Multi-device node authentication networking method and device in ad hoc network environment

Abstract

The invention discloses a multi-device node authentication networking method and device in an ad hoc network environment. Each equipment node comprises an ad hoc network radio station and a terminal, and the terminal is used for man-machine interaction and information processing. A device node T1 generates a public key Q1 by using an encryption algorithm, and broadcasts a data packet Req1 composed of the public key Q1 and a node identifier I1. And other equipment nodes analyze and store the public key of T1, and return the public key Qn of the current equipment node. And the equipment node T1 encrypts the password C1 through the private key q1 to generate encrypted information SQ1, and broadcasts the SQ1. And other equipment nodes analyze the password C1 of the T1 through the public key of the T1 and verify the password. If the analyzed password of the T1 is the same as the password used locally, the device is a trusted device, and encrypted information SQn of a device node is sent to the T1; and if the passwords are different, rejecting the equipment. And the device node T1 verifies whether the device node Tn is the trusted device or not in the same way. Through the above steps, an authentication networking process among a plurality of device nodes can be realized.

Description

Technical Field

[0001] The present invention relates to the technical field of communication data transmission, and in particular to a multi-device node authentication networking method and device in a self-organizing network environment. Background Art

[0002] In recent years, when major geological disasters occur, or when rescue operations are organized in areas with imperfect infrastructure, as well as in related operations, reliable communication means are often needed to ensure the coordination and organization of the participants because the communication equipment on site is often destroyed or there is no communication setup. Therefore, wireless ad hoc network equipment is often used in such operations. Wireless ad hoc networks support the transmission and communication of data such as text, voice, and video, and are usually equipped with portable communication ad hoc network radios and device nodes. The ad hoc network radio is responsible for building communication links, and the device nodes are used for information sharing.

[0003] However, wireless ad hoc network devices face the risk of data transmission being stolen during the transmission process. Although ad hoc network devices usually have encryption methods, they do not provide identity authentication functions during use. It is easy to access the network by impersonating the identity of the equipped device nodes and eavesdrop on data, causing the risk of leakage. Summary of the invention

[0004] In order to solve the above problems, the present invention starts with the identity authentication of device nodes and proposes a multi-device node authentication networking method in a self-organizing network environment. This method adopts a random password when networking, and all users who need to be networked must use the password to achieve networking communication. Before the action begins, the participants obtain a unified password C as a sign of networking authentication; the personnel start the device node application, and use the symmetric encryption algorithm to generate the public key Q1 and the private key q1. The private key q1 is stored in the networked device node T1. When the network is detected to be available, the generated public key Q1 and the device identification I1 of the current device node are packaged into a data packet Req1, which is sent to the self-organizing network N by broadcasting. After other device nodes Tn receive Req1 and parse the public key Q1 and the node identification I1, they are paired and saved. The user of the networked device node T1 enters the unified password, and after confirming the input, the password is encrypted using the private key q1 and sent to the self-organizing network N by broadcasting. After receiving the broadcast, the receiver Tn decrypts it through the public key Q1 of the networked device node T1, obtains the password C1 of the networked device node T1, and verifies whether the obtained password is the unified password C. If the password is correct, the current networked device node T1 is recorded as a trusted device and saved in the device list L, and the password C and personal information are encrypted with the private key qn and sent to the networked device node T1 through point-to-point communication. Through the above steps, dynamic authentication networking is realized. After networking, anomaly detection is turned on to detect whether there are device nodes with frequent upper and lower limits, which are recorded as abnormal device nodes, and the user is prompted to handle whether to remove the user; the user can also determine whether a device node is an abnormal device node through other methods and actively initiate the removal operation.

[0005] In order to achieve the above object, the present invention proposes a multi-device node authentication networking method in an ad hoc network environment, comprising the following steps:

[0006] S0: Before the operation begins, the participants are assigned a unified password C required for networking at that time by designated personnel. The content of password C is not limited;

[0007] S1: The participant inputs the device node identifier I1 on the terminal, starts the device node T1, and the device node T1 generates the public key Q1 and private key q1 of the current device through the encryption algorithm. The device node T1 saves the public key Q1 and private key q1; the public key Q1 and the device node identifier I1 are packaged to generate Req1, which is sent to the network N by broadcasting; at this time, the user enters the password C1, and the password C1 entered by the user is encrypted by q1 to generate SQ1, which is sent to the network N by broadcasting;

[0008] S2: The device node Tn receives the data Req1, parses out I1 and Q1 respectively, and saves them in the device list Ln of the device node Tn; the device node Tn sends Tn's public key Qn and device node identification In to the device node T1 in a point-to-point manner, and T1 saves Tn's IP, public key Qn, and identification In; the device node Tn receives the data SQ1, retrieves the device's public key Q1 in Ln by sending the IP, decrypts SQ1 with the public key Q1, obtains the password C1, and verifies whether C1 is consistent with the unified password Cn stored in the current device node. If they are consistent, the current device is considered to be a trusted device and recorded in the trusted device list; otherwise, the device record is deleted from the trusted list;

[0009] S3: Device node Tn uses Tn private key qn to encrypt the password Cn input by the user, generates SQn, and sends it to device node T1 in a point-to-point manner. T1 retrieves Tn's public key Qn, decrypts SQn, reads Cn, and determines whether it is consistent with C1. If it is consistent, Tn is added to the trusted device, otherwise the device is deleted.

[0010] Furthermore, in step S1, the processing steps of node T1 sending a message are specifically as follows:

[0011] S101, the device node is usually equipped with a corresponding application. The startup of the device node indicates that the application is started and running. The public key Q1 and private key q1 of the device node are generated through a symmetric encryption algorithm, and the public key is broadcast to all nodes in the network N. This process is implemented in a reliable communication mode, and the data is reachable;

[0012] S102: The user enters a password after the application is started. This action is triggered manually after Req1 is sent.

[0013] Furthermore, in step S2, the detailed processing method of the Tn device node receiving the T1 data is as follows:

[0014] S201, after receiving the public key Q1 of the T1 device node, the sender's IP can be obtained, and a piece of data indexed by the IP is added to the trusted device list Ln as the unique identifier of each node; the node's IP, device node identifier I1, and public key Q1 are saved;

[0015] S202: In order for the T1 node to process the encrypted information of the Tn node later, after receiving the public key Q1 of the T1 node, the Tn node needs to send the public key Qn of the Tn node and the device node identifier to T1 in a point-to-point manner, and store them in the T1 node;

[0016] S203. After receiving the encrypted password of the T1 device node, the sender's IP can be obtained. In the same network N, the IP of each device node is unique. Therefore, the data of the device node T1 is retrieved through the unique index IP, and the public key Q1 is obtained. After decryption through Q1, the unique password C1 of the device node T1 can be obtained.

[0017] Furthermore, in step S3, after confirming the trusted device T1, the device node Tn needs to establish a connection with the trusted device T1. The Tn node needs to encrypt the password Cn of the Tn node using qn and send it to the trusted device node T1 in a point-to-point manner, so that the T1 node can verify whether the Tn node is a trusted device.

[0018] On the other hand, the present invention also provides a multi-device node authentication networking device in a self-organizing network environment, including: a self-organizing network radio and a terminal, the self-organizing network radio is used to automatically establish a local area network with other device nodes, and the terminal is used for human-computer interaction and information processing; the terminal and the radio are connected by wired or wireless means.

[0019] Compared with the prior art, the present invention has the following beneficial effects and advantages:

[0020] The present invention starts with the identity authentication of node devices and proposes a method of using a unified password for the identity authentication of device nodes. First, compared with the traditional method of pre-distributing keys, the method of using a unified password for authentication proposed by the present invention can improve security and controllability in personnel control. Secondly, if an abnormality occurs during use or a device node is invaded, the password can be flexibly adjusted and personnel authentication can be re-performed without the need to re-issue the pre-distributed key to the device, which greatly improves the efficiency of dynamic networking. Finally, a method of actively removing abnormal device nodes is provided. By monitoring the frequent login process of the device, abnormal device nodes can be automatically marked, or abnormal device nodes can be actively marked and communications with abnormal device nodes can be disconnected, further improving the security of self-organizing network communications. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the specific implementation of the present invention or the technical solution in the prior art, the drawings required for use in the specific implementation or the description of the prior art are briefly introduced below.

[0022] Figure 1 It is a full flow chart of multi-device node authentication and data encryption in the ad hoc network environment of the present invention;

[0023] Figure 2 This is a public key exchange flow chart after the user of the present invention goes online;

[0024] Figure 3 A diagram of a mutual authentication process between users of the present invention;

[0025] Figure 4 This is the trusted device list data structure of the present invention. DETAILED DESCRIPTION

[0026] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0027] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art of the present invention. The terms used in the specification of the present invention herein are only for the purpose of describing specific embodiments and are not intended to limit the present invention.

[0028] Figure 1 The overall process of authenticating each node in the entire ad hoc network. Each device node contains an ad hoc network radio and a terminal. The local area network is automatically established between the ad hoc network radio and other device nodes for communication. The terminal is used for human-computer interaction and information processing; the terminal and the radio are connected by wired or wireless means. The terminal in the device node T1 is connected to the ad hoc network through the radio. The user needs to enter the identity I1 to start the device node. The terminal uses the encryption algorithm to generate the public key Q1 and the private key q1, save the private key, and package the public key Qn and the identity I1 into a data packet Req1. Other device nodes receive the broadcast information sent by the device node T1, save the public key of T1, and return the public key Qn of the current device node. The above process can achieve the purpose of exchanging public keys between different device nodes, and the public key is transmitted for the subsequent transmission of key information for decryption. Device node T1 inputs the password, encrypts the password with private key q1 to generate encrypted information SQ1, broadcasts SQ1, and other device nodes receive the broadcast information sent by T1, parse out T1's password and address through T1's public key, and verify the password; if the parsed password of T1 is the same as the password used locally, it is a trusted device, and through point-to-point communication, the encrypted information SQn of the device node is sent to T1. If the passwords are different, the device is removed. Through the above steps, the authentication networking process between multiple device nodes can be realized. Below, each step will be explained in detail.

[0029] 1. Preparation stage of self-organizing network device nodes

[0030] Before networking begins, a unified password C required for networking needs to be allocated. The content of password C is not limited. The password can be a temporary agreement or generated using a password book, etc., and the form is not limited. After the password is generated, it is notified to each device node. This method can control the device nodes that know the password, and since there is usually an upper limit on the number of device nodes in a self-organizing network, this method can also control the scale of device nodes and ensure network quality.

[0031] 2. Start the network device node

[0032] The initial state is that after the networking is successful, there is no device node in the self-organizing network N. The node startup method is to enter the device node identifier I in the terminal. Generally, the node identifier is used to identify the identity of the user, such as name, code, etc., which is used to distinguish different personnel to start the terminal application.

[0033] After the device node T1 is started, the encryption algorithm is used to generate the public key Q1 and private key q1 of the current device node, and the device node T1 saves the public key Q1 and private key q1. Figure 2 The public key exchange process after the device node goes online is described in the above. The public key Q1 and the device node identifier I1 are packaged to generate a data packet recorded as Req1, which is sent to all device nodes in the network N by broadcasting. This process is automatically performed after the device node T1 is started.

[0034] Subsequently, the device node T1 inputs the password C1 and uses q1 to encrypt the input password C1 to generate SQ1, which is sent to all device nodes in the network N by broadcasting.

[0035] 3. Device nodes in the network communicate with device nodes connected to the network

[0036] like Figure 3 As shown in the mutual authentication process between device nodes T1 and Tn, device node Tn receives data Req1 sent by device node T1, and Tn node parses I1 and Q1 respectively according to the predetermined protocol and saves them in the device list Ln of device node Tn. The device list fields are as follows: Figure 4 As shown, the IP address can be obtained from the receiver as the unique identifier of each device for finding the device, and the node identifier I and the public key Q1 of the device node T1 are both saved, and the status is set to 1 by default.

[0037] After the Tn node saves the information of the node T1 requesting to establish a network, it needs to send the public key Qn and device node identifier In of the Tn node to the device node T1 in a point-to-point manner. The T1 node saves the IP, public key Qn, and identifier In of Tn in the device list L1.

[0038] When the device node Tn receives the encrypted data SQ1 from the node T1, it retrieves the public key Q1 of the device in the device list Ln by sending IP, decrypts SQ1 by public key Q1, obtains the password C1, and verifies whether C1 is consistent with the password Cn stored in the current device node. If they are consistent, the current device is considered a trusted device, recorded in the device list, and the status is changed to 1; otherwise, the device record is deleted from the trusted list.

[0039] 4. Establish connection verification between device nodes in the network and device nodes entering the network

[0040] Device node Tn uses Tn key qn to encrypt the password Cn input by the user, generates SQn, and sends it to device node T1 in a point-to-point manner. T1 retrieves Tn's public key Qn from the device list L1, decrypts SQn, obtains Cn, and determines whether it is consistent with C1. If consistent, Tn is added to the trusted device and the status is set to 1, otherwise the device is deleted.

[0041] The above process is the networking authentication process. Devices that need networking can achieve authentication through the above steps 1-4. After authentication, messages can be transmitted through the networking.

[0042] If you need to create additional authentication groups using the above process in the current network, you need to create a new password and repeat steps 1-4 to achieve the function of flexibly creating new authentication groups.

[0043] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0044] The above-mentioned embodiments only express several implementation modes of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the invention. It should be pointed out that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the attached claims.

Claims

1. A multi-device node authentication networking method in a self-organizing network environment, characterized in that: The following steps are involved: S0: Allocate the unified password C required for the current networking. The content of password C is not limited. S1: Start the device node T1, input the device node identifier I1, the device node T1 generates the public key Q1 and private key q1 of the current device through the encryption algorithm, and the device node T1 saves the public key Q1 and private key q1; the public key Q1 and the device node identifier I1 are packaged to generate Req1, which is sent to the network N by broadcasting; at this time, the user enters the password C1, and the password C1 entered by the user is encrypted by q1 to generate SQ1, which is sent to the network N by broadcasting; S2: The device node Tn receives the data Req1, parses out I1 and Q1 respectively, and saves them in the device list Ln of the device node Tn; the device node Tn sends Tn's public key Qn and device node identifier In to the device node T1 in a point-to-point manner, and T1 saves Tn's IP, public key Qn, and device node identifier In; the device node Tn receives the data SQ1, retrieves the device's public key Q in Ln by sending the IP, decrypts SQ1 by the public key Q1, obtains the password C1, and verifies whether C1 is consistent with the password Cn stored in the current device node. If they are consistent, the current device is considered to be a trusted device and recorded in the trusted device list; Otherwise, delete the device record from the trusted list; S3: Device node Tn uses Tn key qn to encrypt the password Cn input by the user to generate SQn, and sends it to device node T1 in a point-to-point manner. T1 retrieves Tn's public key Qn, decrypts SQn, reads Cn, and determines whether it is consistent with C1. If it is consistent, Tn is added to the trusted device, otherwise the device is deleted.

2. The multi-device node authentication networking method in a self-organizing network environment according to claim 1, characterized in that: In step S1, the processing steps of node T1 sending a message are specifically as follows: S101, device node startup means that the application on the node terminal starts running by inputting the node identifier I1, the application generates the public key Q1 and private key q1 of the device node through a symmetric encryption algorithm, and packages the public key and the node identifier into a data packet Req1 and sends it to all nodes in the network N by broadcasting; S102: The user enters a password after the application is started. This action is triggered manually after Req1 is sent.

3. The multi-device node authentication networking method in an ad hoc network environment according to claim 1, characterized in that: In step S2, the device node Tn processes the message of the device node T1 in the following specific steps: S201, after receiving the public key Q1 of the T1 device node, the sender's IP can be obtained, and a piece of data with the IP as the index is added to the trusted device list Ln as the unique identifier of each node, and the node's IP, device node identifier I1, and public key Q1 are saved; S202, in order for the T1 node to subsequently process the encrypted information of the Tn node, after receiving the public key Q1 of the T1 node, the Tn node sends the public key Qn of the Tn node and the device node identifier In to T1 in a point-to-point manner, and stores them in the T1 node; S203. After receiving the encrypted password of the T1 device node, the sender's IP can be obtained. In the same network N, the IP of each device node is unique. Therefore, the data of the device node T1 is retrieved through the unique index IP, and the public key Q1 is obtained. After decryption through Q1, the unique password C1 of the device node T1 can be obtained.

4. The multi-device node authentication networking method in an ad hoc network environment according to claim 1, characterized in that: In step S3, after confirming the trusted device T1, the device node Tn needs to establish a connection with the trusted device T1. The Tn node needs to encrypt the password Cn of the Tn node using qn and send it to the trusted device node T1 in a point-to-point manner, so that the T1 node can verify whether the Tn node is a trusted device.

5. A multi-device node authentication networking device in a self-organizing network environment, comprising: An ad hoc radio and a terminal. The ad hoc radio is used to automatically establish a local area network with other device nodes, and the terminal is used for human-computer interaction and information processing; The terminal and the radio are connected via wired or wireless means.

Images