Method and apparatus for wireless data transmission

Abstract

The present invention relates to the technical field of equipment security, and discloses a method and apparatus for wireless data transmission, the method comprising: in response to a first operation of a human-computer interaction device by a user, performing key negotiation with the human-computer interaction device based on a wireless receiver to obtain a negotiation key and a data mapping table, wherein the data mapping table is randomly obtained based on the negotiation key, and the negotiation key is reset for each first operation; in response to a second operation of the human-computer interaction device by the user, performing a first permutation on an operation array representing the second operation based on the data mapping table through the human-computer interaction device to obtain a first permutation array, encrypting the first permutation array to obtain encrypted data, and transmitting the encrypted data to a wireless receiver based on the human-computer interaction device; decrypting the encrypted data through the wireless receiver to obtain a decryption array, performing a second permutation on the decryption array based on the data mapping table through the wireless receiver, restoring the operation array, and sending the operation array to a user operation receiving device.

Description

Technical Field

[0001] The present invention relates to the technical field of equipment security, and in particular to a method and a device for wireless data transmission. Background Art

[0002] Computers are also called computers. They are electronic computing machines used for calculations. They can perform numerical calculations, logical calculations, and have storage and memory functions. Computers are modern intelligent electronic devices that can run according to programs and automatically process massive amounts of data. Computers have spread to schools, enterprises, institutions, and ordinary households, becoming an indispensable tool in the information society.

[0003] Human-computer interaction devices are devices used by humans to interact with computers, including keyboards, mice, drawing tablets, or game controllers.

[0004] Computers and human-computer interaction devices can use wireless communication or wired communication. Devices that use wired communication can use Universal Serial Bus (USB) or PS / 2 interface to connect, and transmit operation data to the computer via the USB interface. Wireless devices include the device itself and a USB wireless module. The device itself and the USB wireless module can use 2.4G, Bluetooth or Star Flash to communicate. The USB wireless module is inserted into the computer's USB interface to transmit the received operation data to the computer. It meets the needs of daily office life. However, due to the overflow of wireless signals during the use of the above solution, the user's input content or operation trajectory will be captured and analyzed by the outside world. Summary of the invention

[0005] In view of this, the present invention provides a method and device for wireless data transmission to solve the problem of wireless data overflow, which causes user input content or operation traces to be captured and analyzed by the outside world.

[0006] In a first aspect, the present invention provides a method for wireless data transmission, the method comprising: in response to a first operation of a user on a human-computer interaction device, performing key negotiation with the human-computer interaction device based on a wireless receiver to obtain a negotiation key and a data mapping table, the data mapping table being randomly obtained based on the negotiation key, and the negotiation key being reset for each first operation, the wireless receiver being used to obtain the user operation from the human-computer interaction device, and transmitting the user operation to a user operation receiving device; in response to a second operation of the user on the human-computer interaction device, performing a first permutation on an operation array representing the second operation through the human-computer interaction device based on the data mapping table to obtain a first permutation array, encrypting the first permutation array to obtain encrypted data, and transmitting the encrypted data to the wireless receiver based on the human-computer interaction device; decrypting the encrypted data through the wireless receiver to obtain a decrypted array, performing a second permutation on the decrypted array through the wireless receiver based on the data mapping table, restoring the operation array, and sending the operation array to the user operation receiving device.

[0007] In an optional embodiment, the data mapping table includes a first mapping table, which is randomly obtained based on the negotiated key, including: creating a first intermediate table, the array length of the first intermediate table is the same as the array length of the first mapping table, and assigning values ​​to the first intermediate table based on the serial number of the first intermediate table; using the negotiated key as the seed of a pseudo-random algorithm to obtain a first random number and a second random number, the value range of the first random number and the second random number is from zero to a preset value, and the preset value is a value representing the array length of the first mapping table minus one; assigning the value of the first random number in the first intermediate table corresponding to the first random number to the element of the first mapping table corresponding to the second random number; assigning the value of the first intermediate table corresponding to the preset value to the element of the first intermediate table corresponding to the first random number, subtracting the preset value by one, regenerating the first random number and the second random number, and repeating the aforementioned assignment steps until the preset value is zero.

[0008] In an optional implementation, performing a first permutation on the operation array representing the second operation based on the data mapping table by the human-computer interaction device to obtain a first permutation array includes: generating a third random number, where the value range of the third random number is from zero to the value of the array length representing the first mapping table minus one; and obtaining permutation data ARR1 in the first permutation array in the following manner:

[0009] ARR1[i]=T1[(X+ARR[i])%N]

[0010] Among them, the value range of i is 0 to the value representing the length of the operation array minus one, T1 is the first mapping table, X is the third random number, N is the value representing the array length of the first mapping table minus one, ARR[i] is the operation array, and the first permutation array includes the third random number and the permutation data ARR1.

[0011] In an optional embodiment, the data mapping table also includes a second mapping table, the array length of the second mapping table is the same as that of the first mapping table, and the data mapping table is randomly obtained based on the negotiated key, including: creating a second intermediate table, the array length of the second intermediate table is the same as that of the first mapping table, and assigning values ​​to the second intermediate table based on the serial number of the second intermediate table; assigning the value of the second intermediate table corresponding to the second random number to the element of the second mapping table corresponding to the first random number; assigning the value of the element in the second intermediate table corresponding to the preset value to the element in the second intermediate table corresponding to the second random number, subtracting one from the preset value, regenerating the first random number and the second random number, and repeating the aforementioned assignment steps until the preset value is zero.

[0012] In an optional implementation, decrypting the encrypted data by the wireless receiver to obtain a decryption array, performing a second permutation on the decryption array based on the data mapping table by the wireless receiver to restore the operation array includes: decrypting the encrypted data to obtain the decryption array including the third random number and the array to be restored;

[0013] The operation array ARR3 is restored as follows:

[0014] ARR3[m]=(T2[ARR2[m]]-X+N)%N

[0015] Among them, the value range of m is 0 to the length of the array to be restored minus one, T2 is the second mapping table, ARR2 is the array to be restored, N is the value representing the array length of the first mapping table minus one, and X is the third random number.

[0016] In an optional implementation, the key negotiation based on the wireless receiver and the human-computer interaction device to obtain the negotiated key and the data mapping table includes: generating a first key pair based on the human-computer interaction device, the first key pair including a first public key and a first private key, and the human-computer interaction device has a fourth public key and a fourth private key; generating a third key pair based on the wireless receiver, the third key pair including a third public key and a third private key, and the wireless receiver has a second public key and a second private key; obtaining the first public key and the fourth public key based on the wireless receiver, and generating the negotiated key through the wireless receiver based on the first public key, the fourth public key, the third public key, the third private key, the second public key and the second private key; obtaining the second public key and the third public key based on the human-computer interaction device, and generating the negotiated key through the human-computer interaction device based on the second public key, the third public key, the first public key, the first private key, the fourth public key and the fourth private key.

[0017] In an optional embodiment, the human-computer interaction device performs a first permutation on an operation array representing the second operation based on the data mapping table to obtain a first permutation array, and encrypts the first permutation array to obtain encrypted data, including: padding the first permutation array according to a preset rule, and encrypting the padded first permutation array to obtain the encrypted data; and / or, the encrypted data is decrypted by the wireless receiver to obtain a decryption array, and the decryption array is subjected to a second permutation based on the data mapping table by the wireless receiver, including: removing the padded decryption array according to the preset rule, and performing the second permutation on the decryption array without the padded decryption array based on the data mapping table.

[0018] In a second aspect, the present invention provides a device for wireless data transmission, the device comprising: a human-computer interaction device and a wireless receiver; the human-computer interaction device is used to, in response to a first operation of the user on the human-computer interaction device, perform key negotiation with the wireless receiver to obtain a negotiation key and a data mapping table, the data mapping table is randomly obtained based on the negotiation key, and the negotiation key is reset for each first operation; the wireless receiver is used to obtain the user operation from the human-computer interaction device, and transmit the user operation to a user operation receiving device; the human-computer interaction device is also used to, in response to a second operation of the user on the human-computer interaction device, perform a first permutation on an operation array representing the second operation based on the data mapping table to obtain a first permutation array, encrypt the first permutation array to obtain encrypted data, and transmit the encrypted data to the wireless receiver; the wireless receiver is also used to decrypt the encrypted data to obtain a decryption array, perform a second permutation on the decryption array based on the data mapping table, restore the operation array, and send the operation array to the user operation receiving device.

[0019] In an optional embodiment, the human-computer interaction device includes a first security unit, which is arranged between the human-computer interaction device control chip and the human-computer interaction device wireless module, and the first security unit is used to obtain an input signal from the human-computer interaction device control chip, encrypt the input signal, and transmit the encrypted signal to the human-computer interaction device wireless module; or, the first security unit is connected to the human-computer interaction device control chip circuit, and the first security unit is used to obtain an input signal from the human-computer interaction device control chip, encrypt the input signal, and transmit the encrypted signal back to the human-computer interaction device control chip.

[0020] In an optional embodiment, the wireless receiver includes a second security unit, which is arranged between the wireless module of the wireless receiver and the user operation device, and the second security unit is used to obtain encrypted data from the wireless module of the wireless receiver, decrypt and restore the encrypted data to obtain the operation array, and send the operation array to the user operation receiving device; or, the second security unit is connected to the wireless module circuit of the wireless receiver, and the second security unit is used to obtain encrypted data from the wireless module of the wireless receiver, decrypt and restore the encrypted data to obtain the operation array, and transmit the operation array back to the wireless module of the wireless receiver.

[0021] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the method for wireless data transmission of the above-mentioned first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0022] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method for wireless data transmission of the above-mentioned first aspect or any corresponding embodiment thereof.

[0023] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the method for wireless data transmission according to the first aspect or any corresponding embodiment thereof.

[0024] The method for wireless data transmission provided in this embodiment generates a negotiation key for each conversation between the human-computer interaction device and the wireless receiver, and randomly generates a data mapping table based on the negotiation key. The operation data of the user operation is randomly replaced through the data mapping table. In this way, it is difficult to crack the user operation even if a word frequency analysis is performed, thereby improving the security of the user operation and ensuring the security of the user's communication data. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the related technologies, the drawings required for use in the specific embodiments or the related technical descriptions will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0026] Figure 1 A schematic diagram showing a flow chart of a method for wireless data transmission provided by an embodiment of the present invention;

[0027] Figure 2 A schematic diagram of a wireless data transmission scenario is shown;

[0028] Figure 3 A schematic diagram of the key negotiation process is shown;

[0029] Figure 4 A schematic diagram showing the structure of a device for wireless data transmission provided by an embodiment of the present invention is shown;

[0030] Figure 5 A schematic diagram of application scenarios of the first safety unit and the second safety unit is shown;

[0031] Figure 6 Another schematic diagram of an application scenario of the first safety unit and the second safety unit is shown;

[0032] Figure 7 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0034] In the related art, a symmetric key encryption algorithm (Advanced Encryption Standard, AES for short) is used in Bluetooth keyboards to protect data security. However, Bluetooth technology itself has problems with latency and connection stability.

[0035] Frequency analysis is the process of comparing the frequency of plaintext letters with the frequency of ciphertext letters. Substitution ciphers are deciphered by analyzing the frequency of each symbol. In each language, letters in a lengthy text exhibit a frequency that can be distinguished. Similarly, during user input, through character mapping, the user's input content can be deciphered by analyzing the frequency of data occurrence. The character mapping table in the above scheme is a pre-stored fixed mapping. After a large amount of data capture and analysis or chip segmentation, the user's input content can be easily deciphered. Similar methods can also be used for other devices.

[0036] According to an embodiment of the present invention, a method embodiment for wireless data transmission is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0037] In this embodiment, a method for wireless data transmission is provided, which can be used for wireless human-computer interaction devices, such as keyboards, mice, drawing tablets, or game controllers. Figure 1 A schematic diagram of a method for wireless data transmission provided by an embodiment of the present invention is shown. Figure 1 As shown, the process includes the following steps:

[0038] Step S101, in response to the user's first operation on the human-computer interaction device, a negotiation key and a data mapping table are obtained based on a key negotiation between the wireless receiver and the human-computer interaction device. The data mapping table is randomly obtained based on the negotiation key. The negotiation key is reset for each first operation. The wireless receiver is used to obtain the user operation from the human-computer interaction device and transmit the user operation to the user operation receiving device.

[0039] In this step, the first operation may be a user waking up or turning on the wireless human-machine interaction device (Human-Machine Interaction, HMI for short). The wireless communication means between the human-machine interaction device and the wireless receiver may be Bluetooth, dual-mode devices (Bluetooth and 2.4G) or other short-range communication protocols, such as ZigBee, Lora or StarFlash.

[0040] Each time the human-computer interaction device goes into sleep or starts up, it will perform SM2 key negotiation, and the negotiated key will be used as the session key for encryption and decryption of this communication session. Until it goes into sleep or shuts down, this session key becomes invalid, and a new session key will be negotiated again after the next wake-up or startup.

[0041] The user wakes up or turns on the human-computer interaction device from a dormant state based on a first operation. The first operation may be shaking the mouse, placing the power key of the wireless human-computer interaction device in the "ON" state, or other operations that put the wireless human-computer interaction device in a state of receiving user operations. After the user performs the first operation on the human-computer interaction device, the user generally performs the second operation on the human-computer interaction device immediately. Before the key negotiation between the wireless human-computer interaction device and the wireless receiver is completed, the human-computer interaction device may temporarily store the second operation. After the key negotiation between the wireless human-computer interaction device and the wireless receiver is completed, wireless data transmission is performed for the second operation.

[0042] After the human-computer interaction device is awakened, it performs key negotiation with the wireless receiver through wireless communication and randomly generates a data mapping table based on the negotiated key. Figure 2 A schematic diagram of a wireless data transmission scenario is shown. Figure 2As shown, in response to the operation performed by the user 21 on the human-computer interaction device 22, the human-computer interaction device 22 collects and encodes the user's operation to form digital data, and then sends it to the wireless receiver 23 via wireless communication. The wireless receiver 23 and the user operation receiving device 24 can be connected in the form of a universal serial bus (USB). After receiving the data transmitted by the human-computer interaction device 22, the wireless receiver 23 decodes and transmits it to the user operation receiving device 24 to trigger the user's actual operation. Both the human-computer interaction device and the wireless receiver include a security unit, which is used to generate a data mapping table in the communication handshake phase and to perform encryption, decryption, substitution, and inverse substitution during the communication process.

[0043] Step S102, in response to the user's second operation on the human-computer interaction device, the operation array representing the second operation is subjected to a first permutation based on the data mapping table through the human-computer interaction device to obtain a first permutation array, the first permutation array is encrypted to obtain encrypted data, and the encrypted data is transmitted to the wireless receiver based on the human-computer interaction device.

[0044] In this step, the second operation is used to represent the actual operation of the user on the human-computer interaction device. After the key negotiation between the wireless human-computer interaction device and the wireless receiver is completed, the human-computer interaction device can perform a first substitution and encryption on the previously temporarily stored second operation or the operation array of the second operation performed by the user in real time based on the data mapping table, and transmit the encrypted data to the wireless receiver via wireless communication.

[0045] Among them, the encryption algorithm can use SM4. The key used by the SM4 algorithm is generated using the SM2 key agreement algorithm. SM4 is a block cipher standard released on March 21, 2012. The relevant standard is "GM / T 0002-2012 "SM4 Block Cipher Algorithm". SM2 is an elliptic curve public key cryptography algorithm released on December 17, 2010. The relevant standards are "GM / T0003.1-2012 "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 1: General Principles", GM / T 0003.2-2012 "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 2: Digital Signature Algorithm", GM / T 0003.3-2012 "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 3: Key Exchange Protocol", GM / T 0003.4-2012 "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 4: Public Key Encryption Algorithm", GM / T 0003.5-2012 "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 5: Parameter Definition"".

[0046] Step S103, decrypting the encrypted data through the wireless receiver to obtain a decryption array, performing a second permutation on the decryption array based on the data mapping table through the wireless receiver, restoring the operation array, and sending the operation array to the user operation receiving device.

[0047] In this step, the second permutation is the inverse permutation of the first permutation. After the wireless receiver obtains the encrypted data, it decrypts and inversely permutes to obtain the original data of the user operation, and transmits it to the user operation receiving device via USB to complete the user operation. The user operation receiving device can be a computer or other device that receives user operations through a wireless human-computer interaction device.

[0048] The method for wireless data transmission provided in this embodiment generates a negotiation key for each conversation between the human-computer interaction device and the wireless receiver, and randomly generates a data mapping table based on the negotiation key. The operation data of the user operation is randomly replaced through the data mapping table. In this way, it is difficult to crack the user operation even if a word frequency analysis is performed, thereby improving the security of the user operation and ensuring the security of the user's communication data.

[0049] In some optional implementations, the data mapping table includes a first mapping table T1. The data mapping table is randomly obtained based on the negotiated key and includes:

[0050] Step S2011, creating a first intermediate table, the array length of the first intermediate table is the same as the array length of the first mapping table, and assigning values ​​to the first intermediate table based on the serial number of the first intermediate table.

[0051] In this step, the array length of the first mapping table can be determined based on the operations that can be performed by the wireless human-computer interaction device. The array length of the first mapping table T1 can be 124, 256, or other values ​​determined based on the operations that can be performed by the wireless human-computer interaction device. The first mapping table can be stored in a random access memory (Random Access Memory, RAM for short).

[0052] In this step, the array length of the first mapping table T1 is 256, and the generation process of the data mapping table is exemplified. The first intermediate table can be an array B with 256 bytes. The first intermediate table is assigned a value based on the serial number of the first intermediate table, that is, the serial number of each array unit in B is the content of the array unit. Exemplarily, B[0]=0; B[1]=1; B[2]=2; B[3]=3...B

[255] =255.

[0053] A second intermediate table A with 256 bytes may also be created, and values ​​may be assigned to the second intermediate table based on the sequence number of the second intermediate table, that is, the sequence number of each array unit in A is the content of the array unit. For example, A[0]=0; A[1]=1; A[2]=2; A[3]=3...A

[255] =255.

[0054] Step S2012: Using the negotiated key as a seed of a pseudo-random algorithm, a first random number and a second random number are obtained, wherein the value range of the first random number and the second random number is from zero to a preset value, and the preset value is the value representing the array length of the first mapping table minus one.

[0055] In this step, the negotiated key is used as the seed of the pseudo-random algorithm, so that the human-computer interaction device and the wireless receiver can generate a consistent random number sequence. The value range of the first random number R1 and the second random number R2 is 0 to N. When the array B has 256 bytes, N is 256-1=255.

[0056] Step S2013: assign the value corresponding to the first random number in the first intermediate table to the element corresponding to the second random number in the first mapping table.

[0057] In this step, the elements in the first mapping table can be assigned values ​​by the following formula:

[0058] T1[A[R2]]=B[R1]

[0059] The value corresponding to the first random number R1 in the first intermediate table B is assigned to the element corresponding to the second random number R2 in the first mapping table T1.

[0060] Step S2014, assign the value corresponding to the preset value in the first intermediate table to the element corresponding to the first random number in the first intermediate table, reduce the preset value by one, regenerate the first random number and the second random number, and repeat the above assignment steps until the preset value is zero.

[0061] In this step, the elements in the first intermediate table B can be assigned values ​​by the following formula:

[0062] B[R1]=B[N], N=N-1

[0063] Repeat step S2012 to step S2014 until the preset value N is 0, and the first mapping table T1 is generated.

[0064] In this way, at the wireless receiver end, the first mapping table is randomly generated by negotiating a key, and it is difficult to crack the user's operation content even if frequency analysis is used, thereby ensuring the security of the user's operation at the wireless receiver end.

[0065] In some optional implementations, performing a first permutation on the operation array representing the second operation based on the data mapping table through the human-computer interaction device to obtain a first permutation array includes: generating a third random number, where the value range of the third random number is from zero to the value of the array length representing the first mapping table minus one; and obtaining the permutation data ARR1 in the first permutation array in the following manner:

[0066] ARR1[i]=T1[(X+ARR[i])%N]

[0067] Among them, the value range of i is 0 to the value representing the length of the operation array minus one, T1 is the first mapping table, X is the third random number, N is the value representing the array length of the first mapping table minus one, ARR[i] is the operation array, and the first permutation array includes the third random number and permutation data ARR1.

[0068] In this embodiment, the length of the operation array representing the second operation of the user is Q. The third random number X is used as the logical starting subscript of the first permutation. The human-computer interaction device performs the first permutation operation, encrypts the obtained first permutation array, obtains encrypted data, and uses the third random number and the encrypted data as plaintext data transmitted to the wireless receiver.

[0069] In this way, the array content representing the user operation is randomly permuted and encrypted, which can further improve the security of the user operation.

[0070] In some optional embodiments, the data mapping table also includes a second mapping table T2, the second mapping table has the same array length as the first mapping table, and the data mapping table is randomly obtained based on the negotiated key, including: creating a second intermediate table, the array length of the second intermediate table is the same as the array length of the first mapping table, and assigning values ​​to the second intermediate table based on the serial number of the second intermediate table; assigning the value corresponding to the second random number in the second intermediate table to the element corresponding to the first random number in the second mapping table; assigning the value corresponding to the preset value in the second intermediate table to the element corresponding to the second random number in the second intermediate table, subtracting one from the preset value, regenerating the first random number and the second random number, and repeating the aforementioned assignment steps until the preset value is zero.

[0071] In this implementation, the elements in the second mapping table T2 may be assigned values ​​using the following formula:

[0072] T2[B[R1]]=A[R2]

[0073] The elements in the second intermediate table A can be assigned values ​​by the following formula:

[0074] A[R2]=A[N], N=N-1

[0075] Repeat the above steps of assigning values ​​to the second mapping table and the second intermediate table until the preset value N is 0, and the second mapping table T2 is generated.

[0076] In this way, at the human-computer interaction device end, the second mapping table is randomly generated by negotiating a key, and it is difficult to crack the user's operation content even if frequency analysis is used, thereby ensuring the security of user operations at the human-computer interaction device end.

[0077] In some optional implementations, decrypting the encrypted data through a wireless receiver to obtain a decrypted array, performing a second permutation on the decrypted array based on a data mapping table through the wireless receiver to restore the operation array includes:

[0078] Decrypting the encrypted data, the obtained decrypted array includes the third random number and the array to be restored;

[0079] The operation array ARR3 is restored as follows:

[0080] ARR3[m]=(T2[ARR2[m]]-X+N)%N

[0081] Among them, the value range of m is 0 to the length of the array to be restored minus one, T2 is the second mapping table, ARR2 is the array to be restored, N is the value representing the array length of the first mapping table minus one, and X is a third random number.

[0082] In this embodiment, the total length of the third random number obtained after decryption and the array to be restored ARR2 is S, and the third random number X is used as the logical starting subscript of the second permutation. The restored operation array ARR3 is obtained, and the wireless receiver sends the array contents of ARR3[1] to ARR3[S] to the user-operated receiving device.

[0083] In this way, the encrypted data is randomly permuted and encrypted, which can further improve the security of user operations.

[0084] In some optional embodiments, a negotiated key and a data mapping table are obtained by performing key negotiation between the wireless receiver and the human-computer interaction device, including: generating a first key pair based on the human-computer interaction device, the first key pair including a first public key and a first private key, and the human-computer interaction device having a fourth public key and a fourth private key; generating a third key pair based on the wireless receiver, the third key pair including a third public key and a third private key, and the wireless receiver having a second public key and a second private key; obtaining the first public key and the fourth public key based on the wireless receiver, and generating a negotiated key based on the first public key, the third private key, the second public key and the second private key through the wireless receiver, and the wireless receiver having a second public key and a second private key; obtaining the third public key based on the human-computer interaction device, and generating a negotiated key based on the third public key, the first private key, the fourth public key and the fourth private key through the human-computer interaction device, and the human-computer interaction device having a fourth private key and a fourth private key.

[0085] Figure 3 Figure 1 shows a schematic diagram of the key negotiation process. Figure 3 As shown,

[0086] Step S301: the user 21 triggers a first operation on the human-computer interaction device 22;

[0087] Step S302: the user 21 triggers a second operation on the human-computer interaction device 22;

[0088] Step S303: the control chip 221 in the human-computer interaction device 22 acquires the first operation and the second operation, and the control chip 221 temporarily stores the second operation;

[0089] Step S304: the control chip 221 sends a notification of key negotiation to the first security unit 222 based on the acquired first operation;

[0090] Step S305: the first security unit 222 obtains the notification of key negotiation and generates a first key pair. The first key pair is a temporary key pair of the SM2 key pair generated by the first security unit and is used for SM2 key negotiation. The first key pair includes: a first public key and a first private key. The first security unit 222 itself has a fourth key pair when it leaves the factory. The fourth key pair includes: a fourth public key and a fourth private key.

[0091] Step S306: the first security unit 222 sends the first public key and the fourth public key to the HMI wireless module 223;

[0092] Step S307: the human-machine interaction device 22 sends the first public key and the fourth public key to the wireless receiver 23 through the HMI wireless module 223;

[0093] Step S308: the wireless module 231 of the wireless receiver 23 obtains the first public key and the fourth public key, and the wireless module 231 of the wireless receiver sends the first public key and the fourth public key to the second security unit 232 of the wireless receiver 23;

[0094] Step S309: the second security unit 232 generates a third key pair. The third key pair is a temporary key pair for SM2 key negotiation generated by the second security unit. The third key pair includes a third public key and a third private key. The second security unit 232 itself has a second key pair when it leaves the factory. The second key pair includes a second public key and a second private key.

[0095] Step S310: The second security unit 232 generates a negotiated key based on the first public key, the fourth public key, the third public key, the third private key, the second public key and the second private key;

[0096] Step S311: the second security unit 232 randomly generates a data mapping table based on the negotiated key;

[0097] Step S312: the second security unit 232 sends the second public key and the third public key to the wireless receiver wireless module 231;

[0098] Step S313: the wireless receiver wireless module 231 sends the second public key and the third public key to the HMI wireless module 223;

[0099] Step S314: the HMI wireless module 223 sends the second public key and the third public key to the first security unit 222;

[0100] Step S315: the first security unit 222 generates a negotiated key based on the second public key, the third public key, the first public key, the first private key, the fourth public key and the fourth private key;

[0101] Step S316: the first security unit 222 randomly generates a data mapping table based on the negotiated key;

[0102] Step S317: The first security unit 222 notifies the control chip 221 that the key negotiation is completed;

[0103] Step S318: the human-computer interaction device 22 waits for user operation during the device wake-up period;

[0104] Step S319: the control chip 221 sends the second operation to the first security unit 222;

[0105] Step S320: In response to the second operation of the user, the first security unit 222 performs a first permutation on the operation array representing the second operation based on the data mapping table to obtain a first permutation array, and encrypts the first permutation array to obtain encrypted data. The aforementioned key negotiation process can refer to "SM2 Elliptic Curve Public Key Cryptography Algorithm Part 3: Key Exchange Protocol".

[0106] In some optional embodiments, an operation array representing a second operation is subjected to a first permutation based on a data mapping table through a human-computer interaction device to obtain a first permutation array, and the first permutation array is encrypted to obtain encrypted data, including: padding the first permutation array according to a preset rule, and encrypting the padded first permutation array to obtain encrypted data; and / or, the encrypted data is decrypted through a wireless receiver to obtain a decryption array, and the decryption array is subjected to a second permutation based on the data mapping table through the wireless receiver, including: removing the padded decryption array according to a preset rule, and performing a second permutation on the decryption array without the padded decryption array based on the data mapping table.

[0107] In this embodiment, the SM4 group is fixed at 128 bits, and the first permutation array can be padded and expanded, and the expansion rule is ISO9797 Padding Method 2. Before encryption, the padding is performed according to the rule, and after decryption, the padding is removed according to the rule.

[0108] In this way, it can be ensured that the data length meets the requirements of the encryption algorithm, so that data of any length can be encrypted, which improves the applicability of the algorithm; in addition, padding before encryption can not only meet the requirements of the encryption algorithm, but also verify the integrity of the data by removing the padding after decryption. If the decrypted data is inconsistent with the original data after removing the padding, it means that the data may have been tampered with during transmission.

[0109] In the present embodiment, a device for wireless data transmission is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0110] This embodiment provides a device for wireless data transmission. Figure 4 A schematic diagram of the structure of a device for wireless data transmission provided by an embodiment of the present invention is shown. Figure 4 As shown, the device for wireless data transmission includes: a human-computer interaction device 22 and a wireless receiver 23;

[0111] The human-computer interaction device 22 is configured to perform key negotiation with the wireless receiver 23 to obtain a negotiation key and a data mapping table in response to a first operation of the user on the human-computer interaction device 22, wherein the data mapping table is randomly obtained based on the negotiation key, and the negotiation key is reset for each first operation;

[0112] The wireless receiver 23 is used to obtain the user operation from the human-computer interaction device 22 and transmit the user operation to the user operation receiving device;

[0113] The human-computer interaction device 22 is further configured to, in response to a second operation of the user on the human-computer interaction device 22, perform a first permutation on the operation array representing the second operation based on the data mapping table to obtain a first permutation array, encrypt the first permutation array to obtain encrypted data, and transmit the encrypted data to the wireless receiver 23;

[0114] The wireless receiver 23 is further used to decrypt the encrypted data to obtain a decryption array, perform a second substitution on the decryption array based on the data mapping table, restore the operation array, and send the operation array to the user operation receiving device.

[0115] In some optional embodiments, the human-computer interaction device 22 includes a first security unit 222, which is disposed between the human-computer interaction device control chip 221 and the human-computer interaction device wireless module 223, and the first security unit 222 is used to obtain an input signal from the human-computer interaction device control chip 221, encrypt the input signal, and transmit the encrypted signal to the human-computer interaction device wireless module 223; or,

[0116] The first security unit 222 is connected to the human-machine interaction device control chip 221 circuit. The first security unit 222 is used to obtain an input signal from the human-machine interaction device control chip 221, encrypt the input signal, and transmit the encrypted signal back to the human-machine interaction device control chip 221.

[0117] In some optional embodiments, the wireless receiver 23 includes a second security unit 232, which is disposed between the wireless module 231 of the wireless receiver and the user-operated receiving device 24, and the second security unit 232 is used to obtain encrypted data from the wireless module 231 of the wireless receiver, decrypt and restore the encrypted data, obtain an operation array, and send the operation array to the user-operated receiving device 24; or,

[0118] The second security unit 232 is connected to the wireless receiver module 231 circuit. The second security unit 232 is used to obtain the encrypted data from the wireless receiver module 231, decrypt the encrypted data to obtain an operation array, and transmit the operation array back to the wireless receiver module 231.

[0119] Figure 5 A schematic diagram of application scenarios of the first safety unit and the second safety unit is shown. Figure 6 A schematic diagram of another application scenario of the first safety unit and the second safety unit is shown.

[0120] like Figure 5 As shown, the control chip 221 in the human-computer interaction device 22 receives and processes the user's input signal as the original input data; the preliminarily processed user input signal is transmitted to the first security unit 222 through the printed circuit board (Printed Circuit Board, PCB) circuit, and the transmission protocol includes but is not limited to the universal synchronous asynchronous receiver and transmitter (U(S)ART), the controller area network bus (Controller Area Network, CAN), the serial peripheral interface (Serial Peripheral Interface, SPI), the integrated circuit bus (Inter-Integrated Circuit, I2C), etc.

[0121] The first security unit 222 receives the user's input signal transmitted by the control chip 221 , performs a first substitution and encryption on the input signal, and transmits the encrypted data to the HMI wireless module 223 .

[0122] The HMI wireless module 223 transmits the received encrypted data to the wireless receiver wireless module 231 via wireless communication. The wireless communication protocols include but are not limited to Bluetooth, 2.4G, Zigbee, Lora or Star Flash.

[0123] The wireless receiver wireless module 231 sends the received encrypted data to the second security unit 232 through the PCB circuit, and the aforementioned transmission protocol can be used.

[0124] The second security unit 232 decrypts and second-permutes the encrypted data to restore the input signal, and sends the input signal to the user operation receiving device 24 through the USB interface, so that the user operation receiving device 24 completes the user's actual operation.

[0125] like Figure 6 As shown, the control chip 221 in the human-computer interaction device 22 receives and processes the user's input signal as the original input data; the preliminarily processed user input signal is transmitted to the first security unit 222 through the printed circuit board (Printed Circuit Board, PCB) circuit, and the transmission protocol includes but is not limited to the universal synchronous asynchronous receiver and transmitter (U(S)ART), the controller area network bus (Controller Area Network, CAN), the serial peripheral interface (Serial Peripheral Interface, SPI), the integrated circuit bus (Inter-Integrated Circuit, I2C), etc. Then wait for the first security unit 222 to return the encrypted data, and transmit the encrypted data to the HMI wireless module 223.

[0126] The first security unit 222 receives the user's input signal transmitted by the control chip 221, performs a first substitution and encryption on the input signal, and transmits the encrypted data back to the control chip 221. Figure 5 I will not go into details here.

[0127] The wireless receiver wireless module 231 sends the received encrypted data to the second security unit 232 through the PCB circuit, and the aforementioned transmission protocol can be used.

[0128] The second security unit 232 decrypts and second-permutes the encrypted data to restore the input signal, and transmits the input signal back to the wireless receiver wireless module 231. The wireless receiver wireless module 231 sends the input signal to the user-operated receiving device 24, so that the user-operated receiving device 24 completes the user's actual operation.

[0129] The first security unit and the second security unit can adopt the RISC-V instruction set security unit to perform security protection in the wireless communication information transmission path of the human-computer interaction device.

[0130] In this way, the first safety unit set in the wireless human-machine interaction device can be set between the human-machine interaction device control chip and the HMI wireless module, or can be connected only to the human-machine interaction device control chip circuit; the second safety unit set in the wireless receiver can be set between the user operation receiving device and the wireless module of the wireless receiver, or can be connected only to the wireless module circuit of the wireless receiver. Flexible configuration options are provided to meet different application requirements.

[0131] It can also be seen from the above settings of the first safety unit and the second safety unit that the data mapping table is not stored in the storage area of ​​the control chip, which can avoid being analyzed by slices.

[0132] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0133] The device for wireless data transmission in this embodiment is presented in the form of a functional unit, where the unit refers to an application specific integrated circuit (ASIC) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0134] The embodiment of the present invention also provides a computer device having the above Figure 4 An apparatus for wireless data transmission is shown.

[0135] See also Figure 7 , Figure 7 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 7As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the computer device, including instructions stored in or on the memory to display graphical information of a graphical user interface on an external input / output device (such as a display device coupled to an interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 7 A processor 10 is taken as an example.

[0136] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0137] The aforementioned memory 20 stores instructions executable by at least one processor 10, so that the aforementioned at least one processor 10 executes the method shown in the above embodiment.

[0138] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0139] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0140] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 5 The example of connecting through bus is taken in the following.

[0141] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator rod, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (such as a light emitting diode) and a tactile feedback device (such as a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0142] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0143] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0144] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for wireless data transmission, characterized in that The method comprises: In response to a first operation of a user on a human-computer interaction device, a negotiation key and a data mapping table are obtained based on a wireless receiver and the human-computer interaction device through key negotiation, wherein the data mapping table is randomly obtained based on the negotiation key, and the negotiation key is reset for each first operation, and the wireless receiver is used to obtain the user operation from the human-computer interaction device and transmit the user operation to a user operation receiving device; In response to a second operation of the user on the human-computer interaction device, performing a first permutation on an operation array representing the second operation based on the data mapping table through the human-computer interaction device to obtain a first permutation array, encrypting the first permutation array to obtain encrypted data, and transmitting the encrypted data to the wireless receiver based on the human-computer interaction device; The encrypted data is decrypted by the wireless receiver to obtain a decryption array, the decryption array is subjected to a second permutation based on the data mapping table by the wireless receiver, the operation array is restored, and the operation array is sent to the user operation receiving device.

2. The method according to claim 1, characterized in that The data mapping table includes a first mapping table, which is randomly obtained based on the negotiated key and includes: Creating a first intermediate table, where the array length of the first intermediate table is the same as the array length of the first mapping table, and assigning a value to the first intermediate table based on the sequence number of the first intermediate table; Using the negotiated key as a seed of a pseudo-random algorithm, obtaining a first random number and a second random number, wherein the value range of the first random number and the second random number is from zero to a preset value, and the preset value is a value representing the array length of the first mapping table minus one; Assigning the value corresponding to the first random number in the first intermediate table to the element corresponding to the second random number in the first mapping table; Assign the value corresponding to the preset value in the first intermediate table to the element corresponding to the first random number in the first intermediate table, reduce the preset value by one, regenerate the first random number and the second random number, and repeat the above assignment steps until the preset value is zero.

3. The method according to claim 2, characterized in that The step of performing a first permutation on the operation array representing the second operation based on the data mapping table by the human-computer interaction device to obtain a first permutation array includes: Generate a third random number, where the value range of the third random number is from zero to a value representing the array length of the first mapping table minus one; The replacement data ARR1 in the first replacement array is obtained by: ARR1[i]=T1[(X+ARR[i])%N] Among them, the value range of i is 0 to the value representing the length of the operation array minus one, T1 is the first mapping table, X is the third random number, N is the value representing the array length of the first mapping table minus one, ARR[i] is the operation array, and the first permutation array includes the third random number and the permutation data ARR1.

4. The method according to claim 3, characterized in that: The data mapping table further includes a second mapping table, the second mapping table has the same array length as the first mapping table, and the data mapping table is randomly obtained based on the negotiated key, including: Creating a second intermediate table, where the array length of the second intermediate table is the same as the array length of the first mapping table, and assigning values ​​to the second intermediate table based on the sequence number of the second intermediate table; Assigning the value corresponding to the second random number in the second intermediate table to the element corresponding to the first random number in the second mapping table; Assign the value of the element corresponding to the preset value in the second intermediate table to the element corresponding to the second random number in the second intermediate table, reduce the preset value by one, regenerate the first random number and the second random number, and repeat the above assignment steps until the preset value is zero.

5. The method according to claim 4, characterized in that The step of decrypting the encrypted data by the wireless receiver to obtain a decryption array, performing a second permutation on the decryption array based on the data mapping table by the wireless receiver to restore the operation array comprises: Decrypting the encrypted data, and obtaining the decrypted array including the third random number and the array to be restored; The operation array ARR3 is restored as follows: ARR3[m]=(T2[ARR2[m]]-X+N)%N Among them, the value range of m is 0 to the length of the array to be restored minus one, T2 is the second mapping table, ARR2 is the array to be restored, N is the value representing the array length of the first mapping table minus one, and X is the third random number.

6. The method according to claim 1, characterized in that The step of performing key negotiation with the human-computer interaction device based on the wireless receiver to obtain a negotiated key and a data mapping table includes: Generate a first key pair based on the human-computer interaction device, the first key pair including a first public key and a first private key, and the human-computer interaction device has a fourth public key and a fourth private key; generating a third key pair based on the wireless receiver, the third key pair comprising a third public key and a third private key, the wireless receiver having a second public key and a second private key; Acquire the first public key and the fourth public key based on the wireless receiver, and generate the negotiated key based on the first public key, the fourth public key, the third public key, the third private key, the second public key and the second private key through the wireless receiver; The second public key and the third public key are obtained based on the human-computer interaction device, and the negotiated key is generated by the human-computer interaction device based on the second public key, the third public key, the first public key, the first private key, the fourth public key and the fourth private key.

7. The method according to claim 1, characterized in that The step of performing a first permutation on the operation array representing the second operation based on the data mapping table to obtain a first permutation array, and encrypting the first permutation array to obtain encrypted data includes: padding the first permutation array according to a preset rule, and encrypting the padded first permutation array to obtain the encrypted data; and / or The encrypted data is decrypted by the wireless receiver to obtain a decrypted array, and the decrypted array is subjected to a second replacement based on the data mapping table by the wireless receiver, including: removing the padding from the decrypted array according to the preset rule, and performing the second replacement on the decrypted array without the padding based on the data mapping table.

8. A device for wireless data transmission, characterized in that The device comprises: a human-computer interaction device and a wireless receiver; The human-computer interaction device is configured to perform key negotiation with the wireless receiver to obtain a negotiation key and a data mapping table in response to a first operation of the user on the human-computer interaction device, wherein the data mapping table is randomly obtained based on the negotiation key, and the negotiation key is reset for each first operation; The wireless receiver is used to obtain the user operation from the human-computer interaction device and transmit the user operation to the user operation receiving device; The human-computer interaction device is further configured to, in response to a second operation of the user on the human-computer interaction device, perform a first permutation on an operation array representing the second operation based on the data mapping table to obtain a first permutation array, encrypt the first permutation array to obtain encrypted data, and transmit the encrypted data to the wireless receiver; The wireless receiver is further used to decrypt the encrypted data to obtain a decryption array, perform a second permutation on the decryption array based on the data mapping table, restore the operation array, and send the operation array to the user operation receiving device.

9. The device according to claim 8, characterized in that The human-computer interaction device includes a first security unit, which is arranged between the human-computer interaction device control chip and the human-computer interaction device wireless module, and the first security unit is used to obtain an input signal from the human-computer interaction device control chip, encrypt the input signal, and transmit the encrypted signal to the human-computer interaction device wireless module; or, The first security unit is connected to the human-computer interaction device control chip circuit, and the first security unit is used to obtain an input signal from the human-computer interaction device control chip, encrypt the input signal, and transmit the encrypted signal back to the human-computer interaction device control chip.

10. The device according to claim 8, characterized in that The wireless receiver includes a second security unit, which is arranged between the wireless module of the wireless receiver and the user-operated receiving device, and the second security unit is used to obtain encrypted data from the wireless module of the wireless receiver, decrypt and restore the encrypted data to obtain the operation array, and send the operation array to the user-operated receiving device; or, The second security unit is connected to the wireless module circuit of the wireless receiver, and is used to obtain encrypted data from the wireless module of the wireless receiver, decrypt and restore the encrypted data to obtain the operation array, and transmit the operation array back to the wireless module of the wireless receiver.

Images