An encryption method suitable for wireless ad hoc networks

Abstract

The present invention discloses an encryption method suitable for wireless ad hoc networks, including: encryption pattern generation and encryption process. The encryption pattern is updated network-wide once per working frame according to the synchronized frame number, allowing for rapid use of synchronized encryption methods and keys without requiring a cumbersome negotiation mechanism. The encryption pattern is generated using an LFSR pseudo-random algorithm and assigned to each time slot, increasing flexibility. The pseudo-randomness is extremely difficult to track, enhancing concealment. A data encryption method is used for control messages, and full-field transmission encryption and reception decryption are performed according to the encryption pattern M. The encryption method for data messages, including data encryption offset position and encryption length, improves data encryption efficiency. The PDU header is encrypted and decrypted using the encryption pattern M for encryption synchronization. The PDU data uses at least two encryption methods to enhance encryption concealment. By rapidly updating the encryption pattern and LFSR algorithm, the present invention improves encryption efficiency and flexibility, reduces overhead and risk, and is suitable for dynamic environments of wireless ad hoc networks.

Description

Technical Field

[0001] The present invention relates to the technical field of network encryption, and in particular to an encryption method suitable for wireless ad hoc networks. Background Art

[0002] The existing technical characteristics (LTE / 5G) require that key generation and update between the base station and the UE go through a series of cumbersome handshake mechanisms on the air interface; PDCP will use a specific encryption method based on the generated keys to fully or partially encrypt the signaling and data transmitted in SRB2 and DRB.

[0003] Application in wireless ad hoc networks will introduce disadvantages. The cumbersome key negotiation and update synchronization mechanism will increase the overhead exponentially in multi-hop scenarios, greatly increasing the probability of anomalies. The encryption method and encryption key are fixed for a period of time, increasing the risk of being cracked. Therefore, an encryption method suitable for wireless ad hoc networks is proposed. Summary of the Invention

[0004] In view of the deficiencies of the prior art, the present invention provides an encryption method applicable to wireless ad hoc networks to solve the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution: an encryption method suitable for wireless ad hoc networks, comprising:

[0006] The encryption pattern generation and encryption process: Each working frame of the encryption pattern is updated across the entire network based on the synchronized frame number. This allows for rapid use of synchronized encryption methods and keys without the need for complex negotiation mechanisms. The encryption pattern is generated using an LFSR pseudo-random algorithm and assigned to each time slot, allowing each time slot to use a different encryption method, increasing flexibility. The pseudo-random nature of the encryption pattern is extremely difficult to track, enhancing concealment.

[0007] Each working frame updates the encryption pattern across the entire network based on the synchronized frame number. This approach avoids cumbersome key negotiation and update synchronization mechanisms, making the entire encryption process more efficient and convenient. The encryption pattern is generated using the LFSR pseudo-random algorithm and assigned to each time slot, increasing both encryption flexibility and security. The extreme difficulty of tracking the LFSR pseudo-randomness makes it even more difficult for attackers to crack the encryption pattern, thereby enhancing the network's concealment.

[0008] In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern {m1,m2,…,mn} for each time slot of working frame-2;

[0009] In working frame 1, all nodes use the serial number of working frame 1 as the seed for the LFSR algorithm to calculate a pseudo-random encryption pattern for each time slot in working frame 2. This ensures that the encryption pattern for each working frame is unique and difficult to predict. Because the encryption pattern is generated based on the serial number of the working frame, it is different for each working frame, making it more difficult for attackers to crack. At the same time, each time slot has a corresponding encryption pattern, ensuring that data transmission in each time slot is secure.

[0010] Data encryption method, control message, full field transmission encryption and reception decryption according to encryption pattern M;

[0011] Control messages are fully encrypted on transmission and decrypted on reception according to the encryption pattern M. This approach ensures the confidentiality and integrity of control messages. By using the data encryption offset position and encryption length, the receiving end can more accurately locate and decrypt data, thereby improving the efficiency of data encryption and processing. At the same time, this approach also increases the flexibility of data transmission.

[0012] The encryption method of data messages, data encryption offset position and encryption length, improve the efficiency of data encryption;

[0013] The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization;

[0014] PDU data uses no less than two encryption methods to improve the concealment of encryption;

[0015] The PDU header is encrypted and decrypted using the encryption pattern m, achieving encryption synchronization and ensuring the confidentiality and integrity of the PDU header. The PDU data uses at least two encryption methods, which increases the concealment of the encryption and makes it more difficult for attackers to discover the encryption method of the data. At the same time, since the PDU header and PDU data use different encryption methods, the security of the entire data transmission is also increased.

[0016] This encryption method implements layered encryption protection for control messages, PDU headers, and PDU data, improving the security of the entire data transmission. In addition, this encryption method also supports diversified encryption strategies to adapt to security requirements in different scenarios and needs. Compared with existing technologies, this encryption method has significant advantages in security, efficiency, and flexibility.

[0017] Preferably, when the LFSR pseudo-random algorithm generates the encryption pattern, a plurality of preset initial state values are used, and each working frame selects an initial state value according to the synchronized frame number to start the LFSR, so as to increase the diversity and unpredictability of the encryption pattern;

[0018] By adopting multiple preset initial state values and selecting an initial state value in each working frame to start the LFSR based on the synchronized frame number, a variety of different encryption patterns can be generated. This makes the encryption pattern unique for each working frame, thereby increasing the diversity of encryption patterns and improving the security of the encryption system. Because the encryption pattern for each working frame is generated based on a different initial state value, it is difficult for an attacker to predict the encryption pattern for the next working frame. This unpredictability increases the difficulty for attackers to crack the encryption, further improving the security of the encryption system. Compared with traditional encryption technologies, this scheme avoids the cumbersome key negotiation and update synchronization mechanisms. By simply selecting different initial state values, encryption pattern updates and synchronization can be achieved, thus simplifying the key management and update process. Due to the high efficiency of the LFSR pseudo-random algorithm, using this algorithm to generate encryption patterns can significantly improve encryption efficiency. At the same time, because the encryption pattern for each working frame is generated based on the synchronized frame number and preset initial state value, no additional key negotiation and update operations are required, further improving encryption efficiency.

[0019] Preferably, the encryption pattern M and encryption pattern m are different encryption patterns, which are used for encryption of control messages and PDU headers respectively, so as to ensure independent encryption and security of different types of data;

[0020] By assigning different encryption patterns to different types of data (such as control messages and PDU headers), layered protection of data is achieved, which reduces the risk of the entire system being exposed after a single encryption mode is cracked; different types of data may have different security requirements and sensitivities, and using different encryption patterns can perform more refined encryption processing based on these requirements, thereby improving overall security; different encryption patterns can adapt to different application scenarios and security requirements. For example, control messages may require higher real-time and reliability, while PDU headers may require stronger confidentiality. When the encryption algorithm or key needs to be updated, only specific encryption patterns need to be modified without affecting other parts of the entire system; by providing independent encryption protection for control messages and PDU headers respectively, these data can be prevented from being maliciously tampered with or damaged during transmission. Independent encryption patterns help ensure that the data maintains its integrity and consistency during transmission, thereby improving the reliability of the system.

[0021] Preferably, the data encryption offset position and encryption length are achieved by adding an encryption field before the data message, and the encryption field contains specific information of the encryption offset position and encryption length so that the receiving end can correctly decrypt the data;

[0022] The encryption field directly provides specific information about the encryption offset position and encryption length. The receiving end can accurately locate and decrypt data based on this information, avoiding data corruption or loss caused by incorrect decryption position or length. The introduction of the encryption field makes the encryption process more transparent and controllable, making it difficult for attackers to crack the encrypted data through guessing or probing. At the same time, due to the changes in the encryption offset position and encryption length, even if an attacker intercepts part of the encrypted data, it is difficult to infer the complete plaintext information. After receiving the data, the receiving end can quickly extract the encrypted part based on the encryption field and decrypt it without having to analyze the entire data packet byte by byte, which greatly improves communication efficiency and reduces data transmission and processing delays. The encryption field can flexibly set and adjust the encryption offset position and encryption length to adapt to different data types and encryption requirements, making the encryption scheme more flexible and versatile, able to cope with various complex communication scenarios. The method can implement the addition of data encryption offset position and encryption length without major modifications to existing communication protocols or data structures, thus having good compatibility and can be easily integrated into existing communication systems. The introduction of the encryption field is relatively simple, requiring only an additional piece of information to be added before the data message, which makes the implementation and maintenance costs relatively low and also facilitates subsequent system upgrades and expansions.

[0023] Preferably, other encryption methods used for the PDU data include but are not limited to key-based encryption, attribute-based encryption or identity-based encryption to improve the flexibility and concealment of encryption;

[0024] Complex encryption algorithms and key management ensure the confidentiality and integrity of PDU data during transmission. Key-based encryption algorithms, after years of development and application, are mature and stable, capable of addressing various security challenges. Attribute-based encryption (ABE) is a new encryption method that controls data access rights based on user attributes. ABE enables fine-grained attribute-based access control, allowing data owners to flexibly specify which users can access encrypted data. Because encryption policies are linked to user attributes, it is difficult for attackers to gain data access by cracking the encryption algorithm, thereby enhancing data confidentiality. Unlike traditional encryption methods, ABE does not require assigning unique keys to each user. Instead, keys are generated based on user attributes, simplifying key management. Identity-based encryption (IBE) is a public key encryption method based on user identity information. IBE eliminates the cumbersome certificate management and key distribution processes, reducing the complexity and cost of encrypted communications. IBE utilizes high-strength encryption algorithms such as elliptic curve cryptography, offering high security. Based on user identity information, IBE is easy to integrate into existing systems, improving deployment efficiency.

[0025] Preferably, a key update mechanism is further included, wherein the key update mechanism generates a new encryption key according to a preset key update rule after each working frame, and distributes it to all nodes in the network together with the encryption pattern of the next working frame to ensure regular update and security of the encryption key;

[0026] The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or update triggered by a specific event;

[0027] The key update mechanism also includes the step of verifying the validity of the current encryption key before generating a new encryption key;

[0028] After receiving the new encryption key and encryption pattern, all nodes in the network perform a consistency check to ensure that all nodes use the same encryption key and encryption pattern;

[0029] Regularly updating encryption keys significantly reduces the risk of long-term key cracking. Because keys change dynamically, it's difficult for attackers to crack the current key through long-term monitoring or analysis. The combination of a key update mechanism and encryption patterns further enhances data encryption strength. Even if an attacker obtains partial encrypted data, it's difficult to infer the complete plaintext information because both the encryption key and encryption pattern are constantly changing. Regularly updating encryption keys ensures the confidentiality of data during transmission and storage. After each work frame, the old key is discarded and a new key is generated and distributed, ensuring real-time data confidentiality. The key update mechanism helps prevent system failure or data loss caused by key leaks. By regularly changing keys, the system maintains stability and reliability, ensuring the continued secure transmission of data. As the network expands or new nodes are added, the system can easily introduce new key update rules and encryption patterns to adapt to these changes, helping to maintain the system's scalability and flexibility to meet future security needs.

[0030] Preferably, the generation and distribution of the encryption pattern is completed by specific nodes in the network, which are responsible for generating the encryption pattern according to the synchronized frame number and distributing the encryption pattern {m1, m2, ..., mn} of working frame-2 to other nodes in the network for use in time slots 1, 2 to n in working frame-2;

[0031] Generating and distributing encryption patterns through specific nodes can ensure that the generation and distribution process of encryption patterns is strictly controlled, reducing the risk of malicious attacks or tampering. Regular updates and synchronous distribution of encryption patterns help maintain the security of the network and prevent encryption patterns from being cracked due to long-term unchangedness. Specific nodes are responsible for generating encryption patterns and distributing them to other nodes in the network, which avoids the complexity of each node needing to generate encryption patterns on its own and improves encryption efficiency. The distribution of encryption patterns is synchronized with the frame number, ensuring that each working frame can use the correct encryption pattern, thereby ensuring the continuity and security of data transmission. Centrally generating and distributing encryption patterns through specific nodes can reduce unnecessary encryption pattern transmission and storage overhead in the network and optimize the utilization of network resources.

[0032] Preferably, an error detection and correction mechanism is also included, wherein the error detection and correction mechanism detects encryption errors or data corruption during data transmission and takes corresponding corrective measures to ensure the integrity and reliability of the data;

[0033] The corrective action includes, but is not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes;

[0034] The correction mechanism also includes recording the circumstances under which the error occurred and the corrective measures taken;

[0035] The error detection and correction mechanism can detect errors in the data transmission process in real time, including encryption errors and data corruption, thereby ensuring accurate data transmission, which greatly reduces the bit error rate of data transmission and improves the reliability of communication; by embedding the error detection and correction mechanism in the data transmission process, it can ensure that the data is not tampered with or damaged during transmission. Even if an error occurs, the original data can be restored through corrective measures to maintain data integrity; the error detection and correction mechanism can correct the error immediately when it is detected, avoiding repeated transmission due to data errors, which reduces network bandwidth occupancy and transmission delay and improves communication efficiency; adding an error detection and correction mechanism to the communication system can enhance the system's tolerance to noise, interference and transmission loss, which enables the system to maintain stable performance in harsh communication environments.

[0036] Preferably, the encryption method also supports dynamic network topology changes. When nodes in the network join or leave, the encryption pattern and key distribution mechanism are automatically adjusted to adapt to the dynamic changes in the network topology;

[0037] Dynamically adjusting the encryption pattern and key distribution mechanism can ensure that the network remains highly secure when the topology changes, which prevents the exploitation of security vulnerabilities caused by changes in the network structure; encryption methods that support dynamic network topology changes enable the network to respond more flexibly to the addition or departure of nodes, which helps the network remain efficient and secure when expanding or shrinking; automatic adjustment of the encryption pattern and key distribution mechanism reduces the need for manual intervention and reduces the risk of security issues caused by human error; the dynamic adjustment mechanism can optimize the utilization of encryption resources according to the actual needs of the network, avoid unnecessary waste, and improve the overall performance of the network.

[0038] Preferably, a performance optimization mechanism is further included, wherein the performance optimization mechanism dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm according to factors such as network load and node energy consumption to balance network security and performance;

[0039] The network load includes but is not limited to data transmission volume, inter-node communication frequency or network congestion level;

[0040] The node energy consumption factors include but are not limited to node battery level, energy consumption rate or expected battery life;

[0041] The dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during a period of time when security requirements are higher, and reducing the update frequency and algorithm complexity during a period of time when security requirements are lower;

[0042] The performance optimization mechanism also includes regular evaluation and adjustment of optimization strategies to adapt to changes in network environment and node status;

[0043] The performance optimization mechanism can dynamically adjust encryption parameters according to actual network conditions, thereby avoiding the use of overly complex encryption algorithms when the load is light or the energy consumption is low, reducing unnecessary computing overhead and resource waste, and improving the overall network performance; when the network load is heavy or the node energy consumption is high, the performance optimization mechanism can automatically increase the update frequency of the encryption pattern or adopt a more complex encryption algorithm to ensure that the network remains highly secure in the face of potential attacks; by dynamically adjusting the complexity of the encryption algorithm, the performance optimization mechanism helps to balance the energy consumption of nodes, extend the service life of network nodes, and reduce network failures caused by energy depletion; the performance optimization mechanism can reasonably allocate encryption resources according to actual network needs, avoid excessive waste or shortage of resources, and improve overall resource utilization.

[0044] In summary, compared with the prior art, the present invention provides an encryption method suitable for wireless ad hoc networks, which has the following beneficial effects:

[0045] The wireless ad hoc network encryption method of this invention uses an efficient update mechanism to achieve synchronous updating of encryption patterns in each frame, without the need for tedious negotiations, thus improving the real-time and efficiency of encryption. The LFSR pseudo-random algorithm enhances concealment, and multiple preset initial state values increase encryption diversity. The control message and PDU header are independently encrypted to ensure customized data protection, and the encrypted field improves decryption accuracy. The diversified PDU data encryption methods meet different needs. The regular key update and distribution mechanism ensures key security and prevents long-term cracking. At the same time, it has robust error detection and correction functions to ensure data integrity, support dynamic network topology changes, adaptively adjust encryption strategies, and a performance optimization mechanism to balance security and efficiency to ensure efficient network operation.

[0046] This encryption method provides comprehensive, flexible and efficient security protection, adapts to the ever-changing environmental requirements of wireless ad hoc networks, and solves the problems raised in the background technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 It is a schematic diagram of the encryption method of the wireless ad hoc network of the present invention.

[0048] Figure 2 It is a schematic diagram of working frame encryption in a wireless ad hoc network of the present invention.

[0049] Figure 3 It is a schematic diagram of the application of encryption technology in the data transmission process of the present invention. DETAILED DESCRIPTION

[0050] The present invention provides a technical solution, an encryption method suitable for wireless ad hoc networks, please refer to Figure 1 、 Figure 2 and Figure 3 ,include:

[0051] The encryption pattern generation and encryption process: Each working frame of the encryption pattern is updated across the entire network based on the synchronized frame number. This allows for rapid use of synchronized encryption methods and keys without the need for complex negotiation mechanisms. The encryption pattern is generated using an LFSR pseudo-random algorithm and assigned to each time slot, allowing each time slot to use a different encryption method, increasing flexibility. The pseudo-random nature of the encryption pattern is extremely difficult to track, enhancing concealment.

[0052] Each working frame updates the encryption pattern across the entire network based on the synchronized frame number. This approach avoids cumbersome key negotiation and update synchronization mechanisms, making the entire encryption process more efficient and convenient. The encryption pattern is generated using the LFSR pseudo-random algorithm and assigned to each time slot, increasing both encryption flexibility and security. The extreme difficulty of tracking the LFSR pseudo-randomness makes it even more difficult for attackers to crack the encryption pattern, thereby enhancing the network's concealment.

[0053] In working frame-1, all nodes use the serial number of working frame-1 as the seed of the LFSR algorithm to calculate the pseudo-random encryption pattern {m1,m2,…,mn} for each time slot of working frame-2;

[0054] In working frame 1, all nodes use the serial number of working frame 1 as the seed for the LFSR algorithm to calculate a pseudo-random encryption pattern for each time slot in working frame 2. This ensures that the encryption pattern for each working frame is unique and difficult to predict. Because the encryption pattern is generated based on the serial number of the working frame, it is different for each working frame, making it more difficult for attackers to crack. At the same time, each time slot has a corresponding encryption pattern, ensuring that data transmission in each time slot is secure.

[0055] Data encryption method, control message, full field transmission encryption and reception decryption according to encryption pattern M;

[0056] Control messages are fully encrypted on transmission and decrypted on reception according to the encryption pattern M. This approach ensures the confidentiality and integrity of control messages. By using the data encryption offset position and encryption length, the receiving end can more accurately locate and decrypt data, thereby improving the efficiency of data encryption and processing. At the same time, this approach also increases the flexibility of data transmission.

[0057] The encryption method of data messages, data encryption offset position and encryption length, improve the efficiency of data encryption. Because the data header is generally only for sending and receiving attributes, the encryption offset position is generally <= 5, and the encryption length is generally not particularly long, only partial encryption;

[0058] The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization;

[0059] PDU data uses no less than two encryption methods to improve the concealment of encryption;

[0060] The PDU header is encrypted and decrypted using the encryption pattern m, achieving encryption synchronization and ensuring the confidentiality and integrity of the PDU header. The PDU data uses at least two encryption methods, which increases the concealment of the encryption and makes it more difficult for attackers to discover the encryption method of the data. At the same time, since the PDU header and PDU data use different encryption methods, the security of the entire data transmission is also increased.

[0061] This encryption method implements layered encryption protection for control messages, PDU headers, and PDU data, improving the security of the entire data transmission. In addition, this encryption method also supports diversified encryption strategies to adapt to security requirements in different scenarios and needs. Compared with existing technologies, this encryption method has significant advantages in security, efficiency, and flexibility.

[0062] See also Figure 1 、 Figure 2 and Figure 3 ,When generating encryption patterns by the LFSR pseudo-random algorithm, multiple preset initial state values are used.,Each working frame selects an initial state value to start the LFSR according to the synchronized frame number, in order to increase the diversity and ,unpredictability of the encryption pattern;

[0063] By adopting multiple preset initial state values and selecting an initial state value in each working frame to start the LFSR based on the synchronized frame number, a variety of different encryption patterns can be generated. This makes the encryption pattern unique for each working frame, thereby increasing the diversity of encryption patterns and improving the security of the encryption system. Because the encryption pattern for each working frame is generated based on a different initial state value, it is difficult for an attacker to predict the encryption pattern for the next working frame. This unpredictability increases the difficulty for attackers to crack the encryption, further improving the security of the encryption system. Compared with traditional encryption technologies, this scheme avoids the cumbersome key negotiation and update synchronization mechanisms. By simply selecting different initial state values, encryption pattern updates and synchronization can be achieved, thus simplifying the key management and update process. Due to the high efficiency of the LFSR pseudo-random algorithm, using this algorithm to generate encryption patterns can significantly improve encryption efficiency. At the same time, because the encryption pattern for each working frame is generated based on the synchronized frame number and preset initial state value, no additional key negotiation and update operations are required, further improving encryption efficiency.

[0064] See also Figure 1 、 Figure 2 and Figure 3 , encryption pattern M and encryption pattern m are different encryption patterns, which are used to encrypt the control message and PDU header respectively to ensure the independent encryption and security of different types of data;

[0065] By assigning different encryption patterns to different types of data (such as control messages and PDU headers), layered protection of data is achieved, which reduces the risk of the entire system being exposed after a single encryption mode is cracked; different types of data may have different security requirements and sensitivities, and using different encryption patterns can perform more refined encryption processing based on these requirements, thereby improving overall security; different encryption patterns can adapt to different application scenarios and security requirements. For example, control messages may require higher real-time and reliability, while PDU headers may require stronger confidentiality. When the encryption algorithm or key needs to be updated, only specific encryption patterns need to be modified without affecting other parts of the entire system; by providing independent encryption protection for control messages and PDU headers respectively, these data can be prevented from being maliciously tampered with or damaged during transmission. Independent encryption patterns help ensure that the data maintains its integrity and consistency during transmission, thereby improving the reliability of the system.

[0066] See also Figure 1 and Figure 2 ,The data encryption offset position and encryption length are achieved by adding an encryption field before the data message, which contains the specific information of the encryption offset position and encryption length so that the receiving end can correctly decrypt the data;

[0067] The encryption field directly provides specific information about the encryption offset position and encryption length. The receiving end can accurately locate and decrypt data based on this information, avoiding data corruption or loss caused by incorrect decryption position or length. The introduction of the encryption field makes the encryption process more transparent and controllable, making it difficult for attackers to crack the encrypted data through guessing or probing. At the same time, due to the changes in the encryption offset position and encryption length, even if an attacker intercepts part of the encrypted data, it is difficult to infer the complete plaintext information. After receiving the data, the receiving end can quickly extract the encrypted part based on the encryption field and decrypt it without having to analyze the entire data packet byte by byte, which greatly improves communication efficiency and reduces data transmission and processing delays. The encryption field can flexibly set and adjust the encryption offset position and encryption length to adapt to different data types and encryption requirements, making the encryption scheme more flexible and versatile, able to cope with various complex communication scenarios. The method can implement the addition of data encryption offset position and encryption length without major modifications to existing communication protocols or data structures, thus having good compatibility and can be easily integrated into existing communication systems. The introduction of the encryption field is relatively simple, requiring only an additional piece of information to be added before the data message, which makes the implementation and maintenance costs relatively low and also facilitates subsequent system upgrades and expansions.

[0068] See also Figure 1 、 Figure 2 and Figure 3,Other encryption methods used for PDU data include but are not limited to key-based encryption, attribute-based encryption, or identity-based encryption to improve the flexibility and concealment of encryption;

[0069] Complex encryption algorithms and key management ensure the confidentiality and integrity of PDU data during transmission. Key-based encryption algorithms, after years of development and application, are mature and stable, capable of addressing various security challenges. Attribute-based encryption (ABE) is a new encryption method that controls data access rights based on user attributes. ABE enables fine-grained attribute-based access control, allowing data owners to flexibly specify which users can access encrypted data. Because encryption policies are linked to user attributes, it is difficult for attackers to gain data access by cracking the encryption algorithm, thereby enhancing data confidentiality. Unlike traditional encryption methods, ABE does not require assigning unique keys to each user. Instead, keys are generated based on user attributes, simplifying key management. Identity-based encryption (IBE) is a public key encryption method based on user identity information. IBE eliminates the cumbersome certificate management and key distribution processes, reducing the complexity and cost of encrypted communications. IBE utilizes high-strength encryption algorithms such as elliptic curve cryptography, offering high security. Based on user identity information, IBE is easy to integrate into existing systems, improving deployment efficiency.

[0070] It also includes a key update mechanism, which generates a new encryption key according to the preset key update rules after each working frame, and distributes it to all nodes in the network together with the encryption pattern of the next working frame to ensure the regular update and security of the encryption key;

[0071] The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or update triggered by a specific event;

[0072] The key update mechanism also includes a step of verifying the validity of the current encryption key before generating a new encryption key;

[0073] After receiving the new encryption key and encryption pattern, all nodes in the network perform consistency verification to ensure that all nodes use the same encryption key and encryption pattern;

[0074] Regularly updating encryption keys significantly reduces the risk of long-term key cracking. Because keys change dynamically, it's difficult for attackers to crack the current key through long-term monitoring or analysis. The combination of a key update mechanism and encryption patterns further enhances data encryption strength. Even if an attacker obtains partial encrypted data, it's difficult to infer the complete plaintext information because both the encryption key and encryption pattern are constantly changing. Regularly updating encryption keys ensures the confidentiality of data during transmission and storage. After each work frame, the old key is discarded and a new key is generated and distributed, ensuring real-time data confidentiality. The key update mechanism helps prevent system failure or data loss caused by key leaks. By regularly changing keys, the system maintains stability and reliability, ensuring the continued secure transmission of data. As the network expands or new nodes are added, the system can easily introduce new key update rules and encryption patterns to adapt to these changes, helping to maintain the system's scalability and flexibility to meet future security needs.

[0075] See also Figure 2 ,The generation and distribution of encryption patterns are completed by specific nodes in the network.,These specific nodes are responsible for generating encryption patterns according to the,synchronized frame number and distributing the encryption pattern {m1,m2,…,mn} of working frame-2 to other nodes in the,network for use in time slots 1, 2 to n in working frame-2;

[0076] Generating and distributing encryption patterns through specific nodes can ensure that the generation and distribution process of encryption patterns is strictly controlled, reducing the risk of malicious attacks or tampering. Regular updates and synchronous distribution of encryption patterns help maintain the security of the network and prevent encryption patterns from being cracked due to long-term unchangedness. Specific nodes are responsible for generating encryption patterns and distributing them to other nodes in the network, which avoids the complexity of each node needing to generate encryption patterns on its own and improves encryption efficiency. The distribution of encryption patterns is synchronized with the frame number, ensuring that each working frame can use the correct encryption pattern, thereby ensuring the continuity and security of data transmission. Centrally generating and distributing encryption patterns through specific nodes can reduce unnecessary encryption pattern transmission and storage overhead in the network and optimize the utilization of network resources.

[0077] It also includes error detection and correction mechanisms, which detect encryption errors or data corruption during data transmission and take appropriate corrective measures to ensure data integrity and reliability;

[0078] Corrective actions include, but are not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes;

[0079] Corrective action mechanisms also include recording the circumstances under which errors occurred and the corrective actions taken;

[0080] The error detection and correction mechanism can detect errors in the data transmission process in real time, including encryption errors and data corruption, thereby ensuring accurate data transmission, which greatly reduces the bit error rate of data transmission and improves the reliability of communication; by embedding the error detection and correction mechanism in the data transmission process, it can ensure that the data is not tampered with or damaged during transmission. Even if an error occurs, the original data can be restored through corrective measures to maintain data integrity; the error detection and correction mechanism can correct the error immediately when it is detected, avoiding repeated transmission due to data errors, which reduces network bandwidth occupancy and transmission delay and improves communication efficiency; adding an error detection and correction mechanism to the communication system can enhance the system's tolerance to noise, interference and transmission loss, which enables the system to maintain stable performance in harsh communication environments.

[0081] The encryption method also supports dynamic network topology changes. When nodes join or leave the network, the encryption pattern and key distribution mechanism are automatically adjusted to adapt to the dynamic changes in the network topology.

[0082] Dynamically adjusting the encryption pattern and key distribution mechanism can ensure that the network remains highly secure when the topology changes, which prevents the exploitation of security vulnerabilities caused by changes in the network structure; encryption methods that support dynamic network topology changes enable the network to respond more flexibly to the addition or departure of nodes, which helps the network remain efficient and secure when expanding or shrinking; automatic adjustment of the encryption pattern and key distribution mechanism reduces the need for manual intervention and reduces the risk of security issues caused by human error; the dynamic adjustment mechanism can optimize the utilization of encryption resources according to the actual needs of the network, avoid unnecessary waste, and improve the overall performance of the network.

[0083] It also includes a performance optimization mechanism that dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm based on factors such as network load and node energy consumption to balance network security and performance;

[0084] Network load includes but is not limited to data transmission volume, inter-node communication frequency, or network congestion level;

[0085] Node energy consumption factors include, but are not limited to, node battery level, energy consumption rate, or expected battery life;

[0086] Dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during periods of higher security requirements, and reducing the update frequency and algorithm complexity during periods of lower security requirements;

[0087] The performance optimization mechanism also includes regular evaluation and adjustment of optimization strategies to adapt to changes in network environment and node status;

[0088] The performance optimization mechanism can dynamically adjust encryption parameters according to actual network conditions, thereby avoiding the use of overly complex encryption algorithms when the load is light or the energy consumption is low, reducing unnecessary computing overhead and resource waste, and improving the overall network performance; when the network load is heavy or the node energy consumption is high, the performance optimization mechanism can automatically increase the update frequency of the encryption pattern or adopt a more complex encryption algorithm to ensure that the network remains highly secure in the face of potential attacks; by dynamically adjusting the complexity of the encryption algorithm, the performance optimization mechanism helps to balance the energy consumption of nodes, extend the service life of network nodes, and reduce network failures caused by energy depletion; the performance optimization mechanism can reasonably allocate encryption resources according to actual network needs, avoid excessive waste or shortage of resources, and improve overall resource utilization.

[0089] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus.

[0090] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.

Claims

1. An encryption method suitable for wireless ad hoc networks, characterized in that: include: Encrypted pattern production and encryption process: The encryption pattern is updated once per working frame across the entire network according to the synchronized frame number. The encryption pattern is generated using the LFSR pseudo-random algorithm and assigned to each time slot, so that each time slot uses a different encryption method. Data encryption method: Control message, the whole field is encrypted when sending and decrypted when receiving according to the encryption pattern M; Data message encryption method: Use data encryption offset position and encryption length to improve the efficiency of data encryption; The PDU header is encrypted and decrypted using the encryption pattern m for encryption synchronization; PDU data uses no less than two encryption methods, and the encryption method also supports dynamic network topology changes; Key update mechanism: The key update mechanism generates a new encryption key according to the preset key update rules after each working frame, and distributes it to all nodes in the network together with the encryption pattern of the next working frame; error detection and correction mechanisms; The error detection and correction mechanism detects encryption errors or data corruption during data transmission and takes appropriate corrective measures to ensure data integrity and reliability; Performance optimization mechanism: The performance optimization mechanism dynamically adjusts the update frequency of the encryption pattern and the complexity of the encryption algorithm according to network load and node energy consumption factors, balancing network security and performance; When the LFSR pseudo-random algorithm generates an encryption pattern, multiple preset initial state values are used. Each working frame selects an initial state value according to the synchronized frame number to start the LFSR, thereby increasing the diversity and unpredictability of the encryption pattern. The encryption pattern M and encryption pattern m are different encryption patterns, which are used for encryption of control messages and PDU headers respectively; In the dynamic network topology change, when nodes in the network join or leave, the encryption pattern and key distribution mechanism are automatically adjusted to adapt to the dynamic change of the network topology.

2. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: The data encryption offset position and encryption length are realized by adding an encryption field before the data message, and the encryption field contains specific information of the encryption offset position and encryption length.

3. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: Other encryption methods used for the PDU data include but are not limited to key-based encryption, attribute-based encryption, or identity-based encryption.

4. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: The key update rules of the key update mechanism include but are not limited to timestamp-based update, data transmission volume-based update, or update triggered by a specific event; The key update mechanism also includes the step of verifying the validity of the current encryption key before generating a new encryption key; After receiving the new encryption key and encryption pattern, the nodes in the entire network perform a consistency check to ensure that all nodes use the same encryption key and encryption pattern.

5. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: The production and distribution of the encryption pattern are completed through a specific node in the network. The specific node is responsible for generating the encryption pattern according to the synchronized frame number and distributing the encryption pattern to other nodes in the network.

6. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: The corrective action includes, but is not limited to, requesting retransmission, using redundant data for recovery, or applying forward error correction codes; The correction mechanism also includes recording the circumstances under which the error occurred and the corrective measures taken.

7. The encryption method applicable to a wireless ad hoc network according to claim 1, characterized in that: The network load includes but is not limited to data transmission volume, inter-node communication frequency or network congestion level; The node energy consumption factors include but are not limited to node battery level, energy consumption rate or expected battery life; The dynamic adjustment also includes increasing the update frequency of the encryption pattern and the complexity of the encryption algorithm during a period of time when security requirements are higher, and reducing the update frequency and algorithm complexity during a period of time when security requirements are lower; The performance optimization mechanism also includes regular evaluation and adjustment of optimization strategies to adapt to changes in network environment and node status.

Images