Data transmission method and device, medium, equipment and product

Abstract

The invention discloses a data transmission method and device, a medium, equipment and a product, relates to the technical field of communication, and is used for improving the security of an industrial network. The method comprises the steps that the method is applied to an industrial computing network platform ICNP; the method comprises the following steps: receiving an aggregation ciphertext from an industrial hyper-edge server; the aggregated ciphertext is obtained by aggregating signcryption ciphertexts of multiple pieces of ICN; under the condition that the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor, acquiring a to-be-transmitted plaintext from the aggregated ciphertext; the anti-collusion factor is determined by performing hash operation according to the signcryption ciphertext of each ICN; the signcryption ciphertext comprises a first sub-signcryption ciphertext and a second sub-signcryption ciphertext; the first sub signcryption ciphertext is obtained by performing XOR operation on the to-be-transmitted plaintext; the second sub signcryption ciphertext is determined by performing hash operation according to the signcryption factor; the signcryption factor comprises a random number and a first sub-signcryption ciphertext.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, and in particular, to a data transmission method, apparatus, medium, equipment and product. Background Art

[0002] In industrial networks, collaborative attacks refer to multiple malicious devices coordinating to launch a denial of service attack, such as exhausting the resources of the industrial network by sending a large number of requests simultaneously, or controlling sensors to falsify environmental data (such as temperature, pressure or flow rate), tampering with or interfering with the execution logic of specific devices, etc., causing industrial equipment failures in the industrial network.

[0003] However, the security protection strategy of industrial networks only supports security analysis of received requests one by one, which will cause industrial network failure in the event of collaborative attacks. Summary of the invention

[0004] The present application provides a data transmission method, apparatus, medium, equipment and product for improving the security of industrial networks.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, a data transmission method is provided, which is applied to an industrial computing network platform ICNP, and the method includes: receiving an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating the signcrypted ciphertexts of multiple computing node devices ICN; when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor, obtaining a plaintext to be transmitted from the aggregated ciphertext; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcrypted factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0007] Optionally, receiving aggregated ciphertext from an industrial super edge server includes: sending an aggregation request message to the industrial super edge server when the number of multiple signed ciphertexts is greater than or equal to a quantity threshold; the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into aggregated ciphertext; and receiving aggregated ciphertext from the industrial super edge server.

[0008] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0009] Optionally, the signcryption factor also includes an ICN identifier, an ICNP identifier, an ICN public key, an ICNP public key, and a system public key.

[0010] Optionally, the anti-collusion factor satisfies the following relationship: W′=H4(x icnp b1||x icnp b2||…||x icnp b n )

[0011] Where W′ represents the anti-collusion factor, H4() represents the hash function, and x icnp Represents a random number, ; R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, h i represents the hash value obtained by performing a hash operation on the first sub-signature ciphertext, the third sub-signature ciphertext, and the signcryption factor; K icn.i and K′ icn.i represents the public key of ICN node i, P pub Represents the system public key, represents the hash value obtained by hashing the ICN identifier and the ICN public key; i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), and n represents the total number of ciphertexts participating in the aggregation.

[0012] Optionally, the target anti-collusion factor satisfies the following relationship: W = H4(K icnp v1||K icnp v2||…||K icnp v n ), where W represents the target anti-collusion factor, v i K represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i; icnp Indicates the ICNP public key.

[0013] Based on the technical solution provided in the present application, by receiving the aggregated ciphertext from the industrial super edge server, when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor, the plaintext to be transmitted is obtained from the aggregated ciphertext. Since the aggregated ciphertext is obtained by aggregating the signcrypted ciphertext of each ICN. In this way, a large number of signcrypted ciphertexts can be subjected to batch security analysis without the need to perform security analysis on each ciphertext one by one. And since the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN, the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcrypted factor; the signcrypted factor includes a random number and the first sub-signcrypted ciphertext, that is, the aggregated ciphertext is verified in combination with the key of each ICN, thereby improving the security of the industrial network.

[0014] In the second aspect, a data transmission method is provided, which is applied to an industrial ultra-edge server, and the method includes: sending an aggregated ciphertext to an industrial computing network platform ICNP; using ICNP to obtain a plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0015] Optionally, the method further includes: when the number of the multiple signcrypted ciphertexts is greater than or equal to a number threshold, receiving an aggregation request message from ICNP; the aggregation request message is used to request that the multiple signcrypted ciphertexts be aggregated into an aggregated ciphertext.

[0016] Optionally, the method further includes: aggregating the multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: W>; where σ represents the aggregated ciphertext, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, c i represents the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, v i It represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i, i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), n represents the total number of ciphertexts participating in the aggregation, and W represents the target anti-collusion factor.

[0017] In a third aspect, a data transmission device is provided, which is applied to an industrial computing network platform ICNP, and the device includes: a receiving unit and a processing unit; the receiving unit is used to receive an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the processing unit is used to obtain a plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0018] Optionally, the receiving unit is specifically used to: send an aggregation request message to the industrial super edge server when the number of multiple signcrypted ciphertexts is greater than or equal to a quantity threshold; the aggregation request message is used to request the industrial super edge server to aggregate multiple signcrypted ciphertexts into aggregated ciphertext; and receive the aggregated ciphertext from the industrial super edge server.

[0019] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number

[0020] Optionally, the signcryption factor also includes an ICN identifier, an ICNP identifier, an ICN public key, an ICNP public key, and a system public key.

[0021] Optionally, the anti-collusion factor satisfies the following relationship: W′=H4(x icnp b1||x icnp b2||…||x icnp b n )

[0022] Where W′ represents the anti-collusion factor, H4() represents the hash function, and x icnp Represents a random number, ; R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, h i represents the hash value obtained by performing a hash operation on the first sub-signature ciphertext, the third sub-signature ciphertext, and the signcryption factor; K icn.i and K′ icn.i represents the public key of ICN node i, P pub Represents the system public key, represents the hash value obtained by hashing the ICN identifier and the ICN public key; i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), and n represents the total number of ciphertexts participating in the aggregation.

[0023] Optionally, the target anti-collusion factor satisfies the following relationship: W = H4(K icnp v1||K icnp v2||…||K icnp v n ), where W represents the target anti-collusion factor, v i K represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i; icnp Indicates the ICNP public key.

[0024] In a fourth aspect, a data transmission device is provided, which is applied to an industrial super edge server, and the device includes: a sending unit; a sending unit, used to send an aggregated ciphertext to an industrial computing network platform ICNP; used for ICNP to obtain a plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0025] Optionally, the device includes: a receiving unit, the receiving unit being used to receive an aggregation request message from ICNP when the number of the multiple signcrypted ciphertexts is greater than or equal to a number threshold; the aggregation request message is used to request to aggregate the multiple signcrypted ciphertexts into an aggregated ciphertext.

[0026] Optionally, the device includes: a processing unit, the processing unit being configured to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: W>; where σ represents the aggregated ciphertext, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, c i represents the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, v i It represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i, i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), n represents the total number of ciphertexts participating in the aggregation, and W represents the target anti-collusion factor.

[0027] In a fifth aspect, a data transmission device is provided, which can implement the functions performed by the data transmission device in the above-mentioned aspects or each possible design. The functions can be implemented through hardware, such as: in one possible design, the data transmission device may include: a processor and a communication interface, and the processor can be used to support the data transmission device to implement the functions involved in the above-mentioned first aspect or any possible design of the first aspect.

[0028] In another possible design, the data transmission device may further include a memory, the memory being used to store computer-executable instructions and data necessary for the data transmission device. When the data transmission device is running, the processor executes the computer-executable instructions stored in the memory, so that the data transmission device performs the first aspect or any possible data transmission method of the first aspect.

[0029] In the sixth aspect, a computer-readable storage medium is provided, which may be a readable non-volatile storage medium, and which stores computer instructions or programs. When the computer-readable storage medium is run on a computer, the computer can execute the first aspect or any possible data transmission method of the above aspects.

[0030] In a seventh aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the data transmission method of the first aspect or any possible design of the above aspects.

[0031] In an eighth aspect, an electronic device is provided, the electronic device comprising one or more processors and one or more memories. The one or more memories are coupled to the one or more processors, the one or more memories are used to store computer program codes, the computer program codes include computer instructions, and when the one or more processors execute the computer instructions, the electronic device executes the data transmission method as described in the first aspect or any possible design of the first aspect.

[0032] In a ninth aspect, a chip system is provided, the chip system including a processor and a communication interface, the chip system can be used to implement the function performed by the data transmission device in the first aspect or any possible design of the first aspect. In one possible design, the chip system also includes a memory, the memory is used to store program instructions and / or data. The chip system can be composed of a chip, or it can include a chip and other discrete devices, without limitation. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 A schematic diagram of the structure of a data transmission system provided in an embodiment of the present application;

[0034] Figure 2 A structural diagram of another data transmission system provided in an embodiment of the present application;

[0035] Figure 3 A schematic diagram of the structure of a data transmission device provided in an embodiment of the present application;

[0036] Figure 4 A flowchart of a data transmission method provided in an embodiment of the present application;

[0037] Figure 5 A flowchart of another data transmission method provided in an embodiment of the present application;

[0038] Figure 6 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application;

[0039] Figure 7 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

[0041] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0042] It should also be understood that the term “comprising” indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements and / or components.

[0043] Industrial networks have put forward higher requirements on computing power networks in terms of computing resources, massive data transmission and storage, real-time and security. Especially in terms of security, with the increase in the number of devices in industrial networks and the acceleration of data flow, security threats such as data leakage, tampering and forgery are becoming increasingly severe.

[0044] In this context, under the framework of deep integration of computing power network and industrial Internet, strengthening the security protection capability of computing power network is crucial to maintaining the stable operation of industrial Internet. The certificate-free feature of some solutions reduces the dependence on traditional public key infrastructure (PKI), simplifies the key management process, and reduces the security risks caused by poor certificate management. At the same time, its publicly verifiable feature allows any trusted third party to verify the validity of the signed message without having to know the private key information, which provides additional protection for the authenticity and integrity of data in the industrial Internet.

[0045] In specific industrial Internet applications, higher performance requirements are placed on computing networks, especially in terms of computing resources, data transmission and storage, real-time, and security. In addition, when considering security threats to the industrial Internet, collaborative attacks are a challenge that cannot be ignored. They involve multiple malicious entities acting in concert to undermine the security and reliability of the system. In the industrial Internet, collaborative attacks may appear in many forms, often involving collaboration between malware or systems. For example, multiple infected devices may coordinate to launch a denial of service attack to exhaust the resources of the control system by sending a large number of requests simultaneously; or sensors may falsify environmental data such as temperature, pressure, or flow rate, causing the control system to make decisions based on erroneous information; in industrial manufacturing, malware may also tamper with or interfere with the execution logic of specific devices, causing unexpected behavior or failures in the production line. In summary, multiple malicious attackers in an industrial environment may collaborate to compromise the security and performance of industrial systems.

[0046] Currently, there are certificateless aggregate signcryption schemes that provide effective solutions to the security issues of industrial computing networks, which provide additional protection for the authenticity and integrity of data in the industrial Internet. However, there is currently no security solution that takes into account the security threat of collaborative attacks in industrial environments.

[0047] In order to overcome these problems, this application proposes an efficient and more secure signature encryption scheme, which uses non-bilinear mapping operations to improve real-time and scalability; uses key preimage protection technology to prevent public key replacement attacks; and uses the anti-collision property of hash functions to construct verification equations to prevent forged signcryption and collaborative attacks. The certificateless aggregate signcryption scheme proposed in the present invention can enhance the security of the system, ensure the integrity and authentication of data, and maintain the stability and reliability of the industrial network even in the face of complex collaborative attacks.

[0048] In view of this, an embodiment of the present application provides a data transmission method, including: receiving an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating the signed ciphertexts of multiple computing node devices ICN; when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor, obtaining the plaintext to be transmitted from the aggregated ciphertext; the anti-collusion factor is determined by performing a hash operation based on the signcryption factor of each ICN; the signcryption factor includes a random number and a first sub-signcryption ciphertext.

[0049] The method provided in the embodiment of the present application is described in detail below with reference to the accompanying drawings.

[0050] It should be noted that the network system described in the embodiment of the present application is to more clearly illustrate the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of network systems and the emergence of other network systems, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0051] Figure 1 FIG. 1 is a schematic diagram of a data transmission system 10 provided in an embodiment of the present application. Figure 1 As shown, the data transmission system 10 may include an industrial computing network platform (International Conference on Network Protocols, ICNP11) and industrial edge servers (industrial edge servers, IES) 12.

[0052] Among them, ICNP11 and IES12 are connected. For example, ICNP11 and IES12 can be connected wirelessly, or ICNP11 and IES12 can be connected wiredly. There is no limitation.

[0053] Among them, the industrial computing network platform (ICNP) 11 involved in the embodiments of the present application. ICNP11 is used to collaboratively manage and schedule ICN, IES12 and network resources. For example, ICNP11 can also be a server, a computer, etc. Among them, the server can be a single server, or it can be a server cluster composed of multiple servers. In some implementations, the server cluster can also be a distributed cluster. The embodiments of the present application do not limit the specific technology, specific quantity and specific device form of ICNP11. The embodiments of the present application do not limit the specific technology, specific quantity and specific device form of ICNP11.

[0054] Among them, IES12 involved in the embodiments of the present application can aggregate the data in ICNP11 based on the collaborative management and scheduling operations of ICNP11. Among them, IES12 can be a single server, or it can be a server cluster composed of multiple servers. In some implementations, the server cluster can also be a distributed cluster. The embodiments of the present application do not limit the specific technology, specific number and specific device form of IES12. The embodiments of the present application do not limit the specific technology, specific number and specific device form of IES12.

[0055] Figure 2 FIG. 1 is a schematic diagram of the structure of another data transmission system 10 provided in an embodiment of the present application. Figure 2 As shown, the data transmission system 10 may also include an ICN and a key server.

[0056] The ICN involved in the embodiments of the present application is a computing device at an industrial site, which is used to provide computing power (distributed computing power) for industrial equipment at the industrial site. For example, it can be an industrial personal computer (PC), a programmable logic controller (PLC), and a server. The embodiments of the present application do not limit the specific technology, specific number, and specific device form used by the ICN.

[0057] Among them, the key server is used to provide a security protection mechanism for the industrial computing network (computing power network). For example, it can be used to manage and distribute keys and generate system parameters. The key server can be a security management module (SMM).

[0058] For example, keys (including public keys and private keys) may be distributed to various entities (such as ICN, ICNP) in the system.

[0059] It should be noted that SMM can be set up on the industrial computing network platform or on a third-party platform.

[0060] It should be noted that all entities in the data transmission system 10 (such as ICN, ICNP, IES, SMM) use unified system initial parameters; SMM, as a trusted security center, participates in the generation process of some public and private keys of entities while generating domain parameters (including system initial parameters, etc.), and can pass them to all entities participating in the protocol in a secure manner; secure communication links can be established between SMM and ICNP, between ICNP and IES, between IES and ICN, and between ICNs.

[0061] The identifiers of ICN node i, IES node j, and ICNP in the system are denoted as ID icn.i (1≤i≤n),ID ies.j (1≤j≤m),ID icnp .

[0062] The industrial computing network security system is initialized by the security center SMM, and all entities in the system use unified system initial parameters. As a trusted security center, SMM participates in the entity's public and private key generation process while generating domain parameters, and can pass these keys to all entities participating in the protocol in a secure manner. SMM and ICNP, ICNP and IES, IES and ICN, and ICN can establish secure communication links, together forming the basic security architecture of the industrial computing network.

[0063] Figure 1 This is just an exemplary framework diagram. Figure 1 The names of the individual devices included in the Figure 1 In addition to the functional nodes shown, other nodes may also be included, which is not limited in the embodiments of the present application.

[0064] When implementing it specifically, Figure 1 Each device in the Figure 3 The structure shown, or including Figure 3 Parts shown. Figure 3 The structure diagram of a data transmission device 200 provided in an embodiment of the present application is shown in FIG. 2 . The data transmission device 200 may be a network device, or the data transmission device 200 may be a chip or a system on a chip in a network device. Figure 3 As shown, the data transmission device 200 includes a processor 201 , a communication interface 202 and a communication line 203 .

[0065] Furthermore, the data transmission device 200 may further include a memory 204 . The processor 201 , the memory 204 and the communication interface 202 may be connected via a communication line 203 .

[0066] The processor 201 is a CPU, a general processor, a network processor (NP), a digital signal processor (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD), or any combination thereof. The processor 201 may also be other devices with processing functions, such as circuits, devices, or software modules, without limitation.

[0067] The communication interface 202 is used to communicate with other devices or other communication networks. The communication interface 202 can be a module, a circuit, a communication interface or any device capable of implementing communication.

[0068] The communication line 203 is used to transmit information between the components included in the data transmission device 200.

[0069] The memory 204 is used to store instructions, where the instructions may be computer programs.

[0070] The memory 204 may be a read-only memory (ROM) or other types of static storage devices that can store static information and / or instructions, or a random access memory (RAM) or other types of dynamic storage devices that can store information and / or instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, etc., without limitation.

[0071] It should be noted that the memory 204 can exist independently of the processor 201, or can be integrated with the processor 201. The memory 204 can be used to store instructions or program codes or some data, etc. The memory 204 can be located inside the data transmission device 200, or outside the data transmission device 200, without limitation. The processor 201 is used to execute the instructions stored in the memory 204 to implement the data transmission method provided in the following embodiments of the present application.

[0072] In one example, the processor 201 may include one or more CPUs, for example, Figure 3 CPU0 and CPU1 in.

[0073] As an optional implementation, the data transmission device 200 includes multiple processors, for example, Figure 3 In addition to the processor 201, a processor 205 may also be included.

[0074] It should be pointed out that Figure 3 The composition shown in the Figure 1 The limitations of each device in Figure 3 In addition to the parts shown, Figure 1 The individual devices in the Figure 3 More or fewer components, or combinations of certain components, or different arrangements of components.

[0075] In the embodiment of the present application, the chip system may be composed of a chip, or may include a chip and other discrete devices.

[0076] In addition, the actions, terms, etc. involved in the various embodiments of the present application can refer to each other without limitation. The message name or parameter name in the message exchanged between the various devices in the embodiments of the present application is only an example, and other names can also be used in the specific implementation without limitation.

[0077] In order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0078] It should be noted that, in this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0079] In the present application, "at least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0080] Combine the following Figure 1 The data transmission system shown describes the data transmission method provided in the embodiment of the present application.

[0081] Figure 4 A flow chart of a data transmission method provided in an embodiment of the present application is shown as follows: Figure 4 As shown, the method includes the following S301-S303:

[0082] S301, the industrial super edge server sends an aggregated ciphertext to the ICNP. Correspondingly, the ICNP receives the aggregated ciphertext from the industrial super edge server.

[0083] The aggregated ciphertext is obtained by aggregating the signed ciphertexts of multiple computing node devices ICN.

[0084] As a possible implementation method, the industrial super edge server can determine the number of signcrypted ciphertexts, and when the number of signcrypted ciphertexts is greater than a quantity threshold, perform aggregation on multiple signcrypted ciphertexts to obtain an aggregated ciphertext, and send the aggregated ciphertext to the ICNP.

[0085] The quantity threshold can be set as required, for example, 100.

[0086] As another possible implementation method, ICNP can determine the number of signed ciphertexts, and when the number of signed ciphertexts is greater than a quantity threshold, send an aggregation request message to the industrial super edge server. Accordingly, the industrial super edge server processes multiple signed ciphertexts, obtains an aggregated ciphertext, and sends the aggregated ciphertext to ICNP.

[0087] Among them, the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into an aggregated ciphertext.

[0088] It should be noted that the number of signcrypted ciphertexts may be the number of signcrypted ciphertexts received by the ICNP or industrial ultra-edge server within a preset time period.

[0089] The preset duration can be set as needed, for example, 1 second, 2 seconds, etc.

[0090] In some embodiments, the number of signcrypted ciphertexts may also be the number of unprocessed signcrypted ciphertexts accumulated by the ICNP or industrial super edge server.

[0091] It should be noted that the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext. The first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted.

[0092] The plain text to be transmitted may be operating parameters of industrial equipment, detected environmental data, etc.

[0093] In one example, the signcrypted ciphertext satisfies the following formula 1:

[0094] c i =m i ⊕T i ;v i =r i +h i (d icn.i +d' icn.i )Formula 1

[0095] Among them, c i Indicates the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i. i Represents the second sub-signature ciphertext of the signcrypted ciphertext sent by ICN node i. i, represents a random number, m i Indicates the plaintext to be transmitted.

[0096] In some embodiments, T i It can also indicate the receiving device identification and α i The hash value obtained by hash operation. The process of signing the plaintext message sent to ICNP at ICN node i, α i =r i (K icnp +K' icnp +h icnp P pub ). When ICN node i needs to sign the plaintext message sent to ICN node j, α i =r i (K icn.j +K' icn.j +h icn.j P pub ).

[0097] K icn.j and K' icn.j K represents the public key of ICN node j. icnp , K' icnp Indicates the ICPN public key. icnp Indicates the hash value obtained by hashing ICPN and ICPN public key. icn.j represents the hash value obtained by hashing the ICN node j identifier and the ICPN public key; P pub Indicates the system public key; h i represents the hash value obtained by hashing the signcryption factor; d icn.i and d' icn.i Represents the different components of the private key of ICN node i.

[0098] The following 1-3 parts will be used to analyze T i 、h icn.i 、h i The calculation process is introduced as follows:

[0099] 1. The first ICN can identify the receiving device and α i Substitute into the third hash formula preset by the system and get T i . T i Satisfies the following formula 2:

[0100] T i =H3(ID icnp ,α i ) Formula 2

[0101] Among them, ID icnprepresents the ICPN identifier, H3() represents the third hash function, and the third hash function satisfies the following formula 3:

[0102] H3:{0,1}*×G→Z q *Formula 3

[0103] Where G represents the multiplication cyclic group based on the elliptic curve. q * represents the cyclic group of integer multiplication.

[0104] In some embodiments, when a first ICN node (node ​​i) sends a signal to a second ICN node (node ​​j), T i =H3((ID icn.j ,α i ).

[0105] Among them, ID icn.j Indicates the ID of the second ICN node (node ​​j). icnp Indicates the ICNP flag.

[0106] 2. ICN can substitute the receiving device identification and the receiving device public key into the first hash formula preset by the system to obtain h icn.i .h icn.i Satisfies the following formula 4:

[0107] h icn.i =H1(ID icn.i ,K icn.i ,K' icn.i ) Formula 4

[0108] Among them, ID icn.i represents the ICN node i identifier, K icn.i ,K' icn.i represents the public key of node i, H1() represents the first hash function, and the first hash function satisfies the following formula 5:

[0109] H1:{0,1}*×G×G→Z q * Formula 5

[0110] It should be noted that the receiving device may be an ICN or an ICNP.

[0111] 3. ICN can substitute the signcryption factor into the fourth hash formula preset by the system to obtain h i In the case where the signcryption factor includes a random number and the first sub-signcrypted ciphertext, h i Satisfies the following formula six:

[0112] h i =H4(c i ||R i ) Formula 6

[0113] Among them, c i Represents the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, R i represents the third sub-signature ciphertext of the signature ciphertext sent by ICN node i, and H4() represents the fourth hash formula. The fourth hash function satisfies the following formula 7:

[0114] H4:{0,1}*→Z q * Formula 7

[0115] In some embodiments, the signcryption factor further includes an ICN identifier, an ICNP identifier, an ICN public key, an ICNP public key, and a system public key. In this case, h i Satisfies the following formula eight:

[0116] h i =H4(c i ||Id icn.i ||ID icn.j ||R i ||K icn.i ||K′ icn.i ||K icn.j ||K′ icn.j ||P pub ) Formula 8

[0117] Among them, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i is a point on the elliptic curve related to the random number. icn.i , ID icn.j Indicates the device identification, K icn.i ,K′ icn.j Indicates the sending device public key, K icn.j ,K′ icn.j Indicates the public key of the receiving device. pub Indicates the system public key.

[0118] In one example, the third subsignature ciphertext satisfies the following formula 9:

[0119] R i =r i P Formula 9

[0120] Among them, r i Represents a random number. P represents a generator of G.

[0121] It should be noted that the receiving device may be an ICN or an ICNP.

[0122] For example, in the case where the receiving device may be an ICN node j, h i =H4(c i ||IDicn.i ||ID icn.j ||R i ||K icn.i ||K′ icn.i ||K icn.j ||K′ icn.j ||P pub ).

[0123] For another example, in the case where the receiving device may be an ICNP, h i =H4(c i ||ID icn.i ||ID icnp ||R i ||K icn.i ||K′ icn.i ||K icnp ||K′ icnp ||P pub ).

[0124] In some embodiments, r i It can represent the hash value obtained by hashing the plain text with the ICN private key. ICN can substitute the receiving device identifier and the receiving device public key into the second hash formula preset by the system to obtain r i。

[0125] For example, i = =H2(d icn.i ,d' icn.i ,m i ,t i ).

[0126] Among them, t i The timestamp corresponding to the current moment.

[0127] Wherein, H2() represents the second hash function. icn.i ,d' icn.i Represents the ICN private key. The second hash function satisfies the following formula 10:

[0128] H2:Z q *×Z q *×{0,1}*×{0,1}*→Z q * Formula 10

[0129] It should be noted that the generator of the above-mentioned elliptic curve, the first hash function, the second hash function, the third hash function, the fourth hash function, and the system public key are pre-broadcasted in the data transmission system.

[0130] It should be noted that the system includes an initialization phase, which includes: SMM selects system parameter k, generates large prime numbers p and q (q|p-1), defines a multiplication cyclic group G based on an elliptic curve, whose order is q, P is a generator of G, and defines four secure hash functions: H1:{0,1}*×G×G→Z q *,H2:Z q *×Z q *×{0,1}*×{0,1}*→Z q *,H3:{0,1}*×G→Z q *,H4:{0,1}*→Z q *. SMM randomly selects s∈Zq as the system master key, calculates Ppub=sP as the system public key, and discloses the system parameters.

[0131] {p,q,G,P,Ppub,H1,H2,H3,H4}.

[0132] Through the above operations, an industrial computing network security system is generated. When an industrial Internet node needs to join the system, it needs to initiate registration with SMM through ICNP. After registration is completed, SMM saves the system parameters in the node.

[0133] S302: ICNP determines whether the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor.

[0134] The anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes the first sub-signcrypted ciphertext and the second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcrypted factor; the signcrypted factor includes a random number and the first sub-signcrypted ciphertext

[0135] As a possible implementation method, ICNP can determine the anti-collusion factor of the aggregated ciphertext as the target anti-collusion factor when the aggregated ciphertext satisfies the anti-collusion formula. If the aggregated ciphertext does not satisfy the anti-collusion formula, it is determined that the anti-collusion factor of the aggregated ciphertext is not the target anti-collusion factor.

[0136] In one example, the anti-collusion formula satisfies the following formula 11:

[0137] W=W′ Formula 11

[0138] Where W represents the target anti-collusion factor and W′ represents the anti-collusion factor.

[0139] The calculation process of W and W' is introduced in the following 1-2 parts:

[0140] 1. ICNP can determine the anti-collusion factor by the following formula:

[0141] W′=H4(x icnp b1||x icnp b2||…||x icnp b n ) Formula 12

[0142] Where W′ represents the anti-collusion factor, x icnp Represents a random number, ; R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, h i represents the hash value obtained by performing a hash operation on the first sub-signature ciphertext, the third sub-signature ciphertext, and the signcryption factor; K icn.i and K′ icn.i represents the public key of ICN node i, P pub Represents the system public key, It represents the hash value obtained by hashing the ICN identifier and the ICN public key. i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), and n represents the total number of ciphertexts participating in the aggregation.

[0143] 2. ICNP can determine the target anti-collusion factor by the following formula:

[0144] W=H4(K icnp v1||K icnp v2||…||K icnp v n ) Formula 13

[0145] Where W represents the target anti-collusion factor, v i K represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i; icnp Indicates the ICNP public key. n indicates the number of ICNs.

[0146] S303. When the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor, the ICNP obtains the plaintext to be transmitted from the aggregated ciphertext.

[0147] As a possible implementation method, after ICNP receives the aggregated ciphertext from the industrial super edge server, it can use the aggregated ciphertext decryption formula to decrypt the aggregated ciphertext to obtain the plaintext to be transmitted in each signed ciphertext.

[0148] In one example, the aggregate ciphertext decryption formula may be the following formula 14:

[0149] α i '=R i (d icnp +d' icnp ),Ti '=H3(ID icnp ,α i '),m i =c i ⊕T' I Formula 14

[0150] Among them, R i Indicates the third sub-signature ciphertext of the signature ciphertext sent by ICN node i. i Indicates the first sub-signature ciphertext of the signcrypted ciphertext sent by ICN node i.

[0151] As another possible implementation method, after ICNP receives the aggregated ciphertext from the industrial super edge server, the aggregated ciphertext can be verified using a small exponent verification formula, and if the aggregated ciphertext verification passes, the aggregated ciphertext can be decrypted using an aggregated ciphertext decryption formula to obtain the plaintext to be transmitted.

[0152] In the event that the aggregate ciphertext verification fails, the aggregate ciphertext is discarded.

[0153] Among them, the aggregate ciphertext verification passes if the aggregate ciphertext satisfies the small exponent verification formula. The aggregate ciphertext verification fails if the aggregate ciphertext does not satisfy the small exponent verification formula.

[0154] In one example, the small exponent verification formula may be the following formula 15:

[0155]

[0156] Among them, δ i represents a random small exponential,

[0157] It can be understood that by performing small exponent verification on aggregated ciphertext through the small exponent test formula, the performance of batch signcryption verification can be optimized, which will greatly improve the verification efficiency in large-scale batch verification scenarios.

[0158] Based on the technical solution provided in the present application, by receiving the aggregated ciphertext from the industrial super edge server, when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor, the plaintext to be transmitted is obtained from the aggregated ciphertext. Since the aggregated ciphertext is obtained by aggregating the signcrypted ciphertext of each ICN. In this way, a large number of signcrypted ciphertexts can be subjected to batch security analysis without the need to perform security analysis on each ciphertext one by one. And since the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN, the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcrypted factor; the signcrypted factor includes a random number and the first sub-signcrypted ciphertext, that is, the aggregated ciphertext is verified in combination with the key of each ICN, thereby improving the security of the industrial network.

[0159] A possible embodiment, Figure 5 A flowchart of another data transmission method provided in an embodiment of the present application is shown as follows: Figure 5 As shown, the data transmission method in the present application may also include the following S401-S402.

[0160] S401. When the number of the multiple signcrypted ciphertexts is greater than or equal to the number threshold, the ICNP sends an aggregation request message to the industrial super edge server. Correspondingly, the industrial super edge server receives the aggregation request message from the ICNP.

[0161] The specific implementation of this step may refer to the description of S301 and will not be described in detail here.

[0162] S402. The industrial super edge server aggregates multiple signed ciphertexts into aggregated ciphertext using a preset aggregation algorithm.

[0163] The preset aggregation algorithm satisfies the following formula 16:

[0164]

[0165] Where σ represents the aggregated ciphertext.

[0166] In a possible embodiment, the ICN key includes a first key part and a second key part; the first key part is generated by the ICN node device itself, and the second key part is generated for the ICN node device by a key server.

[0167] In one example, the first part of the key may be (K icn.i ,d icn.i The second part of the key can be (K' icn.i ,d' icn.i ).

[0168] Among them, Kicn.i Indicates the first part of the public key of ICN node i, d icn.i Represents the first part of the private key of ICN node i, K' icn.i Indicates the second part of the public key of ICN node i, d' icn.i Indicates the second part of the private key of ICN node i.

[0169] In one example, K' icn.i Satisfies the following formula 17, d' icn.i Satisfies the following formula eighteen:

[0170] K icn.i. =x icn.i P Formula 17

[0171] d icn.i =x icn.i Formula 18

[0172] Among them, x icn.i Represents a random number, x icn.i ∈Z q * .

[0173] It should be noted that the process of determining the first part of the key can refer to the subsequent description of S501-S502 and will not be repeated here.

[0174] In a possible implementation example, in order to obtain the first part of the key of the ICN, the data transmission method in the present application may also include the following S501-S503.

[0175] S501. ICN sends a registration request message to a key server.

[0176] The registration request message is used to request registration with the key server. For example, the registration request message may include an ICN identifier.

[0177] As a possible implementation manner, when the ICN establishes a communication connection with the ICNP for the first time, the ICN may send a registration request message to the key server through the ICNP.

[0178] In some embodiments, the registration request message may further include a first part key of the ICN key.

[0179] The first part of the ICN key may be pre-generated by the ICN. For example, the ICN may generate the first part of the ICN key according to the following formula 19:

[0180] K icn.i. =x icn.i P,d icn.i =x icn.i Formula 19

[0181] Among them, (K icn.i , d icn.i ) represents the first part of the key of ICN node i. icn.i Indicates the first part of the public key of the ICN node i. icn.i Represents a random number, x icn.i ∈Z q * .d icn.i Indicates the first part of the private key of ICN node i.

[0182] S502: The key server generates the second part of the ICN key.

[0183] In one example, the key server may generate the second part of the key for the ICN node i according to the following formula 20:

[0184] K' icn.i =y icn.i P d' icn.i =y icn.i +s*h icn.i Formula 20

[0185] Among them, (K' icn.i , d' icn.i ) represents the second part of the key of ICN node i. K' icn.i The second part of the public key of ICN node i, d' icn.i Indicates the second part of the private key of ICN node i. icn.i represents a random number, and y icn.i ∈Z q * . s indicates the preset system master key. h icn.i Satisfy the following formula 21:

[0186] h icn.i =H1(ID icn.i ,K icn.i ,K' icn.i )Formula 21

[0187] S503: The key server sends a registration reply message to the ICN. Correspondingly, the ICN receives the registration reply message from the key server.

[0188] The registration reply message includes the second part of the key.

[0189] In some embodiments, after the ICN obtains the second part of the key, the ICN may verify the second part of the key of the ICN key using the ICN key verification formula. If the second part of the key of the ICN key is verified, the second part of the key of the ICN key is stored; if the second part of the key of the ICN key is verified, the second part of the key of the ICN key is discarded, and a registration request message is resent to the key server.

[0190] In one example, the ICN key verification formula may be the following formula 22:

[0191] d' icn.i P=K' icn.i +P pub h icn.i Formula 22

[0192] In a possible embodiment, the ICNP key may also include a first part ICNP key and a second part ICNP key.

[0193] In one example, the key server may generate the second part of the ICNP key according to the following formula 23:

[0194] K' icnp =y icnp P d' icn.i =y icnp +s*h icnp Formula 23

[0195] Among them, (K' icnp , d' icnp ) represents the second part of the ICNP key. K' icnp The second part of the ICNP key, d' icnp Indicates the second part of the ICNP key. icnp represents a random number, and y icnp ∈Z q * .h icnp Satisfies the following formula twenty-four:

[0196] h icnp =H1(ID icnp ,K icnp ,K' icnp )Formula 24

[0197] In some embodiments, after the ICNP obtains the second key portion, the ICNP may verify the second key portion of the ICNP key using an ICNP key verification formula, and if the second key portion of the ICNP key is verified successfully, the second key portion of the ICNP key is stored; if the second key portion of the ICNP key is verified unsuccessfully, the second key portion of the ICNP key is discarded, and the second key portion of the ICNP key is re-obtained.

[0198] In one example, the ICNP key verification formula may be the following formula 25:

[0199] d' icnp P=K' icnp +P pub h icnp Formula 25

[0200] In a possible embodiment, the data transmission method in the present application may include the following S601.

[0201] S601. When the number of the multiple signcrypted ciphertexts is less than a quantity threshold, the ICNP obtains a plaintext to be transmitted from the signcrypted ciphertext.

[0202] As a possible implementation manner, ICNP can use the first decryption formula to decrypt the signcrypted ciphertext to obtain the plaintext to be transmitted.

[0203] In one example, the first decryption formula may be the following formula 26:

[0204] α i '=R i (d icnp +d' icnp ),Ti'=H3(ID icnp ,α i '),c i =m i ⊕T i 'Formula 26

[0205] In some embodiments, when the first ICN sends the signcrypted ciphertext to the second ICN, the second ICN may decrypt the signcrypted ciphertext using the second decryption formula to obtain the plaintext to be transmitted.

[0206] In one example, the second decryption formula may be the following formula 27:

[0207] α i '=R i (d icn.j +d' icn.j ),Ti'=H3(ID icn.j ,α i '),ci =m i ⊕T i ' Formula 27

[0208] As another possible implementation, ICNP may determine to verify the signcrypted ciphertext using a signcryption verification formula, and if the signcrypted ciphertext verification passes, decrypt the signcrypted ciphertext using a decryption formula to obtain the plaintext to be transmitted.

[0209] If the signcrypted ciphertext verification fails, the signcrypted ciphertext is discarded.

[0210] Among them, the ciphertext verification passed means that the ciphertext satisfies the ciphertext verification formula. The ciphertext verification failed means that the ciphertext does not satisfy the ciphertext verification formula.

[0211] In one example, the signcryption verification formula may be the following formula 28:

[0212] v i P=R i +h i (K icn.i +K' icn.i+ P pub h icn.i ) Formula 28

[0213] It can be understood that the signcryption ciphertext is verified by the signcryption verification formula, and when the verification is passed, the plaintext is obtained from the signcryption ciphertext. Since the signcryption verification formula is generated based on the identifiers and keys of the sender and receiver, and the generators of the system, the signcryption verification formula can be used to verify whether the signcryption ciphertext is a legitimate sending device in the data transmission system, thereby improving the security of data transmission.

[0214] In some embodiments, when the number of signcrypted ciphertexts is less than a quantity threshold, the receiving device may verify and decrypt the signcrypted ciphertexts one by one.

[0215] Another embodiment of the data transmission method of the present application is described below:

[0216] (1) Based on the existing industrial computing network infrastructure system, this application proposes an industrial computing network system security architecture based on elliptic curve cryptography technology.

[0217] The specific process of system initialization is as follows: SMM selects a security parameter k, generates large prime numbers p and q (q|p-1), and the present invention defines a multiplication cyclic group G based on an elliptic curve, whose order is q, P is a generator of G, and defines four secure hash functions: H1:{0,1}*×G×G→Z q *,H2:Z q *×Z q *×{0,1}*×{0,1}*→Zq *,H3:{0,1}*×G→Z q *,H4:{0,1}*→Z q *. SMM randomly selects s∈Z q * As the master key of the system, calculate P pub =sP as the system public key, public system parameters {p,q,G,P,P pub ,H1,H2,H3,H4}. Through the above operations, an industrial computing network security system is generated. When an industrial Internet node needs to join the system, it needs to initiate registration with SMM through ICNP. After registration is completed, SMM saves the system parameters in the node.

[0218] (2) After the system is initialized, the ICNP and ICN nodes initiate an application to the SMM to generate a public-private key pair.

[0219] SMM interacts with ICNP to generate a public-private key pair for it:

[0220] ICNP randomly selects a secret value x icnp ∈Z q * and save it. icnp =x icnp As part of the private key, calculate K icnp. =x icnp P, K icnp Send to SMM.

[0221] SMM randomly selects y icnp ∈Z q * , calculate K' icnp =y icnp P is the partial public key of ICNP, d' icnp =y icnp +sh icnp As part of the private key, h icnp =H1(ID icnp ,K icnp ,K' icnp ). SMM transmits the partial key (K') through a secure channel icnp ,d' icnp ) is sent to ICNP. ICNP verifies d' icnp P=K' icnp +P pub h icnp If the equation holds, ICNP generates and saves the public key (K icnp ,K' icnp ), private key (d icnp ,d' icnp ) and publish the public key within the system.

[0222] SMM interacts with ICN to generate a public-private key pair for it: ICN randomly selects a secret value x icn.i ∈Z q * and save it. icn.i =x icn.i As part of the private key, calculate K icn.i. =x icn.i P, K icn.i Send to SMM.

[0223] SMM randomly selects y icn.i ∈Z q * , calculate K' icn.i =y icn.i P is the partial public key of ICN, d' icn.i =y icn.i +sh icn.i As part of the private key.

[0224] where h icn.i =H1(ID icn.i ,K icn.i ,K' icn.i ). SMM transmits the partial key (K') through a secure channel icn.i ,d' icn.i ) is sent to ICN. ICN verifies after receiving it. icn.i P=K' icn.i +P pub h icn.i If the equation holds, ICN generates and saves the public key (K icn.i ,K' icn.i ), private key (d icn.i ,d' icn.i ) and publish the public key within the system.

[0225] In the above key generation process, the algorithm generates part of the user's private key by binding the user's identity information and all public key information through a hash function. Through the key original image protection technology, it ensures that illegal operations can be detected during the signing process even if the public key is replaced. Through the above registration process, each network element node in the computing power network can be safely incorporated into the industrial computing power network for management.

[0226] (3) Based on the industrial computing network security system, a non-bilinear pairing-based aggregate signcryption security algorithm is proposed, which plays multiple roles in the security protection of industrial computing networks, covering data confidentiality, integrity, identity authentication, anti-counterfeiting capability, anti-conspiracy attack, resource optimization, public verification, compliance requirements and real-time assurance. These technical features together constitute the security protection system of the industrial computing network, providing a solid foundation for the realization of safe, reliable and efficient industrial applications.

[0227] A feasible signcryption scheme between nodes in the system is as follows: In order to ensure the confidentiality and integrity of the sent message and complete the identity authentication of the message, ICN node i needs to sign the plaintext message m sent to node j. i Perform the following signcryption operation: Randomly select r i Or calculate r i =H2(d icn.i ,d' icn.i ,m i ,t i ), where t i is the timestamp, calculate R i =r i P.

[0228] Calculate h icn.i =H1(ID icn.i ,K icn.i ,K' icn.i ), calculate α i =r i (K icn.j +K' icn.j +h icn.j P pub ),T i =H3(ID icn.j ,α i ); calculate c i =m i ⊕T i .

[0229] Calculate h i =H4(c i ||ID icn.i ||ID icn.j ||R i ||K icn.i ||K′ iicn.i ||K icn.j ||K′ icn.j ||P pub ); calculate v i =r i +h i (d icn.i +d' icn.i ).

[0230] Output ciphertext σ i =(R i ,c i ,v i ).

[0231] When the receiving node j receives the message from the sender node i, it performs the following signature verification operation: calculate h i =H4(c i ||ID icn.i ||ID icn.j ||R i ||K icn.i ||K′ icn.i ||K icn.j ||K′ icn.j ||P pub ) ; verify equation v i P=R i +h i (K icn.i +K' icn.i+ P pub h icn.i ) is true, if true, it proves that the signature is valid, otherwise it proves that the signature is invalid and the message is discarded; if the signature verification passes, calculate α i '=R i (d icn.j +d' icn.j ),Ti'=H3(ID icn.j ,α i '),c i =m i ⊕T i ', obtain the interactive information m by calculating and decrypting i .

[0232] (4) In the industrial computing network, ICNP serves as the brain of the computing network, responsible for coordinating, managing, and optimizing the operation of the entire industrial network. ICN nodes are computing devices distributed at industrial sites that collect data and perform specific computing tasks. For example, in the production monitoring scenario of a smart factory, ICN nodes (such as sensors and robot controllers) can monitor the status of the production line in real time and send the data to ICNP for analysis and processing. The industrial certificateless aggregate signcryption scheme can protect the data security between ICN nodes and ICNP, ensuring the confidentiality and integrity of the data.

[0233] The signcryption scheme of ICN and ICNP is as follows: ICN node i sends a plaintext message m to ICNP. i Perform the following signcryption operation: Select a random number r i Or calculate r i =H2(d icn.i ,d'icn.i ,m i ,t i ), where t i is the timestamp, calculate R i =r i P.

[0234] Calculate α i =r i (K icnp +K' icnp +h icnp P pub ),T i =H3(ID icnp ,α i ); calculate c i =m i ⊕T i .

[0235] Calculate h i =H4(c i ||ID icn.i ||ID icnp ||R i ||K icn，i ||K′ icn.i ||K icnp ||K′ icnp ||P pub ); calculate v i =r i +h i (d icn.i +d' icn.i );Output ciphertext σ i =(R i ,c i ,v i ). When the amount of data in the industrial computing network is small, ICNP can verify the signature information one by one.

[0236] When ICNP receives a message from sender node i, it performs the following signature verification operation: Calculate h i =H4(c i ||ID icn.i ||ID icnp ||R i ||K icn.i ||K′ icn.i ||K icnp ||K′ icnp ||P pub ) ; verify equation v i P=R i +h i (K icn.i +K' icn.i+ P pub hicn.i ) is true, if so, the signcryption is valid, otherwise it is invalid and the message is discarded.

[0237] If the signature verification passes, calculate α i '=R i (d icnp +d' icnp ),Ti'=H3(ID icnp ,α i '),c i =m i ⊕T i ', obtain the interactive information m by calculating and decrypting i .

[0238] When the amount of data in industrial application scenarios is large, the system starts the aggregate signcryption scheme. The signcrypted ciphertext in the region must first be uploaded to the IES server in the region where the computing power node belongs. After receiving the ciphertext, the IES server aggregates the messages of all nodes in the region to generate the aggregate ciphertext. In order to prevent collusion attacks by multiple nodes, an identity binding mechanism is introduced when calculating the aggregate signcryption to enhance the protection capability. The specific process is as follows: After receiving n ciphertexts σ i =(R i ,c i ,v i ), calculate the aggregate verification value And calculate W = H4 (K icnp v1||K icnp v2||…||K icnp v n ), the output aggregate signcryption is

[0239] After receiving the aggregated ciphertext, ICNP verifies the signature to determine whether the aggregated ciphertext is valid, and decrypts it to obtain the interaction information m of each computing power node. i , so as to control the computing power of each area of ​​the industrial site, so as to analyze and control the industrial computing network in real time. The specific steps of decryption are as follows: Calculate h i =H4(c i ||ID icn.i ||ID icnp ||R i ||K icn.i ||K′ icn.i ||K icnp ||K′ icnp ||P pub ); To prevent multiple nodes from colluding to attack by forging or tampering with signatures, ICNP calculates the anti-collusion factor W′: W′=H4(x icnp b1||x icnp b2||…||x icnp b n), where b i It is a value recalculated based on the node signature information: ; If W = W′, the verification is successful, indicating that the message has not been forged; otherwise, the signature is invalid and the aggregated ciphertext message should be discarded. If the verification is successful, select a random small exponent calculate Calculation verification equation Is it true? If it is true, it proves that σ is valid. Otherwise, it proves that the signature is invalid and the aggregated ciphertext message is discarded. If the signature verification passes, calculate α i '=R i (d icnp +d' icnp ),T i '=H3(ID icnp ,α i '),m i =c i ⊕T' i , the interactive information m is obtained by calculating and decrypting i .

[0240] It can be understood that the algorithm of the present application is based on the elliptic curve non-bilinear pairing cryptographic algorithm, which helps to improve the response speed and processing power of the system, and is suitable for industrial computing network applications with high real-time requirements. The security and effectiveness of the aggregated signcryption are ensured. By combining the public key of the receiver with the verification factor of each sender, through the key original image protection technology and the collision resistance of the hash function, combined with the structure and verification equation of the aggregated signcryption, it is ensured that even in the case of a collusion attack, the attacker cannot generate a valid aggregate signature, further improving the security of the aggregated signcryption scheme in the industrial computing network. At the same time, in order to optimize the performance of batch signcryption verification, the signature is verified by a small exponent test method, which will greatly improve the verification efficiency in large-scale batch verification scenarios.

[0241] The embodiment of the present application can divide the data transmission device into functional modules or functional units according to the above method example. For example, each functional module or functional unit can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules or functional units. Among them, the division of modules or units in the embodiment of the present application is schematic, which is only a logical function division, and there may be other division methods in actual implementation.

[0242] In the case of dividing each functional module into corresponding functional modules, Figure 6The schematic diagram of the structure of a data transmission device 800 is shown. The data transmission device may be an industrial computing network platform ICNP, or a chip, processor, etc. applied in the industrial computing network platform ICNP. The data transmission device 800 may be used to perform the functions of the data transmission device involved in the above-mentioned embodiments. Figure 6 The data transmission device 800 shown may include: a receiving unit 801 and a processing unit 802; the receiving unit 801 is used to receive an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the processing unit 802 is used to obtain the plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and a first sub-signcrypted ciphertext.

[0243] Optionally, the receiving unit 801 is specifically used to: send an aggregation request message to the industrial super edge server when the number of multiple signed ciphertexts is greater than or equal to a quantity threshold; the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into aggregated ciphertext; and receive the aggregated ciphertext from the industrial super edge server.

[0244] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0245] Optionally, the signcryption factor also includes an ICN identifier, an ICNP identifier, an ICN public key, an ICNP public key, and a system public key.

[0246] Optionally, the anti-collusion factor satisfies the following relationship: W′=H4(x icnp b1||x icnp b2||…||x icnp b n )

[0247] Where W′ represents the anti-collusion factor, H4() represents the hash function, and x icnp Indicates the first part of the ICNP private key, ; R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, h i represents the hash value obtained by performing a hash operation on the first sub-signature ciphertext, the third sub-signature ciphertext, and the signcryption factor; K icn.i and K′ icn.i represents the public key of ICN node i, P pub Indicates the system public key, h icn.iIndicates the hash value obtained by performing a hash operation on the ICN identifier and the ICN public key.

[0248] Optionally, the target anti-collusion factor satisfies the following relationship: W = H4(K icnp v1||K icnp v2||…||K icnp v n ), where W represents the target anti-collusion factor, v i K represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i; icnp Indicates the first part of the ICNP public key.

[0249] In the case of dividing each functional module into corresponding functional modules, Figure 7 A schematic diagram of the structure of a data transmission device 900 is shown, and the data transmission device may be an industrial super edge server, or a chip, processor, etc. used in the industrial super edge server. The data transmission device 900 may be used to perform the functions of the data transmission device involved in the above embodiments. Figure 7 The data transmission device 900 shown may include: a sending unit 901; the sending unit 901 is used to send an aggregated ciphertext to the industrial computing network platform ICNP; the ICNP is used to obtain the plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0250] Optionally, the device includes: a receiving unit 902, the receiving unit 902 is used to receive an aggregation request message from ICNP when the number of multiple signcrypted ciphertexts is greater than or equal to a number threshold; the aggregation request message is used to request to aggregate the multiple signcrypted ciphertexts into an aggregated ciphertext.

[0251] Optionally, the device includes: a processing unit 903, the processing unit 903 is used to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: Among them, σ represents the aggregated ciphertext, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, c i represents the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, v iIt represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i, i represents the index of the ciphertext participating in the aggregation (i=1,2,...,n), n represents the total number of ciphertexts participating in the aggregation, and W represents the target anti-collusion factor.

[0252] The embodiment of the present application also provides a computer-readable storage medium. All or part of the processes in the above method embodiments can be completed by a computer program to instruct the relevant hardware, and the program can be stored in the above computer-readable storage medium. When the program is executed, it may include the processes of the above method embodiments. The computer-readable storage medium can be an internal storage unit of the data transmission device (including the data sending end and / or the data receiving end) of any of the above embodiments, such as a hard disk or memory of the data transmission device. The above computer-readable storage medium can also be an external storage device of the above terminal device, such as a plug-in hard disk equipped on the above terminal device, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. Further, the above computer-readable storage medium can also include both the internal storage unit of the above data transmission device and an external storage device. The above computer-readable storage medium is used to store the above computer program and other programs and data required by the above data transmission device. The above computer-readable storage medium can also be used to temporarily store data that has been output or is to be output.

[0253] It should be noted that the terms "first" and "second" in the specification, claims and drawings of the present application are used to distinguish different objects rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0254] It should be understood that in the present application, "at least one (item)" means one or more, "more than one" means two or more, "at least two (items)" means two or three and more than three, and "and / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0255] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0256] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0257] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0258] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0259] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks or optical disks.

[0260] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data transmission method, characterized in that: Applied to the Industrial Computing Network Platform ICNP; the method comprises: Receiving an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating the signed ciphertexts of multiple computing power node devices ICN; When the anti-collusion factor of the aggregate ciphertext is the target anti-collusion factor, the plaintext to be transmitted is obtained from the aggregate ciphertext; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

2. The method according to claim 1, characterized in that The receiving of the aggregated ciphertext from the industrial super edge server includes: When the number of multiple signcrypted ciphertexts is greater than or equal to the number threshold, an aggregation request message is sent to the industrial super edge server; the aggregation request message is used to request the industrial super edge server to aggregate the multiple signcrypted ciphertexts into the aggregated ciphertext; Receive an aggregated ciphertext from the industrial hyper-edge server.

3. The method according to claim 1, characterized in that The signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

4. The method according to any one of claims 1 to 3, characterized in that The signcryption factors also include an ICN identifier, an ICNP identifier, an ICN public key, an ICNP public key, and a system public key.

5. The method according to claim 4, characterized in that The anti-collusion factor satisfies the following relationship: W′=H4(x icnp b1||x icnp b2||…||x icnp b n ) Where W′ represents the anti-collusion factor, H4() represents the hash function, and x icnp Represents a random number, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, h i represents a hash value obtained by performing a hash operation on the first sub-signature ciphertext, the third sub-signature ciphertext, and the signcryption factor; K icn.i and K′ icn.i represents the public key of ICN node i, P pub Represents the system public key, represents a hash value obtained by performing a hash operation on the ICN identifier and the ICN public key, i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

6. The method according to claim 4, characterized in that The target anti-collusion factor satisfies the following relationship: W=H4(K icnp v1||K icnp v2||…||K icnp v n ); Where W represents the target anti-collusion factor, v i K represents the second sub-signature ciphertext of the signature ciphertext sent by ICN node i; icnp Represents the ICNP public key.

7. A data transmission method, characterized in that: Applied to an industrial super edge server, the method comprises: An aggregated ciphertext is sent to an industrial computing network platform ICNP; the ICNP is used to obtain a plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcrypted factor; the signcrypted factor includes a random number and the first sub-signcrypted ciphertext.

8. The method according to claim 7, characterized in that The method further comprises: When the number of the multiple signcrypted ciphertexts is greater than or equal to the number threshold, an aggregation request message is received from the ICNP; the aggregation request message is used to request that the multiple signcrypted ciphertexts be aggregated into the aggregated ciphertext.

9. The method according to claim 7 or 8, characterized in that: The method further comprises: The plurality of signcrypted ciphertexts are aggregated into the aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: Where, σ represents the aggregated ciphertext, R i The third sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, c i represents the first sub-signature ciphertext of the sign-encrypted ciphertext sent by ICN node i, v i represents the second sub-signature ciphertext of the signature ciphertext sent by the ICN node i, i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), n represents the total number of ciphertexts participating in the aggregation, and W represents the target anti-collusion factor.

10. A data transmission device, characterized in that: Applied to the industrial computing network platform ICNP, the device includes: a receiving unit and a processing unit; The receiving unit is used to receive an aggregated ciphertext from an industrial super edge server; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; The processing unit is used to obtain the plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is the target anti-collusion factor; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

11. A data transmission device, characterized in that: Applied to an industrial super edge server, the device comprises: a sending unit; The sending unit is used to send an aggregated ciphertext to an industrial computing network platform ICNP; the ICNP is used to obtain a plaintext to be transmitted from the aggregated ciphertext when the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor; the aggregated ciphertext is obtained by aggregating multiple signcrypted ciphertexts; the anti-collusion factor is determined by performing a hash operation on the signcrypted ciphertext of each ICN; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

12. A data transmission system, characterized in that: It includes ICNP and industrial super edge server; the ICNP is used to execute the method as described in any one of claims 1-6; the industrial super edge server is used to execute the method as described in any one of claims 7-9.

13. An electronic device, characterized in that: include: A processor, a memory and a communication interface; wherein the communication interface is used for the electronic device to communicate with other devices or networks; The memory is used to store one or more programs, which include computer-executable instructions. When the electronic device is running, the processor executes the computer-executable instructions stored in the memory to enable the electronic device to perform any one of claims 1-6 or any one of claims 7-9.

14. A computer-readable storage medium, characterized in that: The readable storage medium stores instructions, and when the instructions are executed, the method according to any one of claims 1 to 6 or any one of claims 7 to 9 is implemented.

15. A computer program product, comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the method according to any one of claims 1 to 6 or any one of claims 7 to 9 is implemented.

Images