Improved AES (Advanced Encryption Standard) data security transmission method and system

Abstract

The invention discloses an improved AES data security transmission method and system, and relates to the encryption technology, and the method comprises the steps: carrying out the encryption of plaintext data through employing an L-AES-128 algorithm based on the to-be-transmitted plaintext data of first equipment, and obtaining first ciphertext data; generating a seed based on a timestamp corresponding to data sending and the identifier of the first device, and inputting the seed into a pseudo-random number generator to generate a random bit stream so as to obtain second ciphertext data; and determining third ciphertext data based on the first ciphertext data and the second ciphertext data, and calculating summary information of the third ciphertext data by using a summary algorithm, so as to send the third ciphertext data and the summary information to a second device, and decrypting the third ciphertext data and the summary information in the second device. The reliable data security transmission method is designed from the application level, and the integrity, reliability and security of the data before and after transmission are guaranteed.

Description

Technical Field

[0001] The present application relates to the field of encryption technology, and in particular to an improved AES data security transmission method and system. Background Art

[0002] With the continuous development of wireless communication technology, encryption and decryption technology, and the significant improvement of data processing capabilities of hardware equipment, the security of data in the process of transmission and exchange of information needs to be strengthened. The traditional method of ensuring data security transmission only adopts some constraints on the data format. Although this method can ensure the security of data transmission to a certain extent, there is still a risk of important information being intercepted and tampered with, which is difficult to meet the current rapidly developing data transmission security needs.

[0003] At the same time, the original AES encryption method has a high correlation between adjacent round keys, and the extended key algorithm is not secure enough. When the round keys are cracked, they are easily attacked by Square, resulting in information leakage. In addition, the complexity of the loop iteration operation is too high, which is not friendly to the operation of resource-constrained devices. Summary of the invention

[0004] The embodiment of the present application provides an improved AES data security transmission method and system, and designs a reliable data security transmission method from the application level to ensure the integrity, reliability and security of data before and after transmission.

[0005] The embodiment of the present application provides an improved AES data security transmission method, including:

[0006] Based on the plaintext data to be transmitted by the first device, encrypt the plaintext data using the L-AES-128 algorithm to obtain first ciphertext data; and

[0007] Generate a seed based on a timestamp corresponding to when the data is sent and an identifier of the first device, and input the seed into a pseudo-random number generator to generate a random bit stream to obtain second ciphertext data;

[0008] Based on the first ciphertext data and the second ciphertext data, third ciphertext data is determined, and summary information of the third ciphertext is calculated using a summary algorithm, so as to send the third ciphertext data and the summary information to the second device for decryption at the second device.

[0009] Optionally, based on the plaintext data to be transmitted by the first device, encrypting the plaintext data by using the L-AES-128 algorithm to obtain the first ciphertext data includes:

[0010] The one-dimensional Lorenz system and the Tent system are iterated for a specified number of times, where the state equation of the one-dimensional Lorenz system satisfies:

[0011] x=λ(yx)

[0012] y=rx-xz-y

[0013] z=xy-bz

[0014] Where x, y, z are the convective motion amplitude, the temperature difference between the ascending and descending airflows, and the vertical temperature gradient, respectively; λ is the Prandtl coefficient, r is the Rayleigh coefficient, and b is the adjustment parameter;

[0015] The state equation of the Tent system satisfies:

[0016]

[0017] where a n is the chaotic variable, μ is the control parameter;

[0018] After iterating a specified number of times, a corresponding first chaotic sequence and a second chaotic sequence are generated, wherein the first chaotic sequence includes the x, y, and z values ​​after iterating a specified number of times, and the second chaotic sequence includes the a after iterating a specified number of times. n value;

[0019] A mathematical operation is performed based on the first chaotic sequence and the second chaotic sequence, and the obtained result is used as an extended key to encrypt the plaintext data.

[0020] Optionally, performing a mathematical operation based on the first chaotic sequence and the second chaotic sequence and using the obtained result as an extended key sequence to encrypt the plaintext data includes:

[0021] XORing the y value in the first chaotic sequence with the plaintext data to generate a first sub-ciphertext;

[0022] The x value of the second iteration of the first chaotic sequence is combined with the a value of the second chaotic sequence iterating the set number of times. n The values ​​are XORed to obtain multi-round dual chaotic keys;

[0023] The double chaotic key of any round and the first sub-ciphertext are subjected to byte substitution, shifting, and obfuscation encryption in the corresponding round, and the obfuscated encrypted data enters the next round;

[0024] The output data is XORed with the z value of the first chaotic sequence to obtain the first ciphertext data.

[0025] Optionally, before XORing the y value in the first chaotic sequence with the plaintext data to generate the first sub-ciphertext, the method further includes: grouping the plaintext data, and first transposing the grouped plaintext data and the extended key, and then performing an XOR operation.

[0026] Optionally, the value x of the second number of times the first chaotic sequence is iterated is combined with the value a of the second number of times the second chaotic sequence is iterated n The values ​​are XORed, where the second number is six.

[0027] Optionally, determining the third ciphertext data based on the first ciphertext data and the second ciphertext data includes:

[0028] The first ciphertext data and the second ciphertext data are accumulated to obtain the third ciphertext data.

[0029] Optionally, sending the third ciphertext data and the summary information to the second device for decryption at the second device includes: calculating a summary value of the third ciphertext data after transmission at the second device, and comparing it with the sent summary information for verification.

[0030] An embodiment of the present application also proposes an improved AES data security transmission system, comprising a first device and a second device, wherein the first device and the second device both comprise a processor and a memory, the memory stores a computer program, and when the computer program is executed by the processor, the steps of the improved AES data security transmission method as described above are implemented.

[0031] The method of the embodiment of the present application designs a reliable data security transmission method from the application level to ensure the integrity, reliability and security of the data before and after transmission.

[0032] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0034] Figure 1 The following is a flowchart of an improved AES data security transmission method according to an embodiment of the present application;

[0035] Figure 2 This is a hardware interaction diagram of the improved AES data security transmission method according to an embodiment of the present application;

[0036] Figure 3 The design of the L-AES-128 encryption algorithm for the improved AES data security transmission method of the embodiment of the present application;

[0037] Figure 4 The flowchart of the L-AES-128 encryption algorithm of the improved AES data security transmission method according to the embodiment of the present application is shown;

[0038] Figure 5 This is the overall data encryption process of the improved AES data security transmission method of the embodiment of the present application. DETAILED DESCRIPTION

[0039] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0040] The present application embodiment provides an improved AES data security transmission method, such as Figure 1 As shown, the following steps are included:

[0041] In step S101, based on the plaintext data A to be transmitted by the first device, the plaintext data is encrypted in groups using the L-AES-128 algorithm to obtain the first ciphertext data B1. For example, in some specific examples, the plaintext data to be transmitted may also be preprocessed, and after the preprocessing, the plaintext data is encrypted in groups using the L-AES-128 algorithm to obtain the first ciphertext data, such as Figure 2 As shown, the embodiment of the present application and subsequent embodiments all take the data transmission interaction between device unit 1 (first device) and device unit 2 (second device) through a wireless network as an example. Device unit 1 and device unit 2 are only used as examples. The actual situation may include multiple devices. The specific method is not repeated in this application. The L-AES-128 algorithm in this application is an improvement based on the AES encryption algorithm. Specifically, the L-AES-128 algorithm generates an extended key by constructing a high-dimensional dual chaotic system composed of a one-dimensional Lorenz system and a Tent system, and increases the transposition operation and reduces the number of iterations during the encryption process to encrypt the plaintext data to obtain the ciphertext.

[0042] In step S102, a seed is generated based on the timestamp corresponding to the time when the data is sent and the identifier of the first device, and the seed is input into a pseudo-random number generator to generate a random bit stream to obtain the second ciphertext data B2. In some embodiments, the timestamp corresponding to the time when the data is sent can be inverted and XORed with the serial number of the device, and the result is input into the pseudo-random number generator as a seed to generate a random bit stream.

[0043] In step S103, based on the first ciphertext data B1 and the second ciphertext data B2, the third ciphertext data B is determined, and the summary information of the third ciphertext is calculated using a summary algorithm, so that the third ciphertext data and the summary information are sent to the second device for decryption on the second device. In some embodiments, the summary algorithm can be an MD5 algorithm, and the ciphertext data B and the calculated MD5 value C can be sent to another device unit 2.

[0044] When device unit 2 receives the data B' and C', it calculates B' using the MD5 algorithm to obtain the corresponding MD5 value D. A verification and decryption mechanism is introduced to ensure that the data is not tampered with during the data transmission process, thereby improving the security of the data. For example, in some specific examples, the second device performs a comparison and verification of C' and D before and after the transmission. If the comparison is correct, the next step of decryption is performed, which is the reverse process of the encryption process; if the comparison and verification fails, the data is discarded and a response ACK is sent to device unit 1, thereby ensuring the reliability of data transmission.

[0045] The method of the embodiment of the present application designs a reliable data security transmission method from the application level to ensure the integrity, reliability and security of the data before and after transmission.

[0046] The L-AES-128 of the present application generates an extended key by constructing a high-dimensional dual chaotic system consisting of a one-dimensional Lorenz system and a Tent system. In the encryption process, a transposition operation is added, the number of iterations is reduced, and the plaintext data is encrypted in groups to obtain the ciphertext. In some embodiments, Figure 3 As shown, based on the plaintext data to be transmitted by the first device, the plaintext data is encrypted in groups using the L-AES-128 algorithm to obtain the first ciphertext data, including:

[0047] The one-dimensional Lorenz system and the Tent system are iterated for a specified number of times, where the state equation of the one-dimensional Lorenz system satisfies:

[0048] x=λ(yx)

[0049] y=rx-xz-y

[0050] z=xy-bz

[0051] Where x, y, z are the convective motion amplitude, the temperature difference between the ascending and descending airflows, and the vertical temperature gradient, respectively; λ is the Prandtl coefficient, r is the Rayleigh coefficient, and b is the adjustment parameter;

[0052] The state equation of the Tent system satisfies:

[0053]

[0054] where a n is the chaotic variable, μ is the control parameter;

[0055] After iterating a specified number of times, a corresponding first chaotic sequence and a second chaotic sequence are generated, wherein the first chaotic sequence includes the x, y, and z values ​​after iterating a specified number of times, and the second chaotic sequence includes the a after iterating a specified number of times. n In the specific embodiment of the present application, the x, y, and z values ​​iterated 150 times are represented by x. 150 ,y 150 、z 150 It means that the corresponding second chaotic sequence with 150 iterations contains a 150 .

[0056] A mathematical operation is performed based on the first chaotic sequence and the second chaotic sequence, and the obtained result is used as an extended key to encrypt the plaintext data.

[0057] In some embodiments, Figure 3 , Figure 4 As shown, performing mathematical operations based on the first chaotic sequence and the second chaotic sequence and using the obtained results as an extended key sequence to encrypt the plaintext data includes:

[0058] The y value in the first chaotic sequence is XORed with the plaintext data to generate the first sub-ciphertext, that is, using y 150 Performing XOR with the plaintext data generates a first sub-ciphertext.

[0059] The x value of the second iteration of the first chaotic sequence is combined with the a value of the second chaotic sequence iterating the set number of times. n In some embodiments, the value x of the second number of times the first chaotic sequence is iterated is XORed with the value a of the second number of times the second chaotic sequence is iterated. n The value is XORed, where the second number is six. Figure 4 As shown, the x of the Lorenz system is 150 -x 156 With Tent System 150 -a156 XOR to obtain the high-dimensional double chaotic key k 150 -k 156 .

[0060] like Figure 4 As shown, the double chaotic key of any round and the first sub-ciphertext are byte-substituted, shifted, and obfuscated in the corresponding round, and the obfuscated encrypted data enters the next round.

[0061] The output data is XORed with the z value of the first chaotic sequence to obtain the first ciphertext data B1, that is, Figure 4 As shown, the output data A2 is compared with the Lorenz chaos z 150 XOR generates the final first ciphertext data B1.

[0062] In some embodiments, before XORing the y value in the first chaotic sequence with the plaintext data to generate the first sub-ciphertext, the process also includes: grouping the plaintext data, and transposing the grouped plaintext data and the extended key before performing XOR operation.

[0063] Specific as Figure 4 As shown, another improvement of the embodiment of the present application also includes:

[0064] a) adding a transposition operation to the plaintext packet data and the corresponding chaotic extended key;

[0065] b) Reduce the original 10 rounds of iterations to 6 rounds of loop operations, thereby reducing the number of iterations.

[0066] In some embodiments, based on the first ciphertext data and the second ciphertext data, determining the third ciphertext data includes:

[0067] The first ciphertext data and the second ciphertext data are accumulated to obtain the third ciphertext data.

[0068] In some embodiments, sending the third ciphertext data and the summary information to a second device for decryption at the second device includes: calculating a summary value of the transmitted third ciphertext data at the second device, and comparing it with the sent summary information for verification.

[0069] The present application also proposes an implementation case of an improved AES data security transmission method, such as Figure 5 As shown, the following steps are included:

[0070] [Step A1] Obtaining data and signals to be transmitted from device unit 1 to device unit 2;

[0071] [Step A2] Pre-processing the data before encryption;

[0072] Step A2 includes the following steps:

[0073] A2.1 To address the problem of glitches in plaintext data and low data smoothness, data preprocessing is performed.

[0074] A2.2 Specifically, the plaintext data can first be filtered by limiting the obviously abnormal and discrete data and signals, and then the noise can be filtered out by mean filtering to improve the smoothness of the data.

[0075] [Step A3] Encrypt using L-AES-128 encryption algorithm

[0076] Step A3 includes the following steps:

[0077] A3.1 pre-processes the original data A and groups them into groups of 128 bits.

[0078] A3.2 firstly performs transposition operation on the obtained plaintext group data and the corresponding chaotic extended key, and then performs XOR operation on the two.

[0079] A3.3 performs a byte substitution operation on the result obtained in step A3.2.

[0080] A3.4 performs a row shift operation on the result obtained in step A3.3.

[0081] A3.5 performs a column obfuscation operation on the result obtained in step A3.4.

[0082] 3.6 XOR the result obtained in step 3.5 with the corresponding extended key.

[0083] A3.7 Repeat steps A3.3-A3.6 5 times. (Reduce the number of times and reduce the complexity of the calculation)

[0084] A3.8 performs a byte substitution operation on the result obtained in step A3.7.

[0085] A3.9 performs a row shift operation on the result obtained in step A3.8.

[0086] A3.10 performs XOR operation on the result obtained in step A3.9 and the corresponding extended key, and finally outputs the intermediate ciphertext data B1.

[0087] In step A4, the timestamp corresponding to the data transmission is inverted and XORed with the serial number of the device. The result is used as a seed and input into a pseudo-random number generator to generate a random bit stream B2.

[0088] Step A5: Add the ciphertexts obtained in step 3 and step 4 to perform MD5 calculation.

[0089] The ciphertext data B1 is added to the random bit stream B2 to obtain the final ciphertext data B, and then the MD5 algorithm is used to calculate the MD5 value C.

[0090] Step A6 The data is transmitted to the device unit 2 via wireless and decrypted

[0091] A6.1 Data B and C are transmitted by wireless transmission. Device unit 2 receives data B' and C'. Data B' is calculated using the MD5 algorithm to obtain the MD5 value D.

[0092] A6.2 Device unit 2 compares the MD5 values ​​C' and D before and after transmission to see if they are the same. If they are the same, decryption is performed (the decryption process is the reverse process of the encryption process). If they are different, the data is discarded and a response is sent to the sender.

[0093] The AES data security transmission method of the embodiment of the present application adopts the L-AES-128 algorithm, which enhances the irreversibility of key expansion and improves the security of plaintext encryption; reduces the number of loop iterations, and on the basis of ensuring the encryption effect, reduces the burden of resource occupation and improves the algorithm execution efficiency.

[0094] The method of the present application introduces pseudo-random number encryption, and through a composite encryption method combining pseudo-random number encryption with L-AES-128, the difficulty of ciphertext cracking is increased, and the reliability of data interaction is improved.

[0095] The method of the present application uses the encryption result as input for MD5 encryption operation, and performs a comparison check before decryption to ensure that the received data is intact and has not been tampered with.

[0096] An embodiment of the present application also proposes an improved AES data security transmission system, comprising a first device and a second device, wherein the first device and the second device both comprise a processor and a memory, the memory stores a computer program, and when the computer program is executed by the processor, the steps of the improved AES data security transmission method as described above are implemented.

[0097] It should be noted that in the various embodiments of the present application, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "includes a ..." does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0098] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0099] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0100] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. An improved AES data security transmission method, characterized in that: include: Based on the plaintext data to be transmitted by the first device, encrypt the plaintext data using the L-AES-128 algorithm to obtain first ciphertext data; as well as, Generate a seed based on a timestamp corresponding to when the data is sent and an identifier of the first device, and input the seed into a pseudo-random number generator to generate a random bit stream to obtain second ciphertext data; Based on the first ciphertext data and the second ciphertext data, third ciphertext data is determined, and summary information of the third ciphertext is calculated using a summary algorithm, so as to send the third ciphertext data and the summary information to the second device for decryption at the second device.

2. The improved AES data security transmission method as claimed in claim 1, characterized in that: Based on the plaintext data to be transmitted by the first device, encrypting the plaintext data by using the L-AES-128 algorithm to obtain the first ciphertext data includes: The one-dimensional Lorenz system and the Tent system are iterated for a specified number of times, where the state equation of the one-dimensional Lorenz system satisfies: x=λ(yx) y=rx-xz-y z=xy-bz Where x, y, z are the convective motion amplitude, the temperature difference between the ascending and descending airflows, and the vertical temperature gradient, respectively; λ is the Prandtl coefficient, r is the Rayleigh coefficient, and b is the adjustment parameter; The state equation of the Tent system satisfies: where a n is the chaotic variable, μ is the control parameter; After iterating a specified number of times, a corresponding first chaotic sequence and a second chaotic sequence are generated, wherein the first chaotic sequence includes the x, y, and z values ​​after iterating a specified number of times, and the second chaotic sequence includes the a after iterating a specified number of times. n value; A mathematical operation is performed based on the first chaotic sequence and the second chaotic sequence, and the obtained result is used as an extended key to encrypt the plaintext data.

3. The improved AES data security transmission method as claimed in claim 2, characterized in that: Performing mathematical operations based on the first chaotic sequence and the second chaotic sequence and using the obtained results as an extended key sequence to encrypt the plaintext data comprises: XORing the y value in the first chaotic sequence with the plaintext data to generate a first sub-ciphertext; The x value of the second iteration of the first chaotic sequence is combined with the a value of the second chaotic sequence iterating the set number of times. n The values ​​are XORed to obtain multi-round dual chaotic keys; The double chaotic key of any round and the first sub-ciphertext are subjected to byte substitution, shifting, and obfuscation encryption in the corresponding round, and the obfuscated encrypted data enters the next round; The output data is XORed with the z value of the first chaotic sequence to obtain the first ciphertext data.

4. The improved AES data security transmission method as claimed in claim 3, characterized in that: Before performing XOR operation on the y value in the first chaotic sequence and the plaintext data to generate the first sub-ciphertext, the method also includes: grouping the plaintext data, and first transposing the grouped plaintext data and the extended key, and then performing XOR operation.

5. The improved AES data security transmission method as claimed in claim 3, characterized in that: The x value of the second iteration of the first chaotic sequence is combined with the a value of the second chaotic sequence iterating the set number of times. n The values ​​are XORed, where the second number is six.

6. The improved AES data security transmission method as claimed in claim 1, characterized in that: Determining third ciphertext data based on the first ciphertext data and the second ciphertext data includes: The first ciphertext data and the second ciphertext data are accumulated to obtain the third ciphertext data.

7. The improved AES data security transmission method as claimed in claim 1, characterized in that: Sending the third ciphertext data and the summary information to the second device for decryption at the second device includes: calculating the summary value of the transmitted third ciphertext data at the second device, and comparing it with the sent summary information for verification.

8. An improved AES data security transmission system, characterized in that: The method comprises a first device and a second device, wherein the first device and the second device both comprise a processor and a memory, wherein a computer program is stored on the memory, and when the computer program is executed by the processor, the steps of the improved AES data security transmission method as described in any one of claims 1 to 7 are implemented.

Images