Edge device traceable data circulation method based on identity proxy re-encryption

Abstract

The invention discloses an edge device traceable data circulation method based on identity agent re-encryption, which integrates a digital signature technology into an identity agent re-encryption method, and takes a traditional identity agent re-encryption technology as a framework. A new key generation method in which no key generation center participates in key generation is innovated by fusing a key generation technology which weakens the influence of the key generation center and includes distributed key generation; a data traceability function is bound with an identity agent re-encryption technology by combining a method for fusing encryption, decryption and traceability including certificateless signcryption, so that encryption, decryption and traceability are integrated in a data circulation process; according to the traceability method, a digital signature technology is selected to realize a data traceability function. According to the invention, the data is bound with the identity information of the participant in the circulation process, the data is circulated in the form of ciphertext in the whole process, and the user side can perform traceability operation on the data after receiving the data to check whether the data is tampered or not in the circulation process.

Description

Technical Field

[0001] The present invention belongs to the field of data security and information hiding, and relates to a method for eliminating the influence of a key generation center by coupling identity proxy re-encryption technology and digital signature technology, so that data can be traced and efficiently circulated. Background Art

[0002] Data flow refers to the process in which data flows from one node to other nodes in a data system through a series of processing and transmission steps.

[0003] This process usually involves data collection, processing, storage, and analysis, with the goal of ensuring the effective flow of data from generation to use. With the development of the data factor market, proxy re-encryption technology is a key technical solution for the secure circulation of data. How to improve the efficiency and security of data circulation is a key research direction in the future.

[0004] In the past, data circulation mainly relied on plain text, for example, the government directly provided plain text information to commercial banks. However, with the introduction of the Security Law and the Personal Information Protection Law, the government and enterprises have paid more and more attention to the ownership and security of data. Therefore, the introduction of proxy re-encryption technology into the circulation process came into being. It can guarantee the ownership of data during the calculation process, maximize the value of data, provide security for various data providers and demanders, and reduce concerns.

[0005] The goal of data circulation is to achieve the safe circulation of data through various privacy computing technologies, while protecting the privacy and ownership of data, thereby promoting the development of the data factor market and releasing greater data value. It plays a vital role in enterprise operations.

[0006] Data protection methods refer to the technologies and strategies used to protect data from unauthorized access, disclosure, tampering, and destruction. These methods ensure the confidentiality, integrity, and availability of data.

[0007] Since traditional proxy re-encryption cannot eliminate the high dependence on the key generation center, based on the specific business scenarios of data flow, combined with the traceability algorithm of digital signatures, and then combined with the security requirement scenarios under big data applications and data transactions, the present invention chooses to couple digital signatures and identity proxy re-encryption to jointly realize the functions of no key generation center and data traceability, and complete the required data security operations. Summary of the invention

[0008] The purpose of the present invention is to provide an edge device traceable data flow method based on identity proxy re-encryption to overcome the shortcomings of the prior art.

[0009] Based on the first main aspect of the present invention, a method for traceable data flow of edge devices based on identity proxy re-encryption is provided. The method integrates digital signature technology into the identity proxy re-encryption method, takes the traditional identity proxy re-encryption technology as the framework, and integrates key generation technology including distributed key generation to weaken the influence of the key generation center, thereby innovating a new key generation method without the participation of the key generation center in key generation;

[0010] In addition, by combining the integrated encryption, decryption and traceability methods including certificateless signcryption, the data traceability function is bound to the identity proxy re-encryption technology to achieve the integration of encryption, decryption and traceability during data flow;

[0011] Among them, the traceability method chosen is digital signature technology to realize the data traceability function.

[0012] In some embodiments, as a further preferred embodiment, the method comprises the following steps:

[0013] S100: Design the public parameters required for calculation and design the key generation method for system participants;

[0014] S200: After the data source selects a random number, it calculates the auxiliary ciphertext and auxiliary parameters, calculates the shared key, verification key and re-encryption key and distributes them, and finally signs the plaintext, encrypts the plaintext and distributes it;

[0015] S300: After receiving all parameters and ciphertext, the proxy re-encrypts the ciphertext and distributes it;

[0016] S400: After receiving the ciphertext and the required parameters, the user performs integrity verification on the re-encrypted ciphertext. If the verification is successful, the ciphertext is decrypted to obtain the plaintext, and the integrity of the plaintext is verified, and the data flow ends.

[0017] As a further preferred solution, in the above solution, the S100 includes the following steps:

[0018] S110: There are two participants, namely a data source party and a user party, wherein the user party is the data receiver;

[0019] S120: Key generation is combined with identity encryption to generate key information based on identity information, thus weakening the influence of KGC;

[0020] S130: Based on the key generated by the identity information, combined with the key generation method of certificateless encryption, the private key is split into two parts, one of which is a random number and the other is a key calculated based on the identity information and the public parameters, and the two together constitute the private key;

[0021] S140: On this basis, combined with the distributed key method, a new public key calculation formula is adopted to facilitate subsequent shared key generation calculation.

[0022] As a further preferred solution, in the above solution, the S200 includes the following steps:

[0023] S210: From Select random numbers to participate in the calculation of various parameters in the subsequent encryption process;

[0024] S220: using the public and private keys of the participants and the random number, the shared key and the auxiliary ciphertext are calculated and the plaintext is encrypted mainly by XOR operation in combination with the public parameters, thereby reducing the calculation overhead of the encryption process;

[0025] S230: Using the public and private keys and random numbers of the participants, the auxiliary parameters are calculated and combined with the public parameters to sign the plaintext, thus realizing the data traceability function;

[0026] S240: Using the public and private keys of the participants, the auxiliary ciphertext and the encrypted ciphertext, a verification key is calculated and sent to the user to verify the integrity of the ciphertext;

[0027] S250: Utilize the public and private keys of the participants and random numbers, combined with bilinear mapping and public parameters, calculate the re-encryption key and send it to the agent. Modify the re-encryption key calculation formula according to the different decryption objects to complete dynamic decryption authority control.

[0028] As a further preferred solution, in the above solution, the S400 includes the following steps:

[0029] S410: After obtaining the re-encrypted text after the re-encryption operation, the verification key is calculated based on the received data and compared with the received verification key. If they are consistent, it proves that the agent has not tampered with the data and the integrity of the ciphertext is verified.

[0030] S420: After verifying the integrity of the ciphertext, decrypt the re-ciphertext to obtain the plaintext information;

[0031] S430: After decrypting the plaintext, recalculate the auxiliary parameters based on the received signature information, and use the decrypted plaintext to calculate the signature. If the calculated signature information is consistent with the received signature, it proves that the plaintext has not been tampered with, verifies the integrity of the plaintext, and traces the plaintext.

[0032] In some embodiments, as a further preferred solution, the calculation formula of the new public key includes:

[0033] The data source generates the public key as follows:

[0034]

[0035] The public key generated by the user is:

[0036]

[0037] in, is a random number selected by the data source, g is the generator, g∈G1, G1 is a defined cyclic group, H1 is a hash function, H1: {0, 1} * →G1; A random number selected by the user; p pub is the public key.

[0038] Based on the second main aspect of the present invention, a device for transferring data traceable by an edge device based on identity proxy re-encryption for the aforementioned method is provided, comprising:

[0039] The key design module is used to design the key generation of the participants and establish a more secure decentralized key generation method that is not affected by KGC;

[0040] Data encryption and signature module, used to calculate parameters including auxiliary ciphertext, and sign encrypted plaintext to complete data protection and traceability functions;

[0041] The re-encryption module is used to perform secondary encryption on the ciphertext, including dynamically setting decryption permissions so that only specific users can decrypt the ciphertext;

[0042] The data decryption and verification module is used to obtain the re-encrypted ciphertext, decrypt it to obtain the plaintext information, and perform integrity verification on the ciphertext and the decrypted plaintext.

[0043] Based on the third main aspect of the present invention, an electronic device is provided, comprising: at least one processor; a memory communicatively connected to the at least one processor; the memory storing a computer program which, when executed by the at least one processor, enables the at least one processor to implement the aforementioned edge device traceable data flow method based on identity proxy re-encryption.

[0044] Based on the fourth main aspect of the present invention, a computer-readable storage medium is provided, on which a computer program is stored, and when the program is executed, it implements the aforementioned edge device traceable data flow method based on identity proxy re-encryption.

[0045] Advantages and beneficial effects of the present invention:

[0046] The present invention aims at the privacy protection and security issues faced by data storage, transmission and calculation in data flow in edge computing network data transactions. The digital merchant acts as a data transaction agent when reselling data from the data source, and can implement a traceable data flow (LTP-CLE) solution based on identity proxy re-encryption. The data flow process is bound to the identity information of the participants, and the data flows in ciphertext throughout the process. After receiving the data, the user can also trace the data to verify whether it has been tampered with during the flow process.

[0047] The basic idea of ​​this operation is to integrate digital signature technology into the identity proxy re-encryption method. Specifically, the present invention uses the traditional identity proxy re-encryption technology as the framework, and by integrating distributed key generation and other key generation technologies that weaken the influence of the key generation center, innovates a new key generation method without the participation of the key generation center in key generation, solving the problems of single point failure and key management difficulties caused by the key generation center. In addition, combined with the technical ideas of integrating encryption, decryption and traceability such as certificateless signcryption, the data traceability function is bound to the identity proxy re-encryption technology to achieve the integration of encryption, decryption and traceability during data flow.

[0048] The tracing method of the present invention is to use digital signature technology to realize the data tracing function, which can effectively reduce the computational overhead in the data transfer process without affecting the transfer efficiency and security.

[0049] The present invention can be used for efficient data flow on edge devices with limited computing power, verifying the data integrity during data flow, and increasing security and autonomy while ensuring data integrity. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 A diagram showing a method for generating a KGC-free key in accordance with an embodiment of the present invention is shown;

[0051] Figure 2 It shows an introduction diagram of the identity proxy re-encryption process in one embodiment of the present invention;

[0052] Figure 3 A diagram showing a data tracing process in accordance with an embodiment of the present invention is shown;

[0053] Figure 4 The overall flow chart after the implementation of the solution in one embodiment of the present invention is shown. DETAILED DESCRIPTION

[0054] The preferred embodiments of the present invention will be described in detail below so that the purpose, features and advantages of the present invention can be more clearly understood. It should be understood that the following embodiments are not intended to limit the scope of the present invention, but are only intended to illustrate the essential spirit of the technical solution of the present invention.

[0055] In the following description, certain specific details are set forth for the purpose of illustrating various disclosed embodiments to provide a thorough understanding of the various disclosed embodiments. However, those skilled in the relevant art will recognize that the embodiments may be practiced without one or more of these specific details. In other cases, well-known techniques associated with the present application may not be shown or described in detail to avoid unnecessarily obscuring the description of the embodiments.

[0056] References throughout the specification to "one embodiment" or "an embodiment" indicate that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of "in one embodiment" or "in an embodiment" in various places throughout the specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any manner in one or more embodiments.

[0057] The first step is parameter preparation.

[0058] (1) Public parameter pre-architecture.

[0059] Define two cyclic groups G1 and G T , select g∈G1 as the generator, and define a bilinear mapping e:G1×G1→G T . Define hash function H1: {0, 1} * →G1 and H2: G T →{0, 1} * , H1 maps the identity code to the G1 group, and H2 maps the G T Convert the group element into a binary bit string and select a random number As the system master key, calculate the public key P pub =sg, the system's public parameters end here.

[0060] (2) Key generation and distribution.

[0061] The data source and user parties involved in data flow independently select their own identity information as the key generation base. The data source identity information is set as ID1 and the user identity information is set as ID u Then use the public parameters to assist in generating your own partial private key and public key, and finally select a random number to form your own complete private key. The key generation calculation formula for the data source and the user is as follows:

[0062] Part of the private key of the data source:

[0063]

[0064] The data source selects a random number Generate a complete private key:

[0065]

[0066] The data source generates the public key as follows:

[0067]

[0068] The user generates a partial private key:

[0069]

[0070] The user chooses a random number Generate a complete private key:

[0071]

[0072] The public key generated by the user is:

[0073]

[0074] Step 2: Data encryption and signature process

[0075] The data encryption signature process is mainly implemented and explained through the following steps:

[0076] First, the data source selects a random number Calculate the auxiliary ciphertext c1 and send it to the user and the agent:

[0077] c1=g r

[0078] Then, the data source uses the selected random number The user's public key and part of the data source's private key are used to calculate the shared key K:

[0079]

[0080] Afterwards, the data source uses the shared key K and the generator to encrypt the plaintext data M to obtain the ciphertext c2:

[0081]

[0082] The data source selects another random number Calculate the auxiliary parameter x, and then use the auxiliary parameter to sign the plaintext information v:

[0083]

[0084] Calculate the second signature auxiliary parameter U and send the signature sign(U,v) to the data party:

[0085]

[0086] The data source calculates the verification key R1 to assist in verifying the integrity of the encrypted ciphertext:

[0087]

[0088] Finally, the data source calculates the re-encryption key and sends it to the agent:

[0089]

[0090] Step 3: Re-encryption process

[0091] The proxy receives the re-encryption key rk sent by the data source ID1→IDu , auxiliary ciphertext c1 and encrypted ciphertext c2, the re-encryption operation begins:

[0092]

[0093] After the re-encryption is completed, the re-encrypted ciphertext c'2 is sent to the user, and the re-encryption process ends.

[0094] Step 4: Data decryption and verification process

[0095] After receiving the re-encrypted ciphertext from the proxy, the user uses the public key of the data source and the auxiliary ciphertext to first calculate R1 and verify whether the ciphertext has been tampered with.

[0096]

[0097] If R1'=R1, the ciphertext has not been tampered with during circulation

[0098] Then the user starts to decrypt the ciphertext c2 before re-encryption based on his own public key, system master key, and auxiliary ciphertext c1, and then combines the shared key and generator to finally decrypt the plaintext M:

[0099]

[0100] After obtaining the plaintext M, the auxiliary parameter x' is calculated based on the public key and the auxiliary ciphertext c1, combined with the signature information sign(U,v) sent by the data source, and used to verify the signature information v. If v'=v, the plaintext has not been tampered with.

[0101] x'=e(U,g)e(c1,-P pub ) v

[0102]

[0103] The matters not described in detail in the present invention are all known technologies to those skilled in the art.

[0104] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A method for transferring traceable data of edge devices based on identity proxy re-encryption, characterized in that: This method integrates digital signature technology into the identity proxy re-encryption method, takes the traditional identity proxy re-encryption technology as the framework, and integrates key generation technologies including distributed key generation to weaken the influence of the key generation center, thus innovating a new key generation method without the participation of the key generation center. In addition, by combining the integrated encryption, decryption and traceability methods including certificateless signcryption, the data traceability function is bound to the identity proxy re-encryption technology to achieve the integration of encryption, decryption and traceability during data flow; Among them, the traceability method chosen is digital signature technology to realize data traceability function.

2. The edge device traceable data flow method based on identity proxy re-encryption according to claim 1 is characterized in that: The steps include: S100: Design the public parameters required for calculation and design the key generation method for system participants; S200: After the data source selects a random number, it calculates the auxiliary ciphertext and auxiliary parameters, calculates the shared key, verification key and re-encryption key and distributes them, and finally signs the plaintext, encrypts the plaintext and distributes it; S300: After receiving all parameters and ciphertext, the proxy re-encrypts the ciphertext and distributes it; S400: After receiving the ciphertext and the required parameters, the user performs integrity verification on the re-encrypted ciphertext. If the verification is successful, the plaintext is decrypted and integrity verification is performed on the plaintext, and the data flow ends.

3. The edge device traceable data flow method based on identity proxy re-encryption according to claim 2 is characterized in that: The S100 includes the following steps: S110: There are two participants, namely a data source party and a user party, wherein the user party is the data receiver; S120: Key generation is combined with identity encryption to generate keys based on identity information, thus weakening the influence of KGC; S130: Based on the key generated by the identity information, combined with the key generation method of certificateless encryption, the private key is split into two parts, one of which is a random number and the other is a key calculated based on the identity information and the public parameters, and the two together constitute the private key; S140: On this basis, combined with the distributed key method, a new public key calculation formula is adopted to facilitate subsequent shared key generation calculation.

4. The edge device traceable data flow method based on identity proxy re-encryption according to claim 2 is characterized in that: The S200 includes the following steps: S210: From Select random numbers to participate in the calculation of various parameters in the subsequent encryption process; S220: using the public and private keys of the participants and the random number, the shared key and the auxiliary ciphertext are calculated and the plaintext is encrypted mainly by XOR operation in combination with the public parameters, thereby reducing the calculation overhead of the encryption process; S230: Using the public and private keys and random numbers of the participants, the auxiliary parameters are calculated and combined with the public parameters to sign the plaintext, thus realizing the data traceability function; S240: Using the public and private keys of the participants, the auxiliary ciphertext and the encrypted ciphertext, a verification key is calculated and sent to the user to verify the integrity of the ciphertext; S250: Utilize the public and private keys of the participants and random numbers, combined with bilinear mapping and public parameters, calculate the re-encryption key and send it to the agent. Modify the re-encryption key calculation formula according to the different decryption objects to complete dynamic decryption authority control.

5. The edge device traceable data flow method based on identity proxy re-encryption according to claim 2 is characterized in that: The S400 includes the following steps: S410: After obtaining the re-encrypted text after the re-encryption operation, the verification key is calculated based on the received data and compared with the received verification key. If they are consistent, it proves that the agent has not tampered with the ciphertext and the integrity of the ciphertext is verified; S420: After verifying the integrity of the ciphertext, decrypt the re-ciphertext to obtain the plaintext information; S430: After decrypting the plaintext, recalculate the auxiliary parameters based on the received signature information, and use the decrypted plaintext to calculate the signature. If the calculated signature information is consistent with the received signature, it proves that the plaintext has not been tampered with, verifies the integrity of the plaintext, and traces the plaintext.

6. The edge device traceable data flow method based on identity proxy re-encryption according to claim 2 is characterized in that: The calculation formula of the new public key includes: The data source generates the public key as follows: The public key generated by the user is: in, is a random number selected by the data source, g is the generator, g∈G1, G1 is a defined cyclic group, H1 is a hash function, H1: {0, 1} * →G1; A random number selected by the user; p pub is the public key.

7. An edge device traceable data flow device based on identity proxy re-encryption for implementing any one of the methods in claims 1-6, characterized in that: include: The key design module is used to design the key generation of the participants and establish a more secure decentralized key generation method that is not affected by KGC; Data encryption and signature module, used to calculate parameters including auxiliary ciphertext, and sign encrypted plaintext to complete data protection and traceability functions; The re-encryption module is used to perform secondary encryption on the ciphertext, including dynamically setting decryption permissions so that only specific users can decrypt the ciphertext; The data decryption and verification module is used to obtain the re-encrypted ciphertext, decrypt it to obtain the plaintext information, and perform integrity verification on the ciphertext and the decrypted plaintext.

8. An electronic device, characterized in that: include: at least one processor; a memory communicatively coupled to the at least one processor; The memory stores a computer program, which, when executed by the at least one processor, enables the at least one processor to implement the edge device traceable data flow method based on identity proxy re-encryption as described in any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed, the edge device traceable data flow method based on identity proxy re-encryption as described in any one of claims 1-6 is implemented.

Images