Safety management method for industrial computing power network

Abstract

The invention relates to a security management method of an industrial computing power network, which relates to the technical field of industrial internet security, and comprises the following steps that: an ICN executes message signcryption operation on a message needing to be uploaded through bilinear mapping operation based on system parameters disclosed in advance by a system management module SMM, an identifier and a key of the ICNP, and an identifier and a key of the ICN, so as to obtain a signcryption ciphertext; and the IES obtains signcryption ciphertexts of the n ICNs in a preset area. According to the security management method of the industrial computing power network, the message signcryption operation is performed on the message needing to be uploaded by adopting the bilinear mapping operation, so that the confidentiality, integrity and authenticity of the message in the transmission process can be ensured, the generation of the signcryption ciphertext relates to the use of a plurality of complex mathematical operations and random numbers, and the security of the message is ensured. According to the method, the security and randomness of the ciphertext are improved, so that each signcryption result is unpredictable, an attacker is effectively prevented from acquiring information by analyzing the ciphertext, and the network load is reduced.

Description

Technical Field

[0001] The present invention relates to the field of industrial Internet security, and specifically to a security management method for an industrial computing power network. Background Art

[0002] With the vigorous development of the digital economy, computing power networks have emerged as a key force in promoting the digital transformation of traditional industries. Through the efficient integration and scheduling of computing power resources, it has provided a strong impetus for the digitalization process of various industries. The industrial computing power network has introduced the advantages of computing power networks into the field of industrial Internet, enabling unified orchestration and scheduling of computing power and network resources in industrial scenarios. This innovative measure not only significantly improves resource utilization, but also caters to the stringent requirements of the intelligent development trend of the industrial Internet for low-latency and high-reliability services. It has great potential in improving industrial production efficiency and optimizing industrial processes. However, with the rapid development of industrial computing power networks, security issues have gradually become an important factor restricting their further widespread application, especially for computing power nodes for industrial sites. There is an obvious lack of security management solutions for industrial computing power nodes, which cannot effectively guarantee the security of information during transmission. In industrial production scenarios, the number of computing power node devices is often large, which further aggravates the difficulty of security management. The lack of an effective security management mechanism makes information vulnerable to security threats such as theft and tampering during data transmission, and cannot meet the requirements of industrial production for data confidentiality, integrity and availability. At the same time, the existence of a large number of computing power node devices makes the system prone to overall inefficiency when performing information interaction and resource scheduling, which seriously affects the normal progress of industrial production and the full play of the intelligent advantages of the industrial Internet. In this regard, we propose a security management method for industrial computing power networks. Summary of the invention

[0003] The present invention aims at the technical problems existing in the prior art and provides a

[0004] The technical solution of the present invention to solve the above technical problems is as follows: A security management method for an industrial computing network, comprising: Based on the system parameters disclosed in advance by the system management module SMM, as well as the ICNP identifier and key, and the ICN identifier and key, the ICN performs a message signcryption operation on the message to be uploaded through a bilinear mapping operation, thereby obtaining the signcrypted ciphertext; IES obtains the signcrypted ciphertexts of n ICNs in a preset area, and aggregates them to generate aggregated ciphertext, where n≥1; ICNP obtains the aggregated ciphertext, and after verifying the signature to determine that the aggregated ciphertext is valid, performs a decryption operation on the aggregated ciphertext.

[0005] Preferably, the specific steps of ICN executing message signcryption to obtain the signcrypted ciphertext are: ICN randomly generates a private key based on the system parameters pre-disclosed by SMM, and calculates the public key. The calculation formula of the public key is:

[0006] In the formula, Indicates the public key calculated by ICN. represents the private key randomly generated by ICN, and g is a specific value determined based on system parameters; ICN uses ICNP's identity and key, its own identity and key, and uses bilinear mapping operations to calculate partial private keys and partial public keys; Based on the calculated partial private key and partial public key, ICN calculates a complete private key and a complete public key; Based on the calculated complete private key and complete public key, ICN signifies the message to be uploaded to obtain the signed ciphertext.

[0007] Preferably, the step of ICN calculating the partial private key and the partial public key comprises: Among them, the calculation formula of some private keys is:

[0008] Where ski represents the partial private key calculated by ICN, H1 represents the hash function, Indicates the ICN's own identity. Indicates the ICNP key, is the public key of ICN; Among them, the calculation formula of the partial public key is:

[0009] In the formula, Indicates the partial public key calculated by ICN.

[0010] Preferably, the step of ICN calculating the complete private key and the complete public key comprises: Among them, the calculation formula for the complete private key is:

[0011] In the formula, Represents the complete private key calculated by ICN; Among them, the calculation formula for the complete private key is:

[0012] In the formula, Indicates the complete public key calculated by ICN.

[0013] Preferably, the step of ICN signing the message to obtain the signed ciphertext includes: ICN randomly selects an arbitrary number r, and increases the security and randomness of the ciphertext through random numbers, making the result of each signcryption unpredictable, preventing attackers from obtaining information by analyzing the ciphertext. The intermediate value R calculated by ICN is calculated based on the random number. This intermediate value participates in the calculation of the subsequent message signcryption process and is part of the construction of the signcrypted ciphertext. Together with other parameters, it ensures the security and integrity of the signcrypted ciphertext. The calculation formula of the intermediate value R is:

[0014] In the formula, Zq represents a set of integers; Based on the message to be uploaded, the ICN identifier, the ICNP identifier, the partial private key and the random number, the ciphertext T is calculated, where the calculation formula of the ciphertext T is:

[0015] In the formula, m represents the message that needs to be uploaded; Based on the intermediate value calculated by ICN, the ciphertext T, the complete public key calculated by ICN and the ICNP identifier, the hash value c calculated by ICN is calculated through a hash function to verify the integrity and authenticity of the signed ciphertext and ensure that the receiver can correctly determine whether the ciphertext has been tampered with. The calculation formula of the hash value c is:

[0016] Where H2 represents the hash function; Based on the random number generated by ICN, the hash value calculated by ICN and the private key randomly generated by ICN, the ciphertext s is obtained by operation, where the calculation formula of the ciphertext s is:

[0017] Based on the calculated intermediate value R, ciphertext s and ciphertext T, the signed ciphertext is obtained by combining them. The expression of the signed ciphertext is:

[0018] In the formula, Represents the signcrypted ciphertext, which is used to securely transmit messages from ICN to IES and then to ICNP.

[0019] Preferably, the step of IES generating aggregated ciphertext includes: Get n signcrypted ciphertexts in a preset area, where the expression of the signcrypted ciphertext in the preset area is:

[0020] Calculate the aggregate ciphertext:

[0021]

[0022]

[0023] In the formula, Represents the intermediate value R after aggregation, represents the intermediate value ciphertext s after aggregation, Represents the aggregated intermediate value ciphertext T; IES converts the aggregated ciphertext ( Send to ICNP.

[0024] Preferably, the step of ICNP processing the aggregated ciphertext includes: ICNP obtains aggregate ciphertext (R', s', T'); The hash value used for signature verification is calculated by the intermediate value calculated by ICNP during the signature verification process. The calculation formula of the intermediate value calculated by ICNP is:

[0025] In the formula, Indicates the intermediate value of ICNP calculation; The hash value calculation formula used for signature verification is:

[0026] In the formula, Indicates the hash value used for signature verification. By comparing it with the hash value c calculated by ICN, the integrity and authenticity of the aggregated ciphertext are determined; Use ICNP to determine the hash value c': like , the signature verification is successful, and the next step is executed; like , then the signature verification fails; After the signature verification is passed, ICNP calculates the intermediate value Extract the message m from the aggregate ciphertext, where the intermediate value The calculation formula is:

[0027] Based on the calculation formula, ICNP extracts message m from m'.

[0028] Preferably, the system parameters pre-published by the SMM include group G1, group G2, bilinear map e, generator g, hash functions H1 and H2, key space K and system parameter space SP.

[0029] Preferably, the industrial computing power network includes several ICNs, several IESs and one ICNP.

[0030] Preferably, ICN is the computing power node at the industrial site, IES is the industrial super edge server, and ICNP is the industrial computing network platform.

[0031] The beneficial effects of the present invention are: The security management method of the industrial computing power network proposed in the present invention can ensure the confidentiality, integrity and authenticity of the message during the transmission process by using bilinear mapping operations to sign the messages to be uploaded. The generation of signcrypted ciphertext involves multiple complex mathematical operations and the use of random numbers, which increases the security and randomness of the ciphertext, making the result of each signcryption unpredictable, effectively preventing attackers from obtaining information by analyzing the ciphertext, and aggregating the signcrypted ciphertexts of multiple industrial field computing power nodes in a preset area through an industrial super edge server, generating an aggregated ciphertext and sending it to the industrial computing network platform. This method reduces the number of direct communications between the industrial computing network platform and each industrial field computing power node, reduces the network load, and improves the efficiency of resource scheduling. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a diagram of the method steps of the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of this application.

[0034] In the description of this application, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of this application, "plurality" means two or more, unless otherwise clearly and specifically defined.

[0035] In the description of the present application, the term "for example" is used to mean "used as an example, illustration or description". Any embodiment described as "for example" in the present application is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is given to enable any technician in the field to implement and use the present invention. In the following description, details are listed for the purpose of explanation. It should be understood that a person of ordinary skill in the art can recognize that the present invention can be implemented without using these specific details. In other examples, well-known structures and processes will not be elaborated in detail to avoid unnecessary details to obscure the description of the present invention. Therefore, the present invention is not intended to be limited to the embodiments shown, but is consistent with the widest scope consistent with the principles and features disclosed in the present application.

[0036] Reference Figure 1 As shown, a security management method for an industrial computing network includes: The industrial computing node ICN uses bilinear mapping operations to perform meticulous message signcryption operations on messages that need to be uploaded to the network based on the system parameters pre-disclosed by the system management module SMM, the identification and key of the industrial computing network platform ICNP, and the identification and key of ICN itself. In this process, ICN makes full use of the various parameters and keys obtained, and encrypts and signs the messages through precise algorithms and rigorous operation logic, and finally obtains a safe and reliable signcrypted ciphertext. The signcrypted ciphertext not only ensures the confidentiality of the message, making it difficult to be illegally stolen and interpreted during transmission, but also effectively verifies the source and integrity of the message, providing a solid guarantee for information security in the industrial computing network; The industrial super edge server IES actively obtains the signed ciphertexts of n industrial computing nodes ICN in the preset area. Here n is an integer greater than or equal to 1, which means the signed ciphertexts of one or more ICNs. After IES collects these signed ciphertexts, it uses a specific aggregation algorithm to cleverly aggregate them. During the aggregation process, IES fully considers the characteristics and relevance of each signed ciphertext, and finally generates an aggregated ciphertext through complex calculations and processing. This aggregated ciphertext integrates the information of multiple ICNs while maintaining high security and manageability.

[0037] After the Industrial Computing Network Platform ICNP obtains the aggregated ciphertext generated by IES, it immediately starts the signature verification procedure. ICNP uses advanced verification algorithms and key management mechanisms to perform strict signature verification operations on the aggregated ciphertext to determine whether the aggregated ciphertext is valid. If the signature verification result shows that the aggregated ciphertext is valid, ICNP will use the corresponding decryption algorithm to decrypt the aggregated ciphertext. During the decryption process, ICNP carefully handles each step to ensure that the decrypted information is accurate and can provide valuable data support for the subsequent processing and application of the industrial computing network.

[0038] The specific steps for ICN to execute message signcryption to obtain the signed ciphertext are as follows: First, ICN generates a private key in a random way based on the system parameters pre-disclosed by the system management module SMM. In this process, ICN fully considers the various characteristics and constraints of the system parameters, and ensures the security and randomness of the private key through algorithms and random number generation mechanisms. After generating the private key, ICN then calculates the corresponding public key. The calculation of the public key also requires precise algorithms and a deep understanding of the system parameters to ensure that the correspondence between the public key and the private key is accurate. The calculation formula for the public key is:

[0039] In the formula, Indicates the public key calculated by ICN. represents the private key randomly generated by ICN, and g is a specific value determined based on system parameters; Subsequently, ICN uses ICNP's identifier and key as well as its own identifier and key to calculate partial private keys and partial public keys with the help of bilinear mapping operations. At this stage, ICN combines different identifiers and keys together. Through the calculation process, ICN can calculate partial private keys and partial public keys, laying the foundation for the subsequent generation of complete private keys and public keys.

[0040] Based on the partial private key and partial public key calculated previously, ICN further calculates the complete private key and complete public key. This process needs to consider the characteristics and relevance of each partial private key and public key, and combine them into a complete private key and public key through mathematical operations and logical processing. The generation of the complete private key and public key is a key step in message signcryption, and they will play an important role in the subsequent message signcryption process.

[0041] Finally, based on the calculated complete private key and complete public key, ICN performs message signification on the message to be uploaded. During the signification process, ICN uses encryption and signature algorithms to combine the complete private key and complete public key with the message. Through calculation and processing, ICN encrypts the message to ensure the confidentiality of the message; at the same time, the message is signed to verify the source and integrity of the message. After this series of operations, ICN finally obtains the signcrypted ciphertext. The signcrypted ciphertext ensures the security of the message during transmission and provides protection for information interaction in the industrial computing network.

[0042] The steps for ICN to calculate partial private keys and partial public keys include: Among them, the calculation formula of some private keys is:

[0043] Where ski represents the partial private key calculated by ICN, H1 represents the hash function, Indicates the ICN's own identity. Indicates the ICNP key, is the public key of ICN; Among them, the calculation formula of the partial public key is:

[0044] In the formula, Indicates the partial public key calculated by ICN.

[0045] The steps for ICN to calculate the complete private key and the complete public key include: Among them, the calculation formula for the complete private key is:

[0046] In the formula, Indicates the complete private key calculated by ICN.

[0047] Among them, the calculation formula for the complete private key is:

[0048] In the formula, Indicates the complete public key calculated by ICN.

[0049] The steps of ICN signing a message to obtain a signed ciphertext include: In order to further enhance the security and randomness of the ciphertext, the industrial computing node ICN will randomly select an arbitrary number r. The introduction of this random number is of great significance, which greatly increases the security and randomness of the ciphertext. Since the random number is different in each signcryption process, the result of each signcryption is unpredictable. In this way, it is difficult for attackers to obtain useful information by analyzing the ciphertext.

[0050] In this process, based on the random number, ICN will calculate an intermediate value R. This intermediate value plays a vital role in the subsequent message signcryption process, and it is an important part of building the signcrypted ciphertext. The intermediate value R cooperates with other parameters to ensure the security and integrity of the signcrypted ciphertext. The calculation formula of the intermediate value R is:

[0051] In the formula, Zq represents a set of integers; Based on the message to be uploaded, the ICN identifier, the ICNP identifier, part of the private key, and the random number, ICN obtains the ciphertext T through a series of complex operations. This ciphertext T is an important part of the sign-cryptographic ciphertext. It contains some key information of the uploaded message and is encrypted to ensure the confidentiality of the message. The calculation formula of the ciphertext T is:

[0052] In the formula, m represents the message that needs to be uploaded; Based on the intermediate value R calculated by ICN, the ciphertext T, the complete public key calculated by ICN, and the ICNP identifier, ICN calculates a hash value c through a hash function. This hash value c is used to verify the integrity and authenticity of the signed ciphertext. When the receiver receives the signed ciphertext, it calculates the hash value and compares it with the received hash value to correctly determine whether the ciphertext has been tampered with. The calculation formula of the hash value c is:

[0053] Where H2 represents the hash function; Based on the random number generated by ICN, the hash value c calculated by ICN, and the private key randomly generated by ICN, ICN performs a series of operations to obtain the ciphertext s. The ciphertext s is also a key component of the signcrypted ciphertext. It, the ciphertext T and the intermediate value R together constitute the complete signcrypted ciphertext. The calculation formula of the ciphertext s is:

[0054] Based on the calculated intermediate value R, ciphertext s and ciphertext T, ICN combines them together to obtain the final signcrypted ciphertext. This signcrypted ciphertext not only has a high degree of security and confidentiality, but also can ensure that it is not tampered with during transmission, providing a solid guarantee for information interaction in the industrial computing network. The expression of the signcrypted ciphertext is:

[0055] In the formula, Represents the signcrypted ciphertext, which is used to securely transmit messages from ICN to IES and then to ICNP.

[0056] The steps for IES to generate aggregate ciphertext include: Get n signcrypted ciphertexts in a preset area, where the expression of the signcrypted ciphertext in the preset area is:

[0057] Calculate the aggregate ciphertext:

[0058]

[0059]

[0060] In the formula, Represents the intermediate value R after aggregation, represents the intermediate value ciphertext s after aggregation, Represents the aggregated intermediate value ciphertext T; IES converts the aggregated ciphertext ( Send to ICNP.

[0061] The steps of ICNP processing the aggregated ciphertext include: ICNP obtains aggregate ciphertext (R', s', T'); The hash value used for signature verification is calculated by the intermediate value calculated by ICNP during the signature verification process. The calculation formula of the intermediate value calculated by ICNP is:

[0062] In the formula, Indicates the intermediate value of ICNP calculation; The hash value calculation formula used for signature verification is:

[0063] In the formula, Indicates the hash value used for signature verification. By comparing it with the hash value c calculated by ICN, the integrity and authenticity of the aggregated ciphertext are determined; Use ICNP to determine the hash value c': like , the signature verification is successful, and the next step is executed; like , then the signature verification fails; After the signature verification is passed, ICNP calculates the intermediate value Extract the message m from the aggregate ciphertext, where the intermediate value The calculation formula is:

[0064] Based on the calculation formula, ICNP extracts message m from m'.

[0065] The system parameters pre-disclosed by the system management module SMM include group G1 and group G2, which play a fundamental role in the network security management of industrial computing power. There is also a bilinear map e, which can establish connections between different mathematical structures. In addition, the generator g provides a starting point for subsequent calculations. Hash functions H1 and H2 hash the data to ensure data integrity and security. The key space K provides scope and constraints for key generation and management. The system parameter space SP provides parameter storage and management space for the industrial computing power network security management system.

[0066] This industrial computing network includes several industrial computing nodes ICN, several industrial super edge servers IES, and an industrial computing network platform ICNP. ICN is the computing node of the industrial site, distributed in various industrial production sites, responsible for processing and transmitting key data and computing tasks. They are the basic components of the industrial computing network, responsible for computing and data transmission. IES is an industrial super edge server, located in the middle layer of the industrial computing network, responsible for collecting and processing data from multiple ICNs, and performing preliminary analysis and processing. They can quickly respond to industrial site needs and improve the efficiency and response speed of the industrial computing network. ICNP is the industrial computing network platform and the core of the entire industrial computing network. It is responsible for managing and scheduling the entire network, coordinating the work of various ICNs and IES, and ensuring the stable operation and efficient work of the industrial computing network.

[0067] It should be noted that in the above embodiments, the description of each embodiment has its own emphasis, and for parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0068] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0069] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A security management method for an industrial computing network, characterized in that: include: Based on the system parameters disclosed in advance by the system management module SMM, as well as the ICNP identifier and key, and the ICN identifier and key, the ICN performs a message signcryption operation on the message to be uploaded through a bilinear mapping operation, thereby obtaining the signcrypted ciphertext; IES obtains the signcrypted ciphertexts of n ICNs in a preset area, and aggregates them to generate aggregated ciphertext, where n≥1; ICNP obtains the aggregated ciphertext, and after verifying the signature to determine that the aggregated ciphertext is valid, performs a decryption operation on the aggregated ciphertext.

2. A method for secure management of an industrial computing network according to claim 1, characterized in that: The specific steps for ICN to execute message signcryption to obtain the signed ciphertext are as follows: ICN randomly generates a private key based on the system parameters pre-disclosed by SMM, and calculates the public key. The calculation formula of the public key is: In the formula, Indicates the public key calculated by ICN. represents the private key randomly generated by ICN, and g is a specific value determined based on system parameters; ICN uses ICNP's identity and key, its own identity and key, and uses bilinear mapping operations to calculate partial private keys and partial public keys; Based on the calculated partial private key and partial public key, ICN calculates a complete private key and a complete public key; Based on the calculated complete private key and complete public key, ICN signifies the message to be uploaded to obtain the signed ciphertext.

3. A method for security management of an industrial computing network according to claim 2, characterized in that: The steps in which ICN calculates part of the private key and part of the public key include: Among them, the calculation formula of some private keys is: Where ski represents the partial private key calculated by ICN, H1 represents the hash function, Indicates the ICN's own identity. Indicates the ICNP key, is the public key of ICN; Among them, the calculation formula of the partial public key is: In the formula, Indicates the partial public key calculated by ICN.

4. The method for security management of an industrial computing network according to claim 2, characterized in that: The steps of ICN calculation of complete private key and complete public key include: Among them, the calculation formula of the complete private key is: In the formula, Represents the complete private key calculated by ICN; Among them, the calculation formula of the complete private key is: In the formula, Indicates the complete public key calculated by ICN.

5. The method for security management of an industrial computing network according to claim 2, characterized in that: The steps of ICN signing a message to obtain a signed ciphertext include: ICN randomly selects an arbitrary number r, and increases the security and randomness of the ciphertext through random numbers, making the result of each signcryption unpredictable, preventing attackers from obtaining information by analyzing the ciphertext. The intermediate value R calculated by ICN is calculated based on the random number. This intermediate value participates in the calculation of the subsequent message signcryption process and is part of the construction of the signcrypted ciphertext. Together with other parameters, it ensures the security and integrity of the signcrypted ciphertext. The calculation formula of the intermediate value R is: In the formula, Zq represents a set of integers; Based on the message to be uploaded, the ICN identifier, the ICNP identifier, the partial private key and the random number, the ciphertext T is calculated, where the calculation formula of the ciphertext T is: In the formula, m represents the message that needs to be uploaded; Based on the intermediate value calculated by ICN, the ciphertext T, the complete public key calculated by ICN and the ICNP identifier, the hash value c calculated by ICN is calculated through a hash function to verify the integrity and authenticity of the signed ciphertext and ensure that the receiver can correctly determine whether the ciphertext has been tampered with. The calculation formula of the hash value c is: Where H2 represents the hash function; Based on the random number generated by ICN, the hash value calculated by ICN and the private key randomly generated by ICN, the ciphertext s is obtained by operation, where the calculation formula of the ciphertext s is: Based on the calculated intermediate value R, ciphertext s and ciphertext T, the signed ciphertext is obtained by combining them. The expression of the signed ciphertext is: In the formula, Represents the signcrypted ciphertext, which is used to securely transmit messages from ICN to IES and then to ICNP.

6. The method for security management of an industrial computing network according to claim 1, characterized in that: The steps for IES to generate aggregate ciphertext include: Get n signcrypted ciphertexts in a preset area, where the expression of the signcrypted ciphertext in the preset area is: Calculate the aggregate ciphertext: In the formula, Represents the intermediate value R after aggregation, represents the intermediate value ciphertext s after aggregation, Represents the aggregated intermediate value ciphertext T; IES converts the aggregated ciphertext Send to ICNP.

7. The method for security management of an industrial computing network according to claim 1, characterized in that: The steps of ICNP processing the aggregated ciphertext include: ICNP obtains aggregate ciphertext (R', s', T'); The intermediate value calculated by ICNP is used to calculate the hash value used for signature verification during the signature verification process. The calculation formula of the intermediate value calculated by ICNP is: In the formula, Indicates the intermediate value of ICNP calculation; The hash value calculation formula used for signature verification is: In the formula, Indicates the hash value used for signature verification. By comparing it with the hash value c calculated by ICN, the integrity and authenticity of the aggregated ciphertext are determined; Use ICNP to determine the hash value c': like , the signature verification is successful, and the next step is executed; like , then the signature verification fails; After the signature verification is passed, ICNP calculates the intermediate value Extract the message m from the aggregate ciphertext, where the intermediate value The calculation formula is: Based on the calculation formula, ICNP extracts message m from m'.

8. The method for security management of an industrial computing network according to claim 1, characterized in that: The system parameters pre-disclosed by the SMM include group G1, group G2, bilinear map e, generator g, hash functions H1 and H2, key space K and system parameter space SP.

9. The method for security management of an industrial computing network according to claim 1, characterized in that: The industrial computing network includes several ICNs, several IESs and one ICNP.

10. The method for security management of an industrial computing network according to claim 1, characterized in that: ICN is the computing power node at the industrial site, IES is the industrial super edge server, and ICNP is the industrial computing network platform.

Images