Data security transmission method based on auxiliary chip

Abstract

The invention provides a secure data transmission method based on an auxiliary chip, and belongs to the technical field of data interaction. The data security transmission method based on the auxiliary chip comprises the following steps: step 1, when it is detected that an interaction unit of a system enters a security interaction mode, controlling the system to be connected with the auxiliary chip, and disconnecting the system from the interaction unit; step 2, the system receives first encrypted data sent by the auxiliary chip, wherein the first encrypted data is generated by encrypting sensitive data generated by the interaction unit by the auxiliary chip; 3, sending the first encrypted data to a destination end, decrypting the first encrypted data, and finally outputting sensitive data; and 4, regularly performing security auditing and testing on the auxiliary chip to ensure the security and integrity of the system. Data security is enhanced, and encrypted transmission of sensitive information is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of data interaction, and in particular to a data security transmission method based on an auxiliary chip. Background Art

[0002] At present, as handheld Internet financial products become more and more popular, financial operation functions are becoming more and more powerful, and financial data is increasing, higher requirements are placed on user security protection. However, it is difficult to effectively deal with malware in physical products that steal sensitive data such as passwords, amount figures, etc., and the security of data transmission cannot be guaranteed.

[0003] Therefore, the present invention proposes a data security transmission method based on an auxiliary chip. Summary of the invention

[0004] The present invention provides a data security transmission method based on an auxiliary chip, which is used to realize the encrypted transmission of sensitive data by controlling the connection between the system and the auxiliary chip in a secure interactive mode. The auxiliary chip is regularly audited and tested for security to ensure the security and data integrity of the system and improve the overall information protection capability.

[0005] In one aspect, the present invention provides a data security transmission method based on an auxiliary chip, comprising:

[0006] Step 1: When it is detected that the interaction unit of the system enters the safe interaction mode, the system is controlled to be connected to the auxiliary chip, and the connection between the system and the interaction unit is disconnected;

[0007] Step 2: The system receives first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting the sensitive data generated by the interaction unit;

[0008] Step 3: Send the first encrypted data to the destination, decrypt the first encrypted data, and finally output the sensitive data;

[0009] Step 4: Regularly perform security audits and tests on the auxiliary chip to ensure the security and integrity of the system.

[0010] On the other hand, when it is detected that the interaction unit of the system enters the safe interaction mode, controlling the system to connect with the auxiliary chip and disconnecting the system from the interaction unit includes:

[0011] The system continuously monitors the status of the interaction unit to determine whether it has entered a safe interaction mode;

[0012] When the system receives a signal sent by the interaction unit to exit the safe interaction mode, controlling the interaction unit to establish a connection with the system;

[0013] The connection between the auxiliary chip and the system is disconnected, and the data generated by the interaction unit is directly sent by the system.

[0014] On the other hand, it also includes:

[0015] The auxiliary chip performs self-locking when receiving a trigger signal; wherein the trigger signal is generated by the auxiliary chip when the electronic product is disassembled.

[0016] On the other hand, it also includes:

[0017] When the system is in a safe interaction mode, the system sends a switching signal to the bidirectional switch of the interaction unit;

[0018] After receiving the switching signal, the bidirectional switch connects the bidirectional switch on one side between the system and the auxiliary chip, and automatically disconnects the bidirectional switch on the other side between the interactive unit and the system.

[0019] On the other hand, the system receives first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting the sensitive data generated by the interaction unit, including:

[0020] The interactive unit collects sensitive data by input, and initializes and standardizes the sensitive data to obtain standard sensitive data;

[0021] The interaction unit sends the standard sensitive data to the auxiliary chip through a secure channel;

[0022] The auxiliary chip encrypts standard sensitive data using a securely stored key, where the key is generated based on a set of public parameters, including a prime number and a generator;

[0023] The auxiliary chip and the interactive unit each select a private key a and b, where a and b are random integers less than a prime number, and obtain public keys A and B respectively. The shared key of the auxiliary chip and the interactive unit is calculated based on the public keys:

[0024] Where K represents the shared key, g represents the generator, p represents a prime number, mod(p,A) represents the remainder function of p and A, and mod(p,B) represents the remainder function of p and B;

[0025] Encrypted communication is established between the auxiliary chip and the interactive unit using a shared key according to a symmetric encryption algorithm, and the standard sensitive data is encrypted into first encrypted data.

[0026] On the other hand, it also includes:

[0027] In order to prevent the encryption algorithm from being attacked, the digital signature authentication method is combined to ensure the authenticity of the public key.

[0028] On the other hand, the first encrypted data is sent to the destination, and the first encrypted data is decrypted, and finally the sensitive data is output, including:

[0029] After verifying the integrity of the first encrypted data, encapsulating the first encrypted data and metadata to obtain a first data packet;

[0030] The auxiliary chip transmits the first data packet from the system to the destination end according to the communication protocol. After the destination end unpacks the received first data packet, it decrypts the first encrypted data based on the shared key to obtain second decrypted data, and uses a pre-set hash value to verify the integrity of the second decrypted data. If the integrity meets the complete requirements, the second decrypted data is restored to sensitive data. Otherwise, the auxiliary chip retransmits the data.

[0031] On the other hand, security audits and tests are performed regularly on auxiliary chips to ensure the security and integrity of the system, including:

[0032] Clarify the audit parameters and conduct security audit and testing on auxiliary chips based on the audit parameters;

[0033] Conduct simulated attacks on the auxiliary chip according to the penetration test to discover the vulnerabilities of the auxiliary chip, and evaluate its security protection capabilities based on the discovered vulnerabilities;

[0034] Construct test data and evaluate the integrity of the auxiliary chip by determining whether the test data changes during the transmission and storage process of the auxiliary chip.

[0035] Compared with the prior art, the present invention has the following beneficial effects:

[0036] The present invention provides a data security transmission method based on an auxiliary chip, which is used to realize the encrypted transmission of sensitive data by controlling the connection between the system and the auxiliary chip in a secure interactive mode. The auxiliary chip is regularly audited and tested for security to ensure the security and data integrity of the system and improve the overall information protection capability. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1 The present invention is a flowchart of a data security transmission method based on an auxiliary chip provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] Embodiment 1:

[0041] like Figure 1 As shown, an embodiment of the present invention provides a data security transmission method based on an auxiliary chip, comprising:

[0042] Step 1: When it is detected that the interaction unit of the system enters the safe interaction mode, the system is controlled to be connected to the auxiliary chip, and the connection between the system and the interaction unit is disconnected;

[0043] Step 2: The system receives first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting the sensitive data generated by the interaction unit;

[0044] Step 3: Send the first encrypted data to the destination, decrypt the first encrypted data, and finally output the sensitive data;

[0045] Step 4: Regularly perform security audits and tests on the auxiliary chip to ensure the security and integrity of the system.

[0046] In this embodiment, the system refers to a computing and communication platform that integrates multiple components.

[0047] In this embodiment, the interaction unit refers to a component for interaction between a user and the system, for example, a biometric device (such as fingerprint recognition, facial recognition) or other sensors (such as temperature sensors, motion sensors).

[0048] In this embodiment, the secure interaction mode refers to an operation mode adopted in a specific situation to protect sensitive information and ensure system security.

[0049] In this embodiment, the auxiliary chip refers to a dedicated hardware component used in conjunction with a main processor or a main control unit in an electronic system.

[0050] In this embodiment, the first encrypted data refers to data generated by encrypting the sensitive data generated by the interaction unit through the auxiliary chip.

[0051] In this embodiment, the sensitive data refers to data generated by encrypting the sensitive data generated by the interaction unit through the auxiliary chip.

[0052] In this embodiment, the destination end refers to the final recipient of the data transmission.

[0053] In this embodiment, decryption is the process of converting encrypted data back to its original, readable state.

[0054] In this embodiment, security audit refers to a systematic inspection and evaluation of an information system, network or application.

[0055] In this embodiment, security refers to the ability of a system, network or data to maintain its integrity, confidentiality and availability when facing various potential threats.

[0056] In this embodiment, integrity is a basic concept of information security, which refers to ensuring that data remains accurate, reliable and not modified without authorization during storage, processing and transmission.

[0057] In this embodiment, testing refers to a series of evaluation and verification processes performed on the auxiliary chip and various parts of its interaction with the system, including: functional testing, performance testing, safety testing, etc.

[0058] The working principle and beneficial effects of the above technical solution are: through the connection between the control system and the auxiliary chip, the secure transmission of sensitive data is realized. The auxiliary chip encrypts the interactive unit data to ensure information security, and regular audits are conducted to ensure system integrity and improve overall protection capabilities.

[0059] Embodiment 2:

[0060] On the basis of the above-mentioned embodiment 1, when it is detected that the interaction unit of the system enters the safe interaction mode, controlling the system to connect with the auxiliary chip and disconnecting the system from the interaction unit includes:

[0061] The system continuously monitors the status of the interaction unit to determine whether it has entered a safe interaction mode;

[0062] When the system receives a signal sent by the interaction unit to exit the safe interaction mode, controlling the interaction unit to establish a connection with the system;

[0063] The connection between the auxiliary chip and the system is disconnected, and the data generated by the interaction unit is directly sent by the system.

[0064] In this embodiment, a connection refers to a communication channel established between two or more devices, systems or components.

[0065] The working principle and beneficial effect of the above technical solution are: by continuously monitoring the state of the interaction unit, the safe interaction mode is judged. When an exit signal is received, the system reconnects the interaction unit and disconnects the auxiliary chip to achieve direct data transmission, thereby improving the flexibility and security of the system.

[0066] Embodiment 3:

[0067] Based on the above embodiment 2, it also includes:

[0068] The auxiliary chip performs self-locking when receiving a trigger signal; wherein the trigger signal is generated by the auxiliary chip when the electronic product is disassembled.

[0069] In this embodiment, the trigger signal refers to a specific electrical signal used to activate a certain event operation.

[0070] In this embodiment, self-locking is a safety mechanism, which means that the device automatically enters a locked state under certain conditions.

[0071] The working principle and beneficial effects of the above technical solution are: a trigger signal is generated by the auxiliary chip when the electronic product is disassembled, and a self-locking mechanism is implemented to effectively prevent unauthorized access, protect sensitive information in the product, and enhance the security and anti-tampering capabilities of the device.

[0072] Embodiment 4:

[0073] Based on the above embodiment 2, it also includes:

[0074] When the system is in a safe interaction mode, the system sends a switching signal to the bidirectional switch of the interaction unit;

[0075] After receiving the switching signal, the bidirectional switch connects the bidirectional switch on one side between the system and the auxiliary chip, and automatically disconnects the bidirectional switch on the other side between the interactive unit and the system.

[0076] In this embodiment, the bidirectional switch is an electronic switch capable of controlling the transmission of signals in two directions.

[0077] The working principle and beneficial effect of the above technical solution are: by sending a switching signal and controlling the bidirectional switch of the interaction unit, the system and the auxiliary chip can be safely interacted with each other, which can ensure the security of data transmission, prevent information leakage, and improve the protection capability and interaction efficiency of the system.

[0078] Embodiment 5:

[0079] On the basis of the above-mentioned embodiment 1, the system receives the first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting the sensitive data generated by the interaction unit, including:

[0080] The interactive unit collects sensitive data by input, and initializes and standardizes the sensitive data to obtain standard sensitive data;

[0081] The interaction unit sends the standard sensitive data to the auxiliary chip through a secure channel;

[0082] The auxiliary chip encrypts standard sensitive data using a securely stored key, where the key is generated based on a set of public parameters, including a prime number and a generator;

[0083] The auxiliary chip and the interactive unit each select a private key a and b, where a and b are random integers less than a prime number, and obtain public keys A and B respectively. The shared key of the auxiliary chip and the interactive unit is calculated based on the public keys:

[0084] Where K represents the shared key, g represents the generator, p represents a prime number, mod(p,A) represents the remainder function of p and A, and mod(p,B) represents the remainder function of p and B;

[0085] Encrypted communication is established between the auxiliary chip and the interactive unit using a shared key according to a symmetric encryption algorithm, and the standard sensitive data is encrypted into first encrypted data.

[0086] In this embodiment, initialization standardization is a data processing step, which is mainly used to convert the collected sensitive data into a standard format.

[0087] In this embodiment, standard sensitive data refers to sensitive data that conforms to predetermined formats, rules and standards after initialization and standardization processing.

[0088] In this embodiment, a prime number is a natural number greater than 1 and divisible only by 1 and itself.

[0089] In this embodiment, the generator is used to construct a cyclic group for encryption.

[0090] In this embodiment, the public key refers to a key calculated by using a generator and a private key, and is used to exchange information securely.

[0091] In this embodiment, the shared key is the same key used by two or more communicating parties to symmetrically encrypt and decrypt messages sent between each other.

[0092] The working principle and beneficial effects of the above technical solution are: sensitive data is collected and standardized through the interactive unit, and sent to the auxiliary chip using a secure channel. The auxiliary chip generates a key and calculates a shared key to achieve encrypted communication, ensure the secure encryption of standard sensitive data, and improve the confidentiality and security of data transmission.

[0093] Embodiment 6:

[0094] Based on the above embodiment 5, it also includes:

[0095] In order to prevent the encryption algorithm from being attacked, the digital signature authentication method is combined to ensure the authenticity of the public key.

[0096] In this embodiment, the digital signature authentication method is a security mechanism for verifying information integrity, identity authenticity and non-repudiation, and implements digital signature and verification of information by using public key cryptography technology.

[0097] The working principle and beneficial effects of the above technical solution are: by combining the digital signature authentication method, the authenticity of the public key is verified to prevent the encryption algorithm from being attacked. The communication security is improved, the confidentiality and integrity of the data during transmission are ensured, and the overall information security protection is enhanced.

[0098] Embodiment 7:

[0099] On the basis of the above-mentioned embodiment 1, the first encrypted data is sent to the destination, and the first encrypted data is decrypted, and finally the sensitive data is output, including:

[0100] After verifying the integrity of the first encrypted data, encapsulating the first encrypted data and metadata to obtain a first data packet;

[0101] The auxiliary chip transmits the first data packet from the system to the destination end according to the communication protocol. After the destination end unpacks the received first data packet, it decrypts the first encrypted data based on the shared key to obtain second decrypted data, and uses a pre-set hash value to verify the integrity of the second decrypted data. If the integrity meets the complete requirements, the second decrypted data is restored to sensitive data. Otherwise, the auxiliary chip retransmits the data.

[0102] In this embodiment, encapsulation refers to combining data and metadata together.

[0103] In this embodiment, metadata includes header information, control information, checksum and other data.

[0104] In this embodiment, the first data packet refers to an integral data unit encapsulating the first encrypted data and related metadata.

[0105] In this embodiment, the communication protocol refers to a set of rules and standards that are followed by devices or systems participating in the data communication process in order to ensure reliable data transmission, correct format and smooth interaction.

[0106] In this embodiment, unpacking refers to the process of extracting or parsing data from a data packet.

[0107] In this embodiment, the hash value is a fixed-length character string generated by a hash function and is used in multiple fields such as data integrity verification, data indexing, and password storage.

[0108] In this embodiment, the second decrypted data is data obtained by decrypting the received first data packet.

[0109] The working principle and beneficial effect of the above technical solution are: by verifying the integrity of the first encrypted data and encapsulating it into a data packet, secure transmission is ensured. After the destination unpacks and decrypts it, the integrity of the decrypted data is checked using the hash value, ensuring the reliability of sensitive data and improving the security and effectiveness of data transmission.

[0110] Embodiment 8:

[0111] Based on the above embodiment 1, security audits and tests are performed on the auxiliary chip regularly to ensure the security and integrity of the system, including:

[0112] Clarify the audit parameters and conduct security audit and testing on auxiliary chips based on the audit parameters;

[0113] Conduct simulated attacks on the auxiliary chip according to the penetration test to discover the vulnerabilities of the auxiliary chip, and evaluate its security protection capabilities based on the discovered vulnerabilities;

[0114] Construct test data and evaluate the integrity of the auxiliary chip by determining whether the test data changes during the transmission and storage process of the auxiliary chip.

[0115] In this embodiment, audit parameters refer to specific standards used to evaluate and verify systems and components during the audit process.

[0116] In this embodiment, chip vulnerabilities refer to security weaknesses existing in integrated circuits (such as auxiliary chips, microcontrollers, FPGAs, etc.), such as physical attack vulnerabilities, software attack vulnerabilities, communication protocol vulnerabilities, etc.

[0117] In this embodiment, penetration testing is a simulated attack process to evaluate the security of computer systems, networks, and applications.

[0118] In this embodiment, security protection capability refers to the ability of a system, device or component to effectively protect itself and its data from damage when facing potential security threats and attacks, including the ability to resist attacks, the ability to discover and respond to attacks, and the ability to recover.

[0119] In this embodiment, test data refers to data used to simulate real operations or attack scenarios during security audits and penetration tests, such as input data, malicious requests, operation instructions, etc.

[0120] The working principle and beneficial effects of the above technical solution are: by clarifying the audit parameters, security audit and penetration test are carried out on the auxiliary chip to identify vulnerabilities and evaluate the protection capabilities. At the same time, by detecting changes in the data transmission and storage process, the integrity of the chip is evaluated to improve the overall security.

[0121] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A data security transmission method based on an auxiliary chip, characterized in that: include: Step 1: When it is detected that the interaction unit of the system enters the safe interaction mode, the system is controlled to be connected to the auxiliary chip, and the connection between the system and the interaction unit is disconnected; Step 2: The system receives first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting the sensitive data generated by the interaction unit; Step 3: Send the first encrypted data to the destination, decrypt the first encrypted data, and finally output the sensitive data; Step 4: Regularly perform security audits and tests on the auxiliary chip to ensure the security and integrity of the system.

2. A data security transmission method based on an auxiliary chip as claimed in claim 1, characterized in that: When it is detected that the interaction unit of the system enters the safe interaction mode, controlling the system to connect with the auxiliary chip and disconnecting the system from the interaction unit includes: The system continuously monitors the status of the interaction unit to determine whether the interaction unit has entered a safe interaction mode; When the system receives a signal from the interaction unit to exit the safe interaction mode, the interaction unit is controlled to establish a connection with the system; the connection between the auxiliary chip and the system is disconnected, and the data generated by the interaction unit is directly sent by the system.

3. A data security transmission method based on an auxiliary chip as claimed in claim 2, characterized in that: Also includes: The auxiliary chip performs self-locking when receiving a trigger signal; wherein the trigger signal is generated by the auxiliary chip when the electronic product is disassembled.

4. A data security transmission method based on an auxiliary chip as claimed in claim 2, characterized in that: Also includes: When the system is in a safe interaction mode, the system sends a switching signal to the bidirectional switch of the interaction unit; After receiving the switching signal, the bidirectional switch connects the bidirectional switch on one side between the system and the auxiliary chip, and automatically disconnects the bidirectional switch on the other side between the interactive unit and the system.

5. The data security transmission method based on auxiliary chip as claimed in claim 1, characterized in that: The system receives first encrypted data sent by the auxiliary chip, where the first encrypted data is generated by the auxiliary chip encrypting sensitive data generated by the interaction unit, including: The interactive unit collects sensitive data by input, and initializes and standardizes the sensitive data to obtain standard sensitive data; The interaction unit sends the standard sensitive data to the auxiliary chip through a secure channel; The auxiliary chip encrypts standard sensitive data using a securely stored key, where the key is generated based on a set of public parameters, including a prime number and a generator; The auxiliary chip and the interactive unit each select a private key a and b, where a and b are random integers less than a prime number, and obtain public keys A and B respectively. The shared key of the auxiliary chip and the interactive unit is calculated based on the public keys: Where K represents the shared key, g represents the generator, p represents a prime number, mod(p,A) represents the remainder function of p and A, and mod(p,B) represents the remainder function of p and B; Encrypted communication is established between the auxiliary chip and the interactive unit using a shared key according to a symmetric encryption algorithm, and the standard sensitive data is encrypted into first encrypted data.

6. A data security transmission method based on an auxiliary chip as claimed in claim 5, characterized in that: Also includes: In order to prevent the encryption algorithm from being attacked, the digital signature authentication method is combined to ensure the authenticity of the public key.

7. The data security transmission method based on auxiliary chip as claimed in claim 1, characterized in that: The first encrypted data is sent to the destination, and the first encrypted data is decrypted, and finally the sensitive data is output, including: After verifying the integrity of the first encrypted data, encapsulating the first encrypted data and metadata to obtain a first data packet; The auxiliary chip transmits the first data packet from the system to the destination end according to the communication protocol. After the destination end unpacks the received first data packet, it decrypts the first encrypted data based on the shared key to obtain second decrypted data, and uses a pre-set hash value to verify the integrity of the second decrypted data. If the integrity meets the complete requirements, the second decrypted data is restored to sensitive data. Otherwise, the auxiliary chip retransmits the data.

8. The data security transmission method based on auxiliary chip as claimed in claim 1, characterized in that: Regularly conduct security audits and tests on auxiliary chips to ensure the security and integrity of the system, including: Clarify the audit parameters and conduct security audit and testing on auxiliary chips based on the audit parameters; Conduct simulated attacks on the auxiliary chip according to the penetration test to discover the vulnerabilities of the auxiliary chip, and evaluate the security protection capabilities of the auxiliary chip based on the discovered vulnerabilities of the auxiliary chip; Construct test data and evaluate the integrity of the auxiliary chip by determining whether the test data changes during the transmission and storage process of the auxiliary chip.

Images