End-to-end reciprocity signal generation and key transmission method based on network random routing protocol

Abstract

The invention discloses an end-to-end reciprocity signal generation and key transmission method based on a network random routing protocol. The method comprises the following steps: firstly, selecting an existing network random routing protocol; the two key transmission parties formulate request time interval measurement times; the sender measures the time difference of sending the request data packets every two adjacent times, and the receiver measures the time difference of receiving the request data packets every two adjacent times to obtain signals with reciprocity; the two parties quantize and encode the respectively obtained signals to obtain a secret key; and finally, the sender encodes the session key by using the error correction code and encrypts data by using the key obtained by quantization encoding, and the receiver decrypts by using the key obtained by quantization encoding and corrects error bits by using the error correction code, thereby completing the transmission of the session key. The method is suitable for reciprocity signal generation and session key encryption transmission between remote end-to-end equipment.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an end-to-end reciprocal signal generation and key transmission method based on a network routing protocol. Background Art

[0002] With the rapid development of the Internet of Things, secure communication between IoT devices is particularly important. The most common method in the prior art is to encrypt data to ensure its confidentiality. Data encryption involves the generation and distribution of keys. Keys can be divided into symmetric keys and asymmetric keys. Symmetric keys require both parties to have consistent keys, so both parties need a shared random source. The selection of the random source directly affects the randomness, reciprocity and security of the generated keys. Secure communication based on traditional cryptographic schemes requires the participation of a public key infrastructure (PKI). Due to the high cost of deploying PKI, it cannot be deployed on a large scale in terminals. In addition, traditional key distribution requires a key distribution center (KDC). This distribution method has a single point failure problem, that is, once the KDC is attacked or fails, all keys in the system are no longer secure.

[0003] To solve the above problems, wireless physical layer key generation technology has been proposed in the field of physical layer security. This technology uses the fact that wireless channel characteristics change with time and space to ensure the randomness of the generated key, uses the fact that the wireless channel remains unchanged within the coherence time to ensure that the two parties in key negotiation observe reciprocal channel characteristics, and uses the characteristic of rapid decorrelation in channel space to ensure the security of the key against eavesdropping. However, this solution also has limitations, namely, its applicable distance is limited, and sometimes both parties in key negotiation need to install channel estimation equipment, which has a certain deployment cost. In addition, there are inconsistent bits after the wireless physical layer key generates the initial key, and it is necessary to obtain a consistent key through information reconciliation, but this method may cause partial information leakage.

[0004] How to find a signal source that satisfies randomness, reciprocity, and is not easily eavesdropped on from the existing network to generate a key without being limited to the physical layer and communication distance, and how to directly use the initial key to complete the encrypted transmission of information are important issues that the industry urgently needs to solve. Summary of the invention

[0005] Purpose of the invention: The purpose of the present invention is to utilize existing network protocols to generate physical characteristic signals from the network that are random, reciprocal, and not easily eavesdropped on. The physical characteristic signals can be applied to end-to-end key generation, and the obtained keys can be directly used for encrypted transmission of information such as session keys.

[0006] Technical solution: To achieve the above purpose, the present invention adopts the following technical solution:

[0007] In a first aspect, the present invention provides an end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol, comprising:

[0008] Step 1, selecting a random routing protocol from existing network protocols;

[0009] Step 2: The two parties to the key transmission determine the number of measurement times for the request time interval;

[0010] Step 3: The two parties of key transmission send data packets based on the selected random routing protocol and measure the time interval between every two requests;

[0011] Step 4, the key transmission parties splice the request time intervals of the measurement times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain the key;

[0012] Step 5: The two parties in key transmission use error correction codes and keys to achieve encrypted transmission of session keys.

[0013] Furthermore, the random routing protocol selected in step 1 should satisfy the following requirements: the routing path of end-to-end communication in the network is not unique; and the routing path of end-to-end communication in the network can be switched freely.

[0014] Furthermore, the specific steps of step 3 include:

[0015] Step 31, the two parties of key transmission determine in advance the format of the data packet they send;

[0016] Step 32, one party of key transmission is regarded as the sender, and the other party of key transmission is regarded as the receiver. The sender sends a request data packet to the receiver, and records the time t1 of sending the data packet;

[0017] Step 33, the receiver receives the data packet and determines whether it is a data packet sent by the sender. If so, it records the time t2 when the data packet is received and sends a response data packet after a delay of ε1;

[0018] Step 34, the sender receives the response data packet and determines whether it is a data packet sent by the receiver. If so, it waits for a random delay ε2 before sending a request data packet and records the time t5 of sending the data packet;

[0019] Step 35, the receiver receives the data packet and determines whether it is a data packet sent by the sender. If so, it records the time t6 when the data packet is received and sends a response data packet after a delay of ε1;

[0020] Step 36, the sender calculates the time difference between two consecutive data packets sent ΔT1=t5-t1, and the receiver calculates the time difference between two consecutive data packets received ΔT2=t6-t2, and both parties obtain a request time interval data;

[0021] Step 37, repeating steps 34 to 36 until the number of measurement data of the sender and the receiver meets the specified number of request time interval measurements, and all the request time interval data finally obtained by both parties is a reciprocal signal.

[0022] Among them, ε1 and ε2 can be fixed values ​​set artificially, or they can be random values ​​set to conform to a certain random distribution.

[0023] Furthermore, the time delays ε1 and ε2 are set fixed values, or set random values ​​that conform to a certain random distribution.

[0024] Furthermore, in step 4, the request time interval signal is quantized in a uniform quantization or an equal probability quantization.

[0025] Furthermore, the specific steps of step 5 include:

[0026] Step 51: The two parties in key transmission perform the same interleaving process on the key obtained in step 4, and the sender obtains the key K after processing. A , the receiver gets the key K after processing B ;

[0027] Step 52, the sender encodes the session key K using error correction coding, and the encoding result is K′;

[0028] Step 53: The sender uses the key K A Encrypt K′ and get the encrypted key K encrypt =K A ⊕K′, then the sender will encrypt Send to the receiver; where ⊕ represents a binary XOR operation;

[0029] Step 54, K encrypt After transmission over the network, new bit errors will be introduced due to noise, and the receiver receives K′ encrypt , the receiver uses K B For K′ encrypt Decrypt and get the decryption result K decrypt =K B ⊕K′ encrypt ;

[0030] Step 55: The receiver uses the decoding algorithm of the error correction code to decode K decrypt Error correction is performed and finally the session key K is obtained, thereby completing the confidential transmission of the session key.

[0031] In a second aspect, the present invention provides an end-to-end reciprocal signal generation and key transmission system based on a network random routing protocol, comprising:

[0032] A routing selection module, used for selecting a random routing protocol from existing network protocols;

[0033] A reciprocal signal generation module is used for the key transmission parties to formulate the number of request time interval measurements; the key transmission parties send data packets based on the selected random routing protocol and measure the request time interval between every two times; and the key transmission parties splice the request time intervals of the measured number of times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain a key;

[0034] And, a key transmission module is used for both parties of key transmission to realize encrypted transmission of session keys using error correction codes and keys.

[0035] In a third aspect, the present invention provides a computer system comprising a memory, a processor, and a computer program / instruction stored in the memory and executable on the processor, wherein the computer program / instruction, when executed by the processor, implements the steps of the sender or receiver of the key transmission in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol.

[0036] In a fourth aspect, the present invention provides a computer program product, comprising a computer program / instruction, which, when executed by a processor, implements the steps of the sender or receiver of the key transmission in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol.

[0037] Beneficial effects: Compared with the prior art, the present invention has the following advantages: 1. The present invention utilizes the measurement request interval to ensure that both parties of the signal measurement can generate highly consistent data; 2. The present invention utilizes the routing algorithm of the random routing protocol to frequently switch the routing paths of both parties of the signal measurement, and both parties of the signal measurement can set random waiting delays, which can enhance the randomness of the request time interval data; 3. The present invention utilizes the routing algorithm of the random routing protocol to randomly select relay nodes in the end-to-end communication path, making it difficult for all relay nodes to successfully eavesdrop on all time request intervals; 4. The present invention utilizes the interleaving technology, and both parties of the communication discretize the inconsistent bits in the key obtained after quantizing the reciprocal signal, and the discrete errors can be corrected by using error correction coding, so that the quantized key can be directly used for information encryption without information reconciliation, which increases the risk of information exposure. In summary, the end-to-end reciprocal signal generation and key transmission method based on the network random routing protocol proposed by the present invention can be free from distance restrictions, has the characteristics of lightweight, easy deployment, and high security, and is more suitable for the generation of secure keys and key transmission between end-to-end in large-scale Internet of Things. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 is an overall flow chart of an embodiment of the present invention;

[0039] Figure 2 A network topology diagram is an example of an embodiment of the present invention;

[0040] Figure 3 This is a schematic diagram of a request interval data measurement in an embodiment of the present invention;

[0041] Figure 4 The figure is a flowchart of key transmission in an embodiment of the present invention. DETAILED DESCRIPTION

[0042] The scheme of the present invention is further described below in conjunction with the accompanying drawings and specific embodiments. The following specific embodiments are only used to illustrate the present invention but not to limit the scope of the present invention.

[0043] like Figure 1 As shown, the present invention proposes an end-to-end reciprocal signal generation and key transmission method for a network random routing protocol, comprising the following steps:

[0044] Step 1, selecting a random routing protocol from existing network protocols;

[0045] Specifically, the random routing protocol selected in step 1 should satisfy: the routing path of end-to-end communication in the network is not unique; the routing path of end-to-end communication in the network can be switched freely. In this embodiment, the onion routing protocol is selected as the protocol used by the node to forward data packets.

[0046] In this embodiment, the network environment of the routing protocol is configured or selected as follows:

[0047] Choose to configure a private Tor network to achieve random forwarding of data packets. Determine the number of relay nodes to be 4, one of which also serves as the authoritative directory server of the private Tor network. Deploy relay nodes in Nanjing, Handan, and Hong Kong. Relay nodes, Tor clients, and receivers are all PC terminal devices. Use ZeroTier to build a virtual private network (VPN) to achieve communication between relay devices in different LANs.

[0048] By changing the Tor default configuration file of these devices, i.e. the torrc file, these devices are made authoritative directory servers. Change the torrc files of other nodes in the private Tor network, and use the authoritative directory server of the private Tor network as the authoritative directory server of these nodes. Change the torrc files of all nodes except the private Tor network client, so that the remaining nodes can be used as exit nodes of the private Tor network. Change the torrc file of the Tor network client, so that it creates a new Tor circuit every 10 seconds and uses the new Tor circuit to send data every 10 seconds.

[0049] When implementing the specific embodiments, it is not limited to the onion routing protocol and the configured network environment illustrated in this embodiment. The configured or selected network environment satisfies that all devices in the network can forward data packets according to the selected random routing protocol.

[0050] Step 2: The two parties to the key transmission determine the number of measurement times for the request time interval;

[0051] Specifically, the two parties for key transmission in this embodiment set the number of requested measurements to 100.

[0052] Step 3: The two parties of key transmission send data packets based on the selected random routing protocol and measure the time interval between every two requests;

[0053] Specifically, in this embodiment, step 3 includes:

[0054] Step 31, the key transmission parties determine that the request data packet of the Tor client is an http request, and the response data packet of the receiver is an http response;

[0055] Step 32: One of the two parties of key transmission acts as a Tor client, and the other acts as a receiver. The Tor client sends an http request data packet to the receiver through the Tor network, and records the time t1 of sending the data packet;

[0056] Step 33, the receiver receives the data packet sent from the Tor network, determines whether it is a data packet sent from the Tor client, and if so, records the time t2 when the data packet is received and waits for a delay of ε1 before sending an http response data packet;

[0057] Step 34, the Tor client receives the response data packet and determines whether it is a data packet sent by the receiver. If so, it waits for a delay of ε2 and then sends an http request data packet, and records the time t5 of sending the data packet;

[0058] Step 35, the receiver receives the data packet sent from the Tor network and determines whether it is a data packet sent from the Tor client. If so, it records the time t6 when the data packet is received and sends an http response data packet after a delay of ε1;

[0059] Step 36, the Tor client calculates the time difference between two consecutive data packets sent ΔT1=t5-t1, and the receiver calculates the time difference between two consecutive data packets received ΔT2=t6-t2, and both parties obtain a request time interval data;

[0060] Step 37, repeat steps 34 to 36 until the number of measurement data of the Tor client and the receiver reaches 100.

[0061] Based on the consistency of the routing path of data going back and forth in the Tor network and the short-term stability of the network, this measurement method ensures that both parties of signal extraction extract highly consistent request time interval data, laying the foundation for key generation.

[0062] In this embodiment, ε1 and ε2 are set to be fixed at 500 ms. Optionally, ε1 and ε2 can be set to be random data that obeys Gaussian distribution or uniform distribution, and random ε1 and ε2 are generated in each measurement process.

[0063] Step 4, the key transmission parties splice the request time intervals of the measurement times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain the key;

[0064] Optionally, the quantization method may be uniform quantization or equal probability quantization. Equal probability quantization makes the probability of each data after quantization equal by evenly dividing the cumulative probability distribution function (CDF) of the data, thereby maximizing the information entropy of the quantized data.

[0065] Optionally, the encoding method can use Gray Code to reduce the initial key inconsistency rate to a certain extent. Assuming that the quantized data segments are 1, 7, 6, 1, 2, and the corresponding 3-bit Gray code is used for encoding, the result is 001, 100, 101, 001, 011, then the key segment corresponding to the data segment is 001100101001011.

[0066] Step 5: The two parties in key transmission use error correction codes and keys to achieve encrypted transmission of session keys.

[0067] Specifically, in this embodiment, the error correction code adopts Polar code, and step 5 includes:

[0068] Step 51: The two parties in key transmission perform the same interleaving process on the key obtained in step 4, and the sender obtains the key K after processing. a , the receiver gets the key K after processing B ;

[0069] Step 52: The sender encodes the session key K using the Polar code, and the encoding result is K′;

[0070] Step 53: The sender uses the key K A Encrypt K′ and get the encrypted key K encrypt =K A ⊕K′, then the sender will encrypt Send to the recipient;

[0071] Step 54, K encrypt After transmission over the network, new bit errors will be introduced due to noise, and the receiver receives K′ encrypt , the receiver uses K B For K′ encrypt Decrypt and get the decryption result K decrypt =K B ⊕K′ encrypt ;

[0072] Step 55: The receiver uses the Polar code serial cancellation list (SCL) decoding algorithm to decode K decrypt Error correction is performed and finally the session key K is obtained, thereby completing the confidential transmission of the session key.

[0073] In summary, the present invention provides an end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol, which can use the random routing protocol to ensure that the extracted request time interval signal is not easily eavesdropped and its randomness and reciprocity are guaranteed, and the encrypted transmission of the session key using the error correction code also reduces the probability of session key information leakage. The method is not limited by distance, has the characteristics of being lightweight and easy to deploy, and can be widely used in the secure and confidential communication of large-scale Internet of Things devices.

[0074] Based on the same inventive concept, the present invention also provides an end-to-end reciprocal signal generation and key transmission system based on a network random routing protocol, comprising:

[0075] A routing selection module, used for selecting a random routing protocol from existing network protocols;

[0076] A reciprocal signal generation module is used for the key transmission parties to formulate the number of request time interval measurements; the key transmission parties send data packets based on the selected random routing protocol and measure the request time interval between every two times; and the key transmission parties splice the request time intervals of the measured number of times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain a key;

[0077] And, a key transmission module is used for both parties of key transmission to realize encrypted transmission of session keys using error correction codes and keys.

[0078] The present invention also provides a computer system, comprising a memory, a processor, and a computer program / instruction stored in the memory and executable on the processor, wherein when the computer program / instruction is executed by the processor, the steps of the sender or receiver of the key transmission parties in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol are implemented.

[0079] The present invention also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps of the sender or receiver of the key transmission parties in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol.

[0080] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for end-to-end reciprocal signal generation and key transmission based on a network random routing protocol, characterized in that: The following steps are involved: Step 1, selecting a random routing protocol from existing network protocols; Step 2: The two parties to the key transmission determine the number of measurement times for the request time interval; Step 3: The two parties of key transmission send data packets based on the selected random routing protocol and measure the time interval between every two requests; Step 4, the key transmission parties splice the request time intervals of the measurement times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain the key; Step 5: The two parties in key transmission use error correction codes and keys to achieve encrypted transmission of session keys.

2. The end-to-end reciprocal signal generation and key transmission method based on network random routing protocol according to claim 1 is characterized in that: The random routing protocol selected in step 1 should satisfy the following requirements: the routing path of end-to-end communication in the network is not unique; and the routing path of end-to-end communication in the network can be switched freely.

3. The end-to-end reciprocal signal generation and key transmission method based on network random routing protocol according to claim 1 is characterized in that: The step 3 specifically includes the following process: Step 31, the two parties of key transmission determine in advance the format of the data packet they send; Step 32, one party of key transmission is regarded as the sender, and the other party of key transmission is regarded as the receiver. The sender sends a request data packet to the receiver, and records the time t1 of sending the data packet; Step 33, the receiver receives the data packet and determines whether it is a data packet sent by the sender. If so, it records the time t2 when the data packet is received and sends a response data packet after a delay of ε1; Step 34, the sender receives the response data packet and determines whether it is a data packet sent by the receiver. If so, it waits for a delay of ε2 and then sends a request data packet, and records the time t5 of sending the data packet; Step 35, the receiver receives the data packet and determines whether it is a data packet sent by the sender. If so, it records the time t6 when the data packet is received and sends a response data packet after a delay of ε1; Step 36, the sender calculates the time difference between two consecutive data packets sent ΔT1=t5-t1, and the receiver calculates the time difference between two consecutive data packets received ΔT2=t6-t2, and both parties obtain a request time interval data; Step 37, repeating steps 34 to 36 until the number of measurement data of the sender and the receiver meets the specified number of request time interval measurements, and all the request time interval data finally obtained by both parties is a reciprocal signal.

4. The end-to-end reciprocal signal generation and key transmission method based on network random routing protocol according to claim 3 is characterized in that: The time delays ε1 and ε2 are set fixed values, or set random values ​​that conform to a certain random distribution.

5. The end-to-end reciprocal signal generation and key transmission method based on network random routing protocol according to claim 1 is characterized in that: The method of quantizing the request time interval signal in step 4 is uniform quantization or equal probability quantization.

6. The end-to-end reciprocal signal generation and key transmission method based on network random routing protocol according to claim 1 is characterized in that: The step 5 specifically includes the following process: Step 51: The two parties in key transmission perform the same interleaving process on the key obtained in step 4, and the sender obtains the key K after processing. a , the receiver gets the key K after processing B ; Step 52: The sender encodes the session key K using error correction coding, and the encoding result is K ′ ; Step 53: The sender uses the key K A K ′ Encrypt and get the encrypted key K encrypt =K A ⊕K ′ , and then the sender will K encrypt Send to the receiver; where ⊕ represents a binary XOR operation; Step 54, K encrypt After being transmitted over the network, new bit errors will be introduced due to noise, and the receiver will receive K e ′ ncrypt , the receiver uses K B K e ′ ncrypt Decrypt and get the decryption result K decrypt =K B ⊕K e ′ ncrypt ; Step 55: The receiver uses the decoding algorithm of the error correction code to decode K decrypt Error correction is performed and finally the session key K is obtained, thereby completing the confidential transmission of the session key.

7. An end-to-end reciprocal signal generation and key transmission system based on a network random routing protocol, characterized in that: include: A routing selection module is used to select a random routing protocol from existing network protocols; A reciprocal signal generation module, used for both parties of key transmission to set the number of measurement times of the requested time interval; The two parties of key transmission send data packets based on the selected random routing protocol and measure the time interval between every two requests; The key transmission parties concatenate the request time intervals of the measurement times to obtain a request time interval signal, and quantize and encode the obtained request time interval signal to obtain a key; And, a key transmission module is used for the key transmission parties to realize encrypted transmission of session keys using error correction codes and keys.

8. The end-to-end reciprocal signal generation and key transmission system based on network random routing protocol according to claim 7 is characterized in that: The random routing protocol selected by the routing selection module should meet the following requirements: the routing path of end-to-end communication in the network is not unique; the routing path of end-to-end communication in the network can be switched freely.

9. A computer system comprising a memory, a processor, and a computer program / instruction stored in the memory and executable on the processor, characterized in that: When the computer program / instructions are executed by the processor, the steps of the sender or receiver of the key transmission in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol according to any one of claims 1-6 are implemented.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by the processor, the steps of the sender or receiver of the key transmission in the end-to-end reciprocal signal generation and key transmission method based on a network random routing protocol according to any one of claims 1-6 are implemented.

Images