryption algorithm to encrypt the dataset, and the vehicle decrypts the dataset ciphertext by calculating the symmetric key of the encryption key using its private key and the response ciphertext. Firstly, symmetric encryption algorithms typically have fast encryption and decryption speeds, making them suitable for rapid encryption and decryption of large amounts of data, thus improving the response speed and user experience of LBS services. Secondly, data encrypted using symmetric encryption algorithms is virtually unbreakable without the correct key, ensuring data confidentiality and preventing unauthorized access and data leakage. Finally, compared to public-key encryption algorithms, symmetric encryption algorithms require only one key for encryption and decryption, simplifying key management; furthermore, the shorter key facilitates secure transmission during communication. Attached Figure Description

[0066] To make the objectives, technical solutions, and advantages of the invention clearer, the invention will now be described in further detail with reference to the accompanying drawings, wherein:

[0067] Figure 1 , Figure 2 , Figure 3A flowchart of an LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment;

[0068] Figure 4 This is a schematic diagram of the block division. Detailed Implementation

[0069] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but only to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0070] The following detailed explanation illustrates the specific implementation methods:

[0071] Example:

[0072] This embodiment discloses an LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment.

[0073] like Figure 1 As shown, the LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment includes:

[0074] S1: The server divides the target area into several blocks and assigns a corresponding index to each block;

[0075] S2: The server packages all the points of interest data in each block into a dataset, generates an encryption key using a symmetric encryption algorithm to encrypt the dataset, and then stores the encrypted dataset ciphertext in the roadside unit through unintentional transmission.

[0076] In this embodiment, the Oblivious Transfer (OT), also known as forgetful transfer or haphazard transfer, is a cryptographic protocol that allows a sender to send a portion of a message set to a receiver without the sender knowing which message the receiver has specifically selected.

[0077] S3: The target vehicle generates a private key and a public key using the NTRU algorithm;

[0078] S4: The target vehicle retrieves the corresponding encrypted dataset from the roadside cell according to the index queried as needed;

[0079] S5: After the target vehicle disassembles the index and encrypts it with the public key, it sends the ciphertext data to the server in an unintentional transmission.

[0080] S6: The server calculates the response ciphertext using the ciphertext data and returns it to the target vehicle;

[0081] S7: The target vehicle uses its private key and the response ciphertext to calculate the symmetric key of the encryption key to decrypt the dataset ciphertext and obtain the corresponding point of interest data plaintext.

[0082] This invention divides the target area into multiple blocks on the server and assigns a corresponding index to each block. Then, all point-of-interest (POI) data from each block is packaged into a dataset, which is finally encrypted. First, by dividing the target area into multiple blocks and assigning an index to each block, the direct exposure of the user's precise location information can be effectively avoided. Even if an attacker intercepts the data, they cannot directly pinpoint the user's exact location; they can only know that the user is located within a certain block, thus increasing the layer of protection for user location privacy. Second, packaging and encrypting the PPO data for each block ensures data security. Even if the data is intercepted during transmission or storage, it cannot be decrypted without the correct key, preventing the leakage of sensitive information. Finally, the partitioning and indexing mechanism makes the data organization more orderly, facilitating management and querying. Compared to complete anonymization and excessive perturbation, this method protects user privacy while preserving data accuracy and availability, ensuring that LBS services can provide high-quality location information services.

[0083] In this invention, the target vehicle generates a private key and a public key using the NTRU algorithm, and then uses these keys for subsequent encryption, symmetric key generation, and decryption. First, the NTRU algorithm is a lattice-based public-key encryption algorithm with a short key length and fast encryption / decryption speed. Therefore, the NTRU algorithm can reduce computational resource consumption and accelerate key generation and encryption / decryption processes while ensuring security, thereby improving the efficiency of LBS information retrieval. Second, compared with traditional public-key encryption algorithms, the NTRU algorithm maintains high security even in a quantum computing environment, protecting user location information even with future improvements in computing power. Finally, the NTRU algorithm's public and private keys are scalable, allowing NTRU to adapt to various security requirements and application scenarios.

[0084] This invention, based on the use of the NTRU algorithm to generate public-private key pairs, further transmits data through a stealth transmission method. First, the stealth transmission protocol allows users to selectively retrieve specific information from a set of data without revealing their choices, ensuring privacy and security during data transmission and preventing information leakage. Second, even if the transmission is monitored or intercepted, attackers will find it difficult to deduce the user's true intentions or choices from the transmitted data, further enhancing data security. Finally, by combining NTRU encryption with the stealth transmission protocol, location information is effectively protected during transmission and retrieval without significantly impacting LBS services, thus effectively balancing user privacy needs and LBS service quality.

[0085] In this invention, the server generates an encryption key using a symmetric encryption algorithm to encrypt the dataset, and the vehicle decrypts the dataset ciphertext by calculating the symmetric key of the encryption key using its private key and the response ciphertext. Firstly, symmetric encryption algorithms typically have fast encryption and decryption speeds, making them suitable for rapid encryption and decryption of large amounts of data, thus improving the response speed and user experience of LBS services. Secondly, data encrypted using symmetric encryption algorithms is virtually unbreakable without the correct key, ensuring data confidentiality and preventing unauthorized access and data leakage. Finally, compared to public-key encryption algorithms, symmetric encryption algorithms require only one key for encryption and decryption, simplifying key management; furthermore, the shorter key facilitates secure transmission during communication.

[0086] To better illustrate the technical solution of the present invention, this embodiment is described in the following parts.

[0087] I. Block Division

[0088] In this embodiment, as Figure 4 As shown, the target area (geographic space) is divided into n blocks according to the actual needs of the user, and each block is assigned a corresponding index value i, 0≤i≤n; where n=2 l , l is an integer.

[0089] II. Data Encryption and Storage

[0090] In this embodiment, combined with Figure 2 As shown, the specific processing steps of the server are as follows:

[0091] S101: For the block with index i, package all the point of interest data of that block into a dataset y. i ;

[0092] S102: Decompose index i into binary form to obtain the bit string {t0,t1,…,t}. l-1},in

[0093] S103: Randomly select two sets of numbers K 1 ,K -1 ∈Z p Z is the root key. p Represents the integer field;

[0094] The formula is expressed as:

[0095]

[0096] S104: Calculate the encryption key sk of the symmetric encryption algorithm (AES encryption algorithm) by selecting a value from the root key based on the bit string at index i. AES ; where, if t i =0, then choose K. -1 The i-th value in t, if t j =1, then choose K. 1 The j-th value in;

[0097] The formula is expressed as:

[0098]

[0099] In the formula: Hash represents hash operation;

[0100] S105: Using encryption key sk AES For dataset y i Encryption is performed to generate ciphertext c of the dataset. i ;

[0101] The formula is expressed as:

[0102]

[0103] In the formula: Enc represents encryption processing;

[0104] S106: Encrypt the dataset c i It is stored in the roadside unit through unintentional transmission.

[0105] Specifically, the server also obtains the public key sent by the target vehicle and uses it to verify the root key K. 1 K -1 After encryption, the root key ciphertext is stored. This enhances key security. If multiple vehicles exist, a separate root key ciphertext is generated for each vehicle.

[0106] III. NTRU Algorithm

[0107] In this embodiment, the processing steps of the NTRU algorithm are as follows:

[0108] S301: Randomly select two polynomials f, g∈L g The polynomial f is invertible modulo p and modulo q, and its inverse is represented as Fi. q and F p That is: Fq*f≡1(modq) and Fp*f≡1(modp); where L g Indicates a ring;

[0109] S302: Calculate h≡Fq*g(mod q);

[0110] S303: Generate private key sk NTRU PK with public key ntru ;

[0111] The formula is expressed as:

[0112] sk NTRU =f;

[0113] pk ntru =h.

[0114] IV. Response Ciphertext Generation

[0115] In this embodiment, combined with Figure 3 As shown, the specific processing steps for the target vehicle are as follows:

[0116] S501: Decompose the index i to be queried into binary form to obtain the bit string {t0,t1,…,t}. l-1};

[0117] S502: Using the public key to pair the bit string {t0,t1,…,t} l-1 The character t in} j Encryption is performed using the formula 0≤j≤l-1 to generate character ciphertext. Where 0 ≤ j ≤ l-1;

[0118] S503: Encrypting characters through unintentional transmission Send to the server.

[0119] In this embodiment, combined with Figure 3 As shown, the specific processing steps of the server are as follows:

[0120] S601: Encrypting via character ciphertext Calculate the root key C after NTRU encryption. j ;

[0121] The formula is expressed as:

[0122]

[0123] S602: Based on the encrypted root key C j Calculate the ciphertext of the response

[0124] The formula is expressed as:

[0125]

[0126] S603: Response ciphertext Return to the target vehicle.

[0127] IV. Data Decryption

[0128] In this embodiment, combined with Figure 3 As shown, the specific processing steps for the target vehicle are as follows:

[0129] S701: By responding to ciphertext and private key sk NTRU Calculate the symmetric key sk of the encryption key AES ;

[0130] The formula is expressed as:

[0131]

[0132] In the formula: Hash represents hash operation; Dec represents decryption processing;

[0133] S702: via symmetric key sk AES Decrypt and restore the ciphertext of the dataset c i Obtain the corresponding plaintext data m of the points of interest. i ;

[0134] The formula is expressed as:

[0135] The plaintext data of the points of interest here is m i With dataset y i They are essentially the same.

[0136] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit the technical solutions. Those skilled in the art should understand that any modifications or equivalent substitutions to the technical solutions of the present invention without departing from the spirit and scope of the present invention should be covered within the scope of the claims of the present invention.

Claims

1. A method for retrieving LBS information based on the NTRU algorithm and unintentional transmission in a zero-trust environment, characterized in that, include: S1: The server divides the target area into several blocks and assigns a corresponding index to each block; LBS stands for Location-Based Search; S2: The server packages all the points of interest data in each block into a dataset, generates an encryption key using a symmetric encryption algorithm to encrypt the dataset, and then stores the encrypted dataset ciphertext in the roadside unit through unintentional transmission. In step S2, the specific processing steps of the server are as follows: S101: For index is The block, and all the points of interest data in that block are packaged into a dataset. ; S102: Index Binary decomposition yields the bit string. ,in ; S103: Randomly select two sets of numbers As the root key, Represents the integer field; The formula is expressed as: ； ； S104: According to the index The bit string is used to select values ​​from the root key to calculate the encryption key for the symmetric encryption algorithm. Among them, if Then choose The first in Bit value, if Then choose The first in Bit value; The formula is expressed as: ； In the formula: This represents a hash operation; S105: Via encryption key For dataset Encryption is performed to generate ciphertext of the dataset. ; The formula is expressed as: ； In the formula: Indicates encryption processing; S106: Conceal the dataset Stored in roadside units through unintentional transmission; S3: The target vehicle generates a private key and a public key using the NTRU algorithm; S4: The target vehicle retrieves the corresponding encrypted dataset from the roadside cell according to the index queried as needed; S5: After the target vehicle disassembles the index and encrypts it with the public key, it sends the ciphertext data to the server in an unintentional transmission. S6: The server calculates the response ciphertext using the ciphertext data and returns it to the target vehicle; S7: The target vehicle uses its private key and the response ciphertext to calculate the symmetric key of the encryption key to decrypt the dataset ciphertext and obtain the corresponding point of interest data plaintext.

2. The LBS information retrieval method based on NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 1, characterized in that: In step S1, the target area is divided into Each block is assigned a corresponding index value. .

3. The LBS information retrieval method based on NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 1, characterized in that: In step S2, the server also obtains the public key sent by the target vehicle and uses the public key to verify the root key. After encryption, the root key ciphertext is stored.

4. The LBS information retrieval method based on NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 1, characterized in that: In step S3, the NTRU algorithm performs the following steps: S301: Randomly select two polynomials ;wherein polynomial In the model Below and mold All of the following are invertible, and their inverses are represented as follows: and ,Right now: ;in Indicates a ring; S302: Calculation ; S303: Generate private key and public key ; The formula is expressed as: ； 。 5. The LBS information retrieval method based on NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 1, characterized in that: In step S5, the specific processing steps for the target vehicle are as follows: S501: Index to be queried Binary decomposition yields the bit string. ; S502: Bit string via public key characters in Encryption is performed to generate character ciphertext. ; S503: Encrypting characters through unintentional transmission Send to the server.

6. The LBS information retrieval method based on the NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 5, characterized in that: In step S6, the specific processing steps of the server are as follows: S601: Encrypting via character ciphertext Calculate the encrypted root key ; The formula is expressed as: ； S602: Based on the encrypted root key Calculate the ciphertext of the response ; The formula is expressed as: ； S603: Response ciphertext Return to the target vehicle.

7. The LBS information retrieval method based on NTRU algorithm and unintentional transmission in a zero-trust environment as described in claim 6, characterized in that: In step S7, the specific processing steps for the target vehicle are as follows: S701: By responding to ciphertext and private key Calculate the symmetric key for the encryption key ; The formula is expressed as: ； In the formula: This represents a hash operation; Indicates decryption processing; S702: via symmetric key Decrypt and restore the ciphertext of the dataset Obtain the corresponding plaintext data of points of interest. ; The formula is expressed as: 。

Images