Security data generation method and device based on drb protocol, equipment and medium

Abstract

The application relates to a secure data generation method, device and equipment based on a DRB protocol and a medium, wherein the method comprises the following steps: generating a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distributing each trapdoor to each participant by using a verifiable secret sharing strategy; electing a current leader of the DRB protocol, calculating an output value of the trapdoor verifiable delay function according to each trapdoor, and performing a corresponding verification operation on the output value to generate a final valid output set and calculate a valid output sum; verifying the final valid output set and the valid output sum to obtain a verification result, and performing a trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result to generate secure data of the DRB protocol through a result of the trapdoor reconstruction operation. Therefore, the existing DRB protocol under the time delay mechanism cannot effectively guarantee the unpredictability of the protocol while reducing the complexity of the DRB protocol by using the leader.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of decentralized random number generation, and in particular to a secure data generation method and device based on a DRB protocol, equipment and a medium. BACKGROUND

[0002] In the design and application of blockchains, public random numbers play an important role. The election of leaders and committees in consensus protocols, blockchain sharding and smart contracts all require secure and reliable public random numbers. In addition, public random numbers also play an important role in cryptographic applications such as cryptographic protocol parameter generation, privacy protection message services, electronic voting, and social activities such as public election auditing and license plate lottery. In recent years, many public applications have relied on third-party institutions to provide random numbers, so that the reliability of the random numbers is derived from the trust in the third parties. However, recent backdoor leaks of double-elliptic curve pseudo-random number generators and third-party manipulation of random numbers have led to a significant decrease in public trust, and the reliability of random numbers cannot be guaranteed. In addition, in decentralized applications such as blockchains, the provision of random numbers by a trusted third party is contrary to the goal of decentralization.

[0003] As a new type of cryptographic technology, a decentralized randomness beacon (DRB) can generate continuous trusted random values in a decentralized network by a group of mutually untrusted participants. However, in order to achieve decentralization, each participant in many DRB protocols needs to perform a large number of complex cryptographic calculations, resulting in high communication and complexity of the protocol, which cannot be applied to real-world scenarios. In order to ensure the secure generation of random values, existing technologies use a time delay mechanism, i.e., a time delay cryptographic primitive, to construct a DRB. However, in order to reduce the computational and communication complexity to achieve high scalability, the protocol under the existing time delay mechanism usually needs to elect a leader to dominate the protocol process in each round. In some protocols, the leader has too much influence, which is specifically manifested in that the random value of each round is determined only by the random value of the previous round and the secret value of the leader of the current round, so that a malicious participant can predict the random output of multiple rounds after being elected as the leader. Unpredictability is an important security property of a DRB, and the destruction of unpredictability can lead to a series of security problems, including a denial-of-service attack or a node corruption attack on a block producer in a blockchain consensus, and a rampant bribery behavior caused by the destruction of non-receipt in electronic voting.

[0004] In summary, the existing DRB protocols under the time delay mechanism cannot effectively guarantee the unpredictability of the protocol while reducing the complexity of the DRB protocol by using a leader, and thus need to be solved urgently. SUMMARY

[0005] The application provides a secure data generation method, device and equipment based on a DRB protocol, and a medium, to solve the problem that the existing DRB protocol under a time delay mechanism cannot effectively guarantee the unpredictability of the protocol while reducing the complexity of the DRB protocol by using a leader.

[0006] The first aspect of the application provides a secure data generation method based on a DRB protocol, comprising the following steps: generating a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distributing each trapdoor to each participant by using a preset verifiable secret sharing strategy; electing a current leader of the DRB protocol, and calculating an output value of the trapdoor verifiable delay function according to each trapdoor, and performing a corresponding verification operation on the output value by each participant and the leader to generate a final valid output set; calculating a valid output sum according to the final valid output set, and verifying the final valid output set and the valid output sum to obtain a verification result, and performing a trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result to generate secure data of the DRB protocol through the result of the trapdoor reconstruction operation.

[0007] Optionally, in one embodiment of the application, the generation of a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and the distribution of each trapdoor to each participant by using a preset verifiable secret sharing strategy, comprises: initializing the trapdoor verifiable delay function by each participant to generate a trapdoor corresponding to the trapdoor verifiable delay function and a first common parameter; broadcasting the first common parameter to receive at least one second common parameter, and constructing a valid common parameter set according to the at least one second common parameter and the first common parameter; initializing a verifiable secret sharing function by each participant to generate a third common parameter, and distributing the trapdoor to each participant of the DRB protocol by the verifiable secret sharing strategy based on the valid common parameter set and the third common parameter.

[0008] Optionally, in one embodiment of the present application, the method of electing the current leader of the DRB protocol and calculating the output value of the trapdoor verifiable delay function according to each trapdoor, and performing corresponding verification operations on the output value by each participant and the leader to generate a final valid output set, comprises: based on a preset random value of the DRB protocol, causing each participant to elect the current leader of the DRB protocol; calculating and broadcasting the output value of the trapdoor verifiable delay function of each participant according to the preset random value and each trapdoor, to receive the output value sent by other participants; performing a first validity verification on the output value sent by other participants, to construct an initial valid output set according to the output value passing the first validity verification, and sending the initial valid output set to the leader; performing a second validity verification on each initial valid output value in the initial valid output set by the leader, to construct the final valid output set based on the initial valid output value passing the second validity verification.

[0009] Optionally, in one embodiment of the present application, the method of calculating an effective output sum according to the final valid output set, verifying the final valid output set and the effective output sum to obtain a verification result, and performing a trapdoor reconstruction operation of the verifiable secret sharing strategy using the verification result to generate secure data of the DRB protocol through the result of the trapdoor reconstruction operation, comprises: calculating the effective output sum according to the final valid output set, and broadcasting the final valid output set and the effective output sum by the leader; performing a third validity verification on the final valid output set and the effective output sum by each participant, and causing participants passing the third validity verification to broadcast preset voting information; reconstructing the trapdoor corresponding to the trapdoor verifiable delay function of participants failing the third validity verification by each participant using a trapdoor reconstruction operation, and calculating the correct output value of the trapdoor verifiable delay function of the participants failing the third validity verification according to the reconstructed trapdoor; generating the secure data of the DRB protocol based on the correct output value of the participants failing the third validity verification and the effective output sum of the participants passing the third validity verification.

[0010] The second aspect embodiment of the application provides a secure data generation device based on a DRB protocol, comprising: a establishing module configured to generate a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distribute each trapdoor to each participant by using a preset verifiable secret sharing strategy; a contribution module configured to elect a current leader of the DRB protocol, and calculate an output value of the trapdoor verifiable delay function according to each trapdoor, and perform a corresponding verification operation on the output value by each participant and the leader to generate a final valid output set; and a generation module configured to calculate a valid output sum according to the final valid output set, and verify the final valid output set and the valid output sum to obtain a verification result, and perform a trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result to generate secure data of the DRB protocol through a result of the trapdoor reconstruction operation.

[0011] Optionally, in one embodiment of the application, the establishing module comprises: an initialization unit configured to initialize the trapdoor verifiable delay function by each participant to generate a trapdoor corresponding to the trapdoor verifiable delay function and a first public parameter; a first broadcasting unit configured to broadcast the first public parameter to receive at least one second public parameter, and construct a valid public parameter set according to the at least one second public parameter and the first public parameter; and a distribution unit configured to initialize a verifiable secret sharing function by each participant to generate a third public parameter, and distribute the trapdoor to each participant in the DRB protocol by the verifiable secret sharing strategy based on the valid public parameter set and the third public parameter.

[0012] Optionally, in one embodiment of the application, the contribution module comprises: an election unit configured to make each participant elect the current leader of the DRB protocol based on a preset random value of the DRB protocol; a receiving unit configured to calculate and broadcast an output value of the trapdoor verifiable delay function of each participant according to the preset random value and each trapdoor to receive an output value sent by other participants; a first verification unit configured to perform a first validity verification on the output value sent by other participants to construct an initial valid output set according to the output value passing the first validity verification, and send the initial valid output set to the leader; and a second verification unit configured to perform a second validity verification on each initial valid output value in the initial valid output set by the leader to construct the final valid output set based on the initial valid output value passing the second validity verification.

[0013] Optionally, in an embodiment of the present application, the generating module comprises: a second broadcasting unit configured to calculate the valid output sum according to the final valid output set and broadcast the final valid output set and the valid output sum by the leader; a third verifying unit configured to perform third validity verification on the final valid output set and the valid output sum by each participant, and cause participants passing the third validity verification to broadcast preset voting information; a reconstructing unit configured to reconstruct a reconstructed trapdoor corresponding to a trapdoor verifiable delay function of a participant failing the third validity verification by each participant using a trapdoor reconstruction operation, and calculate a correct output value of the trapdoor verifiable delay function of the participant failing the third validity verification according to the reconstructed trapdoor; and an obtaining unit configured to generate secure data of the DRB protocol based on the correct output value of the participant failing the third validity verification and the valid output sum of the participants passing the third validity verification.

[0014] The third aspect of the embodiments of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the method for generating secure data based on the DRB protocol as described in the above embodiments.

[0015] The fourth aspect of the embodiments of the present application provides a computer readable storage medium, which stores a computer program executable by a processor to implement the method for generating secure data based on the DRB protocol as described above.

[0016] Therefore, the embodiments of the present application have the following beneficial effects:

[0017] The embodiments of the present application can generate a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distribute each trapdoor to each participant using a preset verifiable secret sharing strategy; elect a current leader of the DRB protocol, and calculate an output value of the trapdoor verifiable delay function according to each trapdoor, and perform corresponding verification operations on the output value by each participant and the leader to generate a final valid output set; calculate a valid output sum according to the final valid output set, and verify the final valid output set and the valid output sum to obtain a verification result, and perform a trapdoor reconstruction operation of the verifiable secret sharing strategy using the verification result to generate secure data of the DRB protocol through a result of the trapdoor reconstruction operation, thereby reducing the complexity of the DRB protocol using the leader under the time delay mechanism, achieving high scalability, and effectively ensuring the unpredictability of the DRB protocol. Thus, the existing DRB protocol under the time delay mechanism cannot reduce the complexity of the DRB protocol using the leader while effectively ensuring the unpredictability of the protocol, and the like.

[0018] Additional aspects and advantages of the application will be made apparent by the following description and the appended claims. BRIEF DESCRIPTION OF DRAWINGS

[0019] The above and / or additional aspects and advantages of the application will become apparent and be made clear to those skilled in the art from the following description and the appended claims, taken in conjunction with the accompanying drawings.

[0020] Figure 1 An execution logic diagram of a secure data generation method based on a DRB protocol provided by the application;

[0021] Figure 2 A flowchart of a secure data generation method based on a DRB protocol provided by an embodiment of the application;

[0022] Figure 3 An execution flow diagram of a setup phase provided by an embodiment of the application;

[0023] Figure 4 An execution flow diagram of a leader election phase provided by an embodiment of the application;

[0024] Figure 5 An execution flow diagram of a contribution phase provided by an embodiment of the application;

[0025] Figure 6 An execution flow diagram of a negotiation phase provided by an embodiment of the application;

[0026] Figure 7 An execution flow diagram of an output phase provided by an embodiment of the application;

[0027] Figure 8 An example diagram of a secure data generation device based on a DRB protocol according to an embodiment of the application;

[0028] Figure 9 A structural diagram of an electronic device provided by an embodiment of the application.

[0029] Among them, 10-secure data generation device based on DRB protocol, 100-establishment module, 200-contribution module, 300-generation module, 901-memory, 902-processor, 903-communication interface. DETAILED DESCRIPTION

[0030] Embodiments of the present application are described below in detail, examples of which are shown in the accompanying drawings, wherein the same or similar notations represent the same or similar elements or elements having the same or similar functions throughout. The embodiments described below by reference to the drawings are exemplary and are intended to explain the present application, and cannot be understood as a limitation of the present application.

[0031] The DRB protocol-based secure data generation method, device, equipment and medium of the embodiments of the present application are described below with reference to the accompanying drawings. In view of the problem that a malicious participant may predict the random output of the subsequent rounds under the time delay mechanism, it is difficult to guarantee the unpredictability of the DRB protocol, the present application provides a DRB protocol-based secure data generation method, in which each participant in the DRB protocol is assigned a trapdoor according to a preset trapdoor verifiable delay function, and each trapdoor is distributed to each participant using a preset verifiable secret sharing strategy; the current leader of the DRB protocol is elected, and the output value of the trapdoor verifiable delay function is calculated according to each trapdoor, and each participant and the leader perform corresponding verification operations on the output value to generate a final valid output set; the valid output sum is calculated according to the final valid output set, and the final valid output set and the valid output sum are verified to obtain a verification result, and the trapdoor reconstruction operation of the verifiable secret sharing strategy is performed using the verification result to generate the secure data of the DRB protocol through the result of the trapdoor reconstruction operation, thereby reducing the complexity of the DRB protocol using the leader under the time delay mechanism, achieving high scalability, and effectively guaranteeing the unpredictability of the DRB protocol. Thus, the existing DRB protocol under the time delay mechanism cannot effectively guarantee the unpredictability of the protocol while reducing the complexity of the DRB protocol using the leader, and other problems are solved.

[0032] In order to facilitate those skilled in the art to understand the execution logic of the DRB protocol-based secure data generation method of the present application, the following briefly describes some parameters and execution processes in the DRB protocol involved in the present application:

[0033] I. Part of parameter description:

[0034] The DRB protocol of the present application includes n participants, P1, P2, …, Pn. n ; the time parameter of the trapdoor verifiable delay function (VDF) is T; the VDF security parameter is λ; the initial random value is R0, and the rth round random output is Rr. r .

[0035] II. Execution process:

[0036] The DRB protocol of the present application is executed by rounds, and a random value is generated in each round, for example,Figure 1 As shown, the DRB protocol only performs the establishment phase at the beginning, and then performs the leader election phase, the contribution phase, the negotiation phase and the output phase in turn in each round.

[0037] The establishment phase includes a VDF initialization process, a verifiable secret sharing (VSS) initialization process and a secret sharing process.

[0038] The leader election phase can enable each participant to uniformly and randomly elect a leader of the current round according to the random value of the last round.

[0039] The contribution phase includes a VDF calculation process, an output verification process and a leader verification process.

[0040] The negotiation phase includes a leader broadcast process, a participant voting process and a trapdoor reconstruction process.

[0041] The output phase is to calculate the valid VDF output and by the leader and each participant through the corresponding calculation strategy to generate secure data based on the DRB protocol.

[0042] Specifically, Figure 2 A flowchart of a secure data generation method based on the DRB protocol provided by an embodiment of the present application.

[0043] As Figure 2 shown, the secure data generation method based on the DRB protocol includes the following steps:

[0044] In step S201, a trapdoor corresponding to each participant in the DRB protocol is generated according to a preset trapdoor verifiable delay function, and each trapdoor is distributed to each participant using a preset verifiable secret sharing strategy.

[0045] The embodiment of the present application first generates its own public parameter pp i and trapdoor sk i through VDF initialization by each participant P i , broadcasts the VDF public parameter pp i , and exchanges and verifies the received public parameters to obtain the same valid public parameter set P = {pp1, pp2, …, pp n}; secondly, the embodiment of the present application can perform VSS initialization operation, so that each participant runs VSS initialization to generate and disclose VSS public parameters; then, in the embodiment of the present application, each participant can distribute the VDF trapdoor to other participants through the VSS share, thereby providing a reliable basis for the generation of the subsequent valid output set.

[0046] Optionally, in one embodiment of this application, generating a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distributing each trapdoor to each participant using a preset verifiable secret sharing strategy, includes: initializing the trapdoor verifiable delay function by each participant to generate a trapdoor and a first common parameter corresponding to the trapdoor verifiable delay function; broadcasting the first common parameter to receive at least one second common parameter, and constructing a valid common parameter set based on at least one second common parameter and the first common parameter; initializing the verifiable secret sharing function by each participant to generate a third common parameter, and distributing the trapdoor to each participant in the DRB protocol through the verifiable secret sharing strategy based on the valid common parameter set and the third common parameter.

[0047] Specifically, such as Figure 3 As shown, the specific steps of the establishment stage in this application embodiment are as follows:

[0048] 1. VDF Initialization: Each participant P i Running the VDF's Setup(λ) algorithm yields the common parameters (i.e., the first common parameter mentioned above and...). Figure 3 VDF common parameters in (pp) i and the trapdoor sk i and exchange pp i ;

[0049] 2. VSS Initialization: Run VDF's VerifySetup(λ, pp) function. i The algorithm is used to verify all received common parameters (i.e., the second common parameter mentioned above and...). Figure 3 VSS common parameters);

[0050] 3. Secret sharing: All participants receive the same set of valid common parameters P = {pp1, pp2, ..., pp...} n}, each participant P i Perform VSS initialization, share distribution, and share verification operations to distribute its trapdoor sk. i The secret share, and its threshold value is f+1.

[0051] Therefore, the embodiments of this application employ VDF and VSS technologies to achieve protocol initialization, ensuring that each participant obtains a public parameter set and a secret share of the trapdoor, thus guaranteeing the secure generation of subsequent random numbers.

[0052] In step S202, the current leader of the DRB protocol is elected, and the output value of the trapdoor verifiable delay function is calculated according to each trapdoor. The corresponding verification operation is performed on the output value by each participant and the leader to generate the final valid output set.

[0053] Further, the embodiment of the present application also needs to elect the leader of the current round by each participant according to the random value generated in the last round; secondly, each participant inputs the random value and trapdoor of the last round, and quickly calculates and broadcasts the output value of the VDF through the TrapdoorEval algorithm of the VDF; then, each participant can verify the validity of the received VDF output value, and sends the valid output set to the leader, and the leader verifies all the received valid output sets to obtain the final valid output set.

[0054] Optionally, in an embodiment of the present application, the current leader of the DRB protocol is elected, each participant calculates the output value of the trapdoor verifiable delay function according to each trapdoor, and the final valid output set is generated by performing corresponding verification operations on the output value by each participant and the leader, comprising: based on the preset random value of the DRB protocol, each participant elects the current leader of the DRB protocol; each participant calculates and broadcasts the output value of the trapdoor verifiable delay function of each participant according to the preset random value and each trapdoor, so as to receive the output value sent by other participants; performing first validity verification on the output value sent by other participants, so as to construct an initial valid output set according to the output value passing the first validity verification, and send the initial valid output set to the leader; performing second validity verification on each initial valid output value in the initial valid output set by the leader, so as to construct the final valid output set based on the initial valid output value passing the second validity verification.

[0055] It should be noted that, as shown in Figure 4 , in the leader election process of the embodiment of the present application, each participant P i calculates the leader of the current round based on the random value R r-1 of the last round.

[0056] Further, as shown in Figure 5 , the specific steps of the contribution phase in the embodiment of the present application are as follows:

[0057] 1. VDF calculation: each participant P i quickly calculates the output value of the trapdoor VDF: (y r，i , π r，i )←TrapdoorEval(pp i , x r，i , T, sk i ), and broadcasts (y r，i , π r，i );

[0058] 2. Output verification: each participant runs the Verify algorithm of the VDF to verify the received (y r，i, π r，i ) are valid, i.e., {0, 1} ← Verify (pp i , x r，i , T, y r，i , π r，i ), to obtain an initial valid output set, and send the initial valid output set to the leader;

[0059] 3. Leader verification: the leader verifies the validity of all (y r，i , π r，i ) received, i.e., {0, 1} ← Verify (pp i , x r，i , T, y r，i , π r，i ), to obtain a final valid output set {(y r，i , π r，i )|i∈I}, where I is a set of participants corresponding to valid output values.

[0060] Thus, the embodiments of the present application can effectively guarantee that a malicious participant cannot predict the random output of the next round by electing a suitable leader and generating a final valid output set.

[0061] In step S203, a valid output sum is calculated according to the final valid output set, and the final valid output set and the valid output sum are verified to obtain a verification result, and a trapdoor reconstruction operation of a verifiable secret sharing strategy is performed using the verification result to generate secure data of the DRB protocol through a result of the trapdoor reconstruction operation.

[0062] After the final valid output set is constructed, further, the embodiments of the present application can also perform leader broadcasting, participant voting, and trapdoor reconstruction in the negotiation phase, i.e., the leader broadcasts the final valid output set and a VDF output sum (i.e., a valid output); each participant can verify that the valid output set sent by it is in the final valid output set, and if it is in the final valid output set, it broadcasts a voting message to vote; each participant can reconstruct a trapdoor corresponding to an invalid output value through VSS secret recovery, and calculate a correct valid output value.

[0063] In addition, in the output phase, the embodiments of the present application can recalculate the VDF output value and broadcast it by inputting the VDF output sum (i.e., the valid output value) and the trapdoor by the leader. At the same time, other participants slowly calculate the VDF output value of the leader without the trapdoor and always listen to the broadcast, if the valid VDF output (i.e., the valid output value) of the leader is received, the calculation is stopped, and the random output data (i.e., the secure data of the DRB protocol) of this round is calculated through all participants.

[0064] Thus, embodiments of the present application can reduce the communication complexity to the lowest O(n 2 ) of similar protocols while ensuring availability, bias resistance and publicly verifiable, and can tolerate up to 1 / 2 malicious participants controlled by an adversary in a synchronous network and ensure the complete unpredictability of the DRB protocol, i.e., the adversary cannot predict the random output of the current round and the following rounds before the start of the current round.

[0065] Optionally, in an embodiment of the present application, the valid output sum is calculated according to the final valid output set, and the final valid output set and the valid output sum are verified to obtain a verification result, and the trapdoor reconstruction operation of the verifiable secret sharing strategy is performed using the verification result to generate the secure data of the DRB protocol through the result of the trapdoor reconstruction operation, including: calculating the valid output sum according to the final valid output set, and broadcasting the final valid output set and the valid output sum by the leader; performing third validity verification on the final valid output set and the valid output sum by each participant, and causing the participants passing the third validity verification to broadcast preset voting information; reconstructing the reconstruction trapdoor corresponding to the trapdoor verifiable delay function of the participant failing the third validity verification by each participant using the trapdoor reconstruction operation, and calculating the correct output value of the trapdoor verifiable delay function of the participant failing the third validity verification according to the reconstruction trapdoor; and generating the secure data of the DRB protocol based on the correct output value of the participant failing the third validity verification and the valid output sum of the participant passing the third validity verification.

[0066] In actual execution process, the execution logic of the negotiation phase of the embodiments of the present application is as shown in Figure 6 , and the specific steps are as follows:

[0067] 1. Leader broadcast: the leader calculates the sum of valid VDF outputs (i.e., valid output sum) root = ∑ i∈I y r，i , and broadcasts <Propose, root, {(y r，i , π r，i )|i∈I}, l r > message;

[0068] 2. Participant voting: after receiving the Propose message, the participant verifies whether the valid output set sent by the participant is in {(y r，i , π r，i )|i∈I}, and other VDF outputs are valid, and root is the correct output sum (i.e., third validity verification); if the verification passes, broadcast <Vote, root, l r > message to root vote;

[0069] 3. Trapdoor reconstruction: for the participant not in the final valid output set {(yr，i , π r，i The VDF output {(y) in |i∈I} is: r，j , π r，j Given |j∈{1,2,...,n}\I}, at least f+1 participants can perform the secret recovery operation of VSS, reconstructing the VDF trapdoor sk of the corresponding participant using the Lagrange interpolation formula. j And quickly calculate the corresponding output, i.e. (y r，j , π r，j )←TrapdoorEval(pp j x r，j ,T,sk j This ensures that all participants can obtain the root of the sum of all valid VDF outputs.

[0070] In addition, such as Figure 7 As shown, the specific workflow of the output stage in this application embodiment is as follows:

[0071] 1. The leader quickly calculates the output of its trapdoor VDF, i.e. And broadcast (y r , π r );

[0072] 2. Other participants calculate slowly: Simultaneously listen for broadcasts; if a valid (y) is received... r , π r If the condition is met, then stop the calculation;

[0073] 3. All participants calculate the random output for this round (i.e., output the security data of the DRB protocol): R r ←hash(y r All participants receive the random output R for this round. r Then, let the round number r ← r+1, and proceed to the leader election phase to enter the next round of random number generation.

[0074] Therefore, the embodiments of this application, by employing trapdoor verifiable delay functions and verifiable secret sharing technology, ensure the important security properties of the DRB protocol, such as availability, complete unpredictability, anti-bias, and public verifiability, while reducing communication complexity to the lowest level among similar protocols. Moreover, under synchronous networks, it can tolerate adversaries controlling no more than half of the malicious participants, achieving theoretical optimization. It effectively solves the unpredictability problem of existing protocols under delay mechanisms and has high execution efficiency and security performance under synchronous network models.

[0075] According to the security data generation method based on the DRB protocol provided in the embodiment of the present application, the trapdoor corresponding to each participant in the DRB protocol is generated according to a preset trapdoor verifiable delay function, and each trapdoor is distributed to each participant by using a preset verifiable secret sharing strategy; the current leader of the DRB protocol is elected, and the output value of the trapdoor verifiable delay function is calculated according to each trapdoor, and the corresponding verification operation is performed on the output value by each participant and the leader, so as to generate a final valid output set; the valid output sum is calculated according to the final valid output set, and the final valid output set and the valid output sum are verified to obtain a verification result, and the trapdoor reconstruction operation of the verifiable secret sharing strategy is performed by using the verification result, so as to generate the security data of the DRB protocol through the result of the trapdoor reconstruction operation, thereby effectively guaranteeing the unpredictability of the DRB protocol while reducing the complexity of the DRB protocol and realizing high scalability by using the leader under the time delay mechanism.

[0076] Secondly, the security data generation device based on the DRB protocol provided in the embodiment of the present application is described with reference to the accompanying drawings.

[0077] Figure 8 is a block schematic diagram of the security data generation device based on the DRB protocol in the embodiment of the present application.

[0078] As shown in Figure 8 , the security data generation device 10 based on the DRB protocol includes an establishment module 100, a contribution module 200 and a generation module 300.

[0079] The establishment module 100 is configured to generate the trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distribute each trapdoor to each participant by using a preset verifiable secret sharing strategy.

[0080] The contribution module 200 is configured to elect the current leader of the DRB protocol, calculate the output value of the trapdoor verifiable delay function according to each trapdoor, and perform the corresponding verification operation on the output value by each participant and the leader, so as to generate a final valid output set.

[0081] The generation module 300 is configured to calculate the valid output sum according to the final valid output set, verify the final valid output set and the valid output sum, obtain a verification result, and perform the trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result, so as to generate the security data of the DRB protocol through the result of the trapdoor reconstruction operation.

[0082] Optionally, in an embodiment of the present application, the establishment module 100 includes an initialization unit, a first broadcast unit and a distribution unit.

[0083] The initialization unit is configured to initialize a trapdoor verifiable delay function by each participant, and generate a trapdoor corresponding to the trapdoor verifiable delay function and a first common parameter.

[0084] The first broadcasting unit is configured to broadcast the first common parameter, receive at least one second common parameter, and construct a valid common parameter set according to the at least one second common parameter and the first common parameter.

[0085] The distribution unit is configured to initialize a verifiable secret sharing function by each participant, generate a third common parameter, and distribute the trapdoor to each participant of the DRB protocol based on the valid common parameter set and the third common parameter.

[0086] Optionally, in an embodiment of the present application, the contribution module 200 comprises an election unit, a receiving unit, a first verification unit and a second verification unit.

[0087] The election unit is configured to cause each participant to elect a current leader of the DRB protocol based on a preset random value of the DRB protocol.

[0088] The receiving unit is configured to calculate and broadcast an output value of the trapdoor verifiable delay function of each participant according to the preset random value and each trapdoor, and receive the output value sent by other participants.

[0089] The first verification unit is configured to perform first validity verification on the output value sent by other participants, construct an initial valid output set according to the output value passing the first validity verification, and send the initial valid output set to the leader.

[0090] The second verification unit is configured to perform second validity verification on each initial valid output value in the initial valid output set by the leader, and construct a final valid output set based on the initial valid output value passing the second validity verification.

[0091] Optionally, in an embodiment of the present application, the generation module 300 comprises a second broadcasting unit, a third verification unit, a reconstruction unit and an acquisition unit.

[0092] The second broadcasting unit is configured to calculate an effective output sum according to the final valid output set, and broadcast the final valid output set and the effective output sum by the leader.

[0093] The third verification unit is configured to perform third validity verification on the final valid output set and the effective output sum by each participant, and cause the participant passing the third validity verification to broadcast preset voting information.

[0094] The reconstruction unit is configured to reconstruct a reconstruction trapdoor corresponding to the trapdoor verifiable delay function of the participant who fails the third validity verification by using the reconstruction trapdoor operation of each participant, and calculate the correct output value of the trapdoor verifiable delay function of the participant who fails the third validity verification according to the reconstruction trapdoor.

[0095] The acquisition unit is configured to generate the secure data of the DRB protocol based on the correct output value of the participant who fails the third validity verification and the valid output sum of the participant who passes the third validity verification.

[0096] It should be noted that the foregoing explanation and description of the embodiment of the method for generating secure data based on the DRB protocol also applies to the embodiment of the device for generating secure data based on the DRB protocol, which will not be described here again.

[0097] The device for generating secure data based on the DRB protocol according to the embodiment of the present application comprises a establishing module configured to generate a trapdoor corresponding to each participant in the DRB protocol according to a preset trapdoor verifiable delay function, and distribute each trapdoor to each participant by using a preset verifiable secret sharing strategy; a contribution module configured to elect a current leader of the DRB protocol, and calculate an output value of the trapdoor verifiable delay function according to each trapdoor, and perform a corresponding verification operation on the output value by each participant and the leader to generate a final valid output set; and a generation module configured to calculate a valid output sum according to the final valid output set, and verify the final valid output set and the valid output sum to obtain a verification result, and perform a trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result to generate secure data of the DRB protocol by a result of the trapdoor reconstruction operation, so as to reduce the complexity of the DRB protocol by using the leader under the time delay mechanism, realize high scalability, and effectively guarantee the unpredictability of the DRB protocol.

[0098] Figure 9 The electronic device provided in the embodiment of the present application is shown in a structural schematic diagram. The electronic device can comprise:

[0099] The memory 901, the processor 902, and the computer program stored in the memory 901 and executable on the processor 902.

[0100] The processor 902 implements the method for generating secure data based on the DRB protocol provided in the above embodiments when executing the program.

[0101] Further, the electronic device further comprises:

[0102] The communication interface 903 is configured to communicate between the memory 901 and the processor 902.

[0103] The memory 901 is configured to store the computer program executable on the processor 902.

[0104] The memory 901 can include a high-speed RAM memory, and can also include a non-volatile memory, for example, at least one disk memory.

[0105] If the memory 901, the processor 902 and the communication interface 903 are implemented independently, the communication interface 903, the memory 901 and the processor 902 can be connected to each other through a bus and complete communication between each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For convenience of representation, Figure 9 In the figure, only one thick line is used to represent, but it does not mean that there is only one bus or one type of bus.

[0106] Optionally, in a specific implementation, if the memory 901, the processor 902 and the communication interface 903 are integrated on a chip, the memory 901, the processor 902 and the communication interface 903 can complete communication between each other through an internal interface.

[0107] The processor 902 can be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.

[0108] The embodiments of the present application also provide a computer readable storage medium, which stores a computer program, and the program is executed by a processor to implement the above-mentioned security data generation method based on the DRB protocol.

[0109] In the description of the application, reference to "one embodiment", "some embodiments", "an example", "a specific example", or "some examples" means that a particular feature, structure, material, or characteristic being described is included in at least one embodiment or example of the application. The appearances of the phrase in various places in the specification are not necessarily all referring to the same embodiment or example. Furthermore, the described specific features, structures, materials, or characteristics can be combined in any suitable manner in one or more embodiments or examples. In addition, the usage of "N" means at least two, for example, two, three or the like, unless explicitly stated otherwise.

[0110] Furthermore, the terms "first", "second", or the like, are used merely as a designation of certain elements or features, and do not imply or connote relative importance or a specific order of categorization thereof. Accordingly, features described as "first" or "second" can be explicitly or implicitly included in at least one of the features. In the description of the application, the meaning of "N" is at least two, for example, two, three, etc., unless explicitly specified otherwise.

[0111] Any process or method descriptions or blocks in flow charts or otherwise described herein represent embodiments which can be managed as one or more modules, segments, or portions of code which include one or more executable instructions for implementing specific logic functions or steps, and alternate implementations are possible. In some embodiments, the processes and methods described can be executed by one or more apparatuses or devices, either directly or after conversion to another language. Alternate implementations are possible.

[0112] The logic and / or steps represented in the flowcharts and / or described herein, for example, can be considered as a sequence of instructions to implement logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, apparatus, or device, such as a computer-based system, processor- based system, or other system that can fetch the instructions from the instruction execution system, apparatus, or device and execute the instructions. For purposes of this specification, a "computer-readable medium" can be any apparatus that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device. The computer-readable medium can be a computer- readable storage medium or a computer-readable signal medium. The computer- readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer-readable storage medium include the following: an electrical connection having one or more wires (electrical connections), a portable computer diskette (a magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, and a portable compact disc read-only memory (CDROM). In addition, the computer-readable medium can even be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via, for example, optical scanning of the paper or other medium, then compiled, interpreted, or otherwise processed in a suitable manner, if necessary, and then stored in a computer memory.

[0113] It should be understood that aspects of the application can be implemented in hardware, software, firmware or combinations thereof. In the above embodiments, the N steps or methods can be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. If implemented in hardware and in another embodiment, any of the following technologies, known in the art, or their combinations can be used: discrete logic circuitry having logic gates for implementing logic functions on data signals, application specific integrated circuits having appropriate combinational logic gates, programmable gate arrays (PGA), field programmable gate arrays (FPGA), etc.

[0114] Those skilled in the art can understand that all or part of the steps carried out by the above-mentioned embodiment methods can be completed by programs instructing related hardware, and the programs can be stored in a computer-readable storage medium. When the programs are executed, one or a combination of the steps of the method embodiments is included.

[0115] In addition, each of the functional units in the various embodiments of the present application can be integrated in one processing module, or each of the units can be physically present separately, or two or more units can be integrated in one module. The integrated module can be implemented in the form of hardware or in the form of a software functional module. When the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer readable storage medium.

[0116] The storage medium mentioned above can be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it should be understood that the above embodiments are exemplary and should not be construed as limiting the present application, and those skilled in the art can make changes, modifications, replacements and variations to the above embodiments within the scope of the present application.

Claims

1. A method for generating secure data based on a DRB protocol, characterized by, The method comprises the following steps: According to the preset trapdoor verifiable delay function, a trapdoor corresponding to each participant in the DRB protocol is generated, and each trapdoor is distributed to each participant by using a preset verifiable secret sharing strategy; The current leader of the DRB protocol is elected, and the output value of the trapdoor verifiable delay function is calculated according to each trapdoor, and the corresponding verification operation is performed on the output value by each participant and the leader to generate a final valid output set; According to the final valid output set, a valid output sum is calculated, and the final valid output set and the valid output sum are verified to obtain a verification result, and the trapdoor reconstruction operation of the verifiable secret sharing strategy is performed by using the verification result to generate the security data of the DRB protocol through the result of the trapdoor reconstruction operation; According to the final valid output set, the valid output sum is calculated, and the final valid output set and the valid output sum are broadcasted by the leader; The final valid output set and the valid output sum are subjected to third validity verification by each participant, and the participants passing the third validity verification broadcast preset voting information; Each participant reconstructs the trapdoor corresponding to the trapdoor verifiable delay function of the participant failing the third validity verification by using the trapdoor reconstruction operation, and calculates the correct output value of the trapdoor verifiable delay function of the participant failing the third validity verification according to the reconstructed trapdoor; Based on the correct output value of the participant failing the third validity verification and the valid output sum of the participant passing the third validity verification, the security data of the DRB protocol is generated. According to the preset trapdoor verifiable delay function, a trapdoor corresponding to each participant in the DRB protocol is generated, and each trapdoor is distributed to each participant by using a preset verifiable secret sharing strategy; 2. The method of claim 1, wherein, The trapdoor verifiable delay function is initialized by each participant to generate a trapdoor corresponding to the trapdoor verifiable delay function and a first common parameter; The first common parameter is broadcasted to receive at least one second common parameter, and an effective common parameter set is constructed according to the at least one second common parameter and the first common parameter; The verifiable secret sharing function is initialized by each participant to generate a third common parameter, and the trapdoor is distributed to each participant of the DRB protocol by the verifiable secret sharing strategy based on the effective common parameter set and the third common parameter. ​ 3. The method of claim 1, wherein, The election is the current leader of the DRB protocol, and the output value of the trapdoor verifiable delay function is calculated according to each trapdoor, and the corresponding verification operation is performed on the output value by each participant and the leader to generate a final valid output set, including: Based on the preset random value of the DRB protocol, so that each participant elects the current leader of the DRB protocol; According to the preset random value and each trapdoor, the output value of the trapdoor verifiable delay function of each participant is calculated and broadcasted to receive the output value sent by other participants; The first validity verification is performed on the output value sent by the other participants, so as to construct an initial valid output set according to the output value passed through the first validity verification, and send the initial valid output set to the leader; The second validity verification is performed on each initial valid output value in the initial valid output set by the leader, so as to construct the final valid output set based on the initial valid output value passed through the second validity verification.

4. A secure data generating apparatus based on a DRB protocol, characterized by comprising: Including: The establishment module is used for generating the trapdoor corresponding to each participant in the DRB protocol according to the preset trapdoor verifiable delay function, and distributing each trapdoor to each participant by using the preset verifiable secret sharing strategy; The contribution module is used for electing the current leader of the DRB protocol, and calculating the output value of the trapdoor verifiable delay function according to each trapdoor, and performing corresponding verification operation on the output value by each participant and the leader to generate a final valid output set; The generation module is used for calculating the valid output sum according to the final valid output set, verifying the final valid output set and the valid output sum to obtain a verification result, and performing trapdoor reconstruction operation of the verifiable secret sharing strategy by using the verification result, so as to generate the security data of the DRB protocol through the result of trapdoor reconstruction operation; The generation module includes: The second broadcast unit is used for calculating the valid output sum according to the final valid output set, and broadcasting the final valid output set and the valid output sum by the leader; The third verification unit is used for performing third validity verification on the final valid output set and the valid output sum by each participant, and making the participants passing through the third validity verification broadcast preset voting information; The reconstruction unit is used for reconstructing the reconstruction trapdoor corresponding to the trapdoor verifiable delay function of the participant failing to pass the third validity verification by each participant by using trapdoor reconstruction operation, and calculating the correct output value of the trapdoor verifiable delay function of the participant failing to pass the third validity verification according to the reconstruction trapdoor; The acquisition unit is used for generating the security data of the DRB protocol based on the correct output value of the participant failing to pass the third validity verification and the valid output sum of the participant passing through the third validity verification.

5. The apparatus of claim 4, wherein, The establishment module includes: The initialization unit is configured to initialize the trapdoor verifiable delay function by each participant, to generate a trapdoor corresponding to the trapdoor verifiable delay function and a first common parameter; The first broadcasting unit is configured to broadcast the first common parameter, to receive at least one second common parameter, and to construct a valid common parameter set according to the at least one second common parameter and the first common parameter; The distribution unit is configured to initialize a verifiable secret sharing function by each participant, to generate a third common parameter, and to distribute the trapdoor to each participant of the DRB protocol based on the valid common parameter set and the third common parameter.

6. The apparatus of claim 4, wherein, The contribution module comprises: The election unit is configured to cause each participant to elect a current leader of the DRB protocol based on a preset random value of the DRB protocol; The receiving unit is configured to calculate and broadcast an output value of the trapdoor verifiable delay function of each participant according to the preset random value and each trapdoor, to receive an output value sent by another participant; The first verification unit is configured to perform first validity verification on the output value sent by the another participant, to construct an initial valid output set according to the output value passing the first validity verification, and to send the initial valid output set to the leader; The second verification unit is configured to perform second validity verification on each initial valid output value in the initial valid output set by the leader, to construct the final valid output set based on the initial valid output value passing the second validity verification.

7. An electronic device, comprising: The computer program is stored in the memory and executable on the processor, and the processor executes the program to implement the DRB protocol-based secure data generation method according to any one of claims 1-3. The program is executed by the processor to implement the DRB protocol-based secure data generation method according to any one of claims 1-3.

8. A computer readable storage medium having stored thereon a computer program, characterized in that, ​

Images