Mixnet network configuration method and device

Abstract

The invention relates to the field of network configuration, and discloses a Mixnet network configuration method and device, and the method achieves the configuration of a Mixnet network based on a decentralized node selection mechanism of a VRF, improves the safety and anonymity of the network while avoiding the centralization problem, and improves the reliability of the network. The method comprises the following steps: dividing a Mixnet network configuration process into a plurality of configuration periods including a release stage, a setting stage and a selection stage; in the release stage of any configuration period, the weight information is released on the bulletin board; in the setting stage of any configuration period, generating a pseudo-random output value by executing VRF based on the public random seed, and outputting the pseudo-random output value to the bulletin board; and in a selection stage of any configuration period, determining a selected node set according to a pseudo-random output value and weight information, and distributing nodes in the selected node set to different levels of the Mixnet network to form a network topology structure.

Description

Technical Field

[0001] The present invention relates to the technical field of network configuration, and in particular to a Mixnet network configuration method and device. Background Art

[0002] Mixnet is a network architecture used to enhance the privacy and anonymity of communications. It achieves anonymous communication by splitting information into multiple small packets and obfuscating and reorganizing them through a series of intermediate nodes to hide the sender, receiver, and transmission path of the message. Mixnet is one of the core ideas of many privacy protection protocols (such as Tor). The basic principle of Mixnet is to encrypt and randomly sort the messages sent by users through "mixing" to confuse the relationship between them, thereby protecting the privacy of communication. Through multiple mixing, external observers cannot determine the original sender or final recipient of a message. Even if attackers intercept some communication data, it is difficult for them to track or reconstruct the original communication path due to the random mixing of messages.

[0003] Mixnet network configuration is an important part of achieving anonymous network communication and the basis for protecting user privacy. The configuration accuracy of Mixnet directly affects the security and anonymity of the anonymous communication system. However, traditional ixnet network configuration methods usually rely on centralized servers to select nodes, which may lead to centralization problems and single point failures, and lack open and transparent verification methods, relying on centralized nodes to publish weights. Summary of the invention

[0004] The present invention provides a Mixnet network configuration method and device, which are used to implement the configuration of the Mixnet network based on a VRF-based decentralized node selection mechanism.

[0005] A first aspect of the present invention provides a Mixnet network configuration method, the Mixnet network configuration method comprising: dividing the Mixnet network configuration process into multiple configuration cycles, each of the configuration cycles comprising a publishing phase, a setting phase and a selection phase; when in the publishing phase of any configuration cycle, publishing weight information on a bulletin board; when in the setting phase of any configuration cycle, based on a public random seed, by executing VRF, generating a pseudo-random output value, and outputting the pseudo-random output value to the bulletin board; when in the selection phase of any configuration cycle, determining a selected node set according to the pseudo-random output value and the weight information, and allocating the nodes in the selected node set to different levels of the Mixnet network to form a network topology structure.

[0006] Optionally, the Mixnet network configuration method further includes: when in the publishing phase of any configuration cycle, publishing identity information on a bulletin board, signing the identity information and weight information to obtain signature information, and publishing the signature information on the bulletin board.

[0007] Optionally, when in the setup phase of any configuration cycle, based on a public random seed, a pseudo-random output value is generated by executing VRF, and the pseudo-random output value is output to a bulletin board, including: using a public random seed and a private key of a node as input of VRF, generating a pseudo-random output value by executing VRF; obtaining a certificate of VRF, and signing the pseudo-random output value and the certificate of VRF; and outputting the generated pseudo-random output value, the certificate of VRF, and the signature information to the bulletin board.

[0008] Optionally, the Mixnet network configuration method also includes: verifying whether the weight information posted on the bulletin board matches the signature based on the signature information on the bulletin board, and if so, marking the weight information as verified weight information; verifying whether the pseudo-random output value posted on the bulletin board is correct, and if so, marking the pseudo-random output value as a verified pseudo-random output value.

[0009] Optionally, when in the selection phase of any configuration cycle, the selected node set is determined according to the pseudo-random output value and the weight information, and the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology structure, including: when in the selection phase of any configuration cycle, a weight table is constructed according to the verified pseudo-random output value and weight information; the index position of each node in the weight table is calculated according to the hash value corresponding to the pseudo-random output value; a node set is constructed, and the node occupying the index position is searched from the weight table according to the calculated index position, and the found node is placed in the node set until the number of nodes in the node set reaches a preset node number value; the nodes in the node set are allocated to different levels of the Mixnet network to form a network topology structure.

[0010] Optionally, allocating the nodes in the node set to different levels of the Mixnet network to form a network topology structure includes: obtaining a preset network scale and demand, and dividing the Mixnet network into different levels according to the network scale and demand, and determining the demand of each level; allocating the nodes in the node set to different levels of the Mixnet network according to the demand of each level and the weight value of the nodes in the node set; determining the connection relationship between each node according to the level division and node allocation results, and forming a network topology structure.

[0011] Optionally, the node information in the node set is recorded in a transparent log, which contains the ID, weight information, pseudo-random output value and index position of each node.

[0012] The second aspect of the present invention provides a Mixnet network configuration device, including: a division module, used to divide the Mixnet network configuration process into multiple configuration cycles, each of which includes a publishing phase, a setting phase and a selection phase; a publishing module, used to publish weight information on a bulletin board when in the publishing phase of any configuration cycle; a setting module, used to generate a pseudo-random output value based on a public random seed by executing VRF when in the setting phase of any configuration cycle, and output the pseudo-random output value to the bulletin board; a selection module, used to determine a selected node set according to the pseudo-random output value and the weight information when in the selection phase of any configuration cycle, and allocate the nodes in the selected node set to different levels of the Mixnet network to form a network topology structure.

[0013] In the technical solution provided by the present invention, a decentralized node selection mechanism based on VRF is used to implement Mixnet network configuration. Each node generates a pseudo-random output value within the configuration cycle. The pseudo-random output value is calculated based on a public seed and can be publicly verified through a bulletin board. The use of VRF ensures the fairness and unpredictability of the node selection process, so that the adversary cannot manipulate or predict the node selection result in advance, thereby ensuring the fairness of the network configuration. In addition, the node weight and VRF output information are published in each configuration cycle through a public bulletin board, and the authenticity and consistency of this information are ensured through mutual verification between nodes. The use of the bulletin board ensures that the weight information of each node is transparent and verifiable in the network. Any user can verify whether the node meets the configuration requirements, thereby increasing the transparency and anti-manipulation ability of the system. In addition, in each configuration cycle, the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology. The hierarchical mechanism ensures that the node combination on each communication path is highly random and unpredictable, thereby preventing the adversary from monitoring or attacking through path analysis. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 A flowchart of a Mixnet network configuration method provided by an embodiment of the present invention; Figure 2 A schematic diagram of the structure of a Mixnet network configuration device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0015] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0016] For ease of understanding, the specific process of the embodiment of the present invention is described below. Figure 1 In an embodiment of the present invention, a Mixnet network configuration method includes: S101. Divide the Mixnet network configuration process into multiple configuration cycles, each of which includes a publishing phase, a setting phase, and a selection phase.

[0017] S102: When in the publishing phase of any configuration cycle, publish the weight information on the bulletin board.

[0018] S103: When in the setup phase of any configuration cycle, a pseudo-random output value is generated by executing VRF based on a public random seed, and the pseudo-random output value is output to the bulletin board.

[0019] S104. When in the selection phase of any configuration cycle, the selected node set is determined according to the pseudo-random output value and weight information, and the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology structure.

[0020] It is understandable that the execution subject of the present invention may be a Mixnet network configuration device, or may be a terminal or a server, which is not specifically limited here. The embodiment of the present invention is described by taking a server as the execution subject as an example.

[0021] In this embodiment, in step S101, the consistency member management aims to ensure that all nodes in Mixnet can maintain a consistent view during the network configuration process, and the node selection process is decentralized and unbiased. In order to achieve this goal, in this embodiment, the Mixnet network configuration process is divided into multiple configuration cycles, each configuration cycle includes a release phase, a setup phase, and a selection phase.

[0022] In this embodiment, in step S102, when in the publishing phase of any configuration cycle, the node publishes the weight information on the bulletin board.

[0023] In addition, the node also publishes identity information on the bulletin board, signs the identity information and weight information, obtains the signature information, and publishes the signature information on the bulletin board.

[0024] Specifically, each node publishes a triple to the bulletin board, where is the public key of the node, which is the unique identifier of the node; is the weight value of the node, which indicates the bandwidth or performance of the node in the network; The node private key is used to sign the weight information to verify the authenticity of the weight information.

[0025] In this embodiment, the weight information and signature posted on the bulletin board are verified to match according to the signature information on the bulletin board. If they match, the weight information is marked as verified weight information, that is, all nodes and users can access the bulletin board and verify whether the signature of the weight information submitted by each node matches. If they match, it means that the verification is passed, and the weight information of the node can be used in the selection stage. The use of the bulletin board ensures that the weight information of each node is transparent and verifiable in the network, and any user can verify whether the node meets the configuration requirements, thereby increasing the transparency and anti-manipulation ability of the system.

[0026] In this embodiment, in step S103, when in the setting stage of any configuration cycle, a pseudo-random output value is generated by executing VRF based on a public random seed, and the pseudo-random output value is output to the bulletin board, specifically including: using the public random seed and the private key of the node as the input of VRF, generating a pseudo-random output value by executing VRF; obtaining the certificate of VRF, and signing the pseudo-random output value and the certificate of VRF; outputting the generated pseudo-random output value, the certificate of VRF and the signature information to the bulletin board.

[0027] In this embodiment, a public random seed and a private key of a node are used as inputs of a VRF, and a pseudo-random output value is generated by executing the VRF, which is specifically expressed as: , where It is a pseudo-random output value, that is, the output value generated by VRF, representing the commitment value of the node; It is a proof of VRF, used to verify the authenticity of the output value.

[0028] In this embodiment, the node submits To the notice board.

[0029] In this embodiment, the pseudo-random output value posted on the bulletin board is verified to be correct. If correct, the pseudo-random output value is marked as a verified pseudo-random output value, that is, the bulletin board records the pseudo-random output values ​​and VRF proofs submitted by all nodes, and allows other nodes and users to verify whether the VRF output of each node is correct. If correct, it means that the verification is passed, and the pseudo-random output value submitted by the node can be used in the selection phase.

[0030] In this embodiment, in step S104, when in the selection stage of any configuration cycle, the selected node set is determined according to the pseudo-random output value and weight information, and the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology structure, specifically including: when in the selection stage of any configuration cycle, a weight table is constructed according to the verified pseudo-random output value and weight information; the index position of each node in the weight table is calculated according to the hash value corresponding to the pseudo-random output value; a node set is constructed, and the node occupying the index position is searched from the weight table according to the calculated index position, and the found node is placed in the node set until the number of nodes in the node set reaches a preset node number value; the nodes in the node set are allocated to different levels of the Mixnet network to form a network topology structure.

[0031] In this embodiment, when in the selection phase of any configuration cycle, a weight table is constructed based on the verified pseudo-random output value and weight information. The size of the weight table is the sum of all node weights. Occupies in the weight table These intervals are sorted according to the pseudo-random output values ​​of the nodes to ensure fairness.

[0032] In this embodiment, the hash value corresponding to the pseudo-random output value , calculate each node Index position in the weight table: ; According to the calculated index position, the node occupying the index position is searched from the weight table, and the found node is put into the node set. The selected node is the node occupying the index position in the corresponding interval, and this process continues until the number of nodes in the node set reaches the preset node number value or the total bandwidth is met.

[0033] In this embodiment, the nodes in the node set are allocated to different levels of the Mixnet network to form a network topology structure, including: obtaining a preset network scale and demand, and dividing the Mixnet network into different levels according to the network scale and demand, and determining the demand of each level; according to the demand of each level and the weight value of the nodes in the node set, the nodes in the node set are allocated to different levels of the Mixnet network; according to the level division and node allocation results, the connection relationship between each node is determined to form a network topology structure.

[0034] For example, the Mixnet network is divided into different layers, including the core layer, aggregation layer, and access layer. Each layer has its own specific functions and requirements. The core layer is responsible for high-speed data transmission and traffic exchange, and needs to have the characteristics of high bandwidth, low latency, and high availability. The aggregation layer is located between the access layer and the core layer, responsible for traffic aggregation and screening, and isolating departments (through virtual LAN or VLAN technology). The access layer is the entrance for user devices to access the network, and is responsible for providing user access, authentication, security policies and other functions.

[0035] In this embodiment, after the layers are divided, the specific requirements of each layer are further clarified. For example, the core layer may require high-performance routers and switches to support high-speed data transmission; the aggregation layer may need to have the ability to control traffic and implement security policies; and the access layer needs to provide user authentication and access management functions.

[0036] In this embodiment, each node in the node set has a specific weight value, which is usually determined based on factors such as the node's performance, capacity, and processing power. According to the needs of each level and the weight value of the node, the nodes can be reasonably allocated to different levels of the Mixnet network. This ensures that each level can get sufficient resource support while avoiding waste of resources.

[0037] After the nodes are allocated, the connection relationship between the nodes needs to be determined based on the hierarchical division and node allocation results, including determining the connection path and method between the core nodes, aggregation nodes and access nodes. Finally, based on the determined connection relationship, the topology of the Mixnet network can be formed.

[0038] In this embodiment, the node information in the node set is recorded in a transparent log, which contains the ID, weight information, pseudo-random output value and index position of each node. Users can verify whether the selection of Mix nodes meets expectations through the bulletin board. The transparent log ensures that all details of the Mixnet configuration process are publicly available, further enhancing users' trust in the security of the system.

[0039] In practice, a series of experiments are designed to verify the effectiveness of the above method and to evaluate the performance and consistency of the system under different numbers of nodes and weight distributions.

[0040] For example, Experiment 1: Node selection consistency experiment.

[0041] The purpose of the experiment is to verify whether the system can ensure the consistency of node selection in different cycles.

[0042] The experimental setup is as follows: A hybrid network with 1000 nodes is simulated, where the weights of the nodes are distributed according to the historical data of the real network.

[0043] In each cycle, each node generates and submits VRF output, which is verified and selected based on the information on the bulletin board.

[0044] Evaluation indicators include consistency rate and conflict rate. The consistency rate refers to verifying the consistency of Mix node selection results by all clients in each cycle when all nodes participate honestly. The conflict rate refers to recording whether the system can detect and exclude nodes that maliciously modify weight information or pseudo-random output values.

[0045] The experimental results are: in the case of honest nodes, the consistency rate reaches 100%, and all clients have exactly the same results for Mixnet configuration.

[0046] In the simulated attack scenario, the bulletin board successfully detected and excluded malicious nodes, ensuring the consistency of selection of the remaining nodes.

[0047] For example, Experiment 2: Anti-attack ability experiment.

[0048] The purpose of the experiment is to verify whether the system can maintain fairness and transparency of selection in the presence of malicious nodes.

[0049] The experimental setup is as follows: 20% malicious nodes are added to the experimental environment, which try to manipulate their VRF output to get a higher selection probability.

[0050] The experiment monitors the performance of the system under these malicious behaviors, including whether the bulletin board successfully detects abnormal behavior and its impact on network configuration results.

[0051] Evaluation indicators include deviation rate and bulletin board detection rate. Deviation rate refers to the proportion of malicious nodes that successfully manipulate the selection results. Bulletin board detection rate refers to the proportion of nodes that are successfully detected and rejected by the bulletin board that do not comply with the rules.

[0052] The experimental results are as follows: The experimental results show that even when 20% of the nodes are malicious nodes, the bulletin board detection rate still reaches more than 95%, and the deviation rate remains within 5%.

[0053] The experimental results show that the Mixnet network configuration method of this embodiment can effectively defend against node manipulation in most cases and maintain the fairness of network configuration.

[0054] The Mixnet network configuration method of this embodiment is implemented based on the decentralized node selection mechanism of VRF. Each node generates a pseudo-random output value within the configuration cycle. The pseudo-random output value is calculated based on a public seed and can be publicly verified through a bulletin board. The use of VRF ensures the fairness and unpredictability of the node selection process, making it impossible for an adversary to manipulate or predict the node selection result in advance, thereby ensuring the fairness of the network configuration. In addition, the weight and VRF output information of the node are published in each configuration cycle through a public bulletin board, and the authenticity and consistency of this information are ensured through mutual verification between nodes. The use of the bulletin board ensures that the weight information of each node is transparent and verifiable in the network. Any user can verify whether the node meets the configuration requirements, thereby increasing the transparency and anti-manipulation ability of the system. In addition, within each configuration cycle, the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology. The hierarchical mechanism ensures that the node combination on each communication path is highly random and unpredictable, thereby preventing the adversary from monitoring or attacking through path analysis.

[0055] The Mixnet network configuration method in the embodiment of the present invention is described above. The device in the embodiment of the present invention is described below. Figure 2 In an embodiment of the present invention, a Mixnet network configuration device is used to implement the above-mentioned Mixnet network configuration method. The implementation method of the Mixnet network configuration device includes: A division module 201 is used to divide the Mixnet network configuration process into multiple configuration cycles, each of which includes a publishing phase, a setting phase, and a selection phase; A publishing module 202, used to publish weight information on a bulletin board when in a publishing phase of any configuration cycle; A setting module 203, configured to generate a pseudo-random output value by executing VRF based on a public random seed when in a setting phase of any configuration cycle, and output the pseudo-random output value to a bulletin board; The selection module 204 is used to determine the selected node set according to the pseudo-random output value and the weight information when in the selection phase of any configuration cycle, and allocate the nodes in the selected node set to different levels of the Mixnet network to form a network topology structure.

[0056] The Mixnet network configuration device in this embodiment is implemented based on the decentralized node selection mechanism of VRF. Each node generates a pseudo-random output value within the configuration cycle. The pseudo-random output value is calculated based on a public seed and can be publicly verified through a bulletin board. The use of VRF ensures the fairness and unpredictability of the node selection process, so that the adversary cannot manipulate or predict the node selection result in advance, thereby ensuring the fairness of the network configuration. In addition, the weight and VRF output information of the node are published in each configuration cycle through a public bulletin board, and the authenticity and consistency of this information are ensured through mutual verification between nodes. The use of the bulletin board ensures that the weight information of each node is transparent and verifiable in the network. Any user can verify whether the node meets the configuration requirements, thereby increasing the transparency and anti-manipulation ability of the system. In addition, in each configuration cycle, the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology. The hierarchical mechanism ensures that the node combination on each communication path is highly random and unpredictable, thereby preventing the adversary from monitoring or attacking through path analysis.

[0057] Figure 2 The structure of the Mixnet network configuration device shown does not constitute a limitation on the Mixnet network configuration device, and can implement the steps of the Mixnet network configuration method provided by the above-mentioned method embodiments.

[0058] As described above, the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features thereof may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A Mixnet network configuration method, characterized in that: The Mixnet network configuration method includes: The Mixnet network configuration process is divided into multiple configuration cycles, each of which includes a publishing phase, a setting phase, and a selection phase; When in the release phase of any configuration cycle, the weight information is published on the bulletin board; When in the setup phase of any configuration cycle, based on the public random seed, a pseudo-random output value is generated by executing VRF, and the pseudo-random output value is output to the bulletin board; When in the selection phase of any configuration cycle, the selected node set is determined according to the pseudo-random output value and the weight information, and the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology structure.

2. The Mixnet network configuration method according to claim 1, characterized in that: Also includes: When in the release phase of any configuration cycle, the identity information is published on the bulletin board, and the identity information and weight information are signed to obtain the signature information, which is then published on the bulletin board.

3. The Mixnet network configuration method according to claim 2, characterized in that: When in the setup phase of any configuration cycle, based on the public random seed, a pseudo-random output value is generated by executing VRF, and the pseudo-random output value is output to the bulletin board, including: Use the public random seed and the node's private key as the input of VRF, and generate a pseudo-random output value by executing VRF; Get the VRF certificate and sign the pseudo-random output value and the VRF certificate; The generated pseudo-random output value, VRF proof and signature information are output to the bulletin board.

4. The Mixnet network configuration method according to claim 2, characterized in that: Also includes: Verify whether the weight information posted on the bulletin board matches the signature according to the signature information on the bulletin board. If they match, mark the weight information as verified weight information. Verify whether the pseudo-random output value posted on the bulletin board is correct. If correct, mark the pseudo-random output value as verified pseudo-random output value.

5. The Mixnet network configuration method according to claim 4, characterized in that: When in the selection phase of any configuration cycle, the selected node set is determined according to the pseudo-random output value and the weight information, and the nodes in the selected node set are allocated to different levels of the Mixnet network to form a network topology structure, including: When in the selection phase of any configuration cycle, obtain the verified pseudo-random output value and the verified weight information; Construct a weight table based on the verified pseudo-random output value and the verified weight information; Calculate the index position of each node in the weight table based on the hash value corresponding to the verified pseudo-random output value; Constructing a node set, searching for a node occupying an index position from a weight table according to the calculated index position, and placing the found node into the node set until the number of nodes in the node set reaches a preset node number value; The nodes in the node set are allocated to different levels of the Mixnet network to form a network topology structure.

6. The Mixnet network configuration method according to claim 5, characterized in that: The allocating nodes in the node set to different levels of the Mixnet network to form a network topology structure includes: Get the preset network scale and requirements, divide the Mixnet network into different layers according to the network scale and requirements, and determine the requirements of each layer; Allocate the nodes in the node set to different levels of the Mixnet network according to the requirements of each level and the weight values ​​of the nodes in the node set; According to the hierarchical division and node allocation results, the connection relationship between each node is determined and the network topology is formed.

7. The Mixnet network configuration method according to claim 5, characterized in that: The node information in the node set is recorded in a transparent log, which contains the ID, weight information, pseudo-random output value and index position of each node.

8. A Mixnet network configuration device, characterized in that: include: A partitioning module, used to divide the Mixnet network configuration process into multiple configuration cycles, each of which includes a publishing phase, a setting phase, and a selection phase; A publishing module, used to publish weight information on the bulletin board when in the publishing phase of any configuration cycle; A setup module, configured to generate a pseudo-random output value by executing VRF based on a public random seed when in a setup phase of any configuration cycle, and output the pseudo-random output value to a bulletin board; The selection module is used to determine the selected node set according to the pseudo-random output value and the weight information when in the selection phase of any configuration cycle, and allocate the nodes in the selected node set to different levels of the Mixnet network to form a network topology structure.

Images