A true random number generation method and system based on the time difference between Beidou clock and communication clock

Abstract

The present invention discloses a true random number generation method and system based on the time difference between Beidou clock and communication clock, which relates to the technical field of time difference measurement, including: performing difference operation according to Beidou clock high-precision time and operating device clock time, obtaining clock timestamp deviation value, and establishing virtual simulation space-time information model mapping to generate random number initial seed; encrypting and converting the random number initial seed by connecting one-way hash function in series to obtain random hash value; determining the safety threshold of random hash value; establishing observable period verification model for random hash value, analyzing observable period change trend of random hash value, evaluating the exhaustive response risk capability of random hash value; judging whether the exhaustive response risk of random hash value meets the safety threshold of random hash value, if so, generating random number, if not, regenerating random hash value. The advantages of the present invention are: being able to prevent random number from being brute-forced and enhancing system security.

Description

Technical Field

[0001] The present invention relates to the technical field of time difference measurement, and in particular to a method and system for generating true random numbers based on the time difference between a Beidou clock and a communication clock. Background Art

[0002] Random numbers are those values ​​generated within a specific range, and there is no obvious pattern or predictability in the order and specific values ​​of their occurrence. Each value has the same chance of appearing when generated, and is usually used in applications such as simulating random events, performing statistical analysis, encrypting data, and generating random samples. Random numbers can be completely random (true random numbers) or pseudo-random numbers generated by algorithms.

[0003] The more common method of existing random number generation is to use the timestamp as a seed to generate the corresponding random number. Although the random numbers per unit time are in the billions, they can still be cracked through brute force on high-computing power devices, which poses a risk. Summary of the invention

[0004] In order to solve the above technical problems, a true random number generation method and system based on the time difference between the Beidou clock and the communication clock are provided. The technical solution solves the problem that the more common way of the above-mentioned existing random number generation method is to use the timestamp as a seed to generate the corresponding random number. Although the random numbers per unit time are in the billions, they can still be cracked by brute force on high computing power equipment, which poses a risk.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] A true random number generation method based on the time difference between a Beidou clock and a communication clock, comprising:

[0007] Based on the Beidou satellite clock and the built-in hardware clock of the operating device, obtain the Beidou clock high-precision time and the operating device clock time;

[0008] Perform difference operation based on the Beidou clock high-precision time and the operating device clock time to obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed;

[0009] Based on the random number initial seed, the random number initial seed is encrypted and converted by serially connecting a one-way hash function to obtain a random hash value;

[0010] Determine a safety threshold of the random hash value based on the application direction of the random hash value;

[0011] Establish an observable period verification model for random hash values, analyze the observable period change trend of random hash values, and evaluate the exhaustive risk response capability of random hash values;

[0012] Determine whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, generate a random number; if not, regenerate the random hash value.

[0013] Preferably, performing difference operation according to the Beidou clock high-precision time and the operating device clock time to obtain the clock timestamp deviation value, and establishing a virtual simulation space-time information model mapping to generate a random number initial seed specifically includes:

[0014] Based on the high-precision time of the Beidou clock of the Beidou satellite as the time axis, the real-time position information of the Beidou satellite is used as the spatial coordinate to construct a three-dimensional space framework; the position information of the Beidou satellite includes: longitude and latitude, altitude;

[0015] Based on the timing protocol of the Beidou satellite and the timing protocol of the operating device, the high-precision time of the Beidou clock is obtained and the difference between the clock time of the operating device is calculated to obtain the clock timestamp deviation value;

[0016] Standardize the clock timestamp deviation value;

[0017] Add the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device to the three-dimensional space framework to obtain a virtual simulation space-time information model;

[0018] Based on the virtual simulation space-time information model, the dynamic clock timestamp deviation value is obtained, and the dynamic clock timestamp deviation value is mapped and transformed through multiple functions to generate a random number initial seed;

[0019] The generating of the random number initial seed specifically includes:

[0020] ;

[0021] In the formula, is the initial random number seed, is the normalized clock timestamp deviation value, max() is the maximum value function, min() is the minimum value function, is the original clock timestamp deviation value sequence, is a multinomial function, , , , are coefficients of polynomial functions, is the mapping parameter, is the clock timestamp deviation value at the n+1th iteration, m is the highest degree of the polynomial, n is the chaos starting index, and combine() is the seed combination function.

[0022] Preferably, based on the random number initial seed, the random number initial seed is encrypted and converted by serially connecting a one-way hash function to obtain a random hash value, specifically comprising:

[0023] Get the initial random number seeds for several time units and combine them into an array of initial random number seeds ;in, For the A random number initial seed, is the total number of random number initial seeds;

[0024] Use a one-way hash function based on the corresponding number of random number initial seed arrays to hash and obtain the initial random hash value array ;in, For the An initial random hash value, is the total number of initial random hash values;

[0025] Based on the initial random hash value array, concatenate each initial random hash value according to the time index according to the binary bytes to obtain an initial random concatenated hash;

[0026] Substitute the initial random concatenated hash into a one-way hash function and output a random hash value.

[0027] Preferably, establishing an observable period verification model for random hash values, analyzing the observable period change trend of random hash values, and evaluating the exhaustive risk response capability of random hash values ​​specifically include:

[0028] Based on the application direction of the application operation device of the random hash value, the known brute force exhaustive supply method is determined and combined into a brute force exhaustive attack action verification library;

[0029] Get several random hash values ​​per unit time and the scatter plot of random hash value distribution of components;

[0030] Based on reinforcement learning neural network, a random hash value resistance analysis model is constructed;

[0031] Based on the random hash value distribution scatter plot, the random hash value resistance analysis model is substituted, the total generation time of the random hash value is used as the observation window, the brute force attack action verification library is used as the input, and the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot is used as the output;

[0032] Assign a weight to each random hash value according to the anti-exhaustiveness of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram;

[0033] Based on the anti-exhaustiveness index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram, a linear mapping is performed to obtain the anti-exhaustiveness index vector matrix of the random hash value;

[0034] According to each element in the anti-exhaustiveness capability indicator vector matrix of the random hash value and each random hash value weight, the exhaustive risk response capability of the random hash value is calculated;

[0035] The exhaustive risk response capability of the random hash value is specifically:

[0036] ;

[0037] In the formula, For the The exhaustive risk response capability of random hash values, is the anti-exhaustiveness index of the kth random hash value, is the weight of the kth random hash value.

[0038] Furthermore, a true random number generation system based on the time difference between the Beidou clock and the communication clock is proposed, which is used to implement the true random number generation method based on the time difference between the Beidou clock and the communication clock as described above, including:

[0039] Data acquisition module: The data acquisition module is used to obtain the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite clock and the built-in hardware clock of the operating device;

[0040] A seed generation module, which is electrically connected to the data acquisition module. The seed generation module is used to perform difference operation according to the Beidou clock high-precision time and the operating device clock time, obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed;

[0041] A random hash value module is electrically connected to the seed generation module, and based on the random number initial seed, the random number initial seed is encrypted and converted by a series one-way hash function to obtain a random hash value;

[0042] A threshold module, the threshold module is used to determine a security threshold of the random hash value based on an application direction of the random hash value;

[0043] A risk assessment module, the risk assessment module is electrically connected to the random hash value module, and the risk assessment module is used to establish an observable period verification model for the random hash value, analyze the observable period change trend of the random hash value, and evaluate the exhaustive risk response capability of the random hash value;

[0044] The judgment module is electrically connected to the risk assessment module and the threshold module. The judgment module is used to judge whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, a random number is generated; if not, a random hash value is regenerated.

[0045] Optionally, the seed generation module includes:

[0046] The framework unit uses the high-precision time of the Beidou satellite clock as the time axis and the real-time Beidou satellite position information as the spatial coordinates to construct a three-dimensional space framework;

[0047] The deviation calculation unit obtains the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite timing protocol and the operating device timing protocol, performs difference calculation, and obtains the clock timestamp deviation value;

[0048] A standardization unit, which performs standardization processing on the clock timestamp deviation value;

[0049] The virtual simulation model unit adds the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device into the three-dimensional space framework to obtain a virtual simulation space-time information model;

[0050] The seed generation unit obtains the dynamic clock timestamp deviation value based on the virtual simulation space-time information model, maps and transforms the dynamic clock timestamp deviation value through multiple functions, and generates a random number initial seed.

[0051] Optionally, the random hash value module includes:

[0052] The random seed array unit obtains the initial random number seeds under a number of unit times and combines them into a random number initial seed array;

[0053] The random hash array unit performs hashing using a one-way hash function based on a corresponding number of the random number initial seed array to obtain an initial random hash value array;

[0054] A serial hash unit, based on the initial random hash value array, serializes each initial random hash value according to the time index according to the binary bytes to obtain an initial random serial hash;

[0055] The random hash value unit substitutes the initial random series hash into the one-way hash function and outputs a random hash value.

[0056] Optionally, the risk assessment module includes:

[0057] The verification library unit determines the known brute force exhaustive supply method based on the application direction of the application operation device of the random hash value, and combines them into a brute force exhaustive attack action verification library;

[0058] Scatter plot unit, obtains several random hash values ​​per unit time, and generates a scatter plot of random hash value distribution;

[0059] The model building unit builds a random hash value resistance analysis model based on the reinforcement learning neural network;

[0060] The model verification unit substitutes the random hash value distribution scatter plot into the random hash value resistance analysis model, takes the total generation time of the random hash value as the observation window, takes the brute force exhaustive attack action verification library as input, and verifies the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot as output;

[0061] A weighting unit assigns a weight to each random hash value according to the anti-exhaustiveness capability of the random hash value corresponding to each scattered point in the random hash value distribution scatter diagram;

[0062] A mapping vector unit performs linear mapping based on the anti-exhaustiveness capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram to obtain an anti-exhaustiveness capability index vector matrix of the random hash value;

[0063] The risk capability calculation unit calculates the exhaustive risk response capability of the random hash value according to each element in the anti-exhaustive capability indicator vector matrix of the random hash value and each random hash value weight.

[0064] Compared with the prior art, the present invention has the following beneficial effects:

[0065] The present invention proposes a true random number generation scheme based on the time difference between the Beidou clock and the communication clock. By comparing the time difference between the Beidou satellite high-precision time and the built-in hardware clock of the operating device, the clock deviation value is calculated, and the clock deviation value is used as the initial seed for random number generation to establish a virtual simulation space-time information model mapping. Subsequently, the initial seed is encrypted and converted by a one-way hash function to generate an unpredictable random hash value, and the ability of the random hash value to cope with the risk of violent exhaustion is analyzed to select and generate random numbers. The present invention has the advantages of being able to prevent random numbers from being violently exhausted and enhancing system security. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] Figure 1 It is a flow chart of a method for generating true random numbers based on the time difference between the Beidou clock and the communication clock;

[0067] Figure 2 A flow chart of a method for generating random number initial seeds for establishing virtual simulation space-time information model mapping;

[0068] Figure 3 A flow chart of a method for generating a random hash value;

[0069] Figure 4 A flow chart of the exhaustive risk response method for evaluating random hash values;

[0070] Figure 5 This is a framework diagram of a true random number generation system based on the time difference between the Beidou clock and the communication clock. DETAILED DESCRIPTION

[0071] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0072] Reference Figure 1 As shown, a true random number generation method based on the time difference between a Beidou clock and a communication clock includes:

[0073] Based on the Beidou satellite clock and the built-in hardware clock of the operating device, obtain the Beidou clock high-precision time and the operating device clock time;

[0074] Perform difference operation based on the Beidou clock high-precision time and the operating device clock time to obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed;

[0075] Based on the random number initial seed, the random number initial seed is encrypted and converted by serially connecting a one-way hash function to obtain a random hash value;

[0076] Determine a safety threshold of the random hash value based on the application direction of the random hash value;

[0077] Establish an observable period verification model for random hash values, analyze the observable period change trend of random hash values, and evaluate the exhaustive risk response capability of random hash values;

[0078] Determine whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, generate a random number; if not, regenerate the random hash value.

[0079] This scheme calculates the clock deviation value by comparing the time difference between the Beidou satellite high-precision time and the built-in hardware clock of the operating device, and uses the clock deviation value as the initial seed for random number generation to establish a virtual simulation space-time information model mapping. Subsequently, the initial seed is encrypted and converted through a one-way hash function to generate an unpredictable random hash value, and the random hash value is analyzed for its ability to cope with the risk of violent exhaustion, and a random number is generated. The advantages of the present invention are: it can prevent random numbers from being violently exhausted, and enhance system security.

[0080] Reference Figure 2As shown, the difference operation is performed according to the Beidou clock high-precision time and the operating device clock time to obtain the clock timestamp deviation value, and a virtual simulation space-time information model is established to map and generate a random number initial seed, which specifically includes:

[0081] Based on the high-precision time of the Beidou clock of the Beidou satellite as the time axis, the real-time position information of the Beidou satellite is used as the spatial coordinate to construct a three-dimensional space framework; the position information of the Beidou satellite includes: longitude and latitude, altitude;

[0082] Based on the timing protocol of the Beidou satellite and the timing protocol of the operating device, the high-precision time of the Beidou clock is obtained and the difference between the clock time of the operating device is calculated to obtain the clock timestamp deviation value;

[0083] Standardize the clock timestamp deviation value;

[0084] Add the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device to the three-dimensional space framework to obtain a virtual simulation space-time information model;

[0085] Based on the virtual simulation space-time information model, the dynamic clock timestamp deviation value is obtained, and the dynamic clock timestamp deviation value is mapped and transformed through multiple functions to generate a random number initial seed;

[0086] The generating of the random number initial seed specifically includes:

[0087] ;

[0088] In the formula, is the initial random number seed, is the normalized clock timestamp deviation value, max() is the maximum value function, min() is the minimum value function, is the original clock timestamp deviation value sequence, is a multinomial function, , , , are coefficients of polynomial functions, is the mapping parameter, is the clock timestamp deviation value at the n+1th iteration, m is the highest degree of the polynomial, n is the chaos starting index, and combine() is the seed combination function.

[0089] The solution uses the high-precision time of Beidou satellites as a benchmark, integrates the satellite's spatial position information to build a three-dimensional space framework, and embeds the time deviation information into the three-dimensional space framework by calculating the difference between the Beidou clock and the operating device clock and standardizing it, forming a virtual simulation space-time information model with space-time deviation characteristics. Finally, through multiple functions, the clock timestamp deviation value changes are dynamically tracked to achieve a random number initial seed generation strategy based on space-time information.

[0090] It should be noted that the virtual simulation spatiotemporal information model described in this solution is a simulation modeling model, not a machine learning model.

[0091] Reference Figure 3 As shown, based on the random number initial seed, the random number initial seed is encrypted and converted by connecting a one-way hash function in series to obtain a random hash value, specifically including:

[0092] Get the initial random number seeds for several time units and combine them into an array of initial random number seeds ;in, For the A random number initial seed, is the total number of random number initial seeds;

[0093] Use a one-way hash function based on the corresponding number of random number initial seed arrays to hash and obtain the initial random hash value array ;in, For the An initial random hash value, is the total number of initial random hash values;

[0094] Based on the initial random hash value array, concatenate each initial random hash value according to the time index according to the binary bytes to obtain an initial random concatenated hash;

[0095] Substitute the initial random concatenated hash into a one-way hash function and output a random hash value.

[0096] It can be understood that by obtaining a random number as the initial seed at each unit time and combining them into an array, each seed is then subjected to a one-way hash process to generate an initial hash array, and then the hashed binary bytes are concatenated in chronological order, and finally the concatenation result is hashed again, thereby generating a final random hash value with time sensitivity and high security.

[0097] Reference Figure 4 As shown in the figure, an observable period verification model is established for random hash values, the observable period change trend of random hash values ​​is analyzed, and the exhaustive risk response capability of random hash values ​​is evaluated, which specifically includes:

[0098] Based on the application direction of the application operation device of the random hash value, the known brute force exhaustive supply method is determined and combined into a brute force exhaustive attack action verification library;

[0099] Get several random hash values ​​per unit time and the scatter plot of random hash value distribution of components;

[0100] Based on reinforcement learning neural network, a random hash value resistance analysis model is constructed;

[0101] Based on the random hash value distribution scatter plot, the random hash value resistance analysis model is substituted, the total generation time of the random hash value is used as the observation window, the brute force attack action verification library is used as the input, and the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot is used as the output;

[0102] Assign a weight to each random hash value according to the anti-exhaustiveness of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram;

[0103] Based on the anti-exhaustiveness index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram, a linear mapping is performed to obtain the anti-exhaustiveness index vector matrix of the random hash value;

[0104] According to each element in the anti-exhaustiveness capability indicator vector matrix of the random hash value and each random hash value weight, the exhaustive risk response capability of the random hash value is calculated;

[0105] The exhaustive risk response capability of the random hash value is specifically:

[0106] ;

[0107] In the formula, For the The exhaustive risk response capability of random hash values, is the anti-exhaustiveness index of the kth random hash value, is the weight of the kth random hash value.

[0108] This solution collects random hash values ​​in a unit time and constructs a distribution scatter plot, uses a reinforcement learning neural network to build a resistance analysis model to evaluate the anti-exhaustiveness of each random hash value, and uses the brute force exhaustive attack action verification library as input. The model outputs the anti-exhaustiveness index of each random hash value, and assigns a weight to each random hash value accordingly. A linear mapping is used to form an anti-exhaustiveness index vector matrix, and the overall exhaustive risk response capability is calculated in combination with the weights. This solution improves the security of application operation devices based on random hash values, and reduces the risk of the system being attacked by brute force exhaustive attacks by accurately evaluating and optimizing the anti-exhaustiveness of random hash values.

[0109] Reference Figure 5 As shown, a true random number generation system based on the time difference between a Beidou clock and a communication clock includes:

[0110] Data acquisition module: The data acquisition module is used to obtain the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite clock and the built-in hardware clock of the operating device;

[0111] A seed generation module, which is electrically connected to the data acquisition module. The seed generation module is used to perform difference operation according to the Beidou clock high-precision time and the operating device clock time, obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed;

[0112] A random hash value module is electrically connected to the seed generation module, and based on the random number initial seed, the random number initial seed is encrypted and converted by a series one-way hash function to obtain a random hash value;

[0113] A threshold module, the threshold module is used to determine a security threshold of the random hash value based on an application direction of the random hash value;

[0114] A risk assessment module, the risk assessment module is electrically connected to the random hash value module, and the risk assessment module is used to establish an observable period verification model for the random hash value, analyze the observable period change trend of the random hash value, and evaluate the exhaustive risk response capability of the random hash value;

[0115] The judgment module is electrically connected to the risk assessment module and the threshold module. The judgment module is used to judge whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, a random number is generated; if not, a random hash value is regenerated.

[0116] The seed generation module includes:

[0117] The framework unit uses the high-precision time of the Beidou satellite clock as the time axis and the real-time Beidou satellite position information as the spatial coordinates to construct a three-dimensional space framework;

[0118] The deviation calculation unit obtains the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite timing protocol and the operating device timing protocol, performs difference calculation, and obtains the clock timestamp deviation value;

[0119] A standardization unit, which performs standardization processing on the clock timestamp deviation value;

[0120] The virtual simulation model unit adds the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device into the three-dimensional space framework to obtain a virtual simulation space-time information model;

[0121] The seed generation unit obtains the dynamic clock timestamp deviation value based on the virtual simulation space-time information model, maps and transforms the dynamic clock timestamp deviation value through multiple functions, and generates a random number initial seed.

[0122] The random hash value module includes:

[0123] The random seed array unit obtains the initial random number seeds under a number of unit times and combines them into a random number initial seed array;

[0124] The random hash array unit performs hashing using a one-way hash function based on a corresponding number of the random number initial seed array to obtain an initial random hash value array;

[0125] A serial hash unit, based on the initial random hash value array, serializes each initial random hash value according to the time index according to the binary bytes to obtain an initial random serial hash;

[0126] The random hash value unit substitutes the initial random series hash into the one-way hash function and outputs a random hash value.

[0127] The risk assessment module includes:

[0128] The verification library unit determines the known brute force exhaustive supply method based on the application direction of the application operation device of the random hash value, and combines them into a brute force exhaustive attack action verification library;

[0129] Scatter plot unit, obtains several random hash values ​​per unit time, and generates a scatter plot of random hash value distribution;

[0130] The model building unit builds a random hash value resistance analysis model based on the reinforcement learning neural network;

[0131] The model verification unit substitutes the random hash value distribution scatter plot into the random hash value resistance analysis model, takes the total generation time of the random hash value as the observation window, takes the brute force exhaustive attack action verification library as input, and verifies the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot as output;

[0132] A weighting unit assigns a weight to each random hash value according to the anti-exhaustiveness capability of the random hash value corresponding to each scattered point in the random hash value distribution scatter diagram;

[0133] A mapping vector unit performs linear mapping based on the anti-exhaustiveness capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram to obtain an anti-exhaustiveness capability index vector matrix of the random hash value;

[0134] The risk capability calculation unit calculates the exhaustive risk response capability of the random hash value according to each element in the anti-exhaustive capability indicator vector matrix of the random hash value and each random hash value weight.

[0135] A true random number generation process based on the time difference between the Beidou clock and the communication clock is as follows:

[0136] Step 1: Based on the Beidou satellite clock and the built-in hardware clock of the operating device, obtain the Beidou clock high-precision time and the operating device clock time;

[0137] Step 2: Based on the high-precision time of the Beidou satellite clock as the time axis, the real-time Beidou satellite position information is used as the spatial coordinate to build a three-dimensional space framework;

[0138] Step 3: Based on the timing protocol of the Beidou satellite and the timing protocol of the operating device, obtain the Beidou clock high-precision time and the operating device clock time, perform difference calculation, and obtain the clock timestamp deviation value;

[0139] Step 4: Standardize the clock timestamp deviation value;

[0140] Step 5: Add the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device to the three-dimensional space framework to obtain a virtual simulation space-time information model;

[0141] Step 6: Based on the virtual simulation space-time information model, obtain the dynamic clock timestamp deviation value, map and transform the dynamic clock timestamp deviation value through multiple functions, and generate a random number initial seed;

[0142] Step 7: Obtain the initial random number seeds for several time units and combine them into an initial random number seed array;

[0143] Step 8: Use a one-way hash function based on the corresponding number of the random number initial seed array to perform hashing to obtain an initial random hash value array;

[0144] Step 9: Based on the initial random hash value array, concatenate each initial random hash value according to the time index according to the binary bytes to obtain the initial random concatenated hash;

[0145] Step 10: Substitute the initial random concatenated hash into the one-way hash function and output the random hash value;

[0146] Step 11: Based on the application direction of the application operation device of the random hash value, determine the known brute force exhaustive supply method and combine it into a brute force exhaustive attack action verification library;

[0147] Step 12: Obtain several random hash values ​​per unit time and a scatter plot of the random hash value distribution of the components;

[0148] Step 13: Based on the reinforcement learning neural network, a random hash value resistance analysis model is constructed;

[0149] Step 14: Substitute the random hash value distribution scatter plot into the random hash value resistance analysis model, use the total generation time of the random hash value as the observation window, use the brute force attack action verification library as input, and verify the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot as output;

[0150] Step 15: assign a weight to each random hash value according to the anti-exhaustiveness capability of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram;

[0151] Step 16: Perform linear mapping based on the anti-exhaustiveness capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram to obtain the anti-exhaustiveness capability index vector matrix of the random hash value;

[0152] Step 17: Calculate the exhaustive risk response capability of the random hash value according to each element in the anti-exhaustive capability indicator vector matrix of the random hash value and each random hash value weight;

[0153] Step 18: Determine whether the exhaustive response risk of the random hash value meets the safety threshold of the random hash value. If so, generate a random number; if not, regenerate the random hash value.

[0154] In summary, the advantages of the present invention are: by comparing the time difference between the Beidou satellite high-precision time and the built-in hardware clock of the operating device, the clock deviation value is calculated, and the clock deviation value is used as the initial seed for random number generation to establish a virtual simulation space-time information model mapping, and then the initial seed is encrypted and converted by a one-way hash function to generate an unpredictable random hash value, and the random hash value is analyzed for its ability to cope with the risk of brute force exhaustion, and a random number is generated. The advantages of the present invention are: it can prevent random numbers from being brute-forced and enhance system security.

[0155] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A method for generating true random numbers based on the time difference between a Beidou clock and a communication clock, characterized in that: include: Based on the Beidou satellite clock and the built-in hardware clock of the operating device, obtain the Beidou clock high-precision time and the operating device clock time; Perform difference operation based on the Beidou clock high-precision time and the operating device clock time to obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed; Based on the random number initial seed, the random number initial seed is encrypted and converted by serially connecting a one-way hash function to obtain a random hash value; Determine a safety threshold of the random hash value based on the application direction of the random hash value; Establish an observable period verification model for random hash values, analyze the observable period change trend of random hash values, and evaluate the exhaustive risk response capability of random hash values; Determine whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, generate a random number; if not, regenerate the random hash value.

2. A method for generating true random numbers based on the time difference between a Beidou clock and a communication clock according to claim 1, characterized in that: According to the Beidou clock high-precision time and the operating device clock time, the difference operation is performed to obtain the clock timestamp deviation value, and a virtual simulation space-time information model is established to map and generate the random number initial seed, which includes: Based on the high-precision time of the Beidou clock of the Beidou satellite as the time axis, the real-time position information of the Beidou satellite is used as the spatial coordinate to construct a three-dimensional space framework; the position information of the Beidou satellite includes: longitude and latitude, altitude; Based on the timing protocol of the Beidou satellite and the timing protocol of the operating device, the high-precision time of the Beidou clock is obtained and the difference between the clock time of the operating device is calculated to obtain the clock timestamp deviation value; Standardize the clock timestamp deviation value; Add the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device to the three-dimensional space framework to obtain a virtual simulation space-time information model; Based on the virtual simulation space-time information model, the dynamic clock timestamp deviation value is obtained, and the dynamic clock timestamp deviation value is mapped and transformed through multiple functions to generate a random number initial seed.

3. A method for generating true random numbers based on the time difference between a Beidou clock and a communication clock according to claim 2, characterized in that: The generating of the random number initial seed specifically includes: ； In the formula, is the initial random number seed, is the normalized clock timestamp deviation value, max() is the maximum value function, min() is the minimum value function, is the original clock timestamp deviation value sequence, is a multinomial function, , , , are coefficients of polynomial functions, is the mapping parameter, is the clock timestamp deviation value at the n+1th iteration, m is the highest degree of the polynomial, n is the chaos starting index, and combine() is the seed combination function.

4. A method for generating true random numbers based on the time difference between a Beidou clock and a communication clock according to claim 2, characterized in that: Based on the random number initial seed, the random number initial seed is encrypted and converted by connecting a one-way hash function in series to obtain a random hash value, which specifically includes: Get the initial random number seeds for several time units and combine them into an array of initial random number seeds ;in, For the A random number initial seed, is the total number of random number initial seeds; Use a one-way hash function based on the corresponding number of random number initial seed arrays to hash and obtain the initial random hash value array ;in, For the An initial random hash value, is the total number of initial random hash values; Based on the initial random hash value array, concatenate each initial random hash value according to the time index according to the binary bytes to obtain an initial random concatenated hash; Substitute the initial random concatenated hash into a one-way hash function and output a random hash value.

5. A method for generating true random numbers based on the time difference between a Beidou clock and a communication clock according to claim 4, characterized in that: Establish an observable period verification model for random hash values, analyze the observable period change trend of random hash values, and evaluate the exhaustive risk response capability of random hash values. Specifically, it includes: Based on the application direction of the application operation device of the random hash value, the known brute force exhaustive supply method is determined and combined into a brute force exhaustive attack action verification library; Get several random hash values ​​per unit time and the scatter plot of random hash value distribution of components; Based on reinforcement learning neural network, a random hash value resistance analysis model is constructed; Based on the random hash value distribution scatter plot, the random hash value resistance analysis model is substituted, the total generation time of the random hash value is used as the observation window, the brute force attack action verification library is used as the input, and the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot is used as the output; Assign a weight to each random hash value according to the anti-exhaustiveness of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram; Based on the anti-exhaustiveness index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram, a linear mapping is performed to obtain the anti-exhaustiveness index vector matrix of the random hash value; According to each element in the anti-exhaustiveness capability indicator vector matrix of the random hash value and each random hash value weight, the exhaustive risk response capability of the random hash value is calculated; The exhaustive risk response capability of the random hash value is specifically: ； In the formula, For the The exhaustive risk response capability of random hash values, is the anti-exhaustiveness index of the kth random hash value, is the weight of the kth random hash value.

6. A true random number generation system based on the time difference between the Beidou clock and the communication clock, characterized in that: A method for generating a true random number based on the time difference between a Beidou clock and a communication clock as claimed in any one of claims 1 to 5, comprising: Data acquisition module: The data acquisition module is used to obtain the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite clock and the built-in hardware clock of the operating device; A seed generation module, which is electrically connected to the data acquisition module. The seed generation module is used to perform difference operation according to the Beidou clock high-precision time and the operating device clock time, obtain the clock timestamp deviation value, and establish a virtual simulation space-time information model mapping to generate a random number initial seed; A random hash value module is electrically connected to the seed generation module, and based on the random number initial seed, the random number initial seed is encrypted and converted by a series one-way hash function to obtain a random hash value; A threshold module, the threshold module is used to determine a security threshold of the random hash value based on an application direction of the random hash value; A risk assessment module, the risk assessment module is electrically connected to the random hash value module, and the risk assessment module is used to establish an observable period verification model for the random hash value, analyze the observable period change trend of the random hash value, and evaluate the exhaustive risk response capability of the random hash value; The judgment module is electrically connected to the risk assessment module and the threshold module. The judgment module is used to judge whether the random hash value exhaustive response risk meets the safety threshold of the random hash value. If so, a random number is generated; if not, a random hash value is regenerated.

7. A true random number generation system based on the time difference between the Beidou clock and the communication clock according to claim 6, characterized in that: The seed generation module includes: The framework unit uses the high-precision time of the Beidou satellite clock as the time axis and the real-time Beidou satellite position information as the spatial coordinates to construct a three-dimensional space framework; The deviation calculation unit obtains the Beidou clock high-precision time and the operating device clock time based on the Beidou satellite timing protocol and the operating device timing protocol, performs difference calculation, and obtains the clock timestamp deviation value; A standardization unit, which performs standardization processing on the clock timestamp deviation value; The virtual simulation model unit adds the clock timestamp deviation value between the timing protocol of the standardized Beidou satellite and the timing protocol of the operating device into the three-dimensional space framework to obtain a virtual simulation space-time information model; The seed generation unit obtains the dynamic clock timestamp deviation value based on the virtual simulation space-time information model, maps and transforms the dynamic clock timestamp deviation value through multiple functions, and generates a random number initial seed.

8. A true random number generation system based on the time difference between a Beidou clock and a communication clock according to claim 6, characterized in that: The random hash value module includes: The random seed array unit obtains the initial random number seeds under a number of unit times and combines them into a random number initial seed array; The random hash array unit performs hashing using a one-way hash function based on a corresponding number of the random number initial seed array to obtain an initial random hash value array; A serial hash unit, based on the initial random hash value array, serializes each initial random hash value according to the time index according to the binary bytes to obtain an initial random serial hash; The random hash value unit substitutes the initial random series hash into the one-way hash function and outputs a random hash value.

9. A true random number generation system based on the time difference between the Beidou clock and the communication clock according to claim 6, characterized in that: The risk assessment module includes: The verification library unit determines the known brute force exhaustive supply method based on the application direction of the application operation device of the random hash value, and combines them into a brute force exhaustive attack action verification library; Scatter plot unit, obtains several random hash values ​​per unit time, and generates a scatter plot of random hash value distribution; The model building unit builds a random hash value resistance analysis model based on the reinforcement learning neural network; The model verification unit substitutes the random hash value distribution scatter plot into the random hash value resistance analysis model, takes the total generation time of the random hash value as the observation window, takes the brute force exhaustive attack action verification library as input, and verifies the anti-exhaustive capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter plot as output; A weighting unit assigns a weight to each random hash value according to the anti-exhaustiveness capability of the random hash value corresponding to each scattered point in the random hash value distribution scatter diagram; A mapping vector unit performs linear mapping based on the anti-exhaustiveness capability index of the random hash value corresponding to each scatter point in the random hash value distribution scatter diagram to obtain an anti-exhaustiveness capability index vector matrix of the random hash value; The risk capability calculation unit calculates the exhaustive risk response capability of the random hash value according to each element in the anti-exhaustive capability indicator vector matrix of the random hash value and each random hash value weight.

Images