Digital signature method and device for big data
By real-time monitoring of network traffic and segmenting data blocks for segmentation signature, the problem of low big data signature efficiency in the existing technology is solved, and more efficient data transmission and storage is achieved.
Patent Information
- Application Number
- CN202411572759.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-06
- Publication Date
- 2025-02-07
AI Technical Summary
Existing digital signature methods are less efficient when processing large amounts of data, require large storage space, and are not very efficient in data transmission.
By monitoring network traffic in real time, the data is divided into data blocks of different sizes according to available broadband data, and segmented signatures are performed between the client and the server, and the signature results are binary critically combined using the cryptographic device signature interface to form a New data blocks are signed.
It improves the efficiency of big data signatures, reduces storage costs, and transmits result data while computing, improving data transmission efficiency.
Smart Images
Figure CN119397608A_ABST
Abstract
Description
Technical Field
[0001] The invention discloses a digital signature method and device for big data, and relates to the technical field of big data management. Background Art
[0002] With the advent of the information age, information data is growing exponentially, which brings huge challenges to data management and protection. In order to protect the non-repudiation of data, digital signature technology can be used. During the data transmission over the network, the complexity of the digital signature algorithm, the key length, and the amount of data will affect the efficiency of signature and verification and data transmission, resulting in slower processing of large amounts of data and the need for larger storage space. Summary of the invention
[0003] In view of the problems of the prior art, the present invention provides a digital signature method and device for big data, and the technical solution adopted is: In a first aspect, a digital signature method for big data is provided, wherein the method comprises: S1, monitors the network traffic load in real time according to the client, and obtains the bandwidth data of the currently available network; S2, dividing the broadband data by the client in a sequential order to obtain data blocks of different sizes; S3, sending the data block to the server through the client; S4, signing the data blocks in the order of receipt by the signature module of the server; S5, generating a signature value for the signed data block through a cryptographic device signature interface according to the signature; S6, according to the cryptographic device signature interface, the signature value of the previous data block and the current data block are binary critically combined to generate a new data block; S7: Sign the new data block through the signature module of the server.
[0004] In some implementations, in S2, the congestion state of the broadband data is negatively correlated with the size of the data block.
[0005] In some implementations, the cryptographic device signature interface relies on a cryptographic service device and is an external interface of the cryptographic service device.
[0006] In a second aspect, an embodiment of the present invention provides a digital signature device for big data, the device comprising: The network monitoring unit is used to monitor the load of network traffic in real time according to the client and obtain the bandwidth data of the currently available network; A data segmentation unit, configured to segment the broadband data in a sequential order through the client to obtain data blocks of different sizes; A data transmission unit, used to send the data block to the server through the client; A sorting signature unit, used to sign the data blocks in the order of receipt through the signature module of the server; An interface processing unit, configured to generate a signature value for the signed data block through a cryptographic device signature interface according to the signature; A combination generation unit, used to perform binary critical combination of the signature value of the previous data block and the current data block to generate a new data block according to the cryptographic device signature interface; The combined signature unit is used to sign the new data block through the signature module of the server.
[0007] In some implementations, in the data segmentation unit, a congestion state of broadband data is negatively correlated with a size of the data block.
[0008] In some implementations, the cryptographic device signature interface relies on a cryptographic service device and is an external interface of the cryptographic service device.
[0009] In a third aspect, an embodiment of the present invention provides an electronic device, comprising a memory and a processor, wherein the memory is used to store one or more computer instructions, wherein when the one or more computer instructions are executed by the processor, the method described in the first aspect above is implemented.
[0010] In a fourth aspect, an embodiment of the present invention provides a computer storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it is used to implement the method described in the first aspect.
[0011] One or more embodiments of the present invention can bring at least the following beneficial effects: The method of the present invention signs the data stream in segments, signs each segment of data separately, and uses the current signature result as the input parameter of the next signature. The signature module can send the result data while calculating, which can improve the efficiency of signing a large amount of data. BRIEF DESCRIPTION OF THE DRAWINGS
[0012] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0013] Figure 1 is a flow chart of a digital signature method for big data provided by an embodiment of the present invention; Figure 2 It is a flow chart of the signing process of a digital signature method for big data provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0014] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. The components of the embodiments of the present invention generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the drawings is not intended to limit the scope of the claimed invention, but merely represents the selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present invention.
[0015] Embodiment 1: Figure 1 A method flow chart of a digital signature method for big data is shown, such as Figure 1 As shown, the digital signature method for big data provided in this embodiment includes: S1, monitors the network traffic load in real time according to the client, and obtains the bandwidth data of the currently available network; S2, dividing the broadband data by the client in a sequential order to obtain data blocks of different sizes; S3, sending the data block to the server through the client; S4, signing the data blocks in the order of receipt by the signature module of the server; S5, generating a signature value for the signed data block through a cryptographic device signature interface according to the signature; S6, according to the cryptographic device signature interface, the signature value of the previous data block and the current data block are binary critically combined to generate a new data block; S7: Sign the new data block through the signature module of the server.
[0016] Furthermore, in S2, the congestion state of the broadband data is negatively correlated with the size of the data block.
[0017] Furthermore, the cryptographic device signature interface depends on the cryptographic service device and is the external interface of the cryptographic service device.
[0018] like Figure 2As shown, when the method of the present invention is used for signing, the server receives network data sent by the client, and the client monitors the traffic load in the network in real time. The client divides the data sent by the client to the server into data blocks 1, data blocks 2, data blocks N, data blocks N+1, etc. of different sizes in order according to the size of the currently available network bandwidth; data blocks of different sizes can better use the network transmission efficiency; when the network is congested, the data block size is reduced, and vice versa. The signature module of the server signs the received data. After the server receives data block 1, it signs data block 1 through the cryptographic device signature interface to generate signature value 1; after the server receives data block 2, it performs binary splicing on data block 2 and signature value 1 through the cryptographic device signature interface to form a new data block for signing, and generates signature value 2; and so on, the server performs binary splicing on the current data block N+1 and the signature value N of the previous data block to form a new data block, and then signs the new data block to obtain signature value N+1; Furthermore, there is no restriction on the signature algorithm used in the signing process, and any algorithm that complies with international standards and national standards can be used; Furthermore, the cryptographic device signature interface depends on the cryptographic service device and is the external interface of the cryptographic service device.
[0019] The embodiment of the present invention provides a digital signature method for big data, which can solve the efficiency problem of signature in the existing digital signature method. It is a technical solution for signing a large amount of data based on the characteristics of network data transmission, and realizes the segmented signature of data stream. The data is segmented according to the size of the network traffic. When the network traffic is large, the segment is large, and when the network traffic is small, the segment is small. After segmentation, each piece of data can be signed separately, and the current signature result is used as the input parameter of the next signature, which improves the signature efficiency and reduces the storage cost.
[0020] Embodiment 2: In a second aspect, an embodiment of the present invention provides a digital signature device for big data, the device comprising: The network monitoring unit is used to monitor the load of network traffic in real time according to the client and obtain the bandwidth data of the currently available network; A data segmentation unit, configured to segment the broadband data in a sequential order through the client to obtain data blocks of different sizes; A data transmission unit, used to send the data block to the server through the client; A sorting signature unit, used to sign the data blocks in the order of receipt through the signature module of the server; An interface processing unit, configured to generate a signature value for the signed data block through a cryptographic device signature interface according to the signature; A combination generation unit, used to perform binary critical combination of the signature value of the previous data block and the current data block to generate a new data block according to the cryptographic device signature interface; The combined signature unit is used to sign the new data block through the signature module of the server.
[0021] Furthermore, in the data segmentation unit, the congestion state of the broadband data is negatively correlated with the size of the data block.
[0022] Furthermore, the cryptographic device signature interface depends on the cryptographic service device and is the external interface of the cryptographic service device.
[0023] Embodiment three: This embodiment further provides an electronic device, including a memory and a processor, wherein the memory is used to store one or more computer instructions, wherein the one or more computer instructions implement the method of embodiment 1 when executed by the processor; In practical applications, the processor can be an application specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field programmable gate array (FPGA), a controller, a microcontroller unit (MCU), a microprocessor or other electronic components to execute the methods in the above embodiments.
[0024] The method implemented in this embodiment is as described in the first embodiment.
[0025] Embodiment 4: This embodiment further provides a computer storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by one or more processors, the method of the first embodiment is implemented; Among them, the computer-readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.
[0026] The method implemented by this embodiment is as described in the first embodiment.
[0027] In the several embodiments provided in the embodiments of the present invention, it should be understood that the disclosed system and method can also be implemented in other ways. The system and method embodiments described above are merely illustrative.
[0028] It should be noted that, in this article, the terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. The terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a..." does not exclude the presence of other identical elements in the process, method, article or device including the element.
[0029] Although the embodiments disclosed in the present invention are as above, the above contents are only embodiments adopted for facilitating the understanding of the present invention and are not intended to limit the present invention. Any technician in the technical field to which the present invention belongs can make any modifications and changes in the form and details of the implementation without departing from the spirit and scope disclosed in the present invention, but the patent protection scope of the present invention shall still be subject to the scope defined in the attached claims.
Claims
1. A digital signature method for big data, characterized in that: The method includes: S1, monitors the network traffic load in real time according to the client, and obtains the bandwidth data of the currently available network; S2, dividing the broadband data by the client in a sequential order to obtain data blocks of different sizes; S3, sending the data block to the server through the client; S4, signing the data blocks according to the order of receipt by the signature module of the server; S5, generating a signature value for the signed data block through a cryptographic device signature interface according to the signature; S6, according to the cryptographic device signature interface, the signature value of the previous data block and the current data block are combined by binary criticality to generate a new data block; S7: Sign the new data block through the signature module of the server.
2. The digital signature method for big data according to claim 1, characterized in that: In S2, the congestion state of the broadband data is negatively correlated with the size of the data block.
3. The digital signature method for big data according to claim 1, characterized in that: The cryptographic device signature interface depends on the cryptographic service device and is the external interface of the cryptographic service device.
4. A digital signature device for big data, characterized in that: The device comprises: The network monitoring unit is used to monitor the load of network traffic in real time according to the client and obtain the bandwidth data of the currently available network; A data segmentation unit, configured to segment the broadband data in a sequential order through the client to obtain data blocks of different sizes; A data transmission unit, used to send the data block to the server through the client; A sorting signature unit, used to sign the data blocks in the order of receipt through the signature module of the server; An interface processing unit, configured to generate a signature value for the signed data block through a cryptographic device signature interface according to the signature; A combination generation unit, used to perform binary critical combination of the signature value of the previous data block and the current data block to generate a new data block according to the cryptographic device signature interface; The combined signature unit is used to sign the new data block through the signature module of the server.
5. The digital signature device for big data according to claim 4, characterized in that: In the data segmentation unit, the congestion state of the broadband data is negatively correlated with the size of the data block.
6. The digital signature device for big data according to claim 4, characterized in that: The cryptographic device signature interface depends on the cryptographic service device and is the external interface of the cryptographic service device.
7. An electronic device, characterized in that: It comprises a memory and a processor, wherein the memory is used to store one or more computer instructions, wherein the one or more computer instructions, when executed by the processor, implement the digital signature method for big data as described in any one of claims 1 to 3.
8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it is used to implement the digital signature method for big data as described in any one of claims 1 to 3 above.