Encryption mode suitable for wireless ad hoc network

Abstract

The invention discloses an encryption mode suitable for a wireless ad hoc network, which comprises an encryption pattern generation process and an encryption process, each working frame of an encryption pattern is updated once in the whole network according to a synchronous frame number, and a synchronous encryption method and a key can be quickly used without a complicated negotiation mechanism; an encryption pattern is generated by using an LFSR pseudo-random algorithm and is allocated to each time slot, so that the flexibility is improved, and the pseudo-randomness is extremely difficult to track, so that the concealment is enhanced; the data encryption method comprises the following steps: controlling a message, and carrying out full-field sending encryption and receiving decryption according to an encryption pattern M; the encryption mode of the data message, the data encryption offset position and the encryption length improve the data encryption efficiency; the PDU head carries out encryption synchronization through encryption and decryption by using the encryption pattern m; and the PDU data adopts at least two encryption modes, so that the encryption concealment is improved. By quickly updating the encryption pattern and the LFSR algorithm, the encryption efficiency and flexibility are improved, the overhead and risk are reduced, and the method is suitable for the dynamic environment of the wireless ad hoc network.

Description

Technical Field

[0001] The present invention relates to the technical field of network encryption, and in particular to an encryption method suitable for wireless ad hoc networks. Background Art

[0002] Characteristics of existing technologies (LTE / 5G): Key generation and update between base stations and UEs require a series of cumbersome handshake mechanisms on the air interface; PDCP will use a specific encryption method based on the generated keys to fully or partially encrypt the signaling and data transmitted in SRB2 and DRB.

[0003] The disadvantages of applying it to wireless ad hoc networks are that the overhead of cumbersome key negotiation and update synchronization mechanism in multi-hop scenarios will increase exponentially, greatly increasing the probability of abnormalities. The encryption method and encryption key are fixed for a period of time, increasing the risk of being cracked. Therefore, an encryption method suitable for wireless ad hoc networks is proposed. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention provides an encryption method applicable to a wireless ad hoc network to solve the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution: an encryption method suitable for wireless ad hoc networks, comprising: Encryption pattern generation and encryption process: Each working frame of the encryption pattern is updated once for the entire network according to the synchronized frame number. The synchronized encryption method and key can be quickly used without cumbersome negotiation mechanism. The encryption pattern is generated by LFSR pseudo-random algorithm and assigned to each time slot, so that each time slot uses a different encryption method, which increases flexibility. The pseudo-randomness is extremely difficult to track and enhances concealment. Each working frame updates the encryption pattern for the entire network according to the synchronized frame number. This method avoids the cumbersome key negotiation and update synchronization mechanism, making the entire encryption process more efficient and convenient. The encryption pattern is generated by the LFSR pseudo-random algorithm and assigned to each time slot, which not only increases the flexibility of encryption, but also improves the security of encryption. Due to the extremely difficult tracking of LFSR pseudo-randomness, it is more difficult for attackers to crack the encryption pattern, thereby enhancing the concealment of the network. In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern {m1, m2, …, mn} of each time slot of working frame-2; In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern of each time slot of working frame-2. This method ensures that the encryption pattern of each working frame is unique and difficult to predict. Since the encryption pattern is generated based on the serial number of the working frame, the encryption pattern of each working frame is different, which increases the difficulty for attackers to crack. At the same time, each time slot has a corresponding encryption pattern, so that the data transmission in each time slot is secure. Data encryption method, control message, full field transmission encryption and reception decryption according to encryption pattern M; The control message is sent encrypted and received decrypted in full field according to the encryption pattern M. This method ensures the confidentiality and integrity of the control message. Through the data encryption offset position and encryption length, the receiving end can locate and decrypt the data more accurately, thereby improving the efficiency of data encryption and processing. At the same time, this method also increases the flexibility of data transmission. The encryption method of data messages, data encryption offset position and encryption length, improve the efficiency of data encryption; The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization; PDU data uses no less than two encryption methods to improve the concealment of encryption; The PDU header uses encryption pattern m for encryption and decryption, achieving encryption synchronization and ensuring the confidentiality and integrity of the PDU header. The PDU data uses no less than two encryption methods, which increases the concealment of encryption and makes it more difficult for attackers to discover the encryption method of the data. At the same time, since the PDU header and PDU data use different encryption methods, the security of the entire data transmission is also increased. This encryption method implements layered encryption protection for control messages, PDU headers and PDU data, improving the security of the entire data transmission. In addition, this encryption method also supports diversified encryption strategies to adapt to security requirements in different scenarios and needs. Compared with existing technologies, this encryption method has significant advantages in security, efficiency and flexibility.

[0006] Preferably, when the LFSR pseudo-random algorithm generates the encryption pattern, a plurality of preset initial state values ​​are used, and each working frame selects an initial state value according to the synchronized frame number to start the LFSR, so as to increase the diversity and unpredictability of the encryption pattern; By adopting multiple preset initial state values ​​and selecting an initial state value to start LFSR according to the synchronized frame number in each working frame, multiple different encryption patterns can be generated, which makes the encryption pattern of each working frame unique, thereby increasing the diversity of encryption patterns and improving the security of the encryption system; since the encryption pattern of each working frame is generated based on different initial state values, it is difficult for an attacker to predict the encryption pattern of the next working frame; this unpredictability increases the difficulty for an attacker to crack the encryption, further improving the security of the encryption system; compared with traditional encryption technology, this scheme avoids cumbersome key negotiation and update synchronization mechanisms; by simply selecting different initial state values, the encryption pattern can be updated and synchronized, thereby simplifying the key management and update process; since the LFSR pseudo-random algorithm itself has high efficiency, the encryption efficiency can be significantly improved by using this algorithm to generate encryption patterns. At the same time, since the encryption pattern of each working frame is generated based on the synchronized frame number and the preset initial state value, no additional key negotiation and update operations are required, further improving the encryption efficiency.

[0007] Preferably, the encryption pattern M and encryption pattern m are different encryption patterns, which are used to control the encryption of the message and the PDU header, respectively, to ensure the independent encryption and security of different types of data; By assigning different encryption patterns to different types of data (such as control messages and PDU headers), layered protection of data is achieved, which reduces the risk of the entire system being exposed after a single encryption mode is cracked; different types of data may have different security requirements and sensitivities, and using different encryption patterns can perform more sophisticated encryption processing based on these requirements, thereby improving overall security; different encryption patterns can adapt to different application scenarios and security requirements. For example, control messages may require higher real-time and reliability, while PDU headers may require stronger confidentiality. When the encryption algorithm or key needs to be updated, only the specific encryption pattern needs to be modified without affecting other parts of the entire system; by providing independent encryption protection for control messages and PDU headers respectively, this data can be prevented from being maliciously tampered with or damaged during transmission. Independent encryption patterns help ensure that the data maintains its integrity and consistency during transmission, thereby improving the reliability of the system.

[0008] Preferably, the data encryption offset position and encryption length are realized by adding an encryption field before the data message, and the encryption field contains specific information of the encryption offset position and encryption length so that the receiving end can correctly decrypt the data; The encryption field directly provides specific information about the encryption offset position and encryption length. The receiving end can accurately locate and decrypt data based on this information, avoiding data damage or loss caused by incorrect decryption position or length. The introduction of the encryption field makes the encryption process more transparent and controllable, and it is difficult for attackers to crack encrypted data by guessing or probing. At the same time, due to the changes in the encryption offset position and encryption length, even if the attacker intercepts part of the encrypted data, it is difficult to infer the complete plaintext information. After receiving the data, the receiving end can quickly extract the encrypted part according to the encryption field and decrypt it without byte-by-byte analysis of the entire data packet, which greatly improves the communication efficiency and reduces the delay of data transmission and processing. The encryption field can flexibly set and adjust the encryption offset position and encryption length to adapt to different data types and encryption requirements, which makes the encryption scheme more flexible and changeable, and can cope with various complex communication scenarios. The method can realize the addition of data encryption offset position and encryption length without major modifications to the existing communication protocol or data structure, so it has good compatibility and can be easily integrated into the existing communication system. The introduction of the encryption field is relatively simple, and only an additional piece of information needs to be added before the data message, which makes the implementation and maintenance cost relatively low, and also facilitates subsequent system upgrades and expansions. Preferably, other encryption methods used for the PDU data include but are not limited to key-based encryption, attribute-based encryption or identity-based encryption to improve the flexibility and concealment of encryption; Through complex encryption algorithms and key management, the confidentiality and integrity of PDU data during transmission can be ensured; after long-term development and application, the key-based encryption algorithm is mature and stable, and can cope with various security challenges; attribute-based encryption (ABE) is a new encryption method that controls data access rights based on user attributes. ABE can implement attribute-based fine-grained access control, allowing data owners to flexibly specify which users can access encrypted data. Since the encryption strategy is associated with the user's attributes, it is difficult for attackers to obtain data access rights by cracking the encryption algorithm, thereby enhancing the concealment of data. ABE does not need to assign a unique key to each user like traditional encryption methods, but generates keys based on user attributes, thereby simplifying the complexity of key management; identity-based encryption (IBE) is a public key encryption method based on user identity information. IBE does not require cumbersome certificate management and key distribution processes, reducing the complexity and cost of encrypted communication. IBE uses high-intensity encryption algorithms such as elliptic curve cryptography and has high security. IBE is based on user identity information and is easy to integrate into existing systems, improving deployment efficiency.

[0009] Preferably, a key update mechanism is also included, wherein the key update mechanism generates a new encryption key according to a preset key update rule after each working frame ends, and distributes it to all network nodes together with the encryption pattern of the next working frame to ensure the regular update and security of the encryption key; The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or specific event-triggered update; The key update mechanism also includes the step of verifying the validity of the current encryption key before generating a new encryption key; After receiving the new encryption key and encryption pattern, the nodes in the entire network perform a consistency check to ensure that all nodes use the same encryption key and encryption pattern; Regularly updating encryption keys can significantly reduce the risk of long-term key cracking. Since the key is dynamically changing, it is difficult for attackers to crack the current key through long-term monitoring or analysis. The combination of the key update mechanism and the encryption pattern further enhances the encryption strength of the data. Even if the attacker obtains part of the encrypted data, it is difficult to infer the complete plaintext information because the encryption key and encryption pattern are constantly changing. Regularly updating the encryption key means that the confidentiality of the data during transmission and storage is continuously guaranteed. After each working frame ends, the old key is discarded and the new key is immediately generated and distributed, ensuring the real-time confidentiality of the data. The key update mechanism helps prevent system paralysis or data loss caused by key leakage. By regularly changing the key, the system can maintain its stability and reliability and ensure the continuous and secure transmission of data. As the network scale expands or new nodes are added, the system can easily introduce new key update rules and encryption patterns to adapt to these changes, which helps to maintain the scalability and flexibility of the system and meet the development of future security needs.

[0010] Preferably, the generation and distribution of the encryption pattern is completed by specific nodes in the network, which are responsible for generating the encryption pattern according to the synchronized frame number, and distributing the encryption pattern {m1, m2, ..., mn} of working frame-2 to other nodes in the network for use in time slot 1, time slot 2 to time slot n in working frame-2; By generating and distributing encryption patterns through specific nodes, it can be ensured that the generation and distribution process of encryption patterns is strictly controlled, reducing the risk of malicious attacks or tampering. The regular update and synchronous distribution of encryption patterns help maintain the security of the network and prevent the encryption patterns from being cracked due to long-term unchangedness. Specific nodes are responsible for generating encryption patterns and distributing them to other nodes in the network, which avoids the complexity of each node needing to generate encryption patterns on its own and improves encryption efficiency. The distribution of encryption patterns is synchronized with the frame number, ensuring that each working frame can use the correct encryption pattern, thereby ensuring the continuity and security of data transmission. By centrally generating and distributing encryption patterns through specific nodes, unnecessary encryption pattern transmission and storage overhead in the network can be reduced, optimizing the utilization of network resources.

[0011] Preferably, it also includes an error detection and correction mechanism, which detects encryption errors or data corruption during data transmission and takes corresponding corrective measures to ensure the integrity and reliability of the data; The corrective action includes, but is not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes; The correction mechanism also includes recording the occurrence of errors and the corrective measures adopted; The error detection and correction mechanism can detect errors in the data transmission process in real time, including encryption errors and data corruption, thereby ensuring the accurate transmission of data, which greatly reduces the bit error rate of data transmission and improves the reliability of communication; by embedding the error detection and correction mechanism in the data transmission process, it can ensure that the data is not tampered with or damaged during transmission. Even if an error occurs, the original data can be restored through corrective measures to maintain the integrity of the data; the error detection and correction mechanism can correct the error immediately when it is detected, avoiding repeated transmission due to data errors, which reduces network bandwidth occupancy and transmission delay and improves communication efficiency; adding an error detection and correction mechanism to the communication system can enhance the system's tolerance to noise, interference and transmission loss, which enables the system to maintain stable performance in harsh communication environments.

[0012] Preferably, the encryption method also supports dynamic network topology changes. When nodes in the network join or leave, the encryption pattern and key distribution mechanism are automatically adjusted to adapt to the dynamic changes in the network topology; Dynamically adjusting encryption patterns and key distribution mechanisms can ensure that the network remains highly secure when the topology changes, which prevents security vulnerabilities caused by changes in the network structure from being exploited; encryption methods that support dynamic network topology changes enable the network to respond more flexibly to the addition or departure of nodes, which helps the network remain efficient and secure when expanding or shrinking; automatic adjustment of encryption patterns and key distribution mechanisms reduces the need for manual intervention and reduces the risk of security issues caused by human error; dynamic adjustment mechanisms can optimize the use of encryption resources according to the actual needs of the network, avoid unnecessary waste, and improve the overall performance of the network.

[0013] Preferably, a performance optimization mechanism is also included, wherein the performance optimization mechanism dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm according to factors such as network load and node energy consumption to balance the security and performance of the network; The network load includes but is not limited to data transmission volume, inter-node communication frequency or network congestion level; The node energy consumption factors include, but are not limited to, node battery power, energy consumption rate, or expected battery life; The dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during a period of time when the security requirement is higher, and reducing the update frequency and the complexity of the algorithm during a period of time when the security requirement is lower; The performance optimization mechanism also includes regularly evaluating and adjusting the optimization strategy to adapt to changes in the network environment and node status; The performance optimization mechanism can dynamically adjust encryption parameters according to actual network conditions, thereby avoiding the use of overly complex encryption algorithms when the load is light or the energy consumption is low, reducing unnecessary computing overhead and resource waste, and improving the overall network performance; when the network load is heavy or the node energy consumption is high, the performance optimization mechanism can automatically increase the update frequency of the encryption pattern or adopt a more complex encryption algorithm to ensure that the network remains highly secure in the face of potential attacks; by dynamically adjusting the complexity of the encryption algorithm, the performance optimization mechanism helps to balance the energy consumption of nodes, extend the service life of network nodes, and reduce network failures caused by energy depletion; the performance optimization mechanism can reasonably allocate encryption resources according to actual network needs, avoid excessive waste or shortage of resources, and improve the overall utilization of resources.

[0014] In summary, compared with the prior art, the present invention provides an encryption method suitable for wireless ad hoc networks, which has the following beneficial effects: The wireless ad hoc network encryption method of the invention uses an efficient update mechanism to achieve synchronous update of encryption patterns for each frame without tedious negotiations, thus improving encryption real-time performance and efficiency. The LFSR pseudo-random algorithm enhances concealment, multiple preset initial state values ​​increase encryption diversity, control messages and PDU headers are independently encrypted to ensure customized data protection, encryption fields improve decryption accuracy, diversified PDU data encryption methods meet different needs, regular key update and distribution mechanisms ensure key security and prevent long-term cracking. At the same time, it has robust error detection and correction functions to ensure data integrity, support dynamic network topology changes, adaptively adjust encryption strategies, and performance optimization mechanisms to balance security and efficiency to ensure efficient network operation. The encryption method provides comprehensive, flexible and efficient security protection, adapts to the ever-changing environmental requirements of wireless ad hoc networks, and solves the problems raised in the background technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 It is a schematic diagram of the encryption method of the wireless ad hoc network of the present invention.

[0016] Figure 2 It is a schematic diagram of working frame encryption in the wireless ad hoc network of the present invention.

[0017] Figure 3 It is a schematic diagram of the application of encryption technology in the data transmission process of the present invention. DETAILED DESCRIPTION

[0018] The present invention provides a technical solution, an encryption method suitable for wireless ad hoc networks, please refer to Figure 1 , Figure 2 and Figure 3 ,include: Encryption pattern generation and encryption process: Each working frame of the encryption pattern is updated once for the entire network according to the synchronized frame number. The synchronized encryption method and key can be quickly used without cumbersome negotiation mechanism. The encryption pattern is generated by LFSR pseudo-random algorithm and assigned to each time slot, so that each time slot uses a different encryption method, which increases flexibility. The pseudo-randomness is extremely difficult to track and enhances concealment. Each working frame updates the encryption pattern for the entire network according to the synchronized frame number. This method avoids the cumbersome key negotiation and update synchronization mechanism, making the entire encryption process more efficient and convenient. The encryption pattern is generated by the LFSR pseudo-random algorithm and assigned to each time slot, which not only increases the flexibility of encryption, but also improves the security of encryption. Due to the extremely difficult tracking of LFSR pseudo-randomness, it is more difficult for attackers to crack the encryption pattern, thereby enhancing the concealment of the network. In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern {m1, m2, …, mn} of each time slot of working frame-2; In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern of each time slot of working frame-2. This method ensures that the encryption pattern of each working frame is unique and difficult to predict. Since the encryption pattern is generated based on the serial number of the working frame, the encryption pattern of each working frame is different, which increases the difficulty for attackers to crack. At the same time, each time slot has a corresponding encryption pattern, so that the data transmission in each time slot is secure. Data encryption method, control message, full field transmission encryption and reception decryption according to encryption pattern M; The control message is sent encrypted and received decrypted in full field according to the encryption pattern M. This method ensures the confidentiality and integrity of the control message. Through the data encryption offset position and encryption length, the receiving end can locate and decrypt the data more accurately, thereby improving the efficiency of data encryption and processing. At the same time, this method also increases the flexibility of data transmission. The encryption method of data messages, data encryption offset position and encryption length, improve the efficiency of data encryption. Because the data header is generally only for sending and receiving attributes, the encryption offset position is generally <= 5, and the encryption length is generally not particularly long, and only partial encryption is performed; The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization; PDU data uses no less than two encryption methods to improve the concealment of encryption; The PDU header uses encryption pattern m for encryption and decryption, achieving encryption synchronization and ensuring the confidentiality and integrity of the PDU header. The PDU data uses no less than two encryption methods, which increases the concealment of encryption and makes it more difficult for attackers to discover the encryption method of the data. At the same time, since the PDU header and PDU data use different encryption methods, the security of the entire data transmission is also increased. This encryption method implements layered encryption protection for control messages, PDU headers and PDU data, improving the security of the entire data transmission. In addition, this encryption method also supports diversified encryption strategies to adapt to security requirements in different scenarios and needs. Compared with existing technologies, this encryption method has significant advantages in security, efficiency and flexibility.

[0019] See also Figure 1 , Figure 2 and Figure 3,When the LFSR pseudo-random algorithm generates the encryption pattern, multiple preset initial state values ​​are used, and each working frame selects an initial state value to start the LFSR according to the synchronized frame number to increase the diversity and unpredictability of the encryption pattern; By adopting multiple preset initial state values ​​and selecting an initial state value to start LFSR according to the synchronized frame number in each working frame, multiple different encryption patterns can be generated, which makes the encryption pattern of each working frame unique, thereby increasing the diversity of encryption patterns and improving the security of the encryption system; since the encryption pattern of each working frame is generated based on different initial state values, it is difficult for an attacker to predict the encryption pattern of the next working frame; this unpredictability increases the difficulty for an attacker to crack the encryption, further improving the security of the encryption system; compared with traditional encryption technology, this scheme avoids cumbersome key negotiation and update synchronization mechanisms; by simply selecting different initial state values, the encryption pattern can be updated and synchronized, thereby simplifying the key management and update process; since the LFSR pseudo-random algorithm itself has high efficiency, the encryption efficiency can be significantly improved by using this algorithm to generate encryption patterns. At the same time, since the encryption pattern of each working frame is generated based on the synchronized frame number and the preset initial state value, no additional key negotiation and update operations are required, further improving the encryption efficiency.

[0020] See also Figure 1 , Figure 2 and Figure 3 , encryption pattern M and encryption pattern m are different encryption patterns, which are used for encryption of control messages and PDU headers, respectively, to ensure independent encryption and security of different types of data; By assigning different encryption patterns to different types of data (such as control messages and PDU headers), layered protection of data is achieved, which reduces the risk of the entire system being exposed after a single encryption mode is cracked; different types of data may have different security requirements and sensitivities, and using different encryption patterns can perform more sophisticated encryption processing based on these requirements, thereby improving overall security; different encryption patterns can adapt to different application scenarios and security requirements. For example, control messages may require higher real-time and reliability, while PDU headers may require stronger confidentiality. When the encryption algorithm or key needs to be updated, only the specific encryption pattern needs to be modified without affecting other parts of the entire system; by providing independent encryption protection for control messages and PDU headers respectively, this data can be prevented from being maliciously tampered with or damaged during transmission. Independent encryption patterns help ensure that the data maintains its integrity and consistency during transmission, thereby improving the reliability of the system.

[0021] See also Figure 1 and Figure 2,The data encryption offset position and encryption length are realized by adding an encryption field before the data message, which contains the specific information of the encryption offset position and encryption length so that the receiving end can correctly decrypt the data; The encryption field directly provides specific information about the encryption offset position and encryption length. The receiving end can accurately locate and decrypt data based on this information, avoiding data damage or loss caused by incorrect decryption position or length. The introduction of the encryption field makes the encryption process more transparent and controllable, and it is difficult for attackers to crack encrypted data by guessing or probing. At the same time, due to the changes in the encryption offset position and encryption length, even if the attacker intercepts part of the encrypted data, it is difficult to infer the complete plaintext information. After receiving the data, the receiving end can quickly extract the encrypted part according to the encryption field and decrypt it without byte-by-byte analysis of the entire data packet, which greatly improves the communication efficiency and reduces the delay of data transmission and processing. The encryption field can flexibly set and adjust the encryption offset position and encryption length to adapt to different data types and encryption requirements, which makes the encryption scheme more flexible and changeable, and can cope with various complex communication scenarios. The method can realize the addition of data encryption offset position and encryption length without major modifications to the existing communication protocol or data structure, so it has good compatibility and can be easily integrated into the existing communication system. The introduction of the encryption field is relatively simple, and only an additional piece of information needs to be added before the data message, which makes the implementation and maintenance cost relatively low, and also facilitates subsequent system upgrades and expansions. See also Figure 1 , Figure 2 and Figure 3 ,Other encryption methods used for PDU data include but are not limited to key-based encryption, attribute-based encryption or identity-based encryption to improve the flexibility and concealment of encryption; Through complex encryption algorithms and key management, the confidentiality and integrity of PDU data during transmission can be ensured; after long-term development and application, the key-based encryption algorithm is mature and stable, and can cope with various security challenges; attribute-based encryption (ABE) is a new encryption method that controls data access rights based on user attributes. ABE can implement attribute-based fine-grained access control, allowing data owners to flexibly specify which users can access encrypted data. Since the encryption strategy is associated with the user's attributes, it is difficult for attackers to obtain data access rights by cracking the encryption algorithm, thereby enhancing the concealment of data. ABE does not need to assign a unique key to each user like traditional encryption methods, but generates keys based on user attributes, thereby simplifying the complexity of key management; identity-based encryption (IBE) is a public key encryption method based on user identity information. IBE does not require cumbersome certificate management and key distribution processes, reducing the complexity and cost of encrypted communication. IBE uses high-intensity encryption algorithms such as elliptic curve cryptography and has high security. IBE is based on user identity information and is easy to integrate into existing systems, improving deployment efficiency.

[0022] It also includes a key update mechanism, which generates a new encryption key according to a preset key update rule after each working frame, and distributes it to all network nodes together with the encryption pattern of the next working frame to ensure the regular update and security of the encryption key; The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or specific event-triggered update; The key update mechanism also includes the step of verifying the validity of the current encryption key before generating a new encryption key; After receiving the new encryption key and encryption pattern, all nodes in the network perform consistency check to ensure that all nodes use the same encryption key and encryption pattern; Regularly updating encryption keys can significantly reduce the risk of long-term key cracking. Since the key is dynamically changing, it is difficult for attackers to crack the current key through long-term monitoring or analysis. The combination of the key update mechanism and the encryption pattern further enhances the encryption strength of the data. Even if the attacker obtains part of the encrypted data, it is difficult to infer the complete plaintext information because the encryption key and encryption pattern are constantly changing. Regularly updating the encryption key means that the confidentiality of the data during transmission and storage is continuously guaranteed. After each working frame ends, the old key is discarded and the new key is immediately generated and distributed, ensuring the real-time confidentiality of the data. The key update mechanism helps prevent system paralysis or data loss caused by key leakage. By regularly changing the key, the system can maintain its stability and reliability and ensure the continuous and secure transmission of data. As the network scale expands or new nodes are added, the system can easily introduce new key update rules and encryption patterns to adapt to these changes, which helps to maintain the scalability and flexibility of the system and meet the development of future security needs.

[0023] See also Figure 2 , the generation and distribution of encryption patterns are completed by specific nodes in the network. These specific nodes are responsible for generating encryption patterns according to the synchronized frame number and distributing the encryption pattern {m1, m2, …, mn} of working frame-2 to other nodes in the network for use in time slots 1, 2 to n in working frame-2; By generating and distributing encryption patterns through specific nodes, it can be ensured that the generation and distribution process of encryption patterns is strictly controlled, reducing the risk of malicious attacks or tampering. The regular update and synchronous distribution of encryption patterns help maintain the security of the network and prevent the encryption patterns from being cracked due to long-term unchangedness. Specific nodes are responsible for generating encryption patterns and distributing them to other nodes in the network, which avoids the complexity of each node needing to generate encryption patterns on its own and improves encryption efficiency. The distribution of encryption patterns is synchronized with the frame number, ensuring that each working frame can use the correct encryption pattern, thereby ensuring the continuity and security of data transmission. By centrally generating and distributing encryption patterns through specific nodes, unnecessary encryption pattern transmission and storage overhead in the network can be reduced, optimizing the utilization of network resources.

[0024] It also includes error detection and correction mechanisms, which detect encryption errors or data corruption during data transmission and take appropriate corrective measures to ensure data integrity and reliability; Corrective actions include, but are not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes; Corrective action mechanisms also include recording the circumstances under which errors occurred and the corrective actions taken; The error detection and correction mechanism can detect errors in the data transmission process in real time, including encryption errors and data corruption, thereby ensuring the accurate transmission of data, which greatly reduces the bit error rate of data transmission and improves the reliability of communication; by embedding the error detection and correction mechanism in the data transmission process, it can ensure that the data is not tampered with or damaged during transmission. Even if an error occurs, the original data can be restored through corrective measures to maintain the integrity of the data; the error detection and correction mechanism can correct the error immediately when it is detected, avoiding repeated transmission due to data errors, which reduces network bandwidth occupancy and transmission delay and improves communication efficiency; adding an error detection and correction mechanism to the communication system can enhance the system's tolerance to noise, interference and transmission loss, which enables the system to maintain stable performance in harsh communication environments.

[0025] The encryption method also supports dynamic network topology changes. When nodes in the network join or leave, the encryption pattern and key distribution mechanism are automatically adjusted to adapt to the dynamic changes in the network topology; Dynamically adjusting encryption patterns and key distribution mechanisms can ensure that the network remains highly secure when the topology changes, which prevents security vulnerabilities caused by changes in the network structure from being exploited; encryption methods that support dynamic network topology changes enable the network to respond more flexibly to the addition or departure of nodes, which helps the network remain efficient and secure when expanding or shrinking; automatic adjustment of encryption patterns and key distribution mechanisms reduces the need for manual intervention and reduces the risk of security issues caused by human error; dynamic adjustment mechanisms can optimize the use of encryption resources according to the actual needs of the network, avoid unnecessary waste, and improve the overall performance of the network.

[0026] It also includes a performance optimization mechanism, which dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm according to factors such as network load and node energy consumption to balance the security and performance of the network; Network load includes, but is not limited to, data transmission volume, inter-node communication frequency, or network congestion level; Node energy consumption factors include, but are not limited to, node battery level, energy consumption rate, or expected battery life; Dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during a period of time when security requirements are high, and reducing the update frequency and algorithm complexity during a period of time when security requirements are low; The performance optimization mechanism also includes regular evaluation and adjustment of optimization strategies to adapt to changes in network environment and node status; The performance optimization mechanism can dynamically adjust encryption parameters according to actual network conditions, thereby avoiding the use of overly complex encryption algorithms when the load is light or the energy consumption is low, reducing unnecessary computing overhead and resource waste, and improving the overall network performance; when the network load is heavy or the node energy consumption is high, the performance optimization mechanism can automatically increase the update frequency of the encryption pattern or adopt a more complex encryption algorithm to ensure that the network remains highly secure in the face of potential attacks; by dynamically adjusting the complexity of the encryption algorithm, the performance optimization mechanism helps to balance the energy consumption of nodes, extend the service life of network nodes, and reduce network failures caused by energy depletion; the performance optimization mechanism can reasonably allocate encryption resources according to actual network needs, avoid excessive waste or shortage of resources, and improve the overall utilization of resources.

[0027] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0028] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An encryption method suitable for wireless ad hoc networks, characterized in that: include: Encryption pattern generation and encryption process: The encryption pattern is updated once for the whole network in each working frame according to the synchronized frame number. The encryption pattern is generated by the LFSR pseudo-random algorithm and assigned to each time slot, so that each time slot uses a different encryption method; Data encryption method: Control message, send encryption and receive decryption of the entire field according to encryption pattern M; Data message encryption method: Use data encryption offset position and encryption length to improve the efficiency of data encryption; The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization; PDU data uses no less than two encryption methods, and the encryption method also supports dynamic network topology changes; Key update mechanism: The key update mechanism generates a new encryption key according to a preset key update rule after each working frame ends, and distributes it to all network nodes together with the encryption pattern of the next working frame; Error detection and correction mechanisms; The error detection and correction mechanism detects encryption errors or data corruption during data transmission and takes corresponding corrective measures to ensure data integrity and reliability; Performance optimization mechanism: The performance optimization mechanism dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm according to network load and node energy consumption factors, balancing the security and performance of the network.

2. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: When the LFSR pseudo-random algorithm generates an encryption pattern, multiple preset initial state values ​​are used, and each working frame selects an initial state value according to the synchronized frame number to start the LFSR, thereby increasing the diversity and unpredictability of the encryption pattern.

3. The encryption method applicable to a wireless ad hoc network according to claim 2, characterized in that: The encryption pattern M and encryption pattern m are different encryption patterns, which are used for encryption of control messages and PDU headers respectively.

4. The encryption method applicable to a wireless ad hoc network according to claim 3, characterized in that: The data encryption offset position and encryption length are realized by adding an encryption field before the data message, and the encryption field contains specific information of the encryption offset position and encryption length.

5. The encryption method applicable to a wireless ad hoc network according to claim 4, characterized in that: Other encryption methods used for the PDU data include, but are not limited to, key-based encryption, attribute-based encryption, or identity-based encryption.

6. The encryption method applicable to a wireless ad hoc network according to claim 5, characterized in that: The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or specific event-triggered update; The key update mechanism also includes the step of verifying the validity of the current encryption key before generating a new encryption key; After receiving the new encryption key and encryption pattern, the nodes in the entire network perform a consistency check to ensure that all nodes use the same encryption key and encryption pattern.

7. The encryption method applicable to a wireless ad hoc network according to claim 6, characterized in that: The generation and distribution of the encryption pattern is completed through a specific node in the network. The specific node is responsible for generating the encryption pattern according to the synchronized frame number and distributing the encryption pattern to other nodes in the network.

8. The encryption method applicable to a wireless ad hoc network according to claim 7, characterized in that: The corrective action includes, but is not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes; The correction mechanism also includes recording the circumstances under which the error occurred and the corrective measures taken.

9. The encryption method applicable to a wireless ad hoc network according to claim 8, characterized in that: In the dynamic network topology change, when nodes in the network join or leave, the distribution mechanism of the encryption pattern and the key is automatically adjusted to adapt to the dynamic change of the network topology.

10. The encryption method applicable to a wireless ad hoc network according to claim 9, characterized in that: The network load includes but is not limited to data transmission volume, inter-node communication frequency or network congestion level; The node energy consumption factors include, but are not limited to, node battery power, energy consumption rate, or expected battery life; The dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during a period of high security requirements, and reducing the update frequency and algorithm complexity during a period of low security requirements; The performance optimization mechanism also includes regularly evaluating and adjusting the optimization strategy to adapt to changes in the network environment and node status.

Images