Data transmission method and device, medium, equipment and product

Abstract

The invention discloses a data transmission method and device, a medium, equipment and a product, relates to the technical field of communication, and is used for improving encrypted data transmission efficiency. The method comprises the steps of performing signcryption on a to-be-transmitted plaintext to obtain a signcryption ciphertext; the signcryption ciphertext comprises a first sub-signcryption ciphertext and a second sub-signcryption ciphertext; the first sub signcryption ciphertext is obtained by performing XOR operation on the to-be-transmitted plaintext; the second sub signcryption ciphertext is determined by performing hash operation according to the signcryption factor; the signcryption factor comprises a random number and a first sub-signcryption ciphertext; and sending the signcryption ciphertext to a receiving device.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, and in particular, to a data transmission method, apparatus, medium, equipment and product. Background Art

[0002] As a product of the deep integration of new-generation information technology and manufacturing, the core of the industrial Internet is to achieve a comprehensive upgrade of the industrial system through a high degree of digitization, networking and intelligence. In this process, the computing network, as the infrastructure supporting the operation of the industrial Internet, undertakes the heavy task of data processing, analysis and decision-making. However, the industrial Internet has put forward higher requirements for the computing network in terms of computing resources, massive data transmission and storage, real-time and security. Especially in terms of security, with the increase in the number of devices in the industrial Internet and the acceleration of data flow, security threats such as data leakage, tampering and forgery are becoming increasingly severe.

[0003] In this context, under the framework of deep integration of computing power network and industrial Internet, strengthening the security protection capability of computing power network is crucial to maintaining the stable operation of industrial Internet. The certificate-free feature of some solutions reduces the dependence on traditional public key infrastructure (PKI), simplifies the key management process, and reduces the security risks caused by poor certificate management. At the same time, its publicly verifiable feature allows any trusted third party to verify the validity of the signed message without having to know the private key information, which provides additional protection for the authenticity and integrity of data in the industrial Internet.

[0004] In some industrial Internet applications, industrial applications have put forward higher requirements on the computing resources, data transmission and storage capabilities, real-time and security of the computing network. To this end, the present invention proposes a signcryption scheme based on non-bilinear mapping operations, which can effectively reduce the computational complexity, make the signcryption and verification process more efficient, and reduce the demand for computing resources. This scheme can be applied to resource-constrained industrial equipment, thereby saving computing costs and energy consumption. Secondly, compared with the signcryption scheme based on bilinear mapping operations, the signcryption scheme of the present invention can improve the data processing speed, thereby improving the real-time performance of the industrial system, and can be enhanced in terms of system scalability, thereby improving the performance and stability of the system.

[0005] In summary, the present invention not only improves the real-time performance of the system through non-bilinear mapping operations, better meets the needs of fast response in scenarios such as the Industrial Internet, but also enhances the scalability of the system, making it easier to adapt to the growing number of devices and data traffic. In addition, this solution can reduce dependence on computing resources, improve adaptability in resource-constrained environments, and make it possible to deploy industrial applications in environments such as industrial programmable logic controller (PLC) embedded systems and industrial Internet of Things (IIoT) devices. Summary of the invention

[0006] The present application provides a data transmission method, apparatus, medium, equipment and product for improving the efficiency of encrypted transmission of industrial data.

[0007] In order to achieve the above objectives, this application adopts the following technical solutions:

[0008] In a first aspect, a data transmission method is provided, which is applied to a sending device, the method comprising: signing a plaintext to be transmitted to obtain a signcrypted ciphertext; the signcrypted ciphertext comprises a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor comprises a random number and the first sub-signcrypted ciphertext; and the signcrypted ciphertext is sent to a receiving device.

[0009] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0010] Optionally, the signcrypted ciphertext satisfies the following relationship: c=m⊕T; v=r+h 2 (d+d'); where c represents the first sub-signature ciphertext of m, v represents the second sub-signature ciphertext, r represents a random number, and m represents the plaintext message to be transmitted; T represents the hash value obtained by performing a hash operation on the receiving device identifier and α; α=r(K

[0011] +K'+h 1 P pub ); K and K' represent different components of the public key of the receiving device; h 1 represents a hash value obtained by performing a hash operation on the receiving device identifier and the receiving device public key; P pub Indicates the system public key; h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; d and d' represent different components of the private key of the sending device.

[0012] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0013] Optionally, the device key includes a first key part and a second key part; the first key part is generated for the device by a key server; and the second key part is generated by the device itself.

[0014] Optionally, the method also includes: sending a registration request message to the key server; the registration request includes the device identifier; receiving a registration reply message from the key server; the registration reply message includes a first part of the key; the first part of the key is obtained by the key server by performing a hash operation based on the device identifier.

[0015] Based on the technical solution provided by the present application, plaintext is transmitted through a signcrypted ciphertext including a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext. Since the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the ICN key. Through ICN key encryption, the security of the plaintext to be transmitted can be improved. XOR operations and hash operations do not need to establish a mapping relationship between multiple cyclic groups, that is, the complexity of data encryption can be reduced and the encryption time of the data can be reduced. In this way, the efficiency of data encryption transmission can be improved while ensuring the secure transmission of data.

[0016] In a second aspect, a data transmission method is provided, which is applied to a receiving device, and the method includes: receiving a signcrypted ciphertext from an ICN; the signcrypted ciphertext is obtained by the ICN signing a plaintext to be transmitted; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; and the plaintext to be transmitted is obtained from the signcrypted ciphertext.

[0017] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0018] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0019] Optionally, obtaining the plaintext to be transmitted from the signcrypted ciphertext includes: obtaining the plaintext to be transmitted from the signcrypted ciphertext when the signcrypted ciphertext satisfies a preset verification formula; the preset verification formula satisfies: vP=R+h 2 (K 2 +K2 '+h 1 'P pub ), wherein v represents the second sub-signature ciphertext, R represents the third sub-signature ciphertext, P represents the generator of the multiplication cyclic group based on the elliptic curve, and h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; K 2 and K 2 ' represents the public key of the sending device; P pub Indicates the system public key, h 1 ' represents a hash value obtained by performing a hash operation on the sending device identification and the sending device public key.

[0020] Optionally, when the number of the signcrypted ciphertexts is greater than or equal to a quantity threshold, obtaining the plaintext to be transmitted from the signcrypted ciphertexts includes: sending an aggregation request message to the industrial super edge server; the aggregation request message is used to request the industrial super edge server to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext; receiving the aggregated ciphertext from the industrial super edge server; and obtaining the plaintext to be transmitted from the aggregated ciphertext.

[0021] In a third aspect, a data transmission method is provided, which is applied to an industrial super edge server, and the method includes: receiving an aggregation request message from a receiving device; the aggregation request message is used to request that multiple signcrypted ciphertexts be aggregated into an aggregated ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on a plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; and the aggregated ciphertext is sent to the receiving device.

[0022] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0023] Optionally, the signcrypted ciphertext further includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0024] Optionally, the method further includes: aggregating the multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: Among them, σ represents the aggregated ciphertext, R i The third subsignature ciphertext of ciphertext i, c i represents the first subsignature ciphertext of ciphertext i, v i The second subsignature ciphertext of ciphertext i, where i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

[0025] In a fourth aspect, a data transmission device is provided, which is applied to a computing power node device ICN, and the device includes: a processing unit and a sending unit; the processing unit is used to signencrypt a plaintext to be transmitted to obtain a signcrypted ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the sending unit is used to send the signcrypted ciphertext to a receiving device.

[0026] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0027] Optionally, the signcrypted ciphertext satisfies the following relationship: c=m⊕T; v=r+h 2 (d+d'); where c represents the first sub-signature ciphertext of m, v represents the second sub-signature ciphertext, r represents a random number, and m represents the plaintext message to be transmitted; T represents the hash value obtained by performing a hash operation on the receiving device identifier and α; α=r(K

[0028] +K'+h 1 P pub ); K and K' represent different components of the public key of the receiving device; h 1 represents a hash value obtained by performing a hash operation on the receiving device identifier and the receiving device public key; P pub Indicates the system public key; h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; d and d' represent different components of the private key of the sending device.

[0029] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0030] Optionally, the device key includes a first key part and a second key part; the first key part is generated for the device by a key server; and the second key part is generated by the device itself.

[0031] Optionally, the device also includes a receiving unit and a sending unit, and is also used to send a registration request message to the key server; the registration request includes the device identifier; the receiving unit is used to receive a registration reply message from the key server; the registration reply message includes a first part of the key; the first part of the key is obtained by the key server by performing a hash operation based on the device identifier.

[0032] In a fifth aspect, a data transmission device is provided, which is applied to a receiving device, and the device includes: a receiving unit and a processing unit; the receiving unit is used to receive a signcrypted ciphertext from an ICN; the signcrypted ciphertext is obtained by the ICN signing the plaintext to be transmitted; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the processing unit is used to obtain the plaintext to be transmitted from the signcrypted ciphertext.

[0033] Optionally, the signcryption factors also include a sending device identification, a receiving device identification, a receiving device public key, a receiving device identification, and a system public key.

[0034] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0035] Optionally, the processing unit is specifically configured to: obtain the plaintext to be transmitted from the signcrypted ciphertext when the signcrypted ciphertext satisfies a preset verification formula; the preset verification formula satisfies: vP = R + h 2 (K 2 +K 2 '+h 1 'P pub ), wherein v represents the second sub-signature ciphertext, R represents the third sub-signature ciphertext, P represents the generator of the multiplication cyclic group based on the elliptic curve, and h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; K 2 and K 2 ' represents the public key of the sending device; P pub Indicates the system public key, h 1 ' represents a hash value obtained by performing a hash operation on the sending device identification and the sending device public key.

[0036] Optionally, the processing unit is further used to: send an aggregation request message to an industrial super edge server; the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into an aggregated ciphertext; receive the aggregated ciphertext from the industrial super edge server; and obtain the plaintext to be transmitted from the aggregated ciphertext.

[0037] In the sixth aspect, a data transmission device is provided, which is applied to an industrial super edge server, and the device includes: a receiving unit and a sending unit; the receiving unit is used to receive an aggregation request message from a receiving device; the aggregation request message is used to request to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the sending unit is used to send the aggregated ciphertext to the receiving device.

[0038] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0039] Optionally, the signcrypted ciphertext further includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0040] Optionally, the device further includes a processing unit, the processing unit being configured to aggregate the multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: Among them, σ represents the aggregated ciphertext, R i The third subsignature ciphertext of ciphertext i, c i represents the first subsignature ciphertext of ciphertext i, v i The second subsignature ciphertext of ciphertext i, where i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

[0041] In the seventh aspect, a data transmission device is provided, which can implement the functions performed by the data transmission device in the above-mentioned aspects or each possible design. The functions can be implemented through hardware, such as: in one possible design, the data transmission device may include: a processor and a communication interface, and the processor can be used to support the data transmission device to implement the functions involved in the above-mentioned first aspect or any possible design of the first aspect.

[0042] In another possible design, the data transmission device may further include a memory, the memory being used to store computer-executable instructions and data necessary for the data transmission device. When the data transmission device is running, the processor executes the computer-executable instructions stored in the memory, so that the data transmission device performs the first aspect or any possible data transmission method of the first aspect.

[0043] In an eighth aspect, a computer-readable storage medium is provided, which may be a readable non-volatile storage medium. The computer-readable storage medium stores computer instructions or programs, and when the computer-readable storage medium is run on a computer, the computer can execute the first aspect or any possible data transmission method of the above aspects.

[0044] In a ninth aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the data transmission method of the first aspect or any possible design of the above aspects.

[0045] In a tenth aspect, an electronic device is provided, the electronic device comprising one or more processors and one or more memories. The one or more memories are coupled to the one or more processors, the one or more memories are used to store computer program codes, the computer program codes include computer instructions, and when the one or more processors execute the computer instructions, the electronic device executes the data transmission method as described in the first aspect or any possible design of the first aspect.

[0046] In the eleventh aspect, a chip system is provided, the chip system includes a processor and a communication interface, and the chip system can be used to implement the function performed by the data transmission device in the first aspect or any possible design of the first aspect. In one possible design, the chip system also includes a memory, the memory is used to store program instructions and / or data. The chip system can be composed of a chip, or it can include a chip and other discrete devices, without limitation. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 A schematic diagram of the structure of a data transmission system provided in an embodiment of the present application;

[0048] Figure 2 A structural diagram of another data transmission system provided in an embodiment of the present application;

[0049] Figure 3 A schematic diagram of the structure of a data transmission device provided in an embodiment of the present application;

[0050] Figure 4 A flowchart of a data transmission method provided in an embodiment of the present application;

[0051] Figure 5 A flowchart of another data transmission method provided in an embodiment of the present application;

[0052] Figure 6 A flowchart of another data transmission method provided in an embodiment of the present application;

[0053] Figure 7 A flowchart of another data transmission method provided in an embodiment of the present application;

[0054] Figure 8 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application;

[0055] Fig. 9 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application;

[0056] Fig.10 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0057] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

[0058] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0059] It should also be understood that the term “comprising” indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements and / or components.

[0060] As a key force in promoting the digitalization and intelligent transformation of traditional industries, computing networks are becoming a new engine to stimulate the growth of the digital economy. In the field of industrial Internet, the research on computing-network integration technology has become the focus of attention in the industrial community. With the rapid development of the industrial Internet and the industrial Internet of Things, a large number of industrial equipment and systems have begun to be connected to the network. The emergence of industrial computing networks has provided new optimization methods for industrial production and operation and maintenance, but it has also brought a series of challenges:

[0061] Access control issue: As the number of industrial devices increases, how to effectively manage the access rights of these devices and ensure that only authorized devices and users can access network resources has become an urgent problem to be solved.

[0062] Security of data transmission and sharing: In the industrial Internet environment, efficient data transmission and secure sharing are crucial. It is necessary to ensure that the integrity and confidentiality of data are protected during data transmission to prevent data leakage or unauthorized tampering.

[0063] Unified coordination of equipment and data management: In the face of numerous industrial equipment and massive data, there is a lack of effective equipment and data management methods, which makes the optimization and coordination of resources more difficult.

[0064] In order to solve these problems, the present invention proposes a node security management and data transmission security technology based on the industrial computing network system architecture. The technology particularly adopts a certificateless aggregate signcryption scheme without pairwise operation, which has the following characteristics:

[0065] Computational efficiency: This solution uses non-bilinear mapping operations to reduce computational complexity, allowing it to run efficiently on resource-constrained industrial equipment.

[0066] Real-time: By simplifying the calculation process, this solution can speed up data processing and meet the real-time requirements of the Industrial Internet.

[0067] Scalability: This solution can adapt to the growth of the number of devices and data traffic, and improve the scalability of the system.

[0068] Adaptability: This solution has better adaptability to resource-constrained environments, enabling it to be implemented on various industrial devices, including embedded systems and IoT devices.

[0069] In view of this, an embodiment of the present application provides a data transmission method, including: signing a plaintext to be transmitted to obtain a signcrypted ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on a signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; and the signcrypted ciphertext is sent to a receiving device.

[0070] The method provided in the embodiment of the present application is described in detail below with reference to the accompanying drawings.

[0071] It should be noted that the network system described in the embodiment of the present application is to more clearly illustrate the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of network systems and the emergence of other network systems, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0072] Figure 1FIG. 1 is a schematic diagram of a data transmission system 10 provided in an embodiment of the present application. Figure 1 As shown, the data transmission system 10 may include an ICN 11 and a receiving device 12 .

[0073] The ICN 11 is connected to the receiving device 12. For example, the ICN 11 and the receiving device 12 may be connected wirelessly, or may be connected wiredly. There is no limitation.

[0074] Among them, the ICN11 involved in the embodiments of the present application is a computing device at an industrial site, which is used to provide computing power (distributed computing power) for industrial equipment at the industrial site. For example, it can be an industrial personal computer (PC), a programmable logic controller (PLC), and a server. The embodiments of the present application do not limit the specific technology, specific number, and specific device form used by ICN11.

[0075] Among them, the receiving device 12 involved in the embodiments of the present application can be an industrial computing network platform (ICNP) device or an ICN device. ICNP is used to collaboratively manage and schedule ICN, industrial edge servers (IES) and network resources. For example, the receiving device 12 can also be a server, a computer, etc. Among them, the server can be a single server, or it can be a server cluster composed of multiple servers. In some implementations, the server cluster can also be a distributed cluster. The embodiments of the present application do not limit the specific technology, specific number and specific device form of the receiving device 12. The embodiments of the present application do not limit the specific technology, specific number and specific device form of the receiving device 12.

[0076] Figure 2 FIG. 1 is a schematic diagram of the structure of another data transmission system 10 provided in an embodiment of the present application. Figure 2 As shown, the data transmission system 10 may include ICN, ICNP, IES, and a key server.

[0077] Among them, IES is deployed at the industrial site and connected to ICN and ICNP respectively. It can aggregate ICN data based on ICNP collaborative management and scheduling operations.

[0078] The key server is used to provide a security protection mechanism for the industrial computing network (computing network). For example, it can be used to manage and distribute keys and generate system parameters. The key server can be used for the security management module (SMM).

[0079] For example, keys (including public keys and private keys) may be distributed to various entities (such as ICN, ICNP) in the system.

[0080] It should be noted that SMM can be set up on an industrial computing network platform or on a third-party platform.

[0081] It should be noted that all entities in the data transmission system 10 (such as ICN, ICNP, IES, SMM) use unified system initial parameters; SMM, as a trusted security center, participates in the generation process of some public and private keys of entities while generating domain parameters (including system initial parameters, etc.), and can pass them to all entities participating in the protocol in a secure manner; secure communication links can be established between SMM and ICNP, between ICNP and IES, between IES and ICN, and between ICNs.

[0082] Figure 1 This is just an exemplary framework diagram. Figure 1 The names of the individual devices included in the Figure 1 In addition to the functional nodes shown, other nodes may also be included, which is not limited in the embodiments of the present application.

[0083] When implementing it specifically, Figure 1 Each device in the Figure 3 The structure shown, or including Figure 3 Parts shown. Figure 3 The structure diagram of a data transmission device 200 provided in an embodiment of the present application is shown in FIG. 2 . The data transmission device 200 may be a network device, or the data transmission device 200 may be a chip or a system on a chip in a network device. Figure 3 As shown, the data transmission device 200 includes a processor 201 , a communication interface 202 and a communication line 203 .

[0084] Furthermore, the data transmission device 200 may further include a memory 204 . The processor 201 , the memory 204 and the communication interface 202 may be connected via a communication line 203 .

[0085] The processor 201 is a CPU, a general processor, a network processor (NP), a digital signal processor (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD), or any combination thereof. The processor 201 may also be other devices with processing functions, such as circuits, devices, or software modules, without limitation.

[0086] The communication interface 202 is used to communicate with other devices or other communication networks. The communication interface 202 can be a module, a circuit, a communication interface or any device capable of implementing communication.

[0087] The communication line 203 is used to transmit information between the components included in the data transmission device 200.

[0088] The memory 204 is used to store instructions, where the instructions may be computer programs.

[0089] The memory 204 may be a read-only memory (ROM) or other types of static storage devices that can store static information and / or instructions, or a random access memory (RAM) or other types of dynamic storage devices that can store information and / or instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, etc., without limitation.

[0090] It should be noted that the memory 204 can exist independently of the processor 201, or can be integrated with the processor 201. The memory 204 can be used to store instructions or program codes or some data, etc. The memory 204 can be located inside the data transmission device 200, or outside the data transmission device 200, without limitation. The processor 201 is used to execute the instructions stored in the memory 204 to implement the data transmission method provided in the following embodiments of the present application.

[0091] In one example, the processor 201 may include one or more CPUs, for example, Figure 3 CPU0 and CPU1 in.

[0092] As an optional implementation, the data transmission device 200 includes multiple processors, for example, Figure 3 In addition to the processor 201, a processor 205 may also be included.

[0093] It should be pointed out that Figure 3 The composition shown in the Figure 1 The limitations of each device in Figure 3 In addition to the parts shown, Figure 1 The individual devices in the Figure 3 More or fewer components, or combinations of certain components, or different arrangements of components.

[0094] In the embodiment of the present application, the chip system may be composed of a chip, or may include a chip and other discrete devices.

[0095] In addition, the actions, terms, etc. involved in the various embodiments of the present application can refer to each other without limitation. The message name or parameter name in the message exchanged between the various devices in the embodiments of the present application is only an example, and other names can also be used in the specific implementation without limitation.

[0096] In order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0097] It should be noted that, in this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0098] In the present application, "at least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0099] Combine the following Figure 1 The data transmission system shown describes the data transmission method provided in the embodiment of the present application.

[0100] Figure 4 A flow chart of a data transmission method provided in an embodiment of the present application is shown as follows: Figure 4 As shown, the method includes the following S301-S302:

[0101] S301. ICN signs the plaintext to be transmitted to obtain a signcrypted ciphertext.

[0102] The signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext. The first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted. The second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext.

[0103] The plain text to be transmitted may be operating parameters of industrial equipment, detected environmental data, etc.

[0104] In one example, the signcrypted ciphertext satisfies the following formula 1:

[0105] c=m⊕T;v=r+h 2 (d+d') Formula 1

[0106] Wherein, c represents the first sub-signature ciphertext of m, v represents the second sub-signature ciphertext, r represents a random number, and m represents the plaintext of the message to be transmitted; T represents the hash value obtained by performing a hash operation on the receiving device identifier and α; α=r(K+K'+h 1 P pub ); K and K' represent different components of the public key of the receiving device; h 1 represents a hash value obtained by performing a hash operation on the receiving device identifier and the receiving device public key; P pub Indicates the system public key; h 2represents the hash value obtained by performing a hash operation on the signcryption factor; d and d' represent different components of the private key of the sending device.

[0107] In another example, the signcrypted ciphertext may satisfy the following formula 2:

[0108] c i =m i ⊕T i ;v i =r i +h i (d icn.i +d' icn.i ) Formula 2

[0109] Among them, c i Represents the first subsignature ciphertext of ciphertext i. i Represents the second subsignature ciphertext of ciphertext i. i Represents a random number, m i Indicates the plaintext to be transmitted.

[0110] In some embodiments, T i It can represent the receiving device identification and α i The hash value obtained by hashing. i =r i (K icn.j +K' icn.j +h icn.j P pub ). icn.j and K' icn.j Indicates the different components of the receiving device's public key; icn.j represents the hash value obtained by performing a hash operation on the receiving device identification and the receiving device public key; P pub Indicates the system public key; h i represents the hash value obtained by hashing the signcryption factor; d icn.i and d' icn.i Represents the different components of the private key of ICN node i.

[0111] The following 1-3 parts will be used to analyze T i 、h icn.j 、h i The calculation process is introduced as follows:

[0112] 1. ICN can identify the receiving device and α i Substitute into the third hash formula preset by the system and get T i . T i Satisfies the following formula three:

[0113] T i =H 3 (IDicn.j ,α i )Formula 3

[0114] Among them, ID icn.j Indicates the receiving device identification, H 3 () represents the third Hash function, and the third Hash function satisfies the following formula 4:

[0115] H 3 :{0,1}*×G→Z q *Formula 4

[0116] Where G represents the multiplication cyclic group based on the elliptic curve. q * represents the cyclic group of integer multiplication.

[0117] It should be noted that the receiving device may be an ICN or an ICNP.

[0118] For example, in the case where the receiving device may be an ICN node j, T i =H 3 ((ID icn.j ,α i ).

[0119] For another example, when the receiving device may be an ICNP, T i =H 3 ((ID icnp ,α i ).

[0120] Wherein, in the case where the receiving device may be an ICN node j, ID icn.j Indicates the ID of ICN node j. j is any positive integer. ID icnp Indicates the ICNP flag.

[0121] 2. ICN can substitute the receiving device identification and receiving device public key into the third hash formula preset by the system to obtain h icn.j .h icn.j Satisfies the following formula 5:

[0122] h icn.j =H 1 (ID icn.j ,K icn.j )Formula 5

[0123] Among them, K icn.j Indicates receiving the device public key (or receiving part of the device public key), H 1 () represents the first Hash function, and the first Hash function satisfies the following formula 6:

[0124] H 1 :{0,1} * ×G→Zq * Formula 6

[0125] It should be noted that the receiving device may be an ICN or an ICNP.

[0126] For example, in the case where the receiving device may be an ICN node j, h icn.j =H 1 (ID icn.j ,K icn.j ).

[0127] For another example, in the case where the receiving device may be an ICNP, h icn.j =H 1 (ID icnp ,K icnp ).

[0128] Among them, K icn.j K represents the public key of ICN node j (or part of the public key of ICN node j). icnp Represents the ICNP public key (or part of the ICNP public key).

[0129] 3. ICN can substitute the signcryption factor into the fourth hash formula preset by the system to obtain h i In the case where the signcryption factor includes a random number and the first sub-signcrypted ciphertext, h i =H 4 (c i ||R i ).

[0130] Among them, the signcryption factors include ciphertext, random number, H 4 () represents the fourth Hash formula. The fourth Hash function satisfies the following formula 7:

[0131] H 4 :{0,1}*→Z q *Formula 7

[0132] In some embodiments, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key. i Satisfies the following formula eight:

[0133] h i =H 4 (c i ||R i ||ID icn.i ||ID icn.j ||K icn.i ||K' icn.i ||K icn.j ||K' icn.j ||P pub) Formula 8

[0134] Among them, R i The third sub-signature ciphertext of ciphertext i is the point on the elliptic curve related to the random number. K icn.j ,K' icn.j Indicates the public key of the receiving device. pub Indicates the system public key.

[0135] In one example, the third subsignature ciphertext satisfies the following formula 9:

[0136] R i =r i P Formula Nine

[0137] Among them, r i Represents a random number. P represents a generator of G.

[0138] It should be noted that the receiving device may be an ICN or an ICNP.

[0139] For example, in the case where the receiving device may be an ICN node j, h i =H 4 (c i ||R i ||ID icn.i ||ID icn.j ||K icn.i ||K' icn.i ||K icn.j ||K' icn.j ||P pub ).

[0140] For another example, in the case where the receiving device may be an ICNP, h i =H 4 (c i ||R i ||ID icn.i ||ID icnp ||K icn.i ||K' icn.i ||K icnp ||K' icnp ||P pub ).

[0141] In some embodiments, r i It can represent the hash value obtained by hashing the plain text with the ICN private key. ICN can substitute the receiving device identifier and the receiving device public key into the second hash formula preset by the system to obtain r i .

[0142] For example, i =H 2 (dicn.i ,d' icn.i ,m i )

[0143] Among them, H 2 () represents the second hash function. icn.i ,d' icn.i represents the private key of ICN node i. The second hash function satisfies the following formula 10:

[0144] H 2 :Z q *×Z q *×{0,1}*→Z q *Formula 10

[0145] It should be noted that the generator of the above-mentioned elliptic curve, the first hash function, the second hash function, the third hash function, the fourth hash function, and the system public key are pre-broadcasted in the data transmission system.

[0146] It should be noted that the system includes an initialization phase, which includes: given a system parameter k, generating large prime numbers p and q (q|p-1), defining a multiplication cyclic group G based on an elliptic curve, whose order is q, P is a generator of G, and defining four secure hash functions: H 1 :{0,1}*×G→Z q *,H 2 :Z q *×Z q *×{0,1}*→Z q *,H 3 :{0,1}*×G→Z q *,H 4 :{0,1}*→Z q *. SMM randomly selects s∈Z q * As the master key of the system, calculate P pub =sP as the system public key, public system parameters

[0147] {p,q,G,P,P pub ,H 1 ,H 2 ,H 3 ,H 4}.

[0148] S302, the ICN sends the signcrypted ciphertext to the receiving device. Correspondingly, the receiving device receives the signcrypted ciphertext from the ICN.

[0149] The receiving device may be other ICN or ICNP, etc.

[0150] As a possible implementation, when the receiving device is another ICN (such as a downstream ICN), the ICN and the downstream ICN are used to perform different process operations on the object to be processed, and the ICN can send the signcrypted ciphertext to the downstream ICN within a preset time before sending the object to be processed to the downstream ICN. Correspondingly, the downstream ICN receives the signcrypted ciphertext from the ICN.

[0151] The preset duration can be set as required, for example, 5 seconds, 10 seconds, etc.

[0152] As another possible implementation, when the receiving device is an ICNP, the ICN may send the signcrypted ciphertext to the ICNP based on a preset frequency. Correspondingly, the ICNP receives the signcrypted ciphertext from the ICN.

[0153] The preset frequency can be set as required, for example, once per second.

[0154] Based on the technical solution provided by the present application, plaintext is transmitted through a signcrypted ciphertext including a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext. Since the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the ICN key. Through ICN key encryption, the security of the plaintext to be transmitted can be improved. XOR operations and hash operations do not need to establish a mapping relationship between multiple cyclic groups, that is, the complexity of data encryption can be reduced and the encryption time of the data can be reduced. In this way, the efficiency of data encryption transmission can be improved while ensuring the secure transmission of data.

[0155] In a possible embodiment, the ICN key includes a first key part and a second key part; the first key part is generated by a key server for the ICN node device; and the second key part is generated by the ICN node device itself.

[0156] In one example, the first part of the key may be (K icn.i ,d icn.i The second part of the key can be (K' icn.i ,d' icn.i ).

[0157] Among them, K icn.i Indicates the first part of the public key of ICN node i, d icn.i Represents the first part of the private key of ICN node i, K' icn.i Indicates the second part of the public key of ICN node i, d' icn.i Indicates the second part of the private key of ICN node i.

[0158] In one example, K' icn.i Satisfies the following formula 11, d' icn.iSatisfy the following formula twelve:

[0159] K' icnp =y icnp P Formula 11

[0160] d' icnp =y icnp Formula 12

[0161] Among them, y icnp represents a random number, and y icn.i ∈Z q *.

[0162] It should be noted that the process of determining the first part of the key can refer to the subsequent description of S401-S403 and will not be repeated here.

[0163] A possible embodiment, Figure 5 A flow chart of a data transmission method provided in an embodiment of the present application is shown as follows: Figure 5 As shown, in order to obtain the first part of the key of the ICN, the data transmission method in the present application may also include the following S401-S403.

[0164] S401. ICN sends a registration request message to a key server.

[0165] The registration request message is used to request registration with the key server. For example, the registration request message may include an ICN identifier.

[0166] As a possible implementation manner, when the ICN establishes a communication connection with the ICNP for the first time, the ICN may send a registration request message to the key server through the ICNP.

[0167] S402: The key server generates a first part of the ICN key.

[0168] In one example, the key server may generate the first part of the ICN key according to the following formula 13:

[0169] K icn.i =x icn.i P icn.i =x icn.i +s*h icn.i Formula 13

[0170] Among them, (K icn.i , d icn.i ) represents the first part of the key of ICN node i. icn.i The first part of the public key of ICN node i, d icn.i Indicates the first part of the private key of ICN node i. icn.i represents a random number, and xicn.i ∈Z q * .h icn.i Satisfies the following formula 14:

[0171] h icn.i =H 1 (ID icn.i ,K icn.i ) Formula 14

[0172] S403: The key server sends a registration reply message to the ICN. Correspondingly, the ICN receives the registration reply message from the key server.

[0173] The registration reply message includes the first part of the key.

[0174] In some embodiments, after the ICN obtains the first part of the key, the ICN may verify the first part of the key of the ICN key using the ICN key verification formula. If the first part of the key of the ICN key is verified, the first part of the key of the ICN key is stored; if the first part of the key of the ICN key is verified, the first part of the key of the ICN key is discarded, and a registration request message is resent to the key server.

[0175] In one example, the ICN key verification formula may be the following formula 15:

[0176] d icn.i P=K icn.i +P pub h icn.i Formula 15

[0177] In a possible embodiment, the ICNP key may also include a first part ICNP key and a second part ICNP key.

[0178] In one example, the key server may generate the first part of the ICNP key according to the following formula 16:

[0179] K icnp =x icnp P icn.i =x icnp +s*h icnp Formula 16

[0180] Among them, (K icnp , d icnp ) represents the first part of the ICNP key. K icnp Indicates the first part of the ICNP key, public key, d icnp Indicates the first part of the ICNP key, the private key. icnp represents a random number, and x icnp ∈Zq * .h icnp Satisfies the following formula seventeen:

[0181] h icnp =H 1 (ID icnp ,K icnp ) Formula 17

[0182] In some embodiments, after the ICNP obtains the first part of the key, the ICNP may verify the first part of the key of the ICNP key using an ICNP key verification formula, and if the first part of the key of the ICNP key passes the verification, the first part of the key of the ICNP key is stored; if the first part of the key of the ICNP key fails the verification, the first part of the key of the ICNP key is discarded, and the first part of the key of the ICNP key is re-obtained.

[0183] In one example, the ICNP key verification formula may be the following formula 18:

[0184] d icnp P=K icnp +P pub h icnp Formula 18

[0185] A possible embodiment, Figure 6 A flowchart of another data transmission method provided in an embodiment of the present application is shown as follows: Figure 6 As shown, after S302, in order to obtain the plaintext to be transmitted, the data transmission method in the present application may include the following S501.

[0186] S501. The receiving device obtains the plaintext to be transmitted from the signcrypted ciphertext.

[0187] As a possible implementation manner, the receiving device can use a decryption formula to decrypt the signcrypted ciphertext to obtain the plaintext to be transmitted.

[0188] In one example, when the receiving device is an ICN, the decryption formula may be the following formula 19:

[0189] α i '=R i (d icn.j +d' icn.j ),Ti'=H 3 (ID icn.j ,α i '),c i =m i ⊕T i Formula 19

[0190] In another example, when the receiving device is an ICNP, the decryption formula may be the following formula 20:

[0191] α i '=R i (d icnp +d' icnp ),Ti'=H 3 (ID icnp ,α i '),c i =m i ⊕T i 'Formula 20

[0192] As a possible implementation manner, the receiving device may determine to verify the signcrypted ciphertext using a preset verification formula, and if the signcrypted ciphertext verification passes, decrypt the signcrypted ciphertext using a decryption formula to obtain the plaintext to be transmitted.

[0193] If the signcrypted ciphertext verification fails, the signcrypted ciphertext is discarded.

[0194] Among them, the pass of the signcryption ciphertext verification means that the signcryption ciphertext satisfies the preset verification formula. The failure of the signcryption ciphertext verification means that the signcryption ciphertext does not satisfy the preset verification formula.

[0195] In one example, the preset verification formula satisfies:

[0196] vP=R+h 2 (K 2 +K 2 '+h 1 'P pub );

[0197] Wherein, v represents the second sub-signature ciphertext, R represents the third sub-signature ciphertext, P represents the generator of the multiplication cyclic group based on the elliptic curve, and h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; K 2 and K 2 ' represents the public key of the sending device; P pub Indicates the system public key, h 1 ' represents a hash value obtained by performing a hash operation on the sending device identification and the sending device public key.

[0198] In another example, when the receiving device is an ICN, the preset verification formula may be the following formula 21:

[0199] h i =H 4 (c i ||R i ||ID icn.i ||ID icn.j||K icn.i ||K' icn.i ||K icn.j ||K' icn.j ||P pub )

[0200] v i P=R i +h i (K icn.i +K' icn.i+ P pub h icn.i ) Formula 21

[0201] In another example, when the receiving device is an ICNP, the preset verification formula may be the following formula 22:

[0202] h i =H 4 (c i ||R i ||ID icn.i ||ID icnp ||K icn.i ||K' icn.i ||K icnp ||K' icnp ||P pub )

[0203] v i P=R i +h i (K icn.i +K' icn.i+ P pub h icn.i ) Formula 22

[0204] It can be understood that the signcrypted ciphertext is verified by a preset verification formula, and when the verification passes, the plaintext is obtained from the signcrypted ciphertext. Since the preset verification formula is generated based on the identifiers and keys of the sender and receiver, and the generator of the system, the preset verification formula can be used to verify whether the signcrypted ciphertext is a legitimate sending device in the data transmission system, thereby improving the security of data transmission.

[0205] A possible embodiment, Figure 7 A flowchart of another data transmission method provided in an embodiment of the present application is shown as follows: Figure 7 As shown, when the receiving device is an ICNP and the number of signcrypted ciphertexts is greater than or equal to the quantity threshold, S501 in the present application may include the following S601-S604.

[0206] The quantity threshold can be set as required, for example, 100.

[0207] S601: A receiving device sends an aggregation request message to an industrial edge server. Correspondingly, the industrial edge server receives the aggregation request message from the receiving device.

[0208] The aggregation request message is used to request the industrial super edge server to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext. The aggregation request message includes multiple signcrypted ciphertexts.

[0209] In one example, the receiving device may send an aggregation request message to the industrial hyper-edge server when the number of signed ciphertexts received within a preset time period is greater than or equal to a quantity threshold.

[0210] The preset duration can be set as needed, for example, 1 second, 2 seconds, 5 seconds, etc.

[0211] S602. The industrial super edge server aggregates multiple signed ciphertexts into aggregated ciphertext using a preset aggregation algorithm.

[0212] The preset aggregation algorithm satisfies the following formula 23:

[0213]

[0214] Among them, σ represents the aggregated ciphertext, R i The third subsignature ciphertext of ciphertext i, c i represents the first subsignature ciphertext of ciphertext i, v i The second subsignature ciphertext of ciphertext i, where i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

[0215] S603: The industrial super edge server sends the aggregated ciphertext to the receiving device. Correspondingly, the receiving device receives the aggregated ciphertext from the industrial super edge server.

[0216] S604: The receiving device obtains the plaintext to be transmitted from the aggregated ciphertext.

[0217] As a possible implementation method, after the receiving device receives the aggregated ciphertext from the industrial super edge server, the aggregated ciphertext decryption formula can be used to decrypt the aggregated ciphertext to obtain the plaintext to be transmitted in each signed ciphertext.

[0218] In one example, the aggregate ciphertext decryption formula may be the following formula 24:

[0219] α i '=R i (d icnp +d' icnp ),T i '=H 3 (IDicnp ,α i '),m i =c i ⊕T' I Formula 24

[0220] In some embodiments, after the receiving device receives the aggregated ciphertext from the industrial hyper-edge server, the aggregated ciphertext can be verified using the aggregated ciphertext verification formula, and if the aggregated ciphertext verification passes, the aggregated ciphertext can be decrypted using the aggregated ciphertext decryption formula to obtain the plaintext to be transmitted.

[0221] In the event that the aggregate ciphertext verification fails, the aggregate ciphertext is discarded.

[0222] The aggregate ciphertext verification passes when the aggregate ciphertext satisfies the aggregate ciphertext verification formula. The aggregate ciphertext verification fails when the aggregate ciphertext does not satisfy the aggregate ciphertext verification formula.

[0223] In one example, the aggregate ciphertext verification formula may be the following formula 25:

[0224]

[0225] It is understandable that by using the edge device to aggregate the collected data in batches, the amount of data processed by the receiving device can be reduced and the data processing efficiency of the receiving device can be improved. This process not only reduces the delay of data transmission, but also effectively improves the overall performance of the system.

[0226] In some embodiments, when the number of signcrypted ciphertexts is less than a quantity threshold, the receiving device may verify and decrypt the signcrypted ciphertexts one by one.

[0227] Another embodiment of the data transmission method of the present application is described below:

[0228] (1) System initialization: Given a system parameter k, generate large prime numbers p and q (q|p-1), define a multiplication cyclic group G based on an elliptic curve, whose order is q, P is a generator of G, and define four secure hash functions: H 1 :{0,1} * ×G→Z q * ,H 2 :Z q * ×Z q * ×{0,1} * →Z q * ,H 3 :{0,1} * ×G→Z q *,H 4 :{0,1} * →Z q * . SMM randomly selects s∈Z q * As the master key of the system, calculate P pub =sP as the system public key, public system parameters {p,q,G,P,P pub ,H 1 ,H 2 ,H 3 ,H 4}.

[0229] Through this series of operations, SMM ensures the security and reliability of the system initialization phase. icn.i (1≤i≤n). When an industrial Internet node needs to join the system, it needs to register with SMM through ICNP. After registration, SMM saves the system parameters in the node.

[0230] (2) SMM generates keys for other nodes in the system:

[0231] SMM interacts with ICNP to generate a public-private key pair for it: SMM randomly selects x icnp ∈Z q * , calculate K icnp =x icnp P is the partial public key of ICNP, d icnp =x icnp +s*h icnp As part of the private key, h icnp =H 1 (ID icnp ,K icnp ). SMM transmits the partial key (K icnp ,d icnp ) is sent to ICNP.

[0232] ICNP receives and verifies icnp P=K icnp +P pub h icnp If the equation holds, ICNP randomly selects y icnp ∈Z q * , generate a public key (K icnp ,K' icnp ), private key (d icnp ,d' icnp ), where K' icnp =y icnp P,d' icnp=y icnp .

[0233] SMM interacts with the computing power node (ICN) to generate a public-private key pair for it: SMM generates a partial key for ICN node i (1≤i≤n), and SMM randomly selects x icn.i ∈Z q , calculate its partial public key K icn.i =x icn.i P, part of the private key d icn.i =x icn.i +s*h icn.i , where h icn.i =H 1 (ID icn.i ,K icn.i ); SMM will part of the key (K icn.i ,d icn.i ) is sent to ICN node i through a secure channel.

[0234] After receiving the partial key sent by SMM, ICN node i first verifies equation d icn.i P=K icn.i +P pub h icn.i Is it true? If the equation is true, ICN.i randomly selects y icn.i ∈Z q , generate a complete public-private key pair, denoted as (K icn.i ,K' icn.i ) and (d icn.i ,d' icn.i ), where K' icn.i =y icn.i P,d' icn.i =y icn.i . Broadcast within its communication range.

[0235] (3) In industrial applications, certificateless aggregate signcryption schemes can be used to protect data security between these node devices and ensure data confidentiality and integrity. For example, in an intelligent manufacturing environment, ICN nodes such as sensors, controllers, and actuators on a production line need to exchange data in real time and securely.

[0236] The signcryption scheme between these nodes is as follows: In order to ensure the confidentiality and integrity of the sent message and complete the identity authentication of the message, ICN node i needs to sign the plaintext message m sent to node j. i Perform the following signcryption operations:

[0237] Choose a random number r i , calculate R i =r i P.

[0238] Calculate r'i =H 2 (d icn.i ,d' icn.i ,m i ), calculate R' i =r' i P.

[0239] Calculate α i =r i (K icn.j +K' icn.j +h icn.j P pub ),T i =H 3 (ID icn.j ,α i );

[0240] Calculate c i =m i ⊕T.

[0241] Calculate h i =H 4 (c i ||R i ||R' i ||ID icn.i ||ID icn.j ||K icn.i ||K' icn.i ||K icn.j ||K' icn.j ||P pub ); calculate v i =r i '+h i (d icn.i +d' icn.i ).

[0242] Output ciphertext σ i =(R i ,R' i ,c i ,v i ).

[0243] When the receiving node j receives the message from the sending node i, it performs the following signature verification operation: calculate h i =H 4 (c i ||R i ||R' i ||ID icn.i ||ID icn.j ||K icn.i ||K' icn.i ||K icn.j ||K' icn.j ||Ppub ) ; verify equation v i P=R' i +h i (K icn.i +K' icn.i+ P pub h icn.i ) is true, if true, it proves that the signature is valid, otherwise it proves that the signature is invalid and the message is discarded; if the signature verification passes, calculate α i '=R i (d icn.j +d' icn.j ),T i '=H 3 (ID icn.j ,α i '),c i =m i ⊕T i ', obtain the interactive information m by calculating and decrypting i .

[0244] (4) In the industrial computing network, ICNP serves as the brain of the computing network, responsible for coordinating, managing, and optimizing the operation of the entire industrial network. ICN nodes are computing devices distributed at industrial sites that collect data and perform specific computing tasks. For example, in the production monitoring scenario of a smart factory, ICN nodes (such as sensors and robot controllers) can monitor the status of the production line in real time and send the data to ICNP for analysis and processing. The industrial certificateless aggregate signcryption scheme can protect the data security between ICN nodes and ICNP, ensuring the confidentiality and integrity of the data.

[0245] The signcryption scheme of ICN and ICNP is as follows: ICN node i treats the plaintext message m sent to ICNP as i Perform the following signcryption operations:

[0246] Choose a random number r i , calculate R i =r i P.

[0247] Calculate r' i =H 2 (d icn.i ,d' icn.i ,m i ), calculate R' i =r' i P.

[0248] Calculate α i =r i (K icnp +K' icnp +h icnp P pub ),Ti =H 3 (ID icnp ,α i );

[0249] Calculate c i =m i ⊕T i ;

[0250] Calculate h i =H 4 (c i ||R i ||R' i ||ID icn.i ||ID icnp ||K icn.i ||K' icn.i ||K icnp ||K' icnp ||P pub ); calculate v i =r i '+h i (d icn.i +d' icn.i );Output ciphertext σ i =(R i ,R' i ,c i ,v i ).

[0251] When the amount of data in the industrial computing network is small, ICNP can verify the signature information one by one. When ICNP receives the ciphertext message from the sender node i, it performs the following signature verification operation: calculate h i =H 4 (c i ||R i ||R' i ||ID icn.i ||ID icnp ||K icn.i ||K' icn.i ||K icnp ||K' icnp ||P pub ) ; verify equation v i P=R' i +h i (K icn.i +K' icn.i+ P pub h icn.i ) is true, if true, it proves that the signature is valid, otherwise it proves that the signature is invalid and the message is discarded; if the signature verification passes, calculate α i '=R i (d icnp +d'icnp ),Ti'=H 3 (ID icnp ,α i '),c i =m i ⊕T i ', obtain the interactive information m by calculating and decrypting i .

[0252] When the amount of data in industrial application scenarios is large, the system starts the aggregated signcryption scheme. The signcrypted ciphertext in the region must first be uploaded to the IES server in the region where the computing power node belongs. After receiving the ciphertext, the IES server aggregates the messages of all nodes in the region to generate the aggregated ciphertext. The specific process is as follows: After receiving n ciphertexts σ i =(R i ,R' i ,c i ,v i ), calculate The output aggregate ciphertext is After receiving the aggregated ciphertext, ICNP verifies the signature to determine whether the aggregated ciphertext is valid, and decrypts it to obtain the interaction information m of each computing power node. i , thereby controlling the computing power of each area of ​​the industrial site and analyzing and regulating the industrial computing network in real time.

[0253] The specific steps for decryption are as follows: Calculate h i =H 4 (c i ||R i ||R' i ||ID icn.i ||ID icnp ||K icn.i ||K' icn.i ||K icnp ||K' icnp ||P pub ); verify the equation Is it true? If it is true, it proves that σ is valid. Otherwise, it proves that the signature is invalid and the aggregated ciphertext message is discarded. If the signature verification passes, calculate α i '=R i (d icnp +d' icnp ),T i '=H 3 (ID icnp ,α i '),m i =c i ⊕T' i , the interactive information m is obtained by calculating and decrypting i .

[0254] In the above information security interaction process, by executing the algorithm, the accuracy of the partial private key transmitted by the security management module (SMM) can be verified, and then the validity of the industrial computing network node key can be confirmed. By verifying the execution of VP, the correctness of the entire signature encryption process can be ensured, the recoverability of the ciphertext and the legitimacy of the sender can be guaranteed. i '=T i ,α i '=α i , it can be proved that the plaintext message m i The correctness of the information ensures the authenticity of the message.

[0255] The embodiment of the present application can divide the data transmission device into functional modules or functional units according to the above method example. For example, each functional module or functional unit can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules or functional units. Among them, the division of modules or units in the embodiment of the present application is schematic, which is only a logical function division, and there may be other division methods in actual implementation.

[0256] In the case of dividing each functional module into corresponding functional modules, Figure 8 A schematic diagram of the structure of a data transmission device 800 is shown, and the data transmission device may be a computing power node device ICN, or a chip, processor, etc. used in the computing power node device ICN. The data transmission device 800 may be used to perform the functions of the data transmission device involved in the above embodiments. Figure 8 The data transmission device 800 shown may include: a processing unit 801 and a sending unit 802; the processing unit 801 is used to signencrypt a plaintext to be transmitted to obtain a signcrypted ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the sending unit 802 is used to send the signcrypted ciphertext to a receiving device.

[0257] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0258] Optionally, the signcrypted ciphertext satisfies the following relationship: c=m⊕T; v=r+h 2(d+d'); where c represents the first sub-signature ciphertext of m, v represents the second sub-signature ciphertext, r represents a random number, and m represents the plaintext message to be transmitted; T represents the hash value obtained by performing a hash operation on the receiving device identifier and α; α=r(K

[0259] +K'+h 1 P pub ); K and K' represent different components of the public key of the receiving device; h 1 represents a hash value obtained by performing a hash operation on the receiving device identifier and the receiving device public key; P pub Indicates the system public key; h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; d and d' represent different components of the private key of the sending device.

[0260] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0261] Optionally, the device key includes a first key part and a second key part; the first key part is generated for the device by a key server; and the second key part is generated by the device itself.

[0262] Optionally, the device also includes a receiving unit 803 and a sending unit 802, and is also used to send a registration request message to the key server; the registration request includes the device identifier; the receiving unit 803 is used to receive a registration reply message from the key server; the registration reply message includes a first part of the key; the first part of the key is obtained by the key server through a hash operation based on the device identifier.

[0263] In the case of dividing each functional module into corresponding functional modules, Fig. 9 The schematic diagram of the structure of a data transmission device 900 is shown, and the data transmission device may be a receiving device, or a chip or a processor used in the receiving device, etc. The data transmission device 900 may be used to perform the functions of the data transmission device involved in the above embodiments. Fig. 9 The data transmission device 900 shown may include: a receiving unit 901 and a processing unit 902; the receiving unit 901 is used to receive a signcrypted ciphertext from an ICN; the signcrypted ciphertext is obtained by the ICN signing the plaintext to be transmitted; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the processing unit 902 is used to obtain the plaintext to be transmitted from the signcrypted ciphertext.

[0264] Optionally, the signcryption factors also include a sending device identification, a receiving device identification, a receiving device public key, a receiving device identification, and a system public key.

[0265] Optionally, the signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0266] Optionally, the processing unit 902 is specifically configured to: obtain the plaintext to be transmitted from the signcrypted ciphertext when the signcrypted ciphertext satisfies a preset verification formula; the preset verification formula satisfies: vP=R+h 2 (K 2 +K 2 '+h 1 'P pub ), wherein v represents the second sub-signature ciphertext, R represents the third sub-signature ciphertext, P represents the generator of the multiplication cyclic group based on the elliptic curve, and h 2 represents the hash value obtained by performing a hash operation on the signcryption factor; K 2 and K 2 ' represents the public key of the sending device; P pub Indicates the system public key, h 1 ' represents a hash value obtained by performing a hash operation on the sending device identification and the sending device public key.

[0267] Optionally, the processing unit 902 is further specifically used to: send an aggregation request message to the industrial super edge server; the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into an aggregated ciphertext; receive the aggregated ciphertext from the industrial super edge server; and obtain the plaintext to be transmitted from the aggregated ciphertext.

[0268] In the case of dividing each functional module into corresponding functional modules, Fig.10 A schematic diagram of the structure of a data transmission device 1000 is shown, and the data transmission device may be an industrial super edge server, or a chip, processor, etc. used in an industrial super edge server. The data transmission device 1000 may be used to perform the functions of the data transmission device involved in the above embodiments. Fig.10The data transmission device 1000 shown may include: a receiving unit 1001 and a sending unit 1002; the receiving unit 1001 is used to receive an aggregation request message from a receiving device; the aggregation request message is used to request that multiple signcrypted ciphertexts be aggregated into an aggregated ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on a plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; the sending unit 1002 is used to send the aggregated ciphertext to the receiving device.

[0269] Optionally, the signcryption factor also includes a sending device identifier, a receiving device identifier, a sending device public key, a receiving device public key, and a system public key.

[0270] Optionally, the signcrypted ciphertext further includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

[0271] Optionally, the device further includes a processing unit 1003, the processing unit 1003 being configured to aggregate the multiple signcrypted ciphertexts into an aggregated ciphertext using a preset aggregation algorithm; the preset aggregation algorithm satisfies: Among them, σ represents the aggregated ciphertext, R i The third subsignature ciphertext of ciphertext i, c i represents the first subsignature ciphertext of ciphertext i, v i The second subsignature ciphertext of ciphertext i, where i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

[0272] The embodiment of the present application also provides a computer-readable storage medium. All or part of the processes in the above method embodiments can be completed by a computer program to instruct the relevant hardware, and the program can be stored in the above computer-readable storage medium. When the program is executed, it may include the processes of the above method embodiments. The computer-readable storage medium can be an internal storage unit of the data transmission device (including the data sending end and / or the data receiving end) of any of the above embodiments, such as a hard disk or memory of the data transmission device. The above computer-readable storage medium can also be an external storage device of the above terminal device, such as a plug-in hard disk equipped on the above terminal device, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. Further, the above computer-readable storage medium can also include both the internal storage unit of the above data transmission device and an external storage device. The above computer-readable storage medium is used to store the above computer program and other programs and data required by the above data transmission device. The above computer-readable storage medium can also be used to temporarily store data that has been output or is to be output.

[0273] It should be noted that the terms "first" and "second" in the specification, claims and drawings of the present application are used to distinguish different objects rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0274] It should be understood that in the present application, "at least one (item)" means one or more, "more than one" means two or more, "at least two (items)" means two or three and more than three, and "and / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0275] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0276] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0277] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0278] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0279] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks or optical disks.

[0280] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data transmission method, characterized in that: Applied to a sending device, the method comprises: The plaintext to be transmitted is sign-encrypted to obtain a sign-encrypted ciphertext; the sign-encrypted ciphertext includes a first sub-sign-encrypted ciphertext and a second sub-sign-encrypted ciphertext; the first sub-sign-encrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-sign-encrypted ciphertext is determined by performing a hash operation based on the sign-encrypted factor; the sign-encrypted factor includes a random number and the first sub-sign-encrypted ciphertext; The signcrypted ciphertext is sent to a receiving device.

2. The method according to claim 1, characterized in that The signcryption factors also include a sending device identification, a receiving device identification, a sending device public key, a receiving device public key, and a system public key.

3. The method according to claim 2, characterized in that The signcrypted ciphertext satisfies the following relationship: c=m⊕T;v=r+h2(d+d'); Wherein, c represents the first sub-signature ciphertext of m, v represents the second sub-signature ciphertext, r represents a random number, and m represents the plaintext of the message to be transmitted; T represents the hash value obtained by performing a hash operation on the receiving device identifier and α; α=r(K+K'+h1P pub ); K and K' represent different components of the public key of the receiving device; h1 represents a hash value obtained by performing a hash operation on the receiving device identifier and the public key of the receiving device; P pub represents the system public key; h2 represents the hash value obtained by performing a hash operation on the signcryption factor; d and d' represent different components of the sending device private key.

4. The method according to claim 1, characterized in that: The signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

5. The method according to any one of claims 1 to 4, characterized in that The device key includes a first key part and a second key part; the first key part is generated for the device by a key server; and the second key part is generated by the device itself.

6. The method according to claim 5, characterized in that The method further comprises: Sending a registration request message to the key server; the registration request includes the device identification; A registration reply message is received from the key server; the registration reply message includes a first part of the key; the first part of the key is obtained by the key server through a hash operation based on the device identifier.

7. A data transmission method, characterized in that: Applied to a receiving device, the method comprises: Receive a signcrypted ciphertext from an ICN; the signcrypted ciphertext is obtained by the ICN signing a plaintext to be transmitted; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; The plaintext to be transmitted is obtained from the signcrypted ciphertext.

8. The method according to claim 7, characterized in that The signcryption factors also include a sending device identification, a receiving device identification, a sending device public key, a receiving device public key, and a system public key.

9. The method according to claim 7, characterized in that: The signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

10. The method according to claim 9, characterized in that The obtaining the to-be-transmitted plaintext from the signcrypted ciphertext comprises: In the case where the signcrypted ciphertext satisfies a preset verification formula, the plaintext to be transmitted is obtained from the signcrypted ciphertext; the preset verification formula satisfies: vP=R+h2(K2+K2'+h1'P pub ); Wherein, v represents the second sub-signature ciphertext, R represents the third sub-signature ciphertext, P represents the generator of the multiplication cyclic group based on the elliptic curve, h2 represents the hash value obtained by performing a hash operation on the signcryption factor; K2 and K2' represent the public key of the sending device; P pub represents a system public key, and h1' represents a hash value obtained by performing a hash operation on the sending device identifier and the sending device public key.

11. The method according to any one of claims 7 to 10, characterized in that: When the number of the signcrypted ciphertexts is greater than or equal to a number threshold, obtaining the to-be-transmitted plaintext from the signcrypted ciphertexts includes: Sending an aggregation request message to an industrial super edge server; the aggregation request message is used to request the industrial super edge server to aggregate multiple signed ciphertexts into an aggregated ciphertext; receiving an aggregated ciphertext from the industrial hyper-edge server; The plaintext to be transmitted is obtained from the aggregated ciphertext.

12. A data transmission method, characterized in that: Applied to an industrial super edge server, the method comprises: Receiving an aggregation request message from a receiving device; the aggregation request message is used to request that multiple signcrypted ciphertexts be aggregated into an aggregated ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on a plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; The aggregated ciphertext is sent to the receiving device.

13. The method according to claim 12, characterized in that The signcryption factors also include a sending device identification, a receiving device identification, a sending device public key, a receiving device public key, and a system public key.

14. The method according to claim 12 or 13, characterized in that The signcrypted ciphertext also includes a third sub-signcrypted ciphertext; the third sub-signcrypted ciphertext is a point on the elliptic curve related to the random number.

15. The method according to claim 14, characterized in that The method further comprises: Use a preset aggregation algorithm to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext; the preset aggregation algorithm satisfies: Among them, σ represents the aggregated ciphertext, R i The third subsignature ciphertext of ciphertext i, c i represents the first subsignature ciphertext of ciphertext i, v i The second subsignature ciphertext of ciphertext i, where i represents the index of the ciphertext participating in the aggregation (i=1, 2, ..., n), and n represents the total number of ciphertexts participating in the aggregation.

16. A data transmission device, characterized in that: Applied to a sending device, the device comprises: a processing unit and a sending unit; The processing unit is used to signencrypt the plaintext to be transmitted to obtain a signcrypted ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; The sending unit is used to send the signcrypted ciphertext to a receiving device.

17. A data transmission device, characterized in that: Applied to a receiving device, the device comprises: a receiving unit and a processing unit; The receiving unit is used to receive a signcrypted ciphertext from a sending device; the signcrypted ciphertext is obtained by the sending device performing signcryption on a plaintext to be transmitted; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on the plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; The processing unit is used to obtain the plaintext to be transmitted from the signcrypted ciphertext.

18. A data transmission device, characterized in that: Applied to an industrial super edge server, the device comprises: a receiving unit, a sending unit; The receiving unit is used to receive an aggregation request message from a receiving device; the aggregation request message is used to request to aggregate multiple signcrypted ciphertexts into an aggregated ciphertext; the signcrypted ciphertext includes a first sub-signcrypted ciphertext and a second sub-signcrypted ciphertext; the first sub-signcrypted ciphertext is obtained by performing an XOR operation on a plaintext to be transmitted; the second sub-signcrypted ciphertext is determined by performing a hash operation based on the signcryption factor; the signcryption factor includes a random number and the first sub-signcrypted ciphertext; The sending unit is used to send the aggregated ciphertext to the receiving device.

19. A data transmission system, characterized in that: It includes a sending device, a receiving device, and an industrial super edge server; the sending device is used to execute the method according to any one of claims 1 to 6; the receiving device is used to execute the method according to any one of claims 7 to 11; The industrial hyper-edge server is used to execute the method as described in any one of claims 12-15.

20. An electronic device, characterized in that: include: A processor, a memory and a communication interface; wherein the communication interface is used for the electronic device to communicate with other devices or networks; The memory is used to store one or more programs, which include computer-executable instructions. When the electronic device is running, the processor executes the computer-executable instructions stored in the memory to enable the electronic device to perform any one of claims 1-6, or any one of claims 7-11, or any one of claims 12-15.

21. A computer-readable storage medium, characterized in that: The readable storage medium stores instructions, and when the instructions are executed, the method according to any one of claims 1 to 6, or any one of claims 7 to 11, or any one of claims 12 to 15 is implemented.

22. A computer program product, comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the method of any one of claims 1 to 6, any one of claims 7 to 11, or any one of claims 12 to 15 is implemented.

Images