Communication network information authorizable sharing method and system based on equality test

Abstract

The invention discloses a communication network information authorizable sharing method and system based on an equality test. The system comprises a cloud server, an edge proxy server, an information reporting party and an information receiving party group, an information reporting party generates an information message according to the information of the geographic position, encrypts the information message through an encryption algorithm to obtain an information ciphertext, and performs an equality test; the cloud server forwards the information ciphertext passing the equality test to an edge proxy server, and sends a temporary authorization request to an information reporting party at the same time; after receiving the temporary authorization request, the information reporting party generates a temporary re-encryption key and sends the temporary re-encryption key to the edge proxy server; the edge proxy server performs proxy re-encryption on the information ciphertext by using the temporary re-encryption key, and sends the re-encrypted ciphertext to the information receiver group; and the information receiver group decrypts the re-encrypted ciphertext and acquires the information.

Description

Technical Field

[0001] The present invention relates to the technical field of communication network information sharing, and in particular to a communication network information authorized sharing method and system based on equality testing. Background Art

[0002] The communication network is a network technology that interconnects various communication devices. It plays a vital role in the intelligent communication system. As one of the core applications of the communication network, information reporting and sharing aims to improve communication security, optimize communication traffic and improve communication experience through real-time data exchange. However, while enjoying the convenience brought by information sharing, we should also pay attention to the risk of leakage of many sensitive data brought by intelligent networked devices. When reporting and sharing information, sensitive data including the real-time location information of communication equipment will be uploaded to the cloud server of a third-party organization. If these data are improperly obtained and used, the user's whereabouts may be tracked; in addition, by analyzing the behavior data of communication devices, attackers may establish user profiles, understand the user's various habits and private activities, and further threaten the user's personal safety.

[0003] In the existing information sharing scheme, information is mainly pushed through special communication equipment and third-party platforms, without considering the safe, efficient and reliable data sharing scheme in the communication network scenario. On the one hand, the information reporter needs to use special communication equipment (such as the traffic information reporting equipment, warning signs and traffic information processing system disclosed in Chinese patent CN215814522U), which greatly increases the cost of information sharing, and the reliability of special communication equipment is also questionable. On the other hand, pushing with the help of a third-party platform (such as a public transportation information sharing platform disclosed in Chinese patent CN107977474A) will lead to problems such as the leakage of personal privacy data of the information reporter. At the same time, due to the variety of third-party platforms, information sharing and data intercommunication between platforms cannot be achieved, which will lead to limitations in information sharing and the reliability of the scheme will be greatly reduced. Summary of the invention

[0004] In order to overcome the defects in the above-mentioned prior art, the present invention provides a method and system for authorized sharing of communication network information based on equality testing, thereby improving the security and efficiency of information sharing.

[0005] To achieve the above object, the present invention adopts the following technical solutions, including: A communication network information authorized sharing system based on equality testing, comprising: a cloud server, an edge proxy server, an information reporting party and an information receiving party group; The information reporter generates an information message according to the information of the geographical location, encrypts the information message through an encryption algorithm to obtain information ciphertext, and sends the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizes the cloud server to perform an equality test; The cloud server forwards the ciphertext of the information that passes the equality test to the edge proxy server, and sends a temporary authorization request to the information reporting party at the same time; After receiving the temporary authorization request, the information reporter generates a temporary re-encryption key and sends the temporary re-encryption key to the edge proxy server; The edge proxy server performs proxy re-encryption on the information ciphertext using a temporary re-encryption key, and sends the re-encrypted ciphertext to the information recipient group; The information receiving party group decrypts the re-encrypted ciphertext and obtains the information.

[0006] By adopting the above scheme, this scheme uses attribute-based trapdoors and shorter keys at the same time. With the support of edge computing, on the one hand, it can reduce the computing pressure of cloud servers, so as to better cope with the numerous operations of future communication networks; on the other hand, the edge node is closer to the data receiving side and the spatial distance is closer, which greatly improves the efficiency of data sharing. Compared with the scheme of the prior art, it has lower computing and communication overheads, and improves the security and efficiency of information sharing. And the scheme of the present invention has higher applicability for most low-computing and low-communication communication network devices.

[0007] In one embodiment of the present invention, the cloud server forwards the information ciphertext to the edge proxy server at the geographical location of the information reporter; the information reporter sends the temporary re-encryption key to the edge proxy server at the geographical location of the information reporter; the edge proxy server sends the re-encrypted ciphertext to the group of information recipients within the coverage of the edge proxy server.

[0008] In one embodiment of the present invention, the system further includes a trusted institution; the trusted institution is communicatively connected with all participants in the system and is used to distribute keys to participants in the system and provide global public parameters.

[0009] In one embodiment of the present invention, the information reporter generates an information message according to the information of the geographical location, encrypts the information message by an encryption algorithm to obtain an information ciphertext, and sends the trapdoor and the information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizes the cloud server to perform an equality test: The information reporting party connects the information of the geographical location with the information to be sent to obtain an information message; Calculate the temporary authorization code through the first Hash function, and use the encryption algorithm to calculate the information ciphertext through the information message, the public key of the information reporter and the temporary authorization code; The trapdoor is calculated based on the trapdoor function using the private key of the information reporter.

[0010] In one embodiment of the present invention, in the process of sending the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizing the cloud server to perform an equality test: The cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertext and corresponding trapdoor stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported and no subsequent information sharing operation is required; if the test result is 0, it means that no information ciphertext consistent with the received information ciphertext is found, that is, the information has not been reported, and subsequent information sharing operations are required to forward the information ciphertext to the edge proxy server.

[0011] In one embodiment of the present invention, after receiving the temporary authorization request, the information reporting party generates a temporary re-encryption key, including: The information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, uses the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key.

[0012] In one embodiment of the present invention, during the process in which the edge proxy server uses a temporary re-encryption key to proxy re-encrypt the information ciphertext and sends the re-encrypted ciphertext to the information recipient group, a proxy re-encryption function is used to calculate the re-encrypted ciphertext using the information ciphertext, the first sub-key and the second sub-key, and the re-encrypted ciphertext and the third sub-key are sent to the information recipient group.

[0013] In one embodiment of the present invention, during the process of the information receiving party group decrypting the re-encrypted ciphertext and obtaining information, the re-encrypted ciphertext is decrypted based on the private key of the edge proxy server to obtain the geographic location information and information.

[0014] In one embodiment of the present invention, the communication network is a vehicle network, the information is traffic information, and the information reporting party and the information receiving party are both vehicles.

[0015] The present invention also provides a communication network information authorized sharing method based on equality testing, including an initialization phase, a registration phase of a communication terminal, an information reporting phase of an information reporter, an equality testing phase of a cloud server, a temporary re-encryption key generation phase of an information reporter, a proxy re-encryption phase of an edge proxy server, and a decryption phase of an information receiver; The initialization phase includes step S1, the trusted institution selects an asymmetric encryption algorithm, a decryption algorithm, a public-private key pair of the trusted institution, a first hash function, a second hash function, and outputs global public parameters including the first hash function, the second hash function, and a public key in the public-private key pair of the trusted institution; The registration phase of the communication terminal includes step S21, the communication terminal registers with the trusted institution, the trusted institution obtains the unique identity information of the communication terminal, the trusted institution generates a true random number using its own quantum random number generator, and generates a pseudonym for the communication terminal using an encryption algorithm; Step S22, the trusted institution selects a public-private key pair for the communication terminal, and sends information including the public-private key pair information of the communication terminal and the pseudonym of the communication segment to the communication terminal; Step S23, the communication terminal registers with the nearest edge proxy server. After registration, the communication terminal obtains the public key and node information of the edge proxy server. At the same time, the edge proxy server puts the pseudonym of the information reporting party i into the registration table; The information reporting stage of the information reporter includes step S31, wherein the information reporter connects the information of the geographical location with the information to be sent to obtain an information message; Step S32, calculating a temporary authorization code by using a first hash function; using an encryption algorithm to pass the information message, the public key of the information reporter and the temporary authorization code; Step S33, calculating and obtaining the information ciphertext, using an encryption algorithm through the information message, the public key of the information reporter and the temporary authorization code, to obtain the information ciphertext; Step S34, calculating the trapdoor based on the trapdoor function using the private key of the information reporter; Step S35, the information reporting device uploads a message including the information ciphertext, the trapdoor, the pseudonym of the information reporter and the node information of the edge proxy server closest to the information reporter to the server; The equality test phase of the cloud server includes step S41. After receiving the message uploaded by the information reporter, the cloud server authenticates the identity of the information reporter and checks whether the message is tampered with; based on the second hash function, the verification value is calculated through the information ciphertext, the trapdoor, and the pseudonym of the information reporter, and the signature is verified based on the signature verification function through the public key of the information reporter, the verification value, and the digital signature of the information ciphertext; if the signature verification is successful, the next step is entered, otherwise the message is directly discarded: Step S42, the cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertexts and corresponding trapdoors stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported, and no subsequent information sharing operation is required; if the test result is 0, it means that no information ciphertext consistent with the received information ciphertext is found, that is, the information has not been reported, and subsequent information sharing operations are required, and the next step is entered; Step S43, the cloud server sends a message requesting temporary authorization to the information reporter; the server sends the ciphertext to be shared to the edge proxy server according to the node information of the edge proxy server provided by the information reporter, and at the same time, the cloud server also stores the current information ciphertext and the corresponding trapdoor; The temporary re-encryption key generation phase of the information reporter includes step S51, the information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, adopts the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key; Step S52, sending the re-encryption key to the edge proxy server closest to the information reporting party; The proxy re-encryption phase of the edge proxy server includes step S61, after the edge proxy server receives the ciphertext to be shared sent by the cloud server and the re-encryption key sent by the information reporting party, it verifies whether the second sub-key in the re-encryption key is equal to the temporary authorization code, if so, proceeds to the next step, if not, discards the re-encryption key; Step S62, using a proxy re-encryption function to calculate the re-encrypted ciphertext using the information ciphertext, the first subkey and the second subkey; Step S63, the edge proxy server sends the re-encrypted ciphertext and the third subkey to the information recipient group; The decryption phase of the information receiver includes step S71, decrypting the re-encrypted ciphertext based on the private key of the edge proxy server; Step S72: Decryption to obtain geographic location information Step S73, decrypt and obtain information.

[0016] The information authorization sharing method and system based on equality test proposed by the present invention has lower computing and communication overheads, and improves the security and efficiency of information sharing. In addition, the solution of the present invention has higher applicability to most communication network devices with low computing and low communication.

[0017] Additional advantages, purposes, and features of the present invention will be described in part in the following description, and will become apparent to those skilled in the art after studying the following, or may be learned from the practice of the present invention. The purposes and other advantages of the present invention may be achieved and obtained by the structures specifically indicated in the specification and the accompanying drawings.

[0018] Those skilled in the art will appreciate that the objectives and advantages that can be achieved with the present invention are not limited to the above specific description, and the above and other objectives that can be achieved by the present invention will be more clearly understood from the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of this application, and do not constitute a limitation of the present invention.

[0020] Figure 1 It is a schematic diagram of a communication network information authorized sharing system based on equality testing in one embodiment of the present invention.

[0021] Figure 2 It is a schematic diagram of a method for authorizing sharing of communication network information based on equality testing in one embodiment of the present invention.

[0022] Figure 3 The following is a comparison chart of the calculation time of each solution at different stages. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0024] The related art in the present invention is explained as follows: Equality Test: Equality test is an important tool in cryptography, which is used to verify the equality of data items while maintaining data privacy, providing strong support for privacy protection and secure computing. When outsourcing data to cloud servers to obtain powerful storage and computing capabilities, in order to further prevent information leakage from cloud servers that are not fully trusted, the data uploader will encrypt the data before outsourcing it to the cloud. This phenomenon poses a challenge to cloud servers, namely how to calculate and retrieve encrypted outsourced data without decryption. Scientists have conducted a lot of research on it, such as searchable encryption that supports searching encrypted data, fully homomorphic encryption that supports addition and multiplication of encrypted data, and public key encryption with equality test that supports equality test of encrypted data. These methods have their own advantages. For example, the first two methods focus more on cloud computing, while the last method focuses on "testing". For example, in the application scenario of the present invention, it is necessary to test the reported information ciphertext with the information ciphertext stored in the cloud server to query whether there is an equal information ciphertext, so as to better share information. Searchable encryption can also achieve this function, but its disadvantages are that the calculation is cumbersome and key management is required. When the key is leaked, data security will be compromised. On the other hand, the messages in the information reporting scenario are highly standardized and short, which is more suitable for equality testing.

[0025] Trapdoor: In equality testing, trapdoor is an important technical means, which can simplify the equality verification process by providing specific secret information while ensuring data privacy. The use of trapdoors can make it easier to verify whether two data are equal in some cases. For example, through a specific secret key, it is possible to quickly verify whether two encrypted data are equal without directly decrypting them. Without the use of trapdoors, under the same conditions, it will become very difficult to verify whether two data are equal. Therefore, the use of trapdoor technology can also be regarded as an authorization for the institution that performs equality testing. That is, only when the information ciphertext and the corresponding trapdoor are held at the same time can an equality test be performed.

[0026] Temporary Delegation: Temporary delegation is a permission management mechanism that allows users to obtain permission to access resources or perform specific operations within a limited period of time. This mechanism facilitates users to obtain necessary access rights in specific scenarios while ensuring security and flexibility. In information systems, authorization refers to the permission given to users to access resources. Traditional authorization methods are usually valid for a long time, but in some cases, only short-term permissions are required. For example: access rights for temporary projects, temporary access for customers or third-party suppliers, etc. Temporary authorization allows access rights to be granted within a specific time range and automatically revokes permissions after the time expires, thereby enhancing the security and flexibility of the system. In the present invention, a true random number generated by a quantum random generator is used together with the pseudonym PID of the communication end to generate a temporary authorization code. The temporary authorization code can only be used once, and a new temporary authorization code will be generated each time a new information message is reported. This design ensures that the privacy data of the information reporter will not be easily leaked.

[0027] Proxy re-encryption: Proxy re-encryption is a cryptographic technique that allows a proxy to convert encrypted data from one key to data encrypted with another key without decrypting the data. This technique has important applications in data sharing and distributed systems, and can achieve secure data forwarding and re-encryption while maintaining data privacy. In traditional encryption systems, if encrypted data needs to be transferred from one user to another, it is usually necessary to decrypt the data first and then encrypt it with a new key. This method has security risks because the plaintext data in the intermediate process may be leaked. Proxy re-encryption solves this problem. By using proxy re-encryption, the data owner can authorize an agent to convert encrypted data into data encrypted with another set of keys without decrypting the data. The agent cannot obtain the plaintext content of the data during this process, ensuring the security and privacy of the data.

[0028] Re-encryption key: A re-encryption key is a special key used in a proxy re-encryption system. This key is generated by the sender of the message and is used to authorize the proxy to re-encrypt the message it encrypted to the receiver. At the same time, only the sender of the message can generate a valid re-encryption key, and the key can only be used for the ciphertext. During the re-encryption process, the proxy and other third parties cannot obtain the message content, and only the authorized receiver can decrypt the final ciphertext.

[0029] Edge computing: Edge computing is a distributed computing architecture that moves computing, storage, and data processing functions from a central data center to edge nodes close to the data source. This computing method aims to reduce the latency of data transmission, improve real-time performance and processing efficiency, and is suitable for scenarios that require low latency and high bandwidth, such as the Internet of Things, smart devices, and industrial automation. In traditional cloud computing architectures, data is transmitted from devices (such as sensors, smart devices) to a central data center for processing and storage. This model can result in high latency and bandwidth consumption, especially in applications that require real-time response, such as autonomous driving, smart manufacturing, and telemedicine. Edge computing reduces the data transmission path and time by distributing data processing capabilities to edge nodes close to the data source, enabling faster response and processing of data.

[0030] Depend on Figure 1 As shown, the communication network information authorized sharing system based on equality test of this embodiment includes: a cloud server, an edge proxy server, an information reporter and an information receiver group; The information reporter generates an information message according to the information of the geographical location, encrypts the information message through an encryption algorithm to obtain information ciphertext, and sends the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizes the cloud server to perform an equality test; The cloud server forwards the ciphertext of the information that passes the equality test to the edge proxy server, and sends a temporary authorization request to the information reporting party at the same time; After receiving the temporary authorization request, the information reporter generates a temporary re-encryption key and sends the temporary re-encryption key to the edge proxy server; The edge proxy server performs proxy re-encryption on the information ciphertext using a temporary re-encryption key, and sends the re-encrypted ciphertext to the information recipient group; The information receiving party group decrypts the re-encrypted ciphertext and obtains the information.

[0031] By adopting the above scheme, this scheme uses attribute-based trapdoors and shorter keys at the same time. With the support of edge computing, on the one hand, it can reduce the computing pressure of cloud servers, so as to better cope with the numerous operations of future communication networks; on the other hand, the edge node is closer to the data receiving side and the spatial distance is closer, which greatly improves the efficiency of data sharing. Compared with the scheme of the prior art, it has lower computing and communication overheads, and improves the security and efficiency of information sharing. And the scheme of the present invention has higher applicability for most low-computing and low-communication communication network devices.

[0032] In one embodiment of the present invention, the cloud server forwards the information ciphertext to the edge proxy server at the geographical location of the information reporter; the information reporter sends the temporary re-encryption key to the edge proxy server at the geographical location of the information reporter; the edge proxy server sends the re-encrypted ciphertext to the group of information recipients within the coverage of the edge proxy server.

[0033] In the specific implementation process, the cloud server, as a semi-trusted institution, is mainly responsible for storing the information data reported by the communication terminal, performing equality tests on the information ciphertext, and forwarding the information ciphertext to the edge proxy server; the edge proxy server combines the advantages of edge computing and edge proxy servers, and provides efficient, low-latency and secure services by processing and managing data at the edge of the network. It is mainly responsible for registering the information of the communication terminal running in the service area into the registry list, re-encrypting the information message sent by the cloud server, and sending it to the information recipient group.

[0034] In the specific implementation process, the communication end of the information reporter: when the information reporter wants to report the information of the current geographical location of the information reporter (such as road condition information: communication flow and congestion of the current road; accident information: location, time, severity, etc. of the communication accident; road construction information: construction section, construction time, impact on communication, etc.; communication control information: traffic restrictions, road closures, detours and other communication control measures), the driver and passengers select the corresponding type of information and automatically obtain the geographical location data of the information reporter, thereby forming an information reporting message. The message is encrypted through the specified encryption algorithm, and the corresponding trapdoor is generated to authorize the cloud server to perform an equality test. After obtaining the temporary authorization request from the cloud server, the information reporter needs to generate a temporary re-encryption key and send it to the edge proxy server, so as to achieve a one-time authorization for this data sharing.

[0035] In the specific implementation process, the communication terminal of the information receiving group: This group is mainly determined by the edge proxy server. For the information provided by the information reporter, the communication terminal in the same area as the information reporter should be the group that has the highest priority to receive the information, and the edge proxy server's registry can be used to determine which communication terminals and the information reporter are in the same area. All communication terminals traveling on the road need to register with the nearest edge proxy server to obtain related services. Therefore, the communication terminals in the edge proxy server registry mean that they are currently in the service area of ​​the edge proxy server. For communication terminals that are not in the same service area, the current edge proxy server can spread the message to the surrounding edge proxy servers.

[0036] In one embodiment of the present invention, the system further includes a trusted institution; the trusted institution is communicatively connected with all participants in the system and is used to distribute keys to participants in the system and provide global public parameters.

[0037] In the specific implementation process, a trusted institution refers to a third-party entity trusted by all participants in the system, whose main responsibility is to help manage and maintain the security and integrity of the system. In this system, the trusted institution is mainly responsible for system initialization, distributing keys to participants in the system, generating pseudonyms (PseudonymousID, PID) for each communication end, and generating node information (NID, Node ID) for the edge proxy server. In one embodiment of the present invention, the information reporter generates an information message according to the information of the geographical location, encrypts the information message by an encryption algorithm to obtain an information ciphertext, and sends the trapdoor and the information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizes the cloud server to perform an equality test: The information reporting party connects the information of the geographical location with the information to be sent to obtain an information message; In the specific implementation process, the information reporting party i generates information message m i =Kw||Loc, where Kw is the information, Loc is the geographical location of the information reporter i, and || is a connection symbol; Calculate the temporary authorization code through the first Hash function, and use the encryption algorithm to calculate the information ciphertext through the information message, the public key of the information reporter and the temporary authorization code; In the specific implementation process, calculate the temporary authorization code v=H1(PID i ||y), where PID i is the pseudonym of the information reporter i, y is the random number generated by the information reporter i, H1 is the first hash function; the information message m is encrypted using the encryption algorithm Enc i Encrypted information ciphertext CT i =Enc(m i ,v,pk i ), where pk i The public key of the information reporter i; The trapdoor is calculated based on the trapdoor function using the private key of the information reporter.

[0038] In the specific implementation process, the trapdoor td is calculated based on the private key of the information reporting party i. i =Aut(sk i ), where Aut is a trapdoor function; the information reporting party i sends the information ciphertext CT i and the corresponding trapdoor td i Send to the cloud server.

[0039] In one embodiment of the present invention, in the process of sending the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizing the cloud server to perform an equality test: The cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertext and corresponding trapdoor stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported and no subsequent information sharing operation is required; if the test result is 0, it means that no information ciphertext consistent with the received information ciphertext is found, that is, the information has not been reported, and subsequent information sharing operations are required to forward the information ciphertext to the edge proxy server.

[0040] During the specific implementation process, after the cloud server receives the information ciphertext CTi and the corresponding trapdoor tdi sent by the information reporter i, it performs an equality test Test(CTi, tdi, CTj, tdj) with all the information ciphertexts CTj and the corresponding trapdoors tdj stored in the cloud server. Test is an equality test function, and the test result is 0 or 1; the test result is 1, indicating that the contents of the two ciphertexts CTi and CTj are consistent, that is, the information has been reported, and no subsequent information sharing operation is required; the test result is 0, indicating that no ciphertext consistent with the content of the ciphertext CTi is found, that is, the information has not been reported, and subsequent information sharing operations are required to forward the information ciphertext to the edge proxy server.

[0041] In one embodiment of the present invention, after receiving the temporary authorization request, the information reporting party generates a temporary re-encryption key, including: The information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, uses the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key.

[0042] In the specific implementation process, the information reporting party i calculates Rk1=ReKeyGen(sk i ,pk N ), Rk2=v=H1(PID i ||y), Rk3=Enc(Loc,pk N ), and obtain the temporary re-encryption key Rk=(Rk1,Rk2,Rk3); where pk N is the public key of the edge proxy server; ReKeyGen is the re-encryption key generation function, Rk1 represents the first subkey, Rk2 represents the second subkey, and Rk3 represents the third subkey.

[0043] In one embodiment of the present invention, during the process in which the edge proxy server uses a temporary re-encryption key to proxy re-encrypt the information ciphertext and sends the re-encrypted ciphertext to the information recipient group, a proxy re-encryption function is used to calculate the re-encrypted ciphertext using the information ciphertext, the first sub-key and the second sub-key, and the re-encrypted ciphertext and the third sub-key are sent to the information recipient group.

[0044] In the specific implementation process, the edge proxy server receives the information ciphertext CT sent by the cloud server. i After the temporary re-encryption key Rk sent by the information reporting party, the re-encrypted ciphertext C is calculated N =ReEnc(CT i ,Rk1,Rk2), the re-encrypted ciphertext C N and Rk3 are sent to the information recipient group; where ReEnc is the proxy re-encryption function.

[0045] In one embodiment of the present invention, during the process of the information receiving party group decrypting the re-encrypted ciphertext and obtaining information, the re-encrypted ciphertext is decrypted based on the private key of the edge proxy server to obtain the geographic location information and information.

[0046] In the specific implementation process, the information receiver receives the re-encrypted ciphertext C sent by the edge proxy server. N Then use the private key sk of the edge proxy server N Decrypt and get the information message m i =Dec(C N ,sk N ); Dec is the decryption algorithm; Decrypt Rk3 to get the geographical location information Loc=Dec(Rk3,pk N ), and according to the information message m i =Kw||Loc gets the information Kw.

[0047] In one embodiment of the present invention, the communication network is a vehicle network, the information is traffic information, and the information reporting party and the information receiving party are both vehicles.

[0048] like Figure 2 As shown, the present invention also provides a communication network information authorized sharing method based on equality testing, including an initialization phase, a registration phase of a communication terminal, an information reporting phase of an information reporter, an equality testing phase of a cloud server, a temporary re-encryption key generation phase of an information reporter, a proxy re-encryption phase of an edge proxy server, and a decryption phase of an information receiver; The initialization phase includes step S1, the trusted institution selects an asymmetric encryption algorithm, a decryption algorithm, a public-private key pair of the trusted institution, a first hash function, a second hash function, and outputs global public parameters including the first hash function, the second hash function, and a public key in the public-private key pair of the trusted institution; Specifically, the trusted institution selects a matching asymmetric encryption algorithm Enc according to the input security parameter k. k And decryption algorithm Dec k , where the public and private key pair of the trusted institution is (pk T ,sk T ), and select two one-way collision-free hash functions H1 and H2, and finally output the global public parameter par={H1,H2,pk T}.

[0049] The first hash function H1 and the second hash function H2 are both one-way collision-free hash functions; In one embodiment of the present invention, the trusted institution selects a security parameter of 128 bits, the corresponding asymmetric encryption algorithm is RSA-OAEP, the hash function selects SHA-256, and the trusted institution generates a public-private key pair of RSA-OAEP.

[0050] The input of the communication end registration phase is the unique identity information ID of the communication end; the output is the public key pk, private key sk, communication end pseudonym information PID, edge proxy server public key pk N , edge proxy server identification information NID, the communication end may be an information reporting party.

[0051] The registration phase of the communication end includes: Step S21, the communication terminal registers with the trusted institution, and the trusted institution obtains the unique identity information of the communication terminal. The trusted institution uses its own quantum random number generator to generate a true random number, and uses an encryption algorithm to generate a pseudonym for the communication terminal; Specifically, the communication end registers with the trusted institution, and the trusted institution obtains the unique identity information ID of the communication end. The trusted institution uses its own quantum random number generator to generate a true random number x=RandGen(par), and uses the encryption algorithm Enc k Generate a pseudonym PID=Enc for the communication end k (ID||x); where RandGen is a function for generating true random numbers.

[0052] In step S21, each communication terminal registers with a trusted institution (such as offline registration), and the trusted institution obtains the unique identity information ID of the communication terminal, such as "Car001". Subsequently, the trusted institution generates a true random number x=RandGen(par) based on the security parameter k using a quantum random number generator, such as x="123456", and uses the encryption algorithm Enck to generate a pseudonym information PID=Enck(ID||x) for the communication terminal, such as ID||x="Car001123456".

[0053] Step S22, the trusted institution selects a public-private key pair for the communication terminal, and sends information including the public-private key pair information of the communication terminal and the pseudonym of the communication segment to the communication terminal; Specifically, the trusted institution selects a public-private key pair (pk, sk) for the communication end and sends information (pk, sk, PID) to the communication end; Step S23, the communication terminal registers with the nearest edge proxy server. After registration, the communication terminal obtains the public key and node information of the edge proxy server. At the same time, the edge proxy server puts the pseudonym of the information reporting party i into the registration table; Specifically, the communication end registers with the nearest edge proxy server. After registration, the communication end obtains the public key pk of the edge proxy server. N and node information NID. At the same time, the edge proxy server puts the pseudonym PID of the information reporting party i into the registry List; The inputs of the information reporting stage of the information reporting party are the global public parameter par, the information Kw, the geographical location Loc, the public-private key pair of the information reporting party i (pk i ,sk i ), the pseudonym PID of the information reporting party i i , edge proxy server information NID; output is upload message C=(CT i ,td i ,PID i ,S,NID). Among them, CT i ,td i ,PID i ,S,NID respectively represent the information ciphertext of information reporter i, the trapdoor value calculated by reporter i using trapdoor function, the pseudonym of communication terminal, the digital signature generated by information reporter i and edge proxy server information NID; The information reporting stage of the information reporter includes: step S31, the information reporter connects the information of the geographical location with the information to be sent to obtain an information message; Specifically, the information reporting party i generates information Kw, and combines the geographical location information Loc of the information reporting party i to generate information message m i=Kw||Loc; where || is a connection symbol; For example, information Kw = "congestion", geographic location information Loc = "Third Ring Road", information reporting message m i = "The Third Ring Road is congested."

[0054] Step S32, calculating a temporary authorization code by using a first hash function; using an encryption algorithm to pass the information message, the public key of the information reporter and the temporary authorization code; Specifically, the information reporting party i uses its own quantum random number generator to generate a true random number y=RandGen(par), and calculates the temporary authorization code v=H1(PID i ||y); where PID i is the pseudonym of the party reporting the information; Specifically, based on the on-board random number generator, a true random number y=RandGen(par) is obtained, such as y=“654321”, and a temporary authorization code v=H1(PID i ||y).

[0055] Step S33, calculating and obtaining the information ciphertext, using an encryption algorithm through the information message, the public key of the information reporter and the temporary authorization code, to obtain the information ciphertext; Specifically, the information reporting party i uses the encryption algorithm Enc to encrypt the information message m i Encrypted information ciphertext CT i =Enc(m i ,v,pk i ), where pk i The public key of the information reporter i; Step S34, calculating the trapdoor based on the trapdoor function using the private key of the information reporter; Specifically, according to the private key sk of the information reporting party i i Calculate trapdoor td i =Aut(sk i ), and further calculate the ciphertext m=H2(CT i ||td i ||PID i ), and generate a digital signature S=Sign(sk i ,m); where Sign is the signature function; Aut is the trapdoor function; Step S35, the information reporting device uploads a message including the information ciphertext, the trapdoor, the pseudonym of the information reporter and the node information of the edge proxy server closest to the information reporter to the server; Specifically, the information reporting party i uploads the message C=(CT i ,td i ,PID i,S,NID) to the cloud server; where NID is the node information of the edge proxy server closest to the information reporting party i.

[0056] The input of the equality test phase of the cloud server is the information reporting ciphertext C'=(CT i ,td i ,PID i ,S,NID), the ciphertext C''=(CT j ,td j ), the public key pk of the information reporter i ; Output is the request for temporary authorization message R and the ciphertext to be shared C s =(CT i ,v).

[0057] The equality test phase of the cloud server includes step S41. After receiving the message uploaded by the information reporter, the cloud server authenticates the identity of the information reporter and checks whether the message is tampered with; based on the second hash function, the verification value is calculated through the information ciphertext, the trapdoor, and the pseudonym of the information reporter, and the signature is verified based on the signature verification function through the public key of the information reporter, the verification value, and the digital signature of the information ciphertext; if the signature verification is successful, the next step is entered, otherwise the message is directly discarded: Specifically, after receiving the message C' uploaded by the information reporter i, the cloud server authenticates the identity of the information reporter i and checks whether the message has been tampered with: calculate the verification value m'=H2(CT i ||td i ||PID i ), and through Verify(pk i ,m',S) to verify the signature, Verify is the signature verification function; if the signature verification succeeds, proceed to the next step, otherwise the message C' is directly discarded; Step S42, the cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertexts and corresponding trapdoors stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported, and no subsequent information sharing operation is required; if the test result is 0, it means that no information ciphertext consistent with the received information ciphertext is found, that is, the information has not been reported, and subsequent information sharing operations are required, and the next step is entered; Specifically, the cloud server extracts the ciphertext CT in the message C' i and the corresponding trapdoor td i , and all the information ciphertext CT stored in the cloud server j and the corresponding trapdoor td j Perform equality test Test (CT i ,td i ,CTj ,td j ), Test is an equality test function, and the test result is 0 or 1; the test result is 1, indicating that the two ciphertexts CT i , CT j If the content is consistent, the information has been reported and no subsequent information sharing operation is required; if the test result is 0, it means that no data matching the ciphertext CT is found. i The ciphertext with the same content means that the information has not been reported and needs to be shared later to proceed to the next step; Step S43, the cloud server sends a message requesting temporary authorization to the information reporter; the server sends the ciphertext to be shared to the edge proxy server according to the node information of the edge proxy server provided by the information reporter, and at the same time, the cloud server also stores the current information ciphertext and the corresponding trapdoor; Specifically, on the one hand, the cloud server sends a temporary authorization request message R to the information reporter i; on the other hand, the cloud server sends the ciphertext C to be shared to the edge proxy server according to the node information NID of the edge proxy server provided by the information reporter i. s =(CT i ,v); At the same time, the cloud server also encrypts the current information CT i and the corresponding trapdoor td i To store; The input of the temporary re-encryption key generation phase of the information reporter is the temporary authorization request message R, the private key sk of the information reporter i , the public key pk of the edge proxy server N , temporary authorization code v; the output is a temporary re-encryption key Rk; The temporary re-encryption key generation phase of the information reporter includes step S51, the information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, adopts the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key; Specifically, after receiving the temporary authorization request message R, the information reporting party i calculates Rk1=ReKeyGen(sk i ,pk N ), Rk2=v=H1(PID i ||y), Rk3=Enc(Loc,pk N ), where pk N is the public key of the edge proxy server closest to the information reporter i; ReKeyGen is the re-encryption key generation function; v is the temporary authorization code generated in the third stage, and Loc is the geographical location information of the communication end; Step S52, sending the re-encryption key to the edge proxy server closest to the information reporting party; Specifically, a temporary re-encryption key Rk=(Rk1, Rk2, Rk3) is obtained and sent to the edge proxy server closest to the information reporting party i; The input of the proxy re-encryption phase of the edge proxy server is the temporary re-encryption key Rk and the shared ciphertext Cs=(CTi,v); the output is the ciphertext CTN=(CN,Rk3); The proxy re-encryption phase of the edge proxy server includes step S61, after the edge proxy server receives the ciphertext to be shared sent by the cloud server and the re-encryption key sent by the information reporting party, it verifies whether the second sub-key in the re-encryption key is equal to the temporary authorization code, if so, proceeds to the next step, if not, discards the re-encryption key; Specifically, the edge proxy server receives the ciphertext C to be shared from the cloud server. s =(CT i ,v) and the temporary re-encryption key Rk=(Rk1,Rk2,Rk3) sent by the information reporting party i, verify whether Rk2 is equal to v, if so, proceed to the next step, if not, discard the temporary re-encryption key; The edge proxy server first receives the ciphertext C to be shared sent by the cloud server. s =(CT i ,v), then receive the temporary re-encryption key Rk sent by the information reporting party, first need to compare whether the temporary re-encryption key corresponds to the ciphertext, so need to first verify whether Rk2 is equal to the temporary authorization code v sent by the cloud server. If they are equal, then proceed to S62, if they are not equal, then discard the temporary re-encryption key step S62, use the proxy re-encryption function to calculate the re-encrypted ciphertext through the information ciphertext, the first subkey and the second subkey; Specifically, the edge proxy server performs a proxy re-encryption operation to obtain the re-encrypted ciphertext C N =ReEnc(CT i ,Rk1,Rk2); where ReEnc is the proxy re-encryption function; Step S63, the edge proxy server sends the re-encrypted ciphertext and the third subkey to the information recipient group; Specifically, the edge proxy server sends the re-encrypted ciphertext C N and Rk3 to all other communication terminals in the registration list, i.e., the information recipient group; When the temporary re-encryption key and the ciphertext match, the proxy server performs the proxy re-encryption operation and obtains the re-encrypted ciphertext C N =ReEnc(CT i,Rk1,Rk2). At this time, the re-encrypted ciphertext is transformed by re-encryption and uses the public key pk N At the same time, since the proxy server and the information recipient group use symmetric key encryption, the message can be shared with the group.

[0058] The input of the decryption phase of the information receiver is the re-encrypted ciphertext C N , the private key sk of the edge proxy server N and public key pk N； The output is information Kw; The decryption phase of the information receiver includes step S71, decrypting the re-encrypted ciphertext based on the private key of the edge proxy server; Specifically, the information receiver receives the re-encrypted ciphertext C sent by the edge proxy server. N After Rk3, the re-encrypted ciphertext C N Decrypt and get the information message m i =Dec(C N ,sk N ); Dec is the decryption algorithm; Step S72, decrypt to obtain geographic location information; the geographic location information Loc=Dec(Rk3,pk N ); Step S73, decrypt to obtain information; according to m i =Kw||Loc gets the information Kw.

[0059] Specifically, the information receiver decrypts Rk3 and obtains the geographic location information Loc=Dec(Rk3,pk N ); The information receiver receives the information according to the geographical location information Loc and the information message m i =Kw||Loc, get the information Kw.

[0060] Through the above steps, an information sharing method based on equality testing is implemented, ensuring the privacy protection and secure sharing of information.

[0061] The information authorization sharing method and system based on equality testing of the present invention has at least the following advantages: 1. The present invention improves the security of the scheme by temporarily authorizing the re-encryption key. The temporary re-encryption key allows information to be re-encrypted by a semi-trusted institution within a specific time range, and automatically revokes the re-encryption permission after the time expires, thereby ensuring the privacy security of the information reporting party.

[0062] 2. The present invention improves the efficiency of the solution by using edge computing technology on the proxy server. With the support of edge computing, on the one hand, the computing pressure of the cloud server can be reduced, so as to better cope with the numerous operations of the future communication network; on the other hand, the edge node is closer to the data receiver side, and the spatial distance is closer, which greatly improves the efficiency of data sharing. At the same time, since the edge node is responsible for sending the re-encrypted ciphertext, the cloud server and other third-party groups do not know the information of the information receiver, thereby better concealing the privacy data security of the information receiver.

[0063] 3. The present invention proposes an information reporting and sharing scheme in a communication network scenario based on equality testing, which improves the security of the scheme. The equality test can ensure that the reported information can be retrieved without decryption, thereby avoiding the problem of privacy data leakage of the information reporter.

[0064] 4. Efficient and secure information reporting solutions in traffic scenarios (such as Internet of Vehicles, V2X, etc.) can optimize communication management and improve communication service experience. On the one hand, while providing high-quality services to drivers and passengers, it also ensures that the privacy data of relevant personnel is not leaked; on the other hand, in certain emergency situations, sharing road conditions and accident information can remind drivers to avoid dangerous sections, reduce the accident rate, and reduce casualties.

[0065] 5. Temporary authorization is provided for proxy re-encryption, and a one-time re-encryption key is cleverly generated with the help of quantum random numbers, which increases the difficulty for third parties to crack information and improves the security of information sharing.

[0066] 6. An information sharing solution based on efficient equality testing creatively solves the problem of leakage of personal geographic location information when reporting information and improves the efficiency of information sharing.

[0067] 7. The use of edge computing improves the computing efficiency during the re-encryption process, thereby further improving the efficiency of information sharing.

[0068] In order to verify the high efficiency of the present invention in the information sharing process, this embodiment is compared with five existing information sharing schemes, and the computational overhead of each scheme is analyzed. The detailed analysis results are shown below.

[0069] The five existing information sharing solutions compared in this embodiment are: Scheme 1: H. T. Lee, S. Ling, J. H. Seo, H. Wang, and T.-Y. Youn, “Public key encryption with equality test in the standard model,” Information Sciences, vol. 516, pp. 89–108, 2020. Scheme 2: L. Wu, Y. Zhang, K.-K. R. Choo, and D. He, “Efficient identity-based encryption scheme with equality test in smart city,” IEEE Transactions on Sustainable Computing, vol. 3, no. 1, pp. 44–55, 2017. Scheme 3: S. Ma, Y. Zhong, and Q. Huang, “Efficient public key encryption with outsourced equality test for cloud-based iot environments,” IEEE Transactions on Information Forensics and Security, vol. 17, pp. 3758–3772, 2022. Scheme 4: Y. Bao, W. Qiu, and X. Cheng, “Secure and lightweight fine-grained searchable data sharing for iot-oriented and cloud-assisted smart healthcare system,” IEEE Internet Things J., vol. 9, no. 4, pp. 2513–2526, 2022. Scheme 5: Y. Hou, Y. Cao, H. Xiong, Y. Song, and L. Xu, “An efficient online / offline heterogeneous signcryption scheme with equality test foriovs,” IEEE Transactions on Vehicular Technology, 2023. The computational cost of the information authorization sharing scheme based on equality test proposed in the present invention is 47.279 milliseconds, the computational cost of scheme one is 402.731 milliseconds, the computational cost of scheme two is 111.418 milliseconds, the computational cost of scheme three is 189.519 milliseconds, the computational cost of scheme four is 70.937 milliseconds, and the computational cost of scheme five is 100.905. The computational time of each scheme at different stages is compared as follows: Figure 3 As shown in the figure, although the scheme proposed by the present invention has shortcomings in the encryption phase (Encryption), and the time consumption is only better than that of scheme 1, it is significantly better than all the comparison schemes in the equality test phase (Test) and the decryption phase (Decryption), so it is better than the comparison schemes in terms of total time consumption (Total). After calculation, it is found that the performance improvement of the scheme of the present invention is about 33.35%-88.26%.

[0070] On the other hand, the communication overhead of the information authorization sharing scheme based on equality test proposed in the present invention is 5|G|+|Z|, the communication overhead of scheme one is (2λ+23)|G|+|Z|, the communication overhead of scheme two is 5|G|+2|Z|, and the communication overhead of scheme three is 14|G|+2|G T |, the communication overhead of scheme 4 is (9s+4)|G|+2|G T |+|Z|, the communication overhead of scheme 5 is 7|G|+3|Z|. Where |G| represents the bit length of the elements in group G, λ is the bit length of the security parameter, |Z| represents the bit length of the elements in finite field Z, |G T | indicates group G T The bit length of the elements in , s represents the number of attributes. The communication overhead of each scheme in different parts is shown in Table 1. It can be seen that the scheme proposed in this invention is better than other schemes in terms of trapdoor length and key length, and is second only to scheme 2 in terms of ciphertext length. Comprehensive analysis shows that the communication overhead of the scheme proposed in this invention is smaller than that of the comparison scheme. This scheme Table 1. Communication overhead comparison The above data proves that the information authorization sharing scheme based on equality test proposed by the present invention has lower computing and communication overheads than other related schemes. Therefore, the scheme of the present invention has higher applicability to most low-computing and low-communication communication network devices, and has the potential to be promoted and applied to the entire communication network field.

[0071] It should be clear that the present invention is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0072] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with features of other embodiments or replace features of other embodiments.

[0073] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A communication network information authorized sharing system based on equality testing, characterized in that: The system includes: a cloud server, an edge proxy server, an information reporting party, and an information receiving party group; The information reporter generates an information message according to the information of the geographical location, encrypts the information message through an encryption algorithm to obtain information ciphertext, and sends the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizes the cloud server to perform an equality test; The cloud server forwards the ciphertext of the information that passes the equality test to the edge proxy server, and sends a temporary authorization request to the information reporting party at the same time; After receiving the temporary authorization request, the information reporter generates a temporary re-encryption key and sends the temporary re-encryption key to the edge proxy server; The edge proxy server performs proxy re-encryption on the information ciphertext using a temporary re-encryption key, and sends the re-encrypted ciphertext to the information recipient group; The information receiving party group decrypts the re-encrypted ciphertext and obtains the information.

2. The communication network information authorized sharing system based on equality test according to claim 1 is characterized in that: The cloud server forwards the information ciphertext to the edge proxy server at the geographical location of the information reporter; the information reporter sends the temporary re-encryption key to the edge proxy server at the geographical location of the information reporter; the edge proxy server sends the re-encrypted ciphertext to the group of information recipients within the coverage of the edge proxy server.

3. The communication network information authorized sharing system based on equality test according to claim 1 is characterized in that: The system also includes a trusted institution; the trusted institution is connected to all participants in the system for communication and is used to distribute keys to participants in the system and provide global public parameters.

4. The communication network information authorized sharing system based on equality test according to claim 1 is characterized in that: In the process of the information reporter generating an information message according to the information of the geographical location, encrypting the information message by an encryption algorithm to obtain information ciphertext, and sending the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizing the cloud server to perform an equality test: The information reporting party connects the information of the geographical location with the information to be sent to obtain an information message; Calculate the temporary authorization code through the first Hash function, and use the encryption algorithm to calculate the information ciphertext through the information message, the public key of the information reporter and the temporary authorization code; The trapdoor is calculated based on the trapdoor function using the private key of the information reporter.

5. The communication network information authorized sharing system based on equality test according to claim 1, characterized in that: In the process of sending the trapdoor and information ciphertext calculated based on the private key of the information reporter to the cloud server and authorizing the cloud server to perform an equality test: The cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertext and corresponding trapdoor stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported, and no subsequent information sharing operation is required; If the test result is 0, it means that no information ciphertext consistent with the received information ciphertext content is found, that is, the information is not reported, and subsequent information sharing operations are required to forward the information ciphertext to the edge proxy server.

6. The communication network information authorized sharing system based on equality test according to claim 4 is characterized in that: After receiving the temporary authorization request, the information reporting party generates a temporary re-encryption key, including: The information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, uses the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key.

7. The communication network information authorized sharing system based on equality test according to claim 6 is characterized in that: In the process of the edge proxy server using a temporary re-encryption key to perform proxy re-encryption on the information ciphertext and sending the re-encrypted ciphertext to the information recipient group, a proxy re-encryption function is used to calculate the re-encrypted ciphertext using the information ciphertext, the first sub-key and the second sub-key, and the re-encrypted ciphertext and the third sub-key are sent to the information recipient group.

8. The communication network information authorized sharing system based on equality test according to claim 7 is characterized in that: In the process of the information receiving party group decrypting the re-encrypted ciphertext and obtaining information, the re-encrypted ciphertext is decrypted based on the private key of the edge proxy server to obtain the geographic location information and information.

9. The communication network information authorized sharing system based on equality test according to any one of claims 1 to 8, characterized in that: The communication network is the Internet of Vehicles, the information is traffic information, and both the information reporting party and the information receiving party are vehicles.

10. A communication network information authorized sharing method based on equality testing, characterized in that: The communication network information authorized sharing system based on equality testing applied to any one of the above claims 1-9, the method includes an initialization phase, a registration phase of the communication terminal, an information reporting phase of the information reporter, an equality testing phase of the cloud server, a temporary re-encryption key generation phase of the information reporter, a proxy re-encryption phase of the edge proxy server, and a decryption phase of the information receiver; The initialization phase includes: Step S1, the trusted institution selects an asymmetric encryption algorithm, a decryption algorithm, a public-private key pair of the trusted institution, a first hash function, and a second hash function, and outputs global public parameters including the first hash function, the second hash function, and the public key in the public-private key pair of the trusted institution; The registration phase of the communication end includes: Step S21, the communication terminal registers with the trusted institution, and the trusted institution obtains the unique identity information of the communication terminal. The trusted institution uses its own quantum random number generator to generate a true random number, and uses an encryption algorithm to generate a pseudonym for the communication terminal; Step S22, the trusted institution selects a public-private key pair for the communication terminal, and sends information including the public-private key pair information of the communication terminal and the pseudonym of the communication segment to the communication terminal; Step S23, the communication terminal registers with the nearest edge proxy server. After registration, the communication terminal obtains the public key and node information of the edge proxy server. At the same time, the edge proxy server puts the pseudonym of the information reporting party i into the registration table; The information reporting stage of the information reporter includes: Step S31, the information reporting party connects the information of the geographical location with the information to be sent to obtain an information message; Step S32, calculating a temporary authorization code by using a first hash function; using an encryption algorithm to pass the information message, the public key of the information reporter and the temporary authorization code; Step S33, calculating and obtaining the information ciphertext, using an encryption algorithm through the information message, the public key of the information reporter and the temporary authorization code, to obtain the information ciphertext; Step S34, calculating the trapdoor based on the trapdoor function using the private key of the information reporter; Step S35, the information reporting device uploads a message including the information ciphertext, the trapdoor, the pseudonym of the information reporter and the node information of the edge proxy server closest to the information reporter to the server; The cloud server equality testing phases include: Step S41: After receiving the message uploaded by the information reporter, the cloud server authenticates the identity of the information reporter and checks whether the message has been tampered with; based on the second hash function, the verification value is calculated through the information ciphertext, the trapdoor, and the pseudonym of the information reporter, and the signature is verified based on the signature verification function through the public key of the information reporter, the verification value, and the digital signature of the information ciphertext; if the signature verification is successful, the next step is entered, otherwise the message is directly discarded: Step S42, the cloud server performs an equality test on the received information ciphertext and trapdoor with all the information ciphertexts and corresponding trapdoors stored in the cloud server. If the test result is 1, it means that the contents of the two information ciphertexts are consistent, that is, the information has been reported, and no subsequent information sharing operation is required; if the test result is 0, it means that no information ciphertext consistent with the received information ciphertext is found, that is, the information has not been reported, and subsequent information sharing operations are required, and the next step is entered; Step S43, the cloud server sends a message requesting temporary authorization to the information reporter; the server sends the ciphertext to be shared to the edge proxy server according to the node information of the edge proxy server provided by the information reporter, and at the same time, the cloud server also stores the current information ciphertext and the corresponding trapdoor; The temporary re-encryption key generation phase of the information reporter includes: Step S51, the information reporter calculates the first subkey based on the re-encryption key generation function using the public key of the edge proxy server and the private key of the information reporter, uses the calculation method of the temporary authorization code as the second subkey, uses the information ciphertext as the third subkey, and combines the first subkey, the second subkey and the third subkey to obtain the re-encryption key; Step S52, sending the re-encryption key to the edge proxy server closest to the information reporting party; The proxy re-encryption phase of the edge proxy server includes: Step S61, after receiving the ciphertext to be shared sent by the cloud server and the re-encryption key sent by the information reporter, the edge proxy server verifies whether the second sub-key in the re-encryption key is equal to the temporary authorization code. If so, proceed to the next step, otherwise discard the re-encryption key; Step S62, using a proxy re-encryption function to calculate the re-encrypted ciphertext using the information ciphertext, the first subkey and the second subkey; Step S63, the edge proxy server sends the re-encrypted ciphertext and the third subkey to the information recipient group; The decryption phase for the recipient of the information includes: Step S71, decrypting the re-encrypted ciphertext based on the private key of the edge proxy server; Step S72: Decryption to obtain geographic location information Step S73, decrypt and obtain information.

Images