Internet of Things data transmission method and device based on anti-quantum encryption technology

Abstract

The invention provides an Internet of Things data transmission method and device based on an anti-quantum encryption technology, and relates to the technical field of data encryption, and the method comprises the steps: sending a certificate request to a server; receiving certificate data sent by the server; analyzing the certificate data, generating a random number R1, generating a ciphertext C1 according to the random number R1, and generating a random number K '; sending the ciphertext C1 and the random number K'to the server; and receiving feedback data sent by the server, decrypting the feedback data to obtain the random number R2, and obtaining the session key pair (R1, R2) according to the random number R1 and the random number R2. And encrypting the data through certificate data according to the random number R1, and performing encryption and decryption in a manner that the random number R1 generated by the client and the random number R2 generated by the server jointly form a session key pair (R1, R2), so that the encryption security and the encryption efficiency are improved.

Description

Technical Field

[0001] The present application relates to the field of data encryption technology, and in particular to an Internet of Things data transmission method and device based on quantum-resistant encryption technology. Background Art

[0002] The IoT communication system involves a large number of embedded devices, which require real-time and efficient data communication and control. Traditional HTTP communication cannot meet the real-time requirements because it requires users to send polling requests, and the emergence of WebSocket technology fills this gap. WebSocket is a protocol that provides full-duplex communication on a single TCP connection. It allows a persistent connection between the client and the server, and both parties can send data at any time without waiting for a request. Due to the data collection and transmission involved in IoT devices, there are security risks of data leakage, data tampering or unauthorized access. Summary of the invention

[0003] The present application aims to solve one of the technical problems in the related art at least to some extent.

[0004] To this end, the first purpose of this application is to propose an Internet of Things data transmission method based on quantum-resistant encryption technology.

[0005] The second object of the present application is to provide a device.

[0006] The third objective of the present application is to provide an electronic device.

[0007] A fourth objective of the present application is to provide a computer-readable storage medium.

[0008] A fifth object of the present application is to provide a computer program product.

[0009] To achieve the above-mentioned purpose, the first embodiment of the present application proposes an IoT data transmission method based on quantum-resistant encryption technology, which is applied to a client and includes the following steps:

[0010] Send a certificate request to the server;

[0011] Receiving certificate data sent by the server;

[0012] Parse the certificate data and generate a random number R1, generate a ciphertext C1 according to the random number R1, and generate a random number K';

[0013] Send the ciphertext C1 and the random number K' to the server;

[0014] Receive feedback data sent by the server, decrypt the feedback data to obtain a random number R2, and obtain a session key pair (R1, R2) according to the random number R1 and the random number R2.

[0015] Optionally, the certificate data includes: a quantum-resistant cryptographic signature certificate, a quantum-resistant cryptographic encryption certificate, and a quantum-resistant cryptographic signature value.

[0016] Optionally, parsing the certificate data includes:

[0017] Verifying the validity of the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate;

[0018] Verifying the validity of the quantum-resistant cryptographic signature value;

[0019] If the verification is successful, the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate are parsed to obtain the public key Ps.

[0020] Optionally, the generating a random number R1 and generating a ciphertext C1 according to the random number R1 includes:

[0021] Create a cryptographic signature pair (P1, S1), an encryption key pair (P2, S2), and generate a random number R1 and a random number K, where P1 and P2 are public keys and S1 and S2 are private keys;

[0022] The device UUID, random number R1, public key P1, public key P2 are encrypted using private key S1 to generate the corresponding first signature value;

[0023] The device UUID, random number R1, public key P1, public key P2 and first signature value are encrypted using the AES-256 algorithm and random number K to obtain ciphertext C1.

[0024] Optionally, the generating of a random number K' comprises:

[0025] The random number K is encrypted using the public key Ps to generate the random number K'.

[0026] Optionally, the feedback data includes a ciphertext C2 and a second signature value, and decrypting the feedback data to obtain a random number R2 includes:

[0027] Verifying the second signature value in the feedback data by using the public key Ps;

[0028] If the verification is successful, the ciphertext C2 is decrypted by the private key S2 to obtain the random number R2.

[0029] The second aspect of the present application proposes an Internet of Things data transmission method based on quantum-resistant encryption technology, which is applied to the server and includes the following steps:

[0030] Receive the certificate request sent by the client;

[0031] Sending certificate data to the client according to the certificate request;

[0032] Receiving the ciphertext C1 and random number K' sent by the client;

[0033] Decrypt the ciphertext C1 and the random number K' and generate a random number R2;

[0034] Feedback data is generated according to the random number R2 and sent to the client.

[0035] Optionally, decrypting the ciphertext C1 and the random number K' includes:

[0036] Decrypt the random number K' using the public key Ps to obtain the random number K;

[0037] The ciphertext C1 is decrypted using the AES-256 algorithm and the random number K to obtain the first signature value, device UUID, device UUID, random number R1, public key P1, and public key P2.

[0038] Optionally, generating a random number R2 includes:

[0039] Verify the first signature value using the public key P1;

[0040] If the verification is successful, a random number R2 is created.

[0041] Optionally, generating feedback data according to the random number R2 includes:

[0042] Generate a second signature value corresponding to the random number R2;

[0043] Encrypt the second signature value and the random number R2 using the public key P2 to obtain a ciphertext C2;

[0044] The feedback data is generated according to the ciphertext C2 and the second signature value.

[0045] To achieve the above-mentioned purpose, the third aspect of the present application proposes an IoT data transmission device based on quantum-resistant encryption technology, which is applied to a client and includes:

[0046] A transceiver module, used to send a certificate request to a server; receive certificate data sent by the server; send a ciphertext C1 and a random number K' to the server; receive feedback data sent by the server, and decrypt the feedback data to obtain a random number R2, and obtain a session key pair (R1, R2) according to the random number R1 and the random number R2;

[0047] The processing module is used to parse the certificate data and generate a random number R1, generate a ciphertext C1 according to the random number R1, and generate a random number K'; decrypt the feedback data to obtain a session key pair.

[0048] The fourth aspect of the present application proposes an IoT data transmission device based on quantum-resistant encryption technology, which is applied to a server, including:

[0049] The transceiver module is used to receive the certificate request sent by the client; send the certificate data to the client according to the certificate request; receive the ciphertext C1 and random number K' sent by the client

[0050] A processing module is used to decrypt the ciphertext C1 and the random number K' and generate a random number R2; generate feedback data according to the random number R2 and send it to the client

[0051] To achieve the above-mentioned purpose, a fifth aspect of the present application provides an electronic device, including: a processor, and a memory communicatively connected to the processor;

[0052] The memory stores computer-executable instructions;

[0053] The processor executes the computer-executable instructions stored in the memory to implement the method as described in any one of the first aspect or the second aspect.

[0054] To achieve the above-mentioned purpose, the sixth aspect embodiment of the present application proposes a computer-readable storage medium, in which computer execution instructions are stored. When the computer execution instructions are executed by a processor, they are used to implement the method as described in any one of the first aspect or the second aspect.

[0055] To achieve the above-mentioned purpose, the seventh aspect of the present application proposes a computer program product, which, when executed by a processor, implements the method described in any one of the first aspect or the second aspect.

[0056] The Internet of Things data transmission method, device, electronic device and storage medium based on quantum-resistant encryption technology provided by the present application encrypt data through certificate data, and perform encryption and decryption in a manner that a random number R1 generated by the client and a random number R2 generated by the server together form a session key pair (R1, R2), thereby improving the security and efficiency of encryption.

[0057] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0059] Figure 1 A schematic diagram of a flow chart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application;

[0060] Figure 2 A schematic diagram of the structure of an Internet of Things data transmission system based on quantum-resistant encryption technology provided in an embodiment of the present application;

[0061] Figure 3 A schematic diagram of a flow chart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application;

[0062] Figure 4 A flowchart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application. DETAILED DESCRIPTION

[0063] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0064] The IoT communication system involves a large number of embedded devices, which need to communicate and control data in real time and efficiently. Traditional HTTP communication cannot meet the real-time requirements due to the characteristics of requiring users to send request polling, and the emergence of WebSocket technology fills this gap. WebSocket is a protocol that provides full-duplex communication on a single TCP connection. It allows a persistent connection to be established between the client and the server. Both parties can send data at any time without waiting for requests. Its advantages are mainly in the following aspects: First, real-time and low latency are key requirements for IoT communication. Through WebSocket, devices can send data to the server in real time, and the server can also push instructions or control information to the device instantly, thereby achieving rapid response and real-time monitoring; secondly, WebSocket provides a more efficient data transmission mechanism. Compared with HTTP, WebSocket has a small connection establishment overhead and a small data frame header information, which reduces the communication load and saves bandwidth and energy consumption; finally, the implementation cost of the WebSocket protocol is low, and it has been widely used in data collection, remote control, firmware upgrade and other scenarios in the field of IoT. It provides a stable, efficient and real-time communication foundation for IoT applications, and promotes the development and application of IoT technology. In scenarios where encryption is required, SSL+WebSocket is usually used for data encryption. However, with the development of quantum computing, traditional encryption methods have been greatly challenged, and some new encryption algorithms and encryption methods are urgently needed to meet the challenges. At the same time, how to design encryption methods to be compatible with existing systems is also particularly important.

[0065] The above solution has the following problems:

[0066] 1. Security risks: Due to the data collection and transmission involving IoT devices, there are security risks of data leakage, data tampering or unauthorized access.

[0067] 2. Performance bottleneck: When collecting and processing data from large-scale IoT devices, performance bottlenecks may occur, affecting the response speed and stability of the system.

[0068] 3. Maintenance and management complexity: Due to the involvement of multiple protocols and devices, the maintenance and management of the system may become complicated, requiring more manpower and resources

[0069] 4. Insufficient data processing capabilities: When performing data processing and edge computing at the edge, hardware resources may be limited, resulting in insufficient data processing capabilities.

[0070] 5. Real-time requirements: For some application scenarios, data needs to be processed and transmitted in real time, which may be affected by factors such as network delays and cannot meet real-time requirements.

[0071] In view of the above problems, the present invention provides an IoT data transmission method based on quantum-resistant encryption technology. Figure 1 A flowchart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:

[0072] Step 101, the client sends a certificate request to the server;

[0073] Step 102, the server sends certificate data to the client according to the certificate request;

[0074] Step 103, the client parses the certificate data and generates a random number R1, generates a ciphertext C1 according to the random number R1, and generates a random number K';

[0075] Step 104, the client sends the ciphertext C1 and the random number K' to the server;

[0076] Step 105, the server decrypts the ciphertext C1 and the random number K' and generates a random number R2;

[0077] Step 106, the server generates feedback data according to the random number R2 and sends it to the client;

[0078] Step 107: The client receives the feedback data sent by the server, decrypts the feedback data to obtain a random number R2, and obtains a session key pair (R1, R2) according to the random number R1 and the random number R2.

[0079] This solution mainly modifies the traditional websocket handshake connection process. In the general websocket protocol, the client and the server establish a connection through a handshake process and then start two-way transmission. In this patent, the function of quantum-resistant encryption is added to the handshake process. Through the quantum-resistant encryption algorithm, a session key is finally generated, and encrypted data transmission is performed through the session key.

[0080] Figure 2 A schematic diagram of the structure of an Internet of Things data transmission system based on quantum-resistant encryption technology provided in an embodiment of the present application. Figure 1 The method in Figure 2 The system shown is implemented as Figure 2 As shown, the system includes the following components:

[0081] 1) IoT Device: An embedded device based on the ARM Cortex-M3 core, mainly used for data collection and connected to the IoT gateway through the MQTT protocol.

[0082] 2) IoT Gateway: The unified egress gateway for all IoT devices in the same LAN is an embedded device based on the ARM Cortex-M4 core. It is responsible for establishing a WebSocket connection with the cloud platform and providing support for quantum-resistant encryption and decryption algorithms. It has a built-in quantum-resistant cryptographic root certificate and supports quantum-resistant encryption and decryption algorithms such as Crystals-Dilithium and Crystals-Kyber.

[0083] 3) Cloud Load Balancing: Load balancer, mainly used for traffic distribution, supports load balancing algorithms such as polling and least number of connections.

[0084] 4) IoT Application: The application server mainly processes the data uploaded by IoT devices and provides quantum-resistant security encryption and decryption functions for the connection.

[0085] This embodiment provides another IoT data transmission method based on quantum-resistant encryption technology. Figure 3 A flowchart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application. Figure 3 As shown, the method is applied to the client and may include the following steps:

[0086] Step 301, sending a certificate request to the server;

[0087] Step 302, receiving the certificate data sent by the server;

[0088] Step 303, parsing the certificate data and generating a random number R1, generating a ciphertext C1 according to the random number R1, and generating a random number K';

[0089] Step 304, sending the ciphertext C1 and the random number K' to the server;

[0090] Step 305: Receive feedback data sent by the server, decrypt the feedback data to obtain a random number R2, and obtain a session key pair (R1, R2) according to the random number R1 and the random number R2.

[0091] Optionally, after sending the certificate request to the server, if no response is received, a timer is started. If the timer has not timed out, the certificate request continues to be sent to the server; if the timer has timed out, the process ends.

[0092] Optionally, after sending the ciphertext C1 and the random number K' to the server, if no response is received, a timer is performed. If the timer has not timed out, the ciphertext C1 and the random number K' are continued to be sent to the server; if the timer has timed out, the process ends.

[0093] Optionally, the certificate data includes: a quantum-resistant cryptographic signature certificate, a quantum-resistant cryptographic encryption certificate, and a quantum-resistant cryptographic signature value.

[0094] Optionally, parsing the certificate data includes:

[0095] Verifying the validity of the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate;

[0096] Verifying the validity of the quantum-resistant cryptographic signature value;

[0097] If the verification is successful, the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate are parsed to obtain the public key Ps.

[0098] Optionally, the generating a random number R1 and generating a ciphertext C1 according to the random number R1 includes:

[0099] Create a cryptographic signature pair (P1, S1), an encryption key pair (P2, S2), and generate a random number R1 and a random number K, where P1 and P2 are public keys and S1 and S2 are private keys;

[0100] The device UUID, random number R1, public key P1, public key P2 are encrypted using private key S1 to generate the corresponding first signature value;

[0101] The device UUID, random number R1, public key P1, public key P2 and first signature value are encrypted using the AES-256 algorithm and random number K to obtain ciphertext C1.

[0102] Optionally, the generating of a random number K' comprises:

[0103] The random number K is encrypted using the public key Ps to generate the random number K'.

[0104] Optionally, the feedback data includes a ciphertext C2 and a second signature value, and decrypting the feedback data to obtain a random number R2 includes:

[0105] Verifying the second signature value in the feedback data by using the public key Ps;

[0106] If the verification is successful, the ciphertext C2 is decrypted by the private key S2 to obtain the random number R2.

[0107] In this embodiment, for the client, that is, the unified export gateway of the Internet of Things device, the main function is to act as the active initiator of the link and establish a WebSocket connection with the server. The above flowchart explains the handshake process between the client and the server before establishing a data transmission channel. In the handshake process, a session key is generated through the built-in quantum-resistant encryption and decryption algorithm and combined with traditional AES encryption technology, and the subsequent data encryption transmission is completed through the session key; the key negotiation process involves two parts: symmetric and asymmetric encryption. In order to prevent attacks on quantum computers, for the asymmetric encryption part, in order to prevent some new algorithms, such as the Shor algorithm, the Crystals-Kyber algorithm is used to encrypt and decrypt data and the Crystals-Dilithium algorithm is used to verify the signature value. For the symmetric algorithm part, in order to prevent attacks such as the Grover algorithm, since the algorithm can reduce the query complexity from O(N) to O(N) 1 / 2 ), that is, to achieve square acceleration. When the Grover algorithm is used to perform a key exhaustive attack on the block cipher algorithm, the effect is equivalent to reducing the key length of the block cipher by half. Therefore, for the traditional AES-128 algorithm, we slightly modify it and set its key length to twice the original length. The AES-256 algorithm is used to enhance the security of the traditional encryption algorithm.

[0108] This embodiment provides another IoT data transmission method based on quantum-resistant encryption technology. Figure 4 A flowchart of an Internet of Things data transmission method based on quantum-resistant encryption technology provided in an embodiment of the present application. Figure 4 As shown, the method is applied to the server and may include the following steps:

[0109] Step 401, receiving a certificate request sent by a client;

[0110] Step 402, sending certificate data to the client according to the certificate request;

[0111] Step 403, receiving the ciphertext C1 and random number K' sent by the client;

[0112] Step 404, decrypt the ciphertext C1 and the random number K' and generate a random number R2;

[0113] Step 405: Generate feedback data according to the random number R2 and send it to the client.

[0114] Optionally, after sending the certificate data to the client, if no response is received, a timer is started. If the timer has not timed out, the certificate data continues to be sent to the client; if the timer has timed out, the process ends.

[0115] Optionally, after sending feedback data to the client, if no response is received, a timer is started. If the timer has not timed out, the feedback data continues to be sent to the client; if the timer has timed out, the process ends.

[0116] Optionally, decrypting the ciphertext C1 and the random number K' includes:

[0117] Decrypt the random number K' using the public key Ps to obtain the random number K;

[0118] The ciphertext C1 is decrypted using the AES-256 algorithm and the random number K to obtain the first signature value, device UUID, device UUID, random number R1, public key P1, and public key P2.

[0119] Optionally, generating a random number R2 includes:

[0120] Verify the first signature value using the public key P1;

[0121] If the verification is successful, a random number R2 is created.

[0122] Optionally, generating feedback data according to the random number R2 includes:

[0123] Generate a second signature value corresponding to the random number R2;

[0124] Encrypt the second signature value and the random number R2 using the public key P2 to obtain a ciphertext C2;

[0125] The feedback data is generated according to the ciphertext C2 and the second signature value.

[0126] The embodiments of the present application have the following advantages:

[0127] 1. Provides the system with anti-quantum attack function, and data transmission security is better

[0128] Under the influence of quantum supremacy, the security of the traditional WebSocket+SSL encryption and decryption method for the client+server data transmission architecture has been greatly challenged. For this reason, this proposal modifies the WebSocket handshake process and adds anti-quantum encryption and decryption functions to the original handshake process to ensure a certain degree of security of the system.

[0129] 2. The system has higher throughput

[0130] For WebSocket connections under large data traffic, a load balancing method using hashing is designed to distribute data traffic to different machines, improving the robustness of the system.

[0131] 3. The data transmission protocol is simpler and more convenient

[0132] This proposal uses WebSocket as its data transmission solution. Compared with the solution in Article 3, the protocol involved in data transmission is more simple, and the server can better formulate encoding and decoding methods.

[0133] 4. The encryption method is more efficient

[0134] This proposal uses the client-generated random number method for encryption and decryption instead of the traditional certificate verification method, which is suitable for scenarios where IoT devices have limited storage space and CPU performance.

[0135] Quantum algorithms can be used to encrypt communications and protect the security of important information transmission. Future quantum computing attacks may crack traditional encrypted communication methods (such as RSA and elliptic curve encryption), so deploying post-quantum algorithms can ensure that communication content is not affected by future quantum computing attacks. Especially for cloud vendors, the security of user data is priceless, and the security of the system directly affects the user's willingness to purchase. Therefore, from research and development to productization, post-quantum algorithms will become an important technical pillar in the future security field, and related products and services are expected to be widely used in the market.

[0136] In order to implement the above embodiments, the present application also proposes an electronic device, comprising: a processor, and a memory communicatively connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the method provided by the above embodiments.

[0137] In order to implement the above embodiments, the present application also proposes a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement the methods provided by the above embodiments.

[0138] In order to implement the above embodiments, the present application also proposes a computer program product, including a computer program, which implements the methods provided by the above embodiments when executed by a processor.

[0139] The collection, storage, use, processing, transmission, provision and disclosure of user personal information involved in this application are in compliance with relevant laws and regulations and do not violate public order and good morals.

[0140] It should be noted that personal information from users should be collected for legitimate and reasonable purposes and should not be shared or sold outside of these legitimate uses. In addition, such collection / sharing should be carried out after receiving the user's informed consent, including but not limited to notifying the user to read the user agreement / user notice and sign the agreement / authorization including authorization of relevant user information before the user uses the function. In addition, any necessary steps should be taken to protect and safeguard access to such personal information data and ensure that others who have access to personal information data comply with its privacy policy and procedures.

[0141] The present application is expected to provide an implementation scheme for users to selectively block the use or access of personal information data. That is, the present disclosure is expected to provide hardware and / or software to prevent or block access to such personal information data. Once the personal information data is no longer needed, the risk can be minimized by limiting data collection and deleting the data. In addition, when applicable, such personal information is de-identified to protect the privacy of the user.

[0142] In the description of the aforementioned embodiments, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0143] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0144] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0145] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute the instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0146] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0147] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0148] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0149] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A method for transmitting data in the Internet of Things based on quantum-resistant encryption technology, characterized in that: Applied to the client, it includes the following steps: Send a certificate request to the server; Receiving certificate data sent by the server; Parse the certificate data and generate a random number R1, generate a ciphertext C1 according to the random number R1, and generate a random number K'; Send the ciphertext C1 and the random number K' to the server; Receive feedback data sent by the server, decrypt the feedback data to obtain a random number R2, and obtain a session key pair (R1, R2) according to the random number R1 and the random number R2.

2. The method according to claim 1, characterized in that The certificate data includes: anti-quantum cryptographic signature certificate, anti-quantum cryptographic encryption certificate, and anti-quantum cryptographic signature value.

3. The method according to claim 2, characterized in that The parsing of the certificate data includes: Verifying the validity of the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate; Verifying the validity of the quantum-resistant cryptographic signature value; If the verification is successful, the quantum-resistant cryptographic signature certificate and the quantum-resistant cryptographic encryption certificate are parsed to obtain the public key Ps.

4. The method according to claim 3, characterized in that The generating of the random number R1 and generating the ciphertext C1 according to the random number R1 includes: Create a cryptographic signature pair (P1, S1), an encryption key pair (P2, S2), and generate a random number R1 and a random number K, where P1 and P2 are public keys and S1 and S2 are private keys; The device UUID, random number R1, public key P1, public key P2 are encrypted with private key S1 to generate the corresponding first signature value; The device UUID, random number R1, public key P1, public key P2 and first signature value are encrypted using the AES-256 algorithm and random number K to obtain ciphertext C1.

5. The method according to claim 4, characterized in that The generating of random number K' comprises: The random number K is encrypted using the public key Ps to generate the random number K'.

6. The method according to claim 5, characterized in that The feedback data includes the ciphertext C2 and the second signature value, and the decrypting the feedback data to obtain the random number R2 includes: Verifying the second signature value in the feedback data by using the public key Ps; If the verification is successful, the ciphertext C2 is decrypted by the private key S2 to obtain the random number R2.

7. A method for transmitting data in the Internet of Things based on quantum-resistant encryption technology, characterized in that: Applied to the server, it includes the following steps: Receive the certificate request sent by the client; Sending certificate data to the client according to the certificate request; Receiving the ciphertext C1 and random number K' sent by the client; Decrypt the ciphertext C1 and the random number K' and generate a random number R2; Feedback data is generated according to the random number R2 and sent to the client.

8. The method according to claim 7, characterized in that The decrypting of the ciphertext C1 and the random number K' comprises: Decrypt the random number K' using the public key Ps to obtain the random number K; The ciphertext C1 is decrypted using the AES-256 algorithm and the random number K to obtain the first signature value, device UUID, device UUID, random number R1, public key P1, and public key P2.

9. The method according to claim 8, characterized in that The generating of the random number R2 comprises: Verify the first signature value using the public key P1; If the verification is successful, a random number R2 is created.

10. The method according to claim 9, characterized in that The generating feedback data according to the random number R2 includes: Generate a second signature value corresponding to the random number R2; Encrypt the second signature value and the random number R2 using the public key P2 to obtain a ciphertext C2; The feedback data is generated according to the ciphertext C2 and the second signature value.

11. An IoT data transmission device based on quantum-resistant encryption technology, characterized in that: Applied to the client, including: A transceiver module, used to send a certificate request to a server; receive certificate data sent by the server; send a ciphertext C1 and a random number K' to the server; receive feedback data sent by the server, and decrypt the feedback data to obtain a random number R2, and obtain a session key pair (R1, R2) according to the random number R1 and the random number R2; The processing module is used to parse the certificate data and generate a random number R1, generate a ciphertext C1 according to the random number R1, and generate a random number K'; decrypt the feedback data to obtain a session key pair.

12. An IoT data transmission device based on quantum-resistant encryption technology, characterized in that: Applied to the server, including: The transceiver module is used to receive the certificate request sent by the client; send the certificate data to the client according to the certificate request; receive the ciphertext C1 and random number K' sent by the client The processing module is used to decrypt the ciphertext C1 and the random number K' and generate a random number R2; generate feedback data according to the random number R2 and send it to the client.

13. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1-6 or claims 7-10.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement the method according to any one of claims 1 to 6 or claims 7 to 10.

15. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 6 or claims 7 to 10 when being executed by a processor.

Images