Data encryption protection system and method for intelligent controller hardware

Abstract

The invention relates to the technical field of data encryption, and discloses a data encryption protection system and method for intelligent controller hardware, and the method comprises the steps: generating a random confusion factor based on a real-time operation state through constructing a dynamic confusion algorithm, and carrying out the nonlinear transformation of original data; implementing a fragment encryption strategy, dividing fragments according to data sensitivity levels, and adopting a heterogeneous encryption algorithm; generating a dynamic binding key in combination with the environment parameters and the hardware unique identifier; hardware-level integrity check is executed, and data and hardware are verified through cyclic redundancy check codes and hardware fingerprints; establishing a self-adaptive key updating mechanism; performing multi-layer defense linkage; and implementing anti-side channel protection, and constructing a security audit log. According to the method, the hardware data security of the intelligent controller is comprehensively guaranteed, various security threats are effectively resisted, and the data confidentiality, integrity and availability are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption, and specifically to a data encryption protection system and method for intelligent controller hardware. Background Art

[0002] At present, with the rapid development of information technology, intelligent controllers are increasingly widely used in various fields. From industrial automation control to smart home systems, from automotive electronic devices to medical instruments, etc., it has become a key core component for the intelligence of modern devices. During operation, intelligent controllers will process and store a large amount of sensitive data, which involves important information such as user privacy, business secrets, and device control instructions. Once leaked or tampered with, serious consequences will occur.

[0003] Currently, the data security of intelligent controller hardware faces many severe challenges. In terms of data encryption, traditional encryption algorithms mostly adopt fixed encryption modes and keys, which are difficult to adapt to the complex and changeable operating environment of intelligent controllers. For example, in industrial scenarios, intelligent controllers may be affected by environmental factors such as high temperature and electromagnetic interference. The encryption method with a fixed key cannot adjust the encryption strategy in a timely manner according to environmental changes, resulting in a significant reduction in encryption security. Once an attacker obtains the key, they can easily crack the data.

[0004] In terms of key management, existing methods usually lack dynamics and adaptability. The key update mechanism is not flexible enough and often relies on manual updates or regular fixed updates, and cannot respond to the risk of key leakage in a timely manner. For example, in the Internet of Things environment, there are a large number of intelligent controllers that are widely distributed. Regularly updating keys is not only inefficient but also may leave opportunities for attackers due to untimely updates. Once the key of a certain controller is leaked, the entire network system connected to it will face data security threats.

[0005] Regarding data integrity verification, common technical means are relatively single. Most only rely on simple checksum algorithms and cannot effectively detect the integrity of data under complex attacks. In network attacks, for example, attackers may cleverly modify the data and at the same time tamper with the checksum, making it difficult for traditional verification methods to detect that the data has been tampered with, thereby affecting the normal operation of intelligent controllers and resulting in equipment failures or incorrect operations.

[0006] The ability to resist side-channel attacks is also relatively weak. With the continuous development of attack technologies, side-channel attacks have become a major threat to the data security of intelligent controllers. Attackers can analyze and obtain encryption keys by monitoring physical information such as power consumption and electromagnetic radiation during the encryption operation of intelligent controllers. However, many intelligent controller hardware do not adopt effective anti-side-channel protection measures, making the encryption system almost defenseless against such attacks.

[0007] The current situation of data security in the hardware of intelligent controllers is worrying, and traditional encryption technologies and security protection measures can no longer meet the growing security needs. It is urgent to develop a data encryption protection method that can adapt to complex environments, has dynamic encryption and key management, strengthens integrity verification, and effectively resists side-channel attacks. This is of crucial significance for ensuring the safe and stable operation of intelligent controllers and protecting the important data of users and enterprises. Summary of the Invention

[0008] The purpose of the present invention is to provide a data encryption protection system and method for the hardware of intelligent controllers to solve the problems raised in the above background technology.

[0009] To achieve the above purpose, the present invention provides the following technical solutions: A data encryption protection method for the hardware of intelligent controllers, the method includes:

[0010] Construct a dynamic confusion algorithm, including generating a random confusion factor based on the real-time operation state, and performing a non-linear transformation on the original data through the random confusion factor to generate the confused intermediate data;

[0011] Implement a sharding encryption strategy, including dividing the intermediate data into multiple data shards, and independently encrypting each data shard using a heterogeneous encryption algorithm; the heterogeneous encryption algorithm includes the combined application of symmetric encryption and asymmetric encryption;

[0012] Generate a dynamically bound key, including combining environmental parameters and the unique hardware identifier, and generating a dynamic encryption key through a key derivation function; the environmental parameters include temperature, voltage, and clock frequency;

[0013] Perform hardware-level integrity verification, including embedding a cyclic redundancy check code during the encryption process, and generating a hardware fingerprint through a physically unclonable function module to verify data integrity and hardware legality; establish an adaptive key update mechanism, including triggering key regeneration based on a time threshold or an operation count threshold, and distributing the new key to authorized nodes through a secure channel;

[0014] Conduct multi-layer defense linkage, including logically associating the encrypted data shards with the confusion factor and environmental parameters, and verifying the consistency of the association relationship during decryption;

[0015] The formula of the dynamic confusion algorithm is:

[0016]

[0017] Among them, C i is the i-th confused data unit, representing the intermediate data after non-linear transformation, with a data type of 8-bit unsigned integer and a value range of 0-255; D iis the original data unit, inputting the original data block to be encrypted, with the length aligned with C i aligned, R(t) is a time-related random number, S(t) is the dynamic shift bit number, representing the displacement amount that changes periodically according to the system running time t, and P(t) is the confusion offset;

[0018] The formula of the key derivation function is:

[0019] K dynamic = HKDF(ID hw ∥SHA3(Env(t)), Salt, L)

[0020] where K dynamic is the dynamic key, ID hw is the hardware unique identifier, Env(t) is the environmental parameter vector, SHA3(Env(t)) represents performing one-way hashing on Env(t) using the SHA-3 algorithm, Salt is the random salt value, and L is the key length; ∥ is the data concatenation operator, indicating binary concatenation of ID hw and SHA3(Env(t)) to form the key derivation seed;

[0021] Implement anti-side-channel protection, including inserting random noise instructions during the encryption operation and masking the power consumption timing characteristics through clock randomization technology.

[0022] Preferably, the dynamic confusion algorithm further includes:

[0023] Controlling the update frequency of the confusion factor through a finite state machine, and the state transition conditions of the finite state machine are dynamically adjusted by the data throughput and error rate;

[0024] Adopting a combination of bit-level permutation and byte-level diffusion to enhance the irreversibility of the confusion process.

[0025] Preferably, the specific steps of the sharding encryption strategy include:

[0026] Dividing the number of shards according to the data sensitivity level, and using more shards and a higher-strength asymmetric encryption algorithm for highly sensitive data;

[0027] Allocating an independent initialization vector for each data shard, and storing the initialization vector and the shard index in a secure area after hash binding.

[0028] Preferably, the binding process of the environmental parameters and the hardware unique identifier includes:

[0029] Real-time collecting temperature, voltage, and clock frequency, and generating the environmental parameter vector through normalization processing;

[0030] After concatenating the hardware unique identifier with the environmental parameter vector, input it into a hash function based on the national cryptography SM3 algorithm to generate an intermediate seed value;

[0031] Use the intermediate seed value to drive a pseudo-random number generator to generate dynamic key materials.

[0032] Preferably, the hardware-level integrity check further includes:

[0033] In the data storage stage, perform an exclusive OR operation on the cyclic redundancy check code and the hardware fingerprint to generate a composite check tag;

[0034] In the data decryption stage, separate the check tag through reverse operation, and compare the hardware fingerprint with the physically unclonable function value generated in real time.

[0035] Preferably, the triggering conditions of the adaptive key update mechanism include:

[0036] When the environmental parameters deviate from the preset range, force the key update;

[0037] When the number of decryption failures exceeds the threshold, start the key rollback mechanism and switch to the backup key group.

[0038] Preferably, the multi-layer defense linkage further includes:

[0039] Embed a hidden watermark in the encrypted fragment, where the watermark is generated by the hash value of the confusion factor and the environmental parameters; during decryption, verify the legitimacy of the data source by extracting the watermark and comparing it with the current environmental parameter hash value.

[0040] Preferably, the specific implementation of the anti-side channel protection includes:

[0041] Insert random no-operation instructions into the encrypted operation instruction stream to destroy the regularity of the instruction sequence; by dynamically adjusting the correspondence between the clock frequency and voltage, disrupt the correlation between power consumption and electromagnetic radiation.

[0042] Preferably, the data encryption protection method further includes:

[0043] Construct a security audit log to record the timestamps and environmental parameters of key generation, encryption operations, and abnormal events; use a chained hash structure to seal and store the log to ensure the immutability of the log data.

[0044] Preferably, the present invention further includes a data encryption protection system for an intelligent controller hardware, and the system includes:

[0045] A dynamic confusion module that constructs a dynamic confusion algorithm, including generating a random confusion factor based on the real-time operation state, and performing a non-linear transformation on the original data through the random confusion factor to generate the confused intermediate data;

[0046] A sharding encryption engine for implementing data sharding and heterogeneous encryption, including a symmetric encryption coprocessor and an asymmetric encryption accelerator;

[0047] A key management unit integrating an environmental sensor, a physically unclonable function module, and a key derivation function calculation core for generating and updating dynamic keys;

[0048] An integrity verification unit with a built-in cyclic redundancy check code generator and a hardware fingerprint comparison circuit;

[0049] A defense linkage controller for coordinating the logical association of sharding encryption, key update, and watermark verification;

[0050] An anti-side-channel protection module containing a random noise injection circuit and a clock randomization controller;

[0051] A secure storage area for storing encrypted shards, initialization vectors, and sealed audit logs.

[0052] Compared with the prior art, the beneficial effects of the present invention are:

[0053] The dynamic obfuscation algorithm constructed by the present invention generates a random obfuscation factor based on the real-time operation state and performs a non-linear transformation on the original data. This makes the data highly complex before encryption, and it is difficult for attackers to analyze the original information characteristics from the obfuscated data. Implement a sharding encryption strategy, divide the number of shards according to the data sensitivity level, and independently encrypt each data shard using a heterogeneous encryption algorithm (a combination of symmetric encryption and asymmetric encryption). High-sensitivity data uses more shards and a high-strength asymmetric encryption algorithm to ensure the security of key information; low-sensitivity data, while ensuring a certain level of security, improves the encryption efficiency through the symmetric encryption algorithm, effectively balancing the encryption security and performance.

[0054] When generating a dynamically bound key, combine environmental parameters (temperature, voltage, and clock frequency) with the hardware unique identifier, and use the key derivation function to generate a dynamic encryption key. Since the environmental parameters change in real time and are closely combined with the hardware unique identifier, each generated key has uniqueness and unpredictability, greatly increasing the difficulty of key cracking. Establish an adaptive key update mechanism that triggers key regeneration based on multiple conditions such as time threshold, operation count threshold, environmental parameter changes, and decryption failure count. When the environmental parameters deviate from the preset range or the decryption failure count exceeds the threshold, force key update or start the key rollback mechanism and switch to the backup key group to ensure that the key is always in a secure state and timely respond to potential key leakage risks.

[0055] Perform hardware-level integrity verification, embed a cyclic redundancy check code during the encryption process, and use a physically unclonable function module to generate a hardware fingerprint. When storing, the cyclic redundancy check code and the hardware fingerprint are XORed to generate a composite check tag. During decryption, the check tag is separated through reverse operations, and the hardware fingerprint is compared with the physically unclonable function value generated in real time. This method can not only accurately detect whether the data has been tampered with during storage and transmission, but also verify the hardware legitimacy and ensure the reliability of the data source.

[0056] Carry out multi-layer defense linkage, logically associate the encrypted data shards with the confusion factor and environmental parameters, and verify the consistency of the association relationship during decryption. At the same time, a hidden watermark generated from the hash value of the confusion factor and environmental parameters is embedded in the encrypted shards, and the legitimacy of the data source is verified by comparing the watermark with the current environmental parameter hash value, constructing a multi-level security protection system and greatly enhancing the data security. Implement anti-side channel protection, insert random noise instructions (such as random no-op instructions to disrupt the regularity of the instruction sequence) during the encryption operation, and mask the power consumption timing characteristics through clock randomization technology (dynamically adjusting the correspondence between the clock frequency and voltage to disrupt the correlation between power consumption and electromagnetic radiation), effectively resisting side channel attacks and protecting the encryption key and data from being stolen.

[0057] Construct a security audit log, record the timestamps and environmental parameters of key generation, encryption operations, and abnormal events, and store them in a sealed manner using a chained hash structure. This not only facilitates the comprehensive traceability and in-depth analysis of system security events, but also ensures that the log data cannot be tampered with by the chained hash structure, providing a reliable basis for security event investigations, helping to detect security vulnerabilities in a timely manner and take corresponding measures to further improve the system security. Description of the Drawings

[0058] Figure 1 It is the working principle diagram of the data encryption protection method described in the present invention;

[0059] Figure 2 It is the flow chart of the dynamic confusion algorithm optimization;

[0060] Figure 3 It is the flow chart of the refinement of the sharding encryption strategy. Detailed Embodiment

[0061] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0062] Please refer to Figures 1-3, the present invention provides a technical solution: a data encryption protection method for the hardware of an intelligent controller, the method comprising:

[0063] Generate a random confusion factor based on the real-time operation status of the intelligent controller. Utilize the real-time operation information of the system, such as the current task load, data processing progress, etc. as the seed for random number generation, and generate a time-related random number R(t) through a specific random number generation algorithm. Determine the dynamic shift bit number S(t) and the confusion offset P(t) according to the periodic change of the system operation time t. Using these parameters, according to the formula Perform a non-linear transformation on the original data. Wherein, C i is the i-th confused data unit, representing the intermediate data after non-linear transformation, the data type is an 8-bit unsigned integer, and the value range is 0 - 255; D i is the original data unit, input the original data block to be encrypted, and the length is aligned with C i . Through this formula, perform operations such as exclusive OR, shift, and addition on the original data unit D i and the random confusion factor, and take the modulus 256 of the result to generate the confused intermediate data, increasing the complexity of the data and enhancing the security.

[0064] Divide the confused intermediate data into multiple data slices. For different data slices, use a heterogeneous encryption algorithm for independent encryption, and this heterogeneous encryption algorithm is a combined application of symmetric encryption and asymmetric encryption. For example, for some data slices with high requirements for encryption speed and relatively low security requirements, a symmetric encryption algorithm, such as the AES algorithm, can be used to utilize its fast encryption and decryption speed to improve data processing efficiency; for critical data slices with extremely high security requirements, an asymmetric encryption algorithm, such as the RSA algorithm, is used to utilize the characteristic of separating public and private keys to enhance the security of encryption. Through this combination method, while ensuring the encryption efficiency, the confidentiality of the data is maximally improved.

[0065] Real-time collect the environmental parameters of the intelligent controller hardware, including temperature, voltage, and clock frequency. Normalize these environmental parameters to make them within a specific numerical range to generate the environmental parameter vector Env(t). Combine the hardware unique identifier ID hw , and through the key derivation function K dynamic =HKDF(ID hw ∥SHA3(Env(t)), Salt, L) generate a dynamic encryption key. Wherein, K dynamic is the dynamic key, SHA3(Env(t)) represents performing a one-way hash on the environmental parameter vector Env(t) using the SHA-3 algorithm, Salt is a random salt value, L is the key length, and ∥ is a data concatenation operator, indicating concatenating the hardware unique identifier IDhw Perform binary concatenation with SHA3(Env(t)) to form a key derivation seed. The dynamically generated key is tightly bound to the hardware environment, enhancing the security and unpredictability of the key.

[0066] During the encryption process, a cyclic redundancy check code (CRC) is generated according to a specific algorithm. Meanwhile, a physical unclonable function (PUF) module is used to generate a hardware fingerprint. The CRC is embedded in the encrypted data, and the hardware fingerprint is used for subsequent verification. During the data storage phase, the CRC and the hardware fingerprint are XORed to generate a composite check tag. During the data decryption phase, the check tag is separated through reverse operations, and the hardware fingerprint is compared with the physically unclonable function value generated in real time to verify data integrity and hardware legality, ensuring that the data has not been tampered with during storage and transmission and that the hardware used is authorized hardware.

[0067] Set a time threshold and an operation count threshold. When the time threshold is reached, or when the number of encryption / decryption operations reaches the operation count threshold, trigger the key regeneration process. Use the above method of generating a dynamic key to regenerate a new key and distribute the new key to authorized nodes through a secure channel, such as an encryption channel based on the SSL / TLS protocol. Additionally, when the environmental parameters deviate from the preset range, force the trigger of key update; when the number of decryption failures exceeds the threshold, start the key rollback mechanism and switch to a backup key group to ensure the security of the key and the accessibility of the data.

[0068] Logically associate the encrypted data shards with the obfuscation factor and environmental parameters. During decryption, verify the consistency of the association relationship. For example, during the encryption process, calculate the hash values of the encrypted data shards, the obfuscation factor, and the environmental parameters and store them in a specific location. During decryption, recalculate the hash values of these data and compare them with the stored hash values. If they are consistent, it indicates that the data has not been tampered with and the association relationship is normal. Meanwhile, embed a hidden watermark in the encrypted shards, and the watermark is generated from the hash value of the obfuscation factor and the environmental parameters. During decryption, verify the legality of the data source by extracting the watermark and comparing it with the current environmental parameter hash value, further enhancing the security of the data.

[0069] Insert random noise instructions during the encryption operation. Insert random no-op instructions into the encryption operation instruction stream to disrupt the regularity of the instruction sequence, making it difficult for attackers to obtain encryption information by analyzing the instruction sequence. Adopt clock randomization technology to disrupt the correlation between power consumption and electromagnetic radiation by dynamically adjusting the correspondence between the clock frequency and voltage, preventing attackers from using side-channel attack means, such as power analysis attacks and electromagnetic radiation attacks, to obtain the encryption key or data.

[0070] Construct a security audit log to record the timestamps and environmental parameters of key generation, encryption operations, and abnormal events. Use a chain hash structure to seal and store logs. For example, use the SHA-256 algorithm to hash each log record, and cascade the hash value of the previous log record with the hash value of the current log record to generate a new hash value for storage. In this way, any tampering with the log record will cause subsequent changes in the hash value, thereby ensuring the immutability of the log data and facilitating the tracing and analysis of system security events afterwards.

[0071] Embodiment 1:

[0072] This embodiment further optimizes the dynamic obfuscation algorithm by controlling the update frequency of the obfuscation factor and enhancing the irreversibility of the obfuscation process, thereby improving the effect and security of data obfuscation and making the encrypted data more difficult to crack.

[0073] Finite state machine (FSM) is used to control the update frequency of the obfuscation factor. The finite state machine has multiple states, such as the initial state, normal update state, and fast update state. Its state transition conditions are dynamically adjusted by the data throughput and error rate. For example, when the data throughput is high, it means that the system processes a large amount of data. In order to ensure data security, the obfuscation factor needs to be updated more frequently. At this time, the finite state machine can be transferred from the normal update state to the fast update state; when the error rate increases, it may mean that the system is attacked or there is an abnormality. The finite state machine can also be adjusted to the fast update state to speed up the update speed of the obfuscation factor and reduce the risk of data being cracked. By monitoring the data throughput and error rate, the state of the finite state machine is continuously adjusted, thereby realizing dynamic control of the update frequency of the obfuscation factor.

[0074] A combination of bit-level permutation and byte-level diffusion is used. In terms of bit-level permutation, the obfuscated data is rearranged bit by bit. For example, for 8-bit data, the 1st bit is swapped with the 7th bit, the 2nd bit is swapped with the 6th bit, and so on, and the bit order of the data is changed through specific permutation rules. In terms of byte-level diffusion, multiple bytes of data are mixed. Assuming that there are two bytes of data A and B, the diffusion operation between bytes can be performed in the manner of A=A⊕B, B=A⊕B, and A=A⊕B, so that each byte contains the information of other bytes. By combining this bit-level permutation with byte-level diffusion, the complexity of the obfuscation process is increased, making it more difficult to reversely restore the original data, and enhancing the irreversibility of the obfuscation process.

[0075] Embodiment 2:

[0076] This embodiment refines the shard encryption strategy, more reasonably divides the number of shards and selects encryption algorithms according to the data sensitivity level, and effectively manages the initialization vector to further improve the pertinence and security of encryption.

[0077] Divide the number of shards and select an encryption algorithm according to the data sensitivity level, and evaluate the sensitivity level of the data in the intelligent controller. For example, data involving user privacy, critical control instructions, etc. are classified as highly sensitive data; some ordinary configuration information, non-critical operation data, etc. are classified as low-sensitive data. For highly sensitive data, use a larger number of shards, such as splitting the data into 16 or more data shards, and at the same time use a higher-strength asymmetric encryption algorithm, such as the Elliptic Curve Cryptography (ECC) algorithm. The ECC algorithm has higher security. Under the same key length, its encryption strength is higher than that of the RSA algorithm, and it can better protect highly sensitive data. For low-sensitive data, appropriately reduce the number of shards, such as dividing them into 4 or 8 data shards, and use a relatively simple symmetric encryption algorithm, such as the 3DES algorithm, to improve the encryption and decryption efficiency while ensuring a certain level of security.

[0078] Allocate an independent initialization vector (IV) for each data shard. The initialization vector is an important parameter in the encryption algorithm, which increases the randomness of encryption. Bind each initialization vector to the corresponding shard index through hashing, for example, use the SHA-256 algorithm for hashing calculation to generate a hash value. Store this hash value together with the initialization vector in a secure area, such as the secure storage module inside the intelligent controller. During decryption, obtain the corresponding initialization vector and hash value from the secure area, recalculate the hash value of the shard index and the initialization vector and compare them to verify the correctness of the initialization vector and ensure the consistency and security of the encryption and decryption processes.

[0079] Example 3:

[0080] This embodiment optimizes the binding process of environmental parameters and the hardware unique identifier, and improves the binding tightness and security of the dynamic key and the hardware environment through more accurate environmental parameter collection and processing, as well as a more secure key generation method; specifically including:

[0081] Use high-precision sensors to collect temperature, voltage, and clock frequency in real time. The temperature sensor can select a digital temperature sensor with an accuracy of ±0.1°C, the voltage sensor has an accuracy of ±0.01V, and the clock frequency is accurately measured through a dedicated clock monitoring circuit. After collecting these environmental parameters, perform normalization processing. Assume the measurement range of temperature is T min to T max , the collected temperature value is T, and the normalized temperature value T norm can be calculated by the formula . Similarly, perform similar normalization processing on voltage and clock frequency, and combine these normalized parameters into an environmental parameter vector Env(t).

[0082] Concatenate the hardware unique identifier ID hw with the environmental parameter vector Env(t) to form a new data block. Input this new data block into a hash function based on the national cryptographic SM3 algorithm to generate an intermediate seed value. The national cryptographic SM3 algorithm is a cryptographic hash algorithm independently designed in China, with high security and computational efficiency. Use the generated intermediate seed value to drive a pseudo-random number generator, such as a pseudo-random number generator using the Mersenne Twister algorithm, to generate dynamic key materials. Finally, according to the key derivation function K dynamic = HKDF(ID hw ∥SHA3(Env(t)), Salt, L), combine the random salt value Salt and the specified key length L to generate the final dynamic encryption key, ensuring that the generation of the dynamic key is closely related to the hardware environment and has high security.

[0083] Example 4:

[0084] In the data storage stage, after completing the encryption process and generating the cyclic redundancy check code (CRC) and the hardware fingerprint, perform an exclusive OR operation on the cyclic redundancy check code and the hardware fingerprint. Assume the cyclic redundancy check code is CRC code , and the hardware fingerprint is HW fingerprint , generate the composite check label Composite through the formula Composite tag = CRC code ⊕ HW fingerprint . Store this composite check label together with the encrypted data in a storage device, such as a flash chip or a hard disk. tag

[0085] In the data decryption stage, read the encrypted data and the composite check label from the storage device. First, through reverse operation, that is, perform an exclusive OR operation on the cyclic redundancy check code (recalculated during the decryption process) and the composite check label again to separate the hardware fingerprint. Then, generate the physical unclonable function value (PUF value) in real time, and compare the separated hardware fingerprint with the PUF value generated in real time. If the two are consistent, it indicates that the hardware is legal and the data has not been tampered with during storage and transmission; if they are inconsistent, it is determined that the data integrity is damaged or there is an abnormality in the hardware, and the system can take corresponding measures, such as rejecting the decryption operation, issuing an alarm, etc., to ensure the security of the data and the normal operation of the system.

[0086] Example 5:

[0087] This embodiment optimizes the adaptive key update mechanism, improves its trigger conditions and processing procedures, and further strengthens the effect of multi-layer defense linkage. At the same time, it enhances the anti-side channel protection ability and the security audit log function to comprehensively ensure data security.

[0088] Optimization of Adaptive Key Update Mechanism: Set a preset range for environmental parameters in the system. For example, the normal range of temperature is 20°C - 40°C, the normal range of voltage is 4.5V - 5.5V, and the normal range of clock frequency is [X] MHz - [Y] MHz. Monitor environmental parameters in real time. When the environmental parameters deviate from the preset range, immediately force the trigger of key update. At the same time, set a threshold for the number of decryption failures, such as 5 times. When the number of decryption failures exceeds the threshold, start the key rollback mechanism. The system replaces the currently used key with the key used during the last successful decryption and switches to the backup key group. The keys in the backup key group can be pre-generated and stored in a secure area, which can be enabled in a timely manner when there is a problem with the main key to ensure normal access to data.

[0089] Enhancement of Multi-layer Defense Linkage: Embed hidden watermarks in encrypted slices. The watermark is generated from the hash values of the confusion factors and environmental parameters. For example, use the SHA-256 algorithm to calculate the hash values of the confusion factors R(t), S(t), P(t) and the environmental parameter vector Env(t) to obtain the watermark value Watermark = SHA256(R(t), S(t), P(t), Env(t)). During decryption, extract the watermark from the encrypted slice, recalculate the hash value of the current environmental parameters, and compare it with the extracted watermark. If the two are consistent, it verifies that the data source is legal; if not, it indicates that the data may have been tampered with or the source is untrusted, and the system rejects the decryption operation to ensure data security.

[0090] Improvement of Anti-side Channel Protection: Insert random no-operation instructions into the encrypted operation instruction stream. The insertion positions and quantities of the no-operation instructions are completely random. For example, randomly insert 1 - 3 no-operation instructions in every 10 encrypted operation instructions. Disrupt the correlation between power consumption and electromagnetic radiation by dynamically adjusting the correspondence between the clock frequency and voltage. A dynamic voltage-frequency adjustment algorithm can be adopted to change the combination of the clock frequency and voltage in real time according to the operating state and security requirements of the system, making it difficult for attackers to obtain encrypted information by analyzing power consumption and electromagnetic radiation.

[0091] In the security audit log, the timestamps and environmental parameters of key generation, encryption operations, and abnormal events are recorded in detail. For key generation events, information such as the generation time, the hardware unique identifier used for key generation, and the environmental parameter vector are recorded; for encryption operations, the encrypted data identifier, encryption algorithm, encryption time, and the environmental parameters at that time are recorded; for abnormal events, such as decryption failures and abnormal environmental parameters, the time of the event occurrence, a detailed description, and the relevant environmental parameters are recorded. The log is sealed and stored using a chained hash structure. The SHA-256 algorithm is used to calculate the hash value of each log record, and the hash value of the previous log record is concatenated with the hash value of the current log record to generate a new hash value for storage. In this way, any tampering with the log records will result in changes in the subsequent hash values, ensuring the immutability of the log data and facilitating accurate traceability and in-depth analysis of system security events after the fact.

[0092] It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, article or device.

[0093] Although the embodiments of the present invention have been shown and described, it will be understood by those of ordinary skill in the art that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention. The scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A data encryption protection method for intelligent controller hardware, characterized in that: include: Constructing a dynamic obfuscation algorithm, including generating a random obfuscation factor based on a real-time operation state, performing a nonlinear transformation on the original data by using the random obfuscation factor, and generating obfuscated intermediate data; Implementing a shard encryption strategy, including dividing the intermediate data into multiple data shards, and independently encrypting each data shard using a heterogeneous encryption algorithm; the heterogeneous encryption algorithm includes a combined application of symmetric encryption and asymmetric encryption; Generating a dynamic binding key, including combining environmental parameters with a hardware unique identifier to generate a dynamic encryption key through a key derivation function; the environmental parameters include temperature, voltage, and clock frequency; Perform hardware-level integrity checks, including embedding cyclic redundancy check codes in the encryption process and generating hardware fingerprints through physically unclonable function modules to verify data integrity and hardware legitimacy; establish an adaptive key update mechanism, including triggering key regeneration based on time thresholds or operation count thresholds, and distributing new keys to authorized nodes through secure channels; Perform multi-layer defense linkage, including logically associating encrypted data fragments with obfuscation factors and environmental parameters, and verifying the consistency of the association during decryption; The formula of the dynamic obfuscation algorithm is: Among them, C i is the i-th obfuscated data unit, which represents the intermediate data after nonlinear transformation. The data type is an 8-bit unsigned integer with a value range of 0-255; D i The original data unit is input, and the original data block to be encrypted has the same length as C i Alignment, R(t) is a time-dependent random number, S(t) is the number of dynamic shift bits, indicating the displacement that changes periodically according to the system running time t, and P(t) is the obfuscation offset; The formula of the key derivation function is: K dynamic =HKDF(ID hw ∥SHA3(Env(t)),Salt,L) Among them, K dynamic is a dynamic key, ID hw is the hardware unique identifier, Env(t) is the environment parameter vector, SHA3(Env(t)) indicates that the SHA-3 algorithm is used to perform a one-way hash on Env(t), Salt is a random salt value, and L is the key length; ∥ is a data concatenation operator, which means that ID hw Binary concatenation with SHA3(Env(t)) to form a key derivation seed; Implement anti-side channel protection, including inserting random noise instructions in cryptographic operations and masking power consumption timing characteristics through clock randomization techniques.

2. The data encryption protection method for intelligent controller hardware according to claim 1 is characterized in that: The dynamic obfuscation algorithm also includes: Controlling the updating frequency of the confusion factor by a finite state machine, wherein the state transition condition of the finite state machine is dynamically adjusted by the data throughput and the error rate; The bit-level permutation and byte-level diffusion are combined to enhance the irreversibility of the obfuscation process.

3. The data encryption protection method for intelligent controller hardware according to claim 1 is characterized in that: The specific steps of the shard encryption strategy include: The number of shards is divided according to the data sensitivity level. Highly sensitive data uses more shards and a more powerful asymmetric encryption algorithm. Assign an independent initialization vector to each data shard, and store the initialization vector in a secure area after hashing and binding it to the shard index.

4. The data encryption protection method for intelligent controller hardware according to claim 1, characterized in that: The binding process of the environmental parameter and the hardware unique identifier includes: Collect temperature, voltage and clock frequency in real time, and generate environmental parameter vectors through normalization; After the hardware unique identifier and the environment parameter vector are concatenated, they are input into a hash function based on the national encryption SM3 algorithm to generate an intermediate seed value; The intermediate seed value is used to drive a pseudo-random number generator to generate a dynamic key material.

5. The data encryption protection method for intelligent precision controller hardware according to claim 1 is characterized in that: The hardware level integrity check also includes: In the data storage stage, the cyclic redundancy check code is XORed with the hardware fingerprint to generate a composite check tag; During the data decryption phase, the verification tag is separated through reverse operation, and the hardware fingerprint is compared with the physical unclonable function value generated in real time.

6. The data encryption protection method for intelligent controller hardware according to claim 1 is characterized in that: The triggering conditions of the adaptive key update mechanism include: When environmental parameters deviate from the preset range, key update is triggered forcefully; When the number of decryption failures exceeds the threshold, the key rollback mechanism is started and the backup key group is switched.

7. The data encryption protection method for intelligent controller hardware according to claim 1, characterized in that: The multi-layer defense linkage also includes: A hidden watermark is embedded in the encrypted slice, and the watermark is generated by the hash value of the confusion factor and the environmental parameter; during decryption, the legitimacy of the data source is verified by extracting the watermark and comparing it with the current environmental parameter hash value.

8. The data encryption protection method for intelligent controller hardware according to claim 1 is characterized in that: The specific implementation of the anti-side channel protection includes: Random no-operation instructions are inserted into the encryption operation instruction stream to destroy the regularity of the instruction sequence; the correlation between power consumption and electromagnetic radiation is disrupted by dynamically adjusting the correspondence between clock frequency and voltage.

9. The data encryption protection method for intelligent controller hardware according to claim 1, characterized in that: The method further comprises: Construct a security audit log to record the timestamps and environmental parameters of key generation, encryption operations, and abnormal events; use a chain hash structure to seal and store the log to ensure that the log data cannot be tampered with.

10. A data encryption protection system for intelligent controller hardware, characterized in that: include: A dynamic obfuscation module constructs a dynamic obfuscation algorithm, including generating a random obfuscation factor based on a real-time operation state, performing a nonlinear transformation on the original data through the random obfuscation factor, and generating obfuscated intermediate data; Sharded encryption engine, used to implement data sharding and heterogeneous encryption, including symmetric encryption coprocessor and asymmetric encryption accelerator; The key management unit integrates environmental sensors, physically unclonable function modules and key derivation function computing cores to generate and update dynamic keys; Integrity check unit with built-in cyclic redundancy check code generator and hardware fingerprint comparison circuit; Defense linkage controller, used to coordinate the logical association of shard encryption, key update and watermark verification; An anti-side channel protection module, including a random noise injection circuit and a clock randomization controller; A secure storage area for storing encrypted shards, initialization vectors, and sealed audit logs.

Images