Privacy number-based traceable secure communication method, device and equipment

Abstract

The invention relates to a traceable security communication method, device and equipment based on a privacy number, and belongs to the technical field of communication processing, and the method realizes credible storage of communication data by obtaining a communication record and generating a distributed unique identifier, adopting an SM2 algorithm for signature and writing evidence data into a block chain. Meanwhile, the preset master key is subjected to fragmentation processing, a plurality of sub-key fragments are generated, the storage position is determined, and the session key is generated by adopting an SM4 algorithm to perform end-to-end encryption on the communication content, so that the communication security is guaranteed. Besides, a zero-knowledge proof protocol is introduced for identity verification, dynamic risk assessment and an authority fusing mechanism are combined, high-risk communication is effectively prevented, multiple cryptography technologies and safety mechanisms are comprehensively applied, and safety, credibility and auditing performance of the communication process are comprehensively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of communication processing, and particularly relates to a traceable secure communication method, device and equipment based on a privacy number. Background Art

[0002] At present, the implementation of communication security and privacy protection faces multiple challenges. The most core technical factors among them include the completeness of end-to-end encryption, the reliability of key management, and the effectiveness of identity de-sensitization. Since the end-to-end encryption may be weakened in actual deployment due to omissions in the key distribution or storage link, attackers still have the opportunity to intercept sensitive information; if the key management lacks an efficient sharding and distributed mechanism, the keys may be centrally exposed due to improper management; if the identity de-sensitization cannot completely cut off the association between the data and the individual identity, it is difficult to cope with advanced tracking technologies. These unresolved technical factors directly lead to a double dilemma in the security and privacy protection of the communication system, thus giving rise to technical problems that urgently need to be broken through. Summary of the Invention

[0003] The main object of the present invention is to provide a traceable secure communication method, device and equipment based on a privacy number, so as to construct a security system that takes into account the completeness of end-to-end encryption, the reliability of key management, and the effectiveness of identity de-sensitization.

[0004] To achieve the above object, the traceable secure communication method based on a privacy number provided by the present invention includes the following steps: Obtain a communication record, generate a distributed unique identifier matching the communication record, sign the identifier and the communication record using the SM2 algorithm, obtain the evidence data and write it into a blockchain node; Obtain the main key from the blockchain node, perform sharding processing on the main key to generate multiple sub-key fragments, determine the storage locations of the sub-key fragments, generate a session key using the SM4 algorithm according to the sub-key fragments, and perform end-to-end encryption processing on the communication content to obtain encrypted communication data; Judge whether the communication parties of the encrypted communication data have identity de-sensitization identifiers. If not, perform identity verification. When the verification is passed, trigger a dynamic risk assessment to obtain a dynamic risk assessment result; When it is judged that the risk level of the dynamic risk assessment result exceeds a preset threshold, start a permission fusing mechanism to block high-risk communication connections.

[0005] Further, the step of obtaining a communication record, generating a distributed unique identifier matching the communication record, signing the identifier and the communication record using the SM2 algorithm, obtaining the evidence data and writing it into a blockchain node includes: Obtain a communication record, and obtain the original data set by parsing and extracting key fields; For the original data set, a distributed generation method is adopted to generate unique identifiers, and an identification data set is obtained; Extract the identifiers from the identification data set, combine with the original data set, and perform signature processing using the SM2 algorithm to obtain the signature result; Generate the evidence data through the signature result, determine the data integrity, and obtain the data set to be stored; Obtain the blockchain node address, perform a write operation on the data set to be stored, and obtain the node confirmation information; According to the node confirmation information, judge whether the write is successful. If successful, record the log to obtain the operation completion status; Through the operation completion status, use the hash algorithm to verify the log to obtain the final evidence voucher.

[0006] Furthermore, the steps of obtaining the master key from the blockchain node, performing sharding processing on the master key to generate multiple sub-key fragments, and determining the storage locations of the sub-key fragments include: For the generated sub-key fragments, use the hash function to calculate the identification values of the sub-key fragments to determine the unique identifier; According to the identification values of the sub-key fragments, query the corresponding storage locations through the preset mapping table to obtain the storage allocation result; If the identification value of the sub-key fragment matches the mapping table, transmit the sub-key fragment to the corresponding storage location and judge the transmission completion status; Obtain the storage location information of all sub-key fragments, verify the integrity of each sub-key fragment through the verification algorithm to obtain the verification result; According to the verification result, if an abnormality is detected, obtain the master key source from the key management module again to generate new sub-key fragments; Update the allocation record in the key management module through the storage location information and the verification result to determine the final status.

[0007] Furthermore, the steps of generating a session key using the SM4 algorithm according to the sub-key fragments and performing end-to-end encryption processing on the communication content to obtain the encrypted communication data include: Generate a session key using the SM4 algorithm through the sub-key fragments to obtain the session key data; According to the session key data, perform encryption processing on the communication content to obtain the preliminary encryption result; Through the preliminary encryption result, perform secondary encryption in an end-to-end encryption manner to obtain the encrypted communication data; Obtain the encrypted communication data, calculate the check value using the hash algorithm to obtain the data integrity identifier; If the data integrity identifier is consistent with the preset threshold, decrypt the encrypted communication data through the SM4 algorithm to obtain the decrypted communication content; According to the decrypted communication content, determine whether there are abnormal characters to obtain the content security evaluation result; Based on the content security evaluation result, use a log recording tool to store the processing record to obtain the business operation log.

[0008] Further, the step of determining whether the two communication parties of the encrypted communication data have identity desensitization identifiers, and if not, performing identity verification and triggering dynamic risk assessment when the verification is passed to obtain the dynamic risk assessment result includes: Obtain the identity desensitization identifier by parsing the communication data to obtain the unique identifier result; Execute the zero-knowledge proof protocol according to the unique identifier result to determine the verification status; If the verification status is passed, generate a trigger signal according to the preset rules and judge that the trigger condition is established; Call the dynamic risk assessment module through the trigger signal to obtain the risk score data; Compare the risk score data with the preset threshold to judge the risk level; Adjust the evaluation start parameters according to the risk level to obtain the optimized evaluation strategy; Update the protocol execution process through the optimized evaluation strategy to determine the final verification result.

[0009] Further, when the risk level of the dynamic risk assessment result exceeds the preset threshold, the step of starting the permission fusing mechanism to block the high-risk communication connection includes: Obtain the dynamic risk data through real-time monitoring and calculate the evaluation result using the risk assessment model; Extract the risk level from the evaluation result and judge whether it exceeds the preset threshold; If the risk level exceeds the preset threshold, generate a trigger condition signal; Activate the permission fusing process according to the trigger condition signal to determine the execution scope of the fusing mechanism; For the high-risk communication connection, perform a blocking operation and update the connection status; Obtain the updated connection status and record the details of the blocking operation through the log; Analyze the blocking operation frequency from the log record to judge the system stability trend.

[0010] Further, in the step of obtaining the communication record, it also includes: Obtain the communication audit log, encrypt the log using the SM9 algorithm, generate audit data and store it in the specified database.

[0011] The present invention also provides a traceable secure communication device based on a privacy number, including: A blockchain unit, configured to obtain communication records, generate a distributed unique identifier matching the communication records, sign the identifier and the communication records using the SM2 algorithm, obtain evidence data, and write the evidence data into a blockchain node; A key unit, configured to obtain a master key from the blockchain node, perform sharding processing on the master key to generate a plurality of sub-key fragments, determine storage locations of the sub-key fragments, generate a session key according to the sub-key fragments using the SM4 algorithm, and perform end-to-end encryption processing on communication content to obtain encrypted communication data; A first judgment unit, configured to judge whether communication parties of the encrypted communication data have identity desensitization identifiers, and if not, perform identity verification, and trigger dynamic risk assessment when the verification is passed to obtain a dynamic risk assessment result; A second judgment unit, configured to start a permission fusing mechanism to block a high-risk communication connection when a risk level of the dynamic risk assessment result exceeds a preset threshold.

[0012] The present invention also provides a computer device, including a memory and a processor, where a computer program is stored in the memory, and when the processor executes the computer program, steps of the above traceable secure communication method based on a privacy number are implemented.

[0013] The present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, steps of the above traceable secure communication method based on a privacy number are implemented.

[0014] The traceable secure communication method, device, and equipment based on a privacy number provided by the present invention have the following beneficial effects: By obtaining communication records and generating a distributed unique identifier, signing using the SM2 algorithm, and writing evidence data into a blockchain, reliable storage of communication data is achieved. At the same time, the present invention performs sharding processing on a preset master key, generates a plurality of sub-key fragments and determines storage locations, generates a session key using the SM4 algorithm to perform end-to-end encryption on communication content, and ensures communication security. In addition, the present invention also introduces a zero-knowledge proof protocol for identity verification, combines dynamic risk assessment and a permission fusing mechanism to effectively prevent high-risk communication. Finally, the audit log is encrypted using the SM9 algorithm to ensure the security of audit data. The system comprehensively uses a variety of cryptographic technologies and security mechanisms to comprehensively improve the security, reliability, and auditability of the communication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 is a flowchart of a traceable secure communication method based on a privacy number in an embodiment of the present invention; Figure 2 It is a structural block diagram of a traceable secure communication device based on a privacy number in an embodiment of the present invention; Figure 3 It is a structural schematic diagram of a computer device in an embodiment of the present invention.

[0016] The realization of the purpose of the present invention, functional characteristics and advantages will be further described with reference to the embodiments and the accompanying drawings. Specific embodiments

[0017] In order to make the purpose, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention and are not used to limit the present invention.

[0018] Referring to Figure 1 , it is a flowchart of a traceable secure communication method based on a privacy number proposed by the present invention, and the method includes: S1. Obtain a communication record, generate a distributed unique identifier that matches the communication record, sign the identifier and the communication record using the SM2 algorithm, obtain the evidence data and write it into the blockchain node; S2. Obtain the master key from the blockchain node, perform sharding processing on the master key to generate multiple sub-key fragments, determine the storage location of each sub-key fragment, generate a session key using the SM4 algorithm according to the sub-key fragments, and perform end-to-end encryption processing on the communication content to obtain encrypted communication data; S3. Determine whether the communication parties of the encrypted communication data have identity desensitization identifiers. If not, perform identity verification. When the verification is passed, trigger a dynamic risk assessment to obtain a dynamic risk assessment result; S4. When it is determined that the risk level of the dynamic risk assessment result exceeds a preset threshold, start a permission fusing mechanism to block high-risk communication connections.

[0019] In one embodiment, the step of obtaining a communication record, generating a distributed unique identifier that matches the communication record, and signing the identifier and the communication record using the SM2 algorithm to obtain the evidence data and write it into the blockchain node includes: Obtain a communication record, and obtain the original data set by parsing and extracting key fields; For the original data set, use a distributed generation method to generate a unique identifier to obtain an identification data set; Extract the identifier from the identification data set, combine it with the original data set, and perform signature processing using the SM2 algorithm to obtain a signature result; Generate evidence data through the signature result, determine data integrity, and obtain a data set to be stored; Obtain the blockchain node address, perform a write operation on the dataset to be stored, and obtain node confirmation information; According to the node confirmation information, determine whether the write is successful. If successful, record the log to obtain the operation completion status; Through the operation completion status, use the hash algorithm to verify the log to obtain the final evidence storage certificate.

[0020] Specifically, during the process of obtaining communication records, the system extracted all communication data between October 1, 2023 and October 31, 2023 from the server, including information such as the sender, recipient, timestamp, and content, totaling 1000 records. To generate a distributed unique identifier, the Snowflake algorithm was adopted, which combines the timestamp, machine ID, and sequence number to generate a 64-bit unique identifier, such as "1234567890123456789". Next, the system uses the SM2 algorithm to sign the identifier and the communication record. First, the identifier and the communication record are concatenated into a string, and then the private key of SM2 is used for signing to generate a 256-bit signature value, such as "abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890". Finally, the signed evidence storage data is written into the blockchain node, and the data is packaged into a block through a smart contract and broadcast to the entire blockchain network to ensure the immutability and traceability of the data. The entire process is implemented through automated scripts and API interfaces, without manual intervention, ensuring the security and efficiency of the data. The above Snowflake algorithm includes:

[0021] T id represents the unique identifier generated by the Snowflake algorithm, t represents the current timestamp, t0 represents the starting timestamp, m represents the machine number, and s represents the sequence number.

[0022] In one embodiment, the steps of obtaining the master key from the blockchain node, performing sharding processing on the master key to generate multiple sub-key fragments, and determining the storage locations of the sub-key fragments include: For the generated sub-key fragments, use a hash function to calculate the identification values of the sub-key fragments to determine the unique identifier; According to the identification values of the sub-key fragments, query the corresponding storage locations through a preset mapping table to obtain the storage allocation result; If the identification value of the sub-key fragment matches the mapping table, transfer the sub-key fragment to the corresponding storage location and judge the transfer completion status; Obtain the storage location information of all sub - key fragments, verify the integrity of each sub - key fragment through a verification algorithm, and obtain the verification result; According to the verification result, if an anomaly is detected, obtain the main key source from the key management module again and generate new sub - key fragments; Update the allocation record in the key management module through the storage location information and the verification result to determine the final state.

[0023] Specifically, the key management module obtains a preset main key with a length of 256 bits by calling a security interface. This key is generated using the AES - 256 algorithm and stored in the hardware security module. When performing fragmentation on the main key, the Share i secret - sharing algorithm is used to divide the main key into 5 fragments. Any 3 of these fragments can reconstruct the original key. The fragmentation process uses a random polynomial f(x)=a0 + a1x + a2x^2 over the prime field GF(2^8), where a0 is the hexadecimal value 0x3f7d of the main key. The coefficients a1 and a2 are generated by a secure random number generator as 0x5c and 0x91 respectively. Each fragment contains the x - coordinate value (from 1 to 5) and the corresponding calculation result of f(x). For example, fragment 1 is (1,0x3f7d⊕0x5c⊕0x91). The storage location allocation uses the distributed hash table algorithm. The storage node is determined according to the first 8 bits of the SHA - 256 hash value of the fragment content. For example, the hash value of fragment 1 is 0x8e3a, corresponding to storage node N3, and the hash value of fragment 2 is 0x4b2, corresponding to storage node N7. At the same time, the fragment metadata is recorded on the blockchain to ensure immutability. Each block contains information such as the fragment hash, the storage node IP, and the timestamp. The PBFT consensus mechanism is used to achieve consistency among nodes. The allocation function of the storage node calculates the first 8 bits of the SHA256 hash value of the fragment content, and then takes the modulus with the total number of nodes N to obtain the storage node number. The hash algorithm replacement formula is as follows:

[0024] In one embodiment, according to the sub - key fragment, the steps of generating a session key using the SM4 algorithm and performing end - to - end encryption processing on the communication content to obtain encrypted communication data include: Generate a session key using the SM4 algorithm through the sub - key fragment to obtain session key data; Perform encryption processing on the communication content according to the session key data to obtain a preliminary encryption result; Perform secondary encryption on the preliminary encryption result in an end - to - end encryption manner to obtain encrypted communication data; Obtain the encrypted communication data, calculate the check value using the hash algorithm to obtain the data integrity identifier; If the data integrity identifier is consistent with the preset threshold, decrypt the encrypted communication data through the SM4 algorithm to obtain the decrypted communication content; Based on the decrypted communication content, determine whether there are abnormal characters to obtain the content security evaluation result; Through the content security evaluation result, use a log recording tool to store the processing record to obtain the business operation log.

[0025] Specifically, in the SM4 algorithm, first, sub-key segments need to be generated. Assume that 32 sub-key segments are generated through the key expansion algorithm, and each segment has a length of 128 bits. For example, K1 = 0x0123456789ABCDEFFEDCBA9876543210, K2 = 0x23456789ABCDEFFEDCBA987654321001, and so on. Next, use these sub-key segments to generate the session key. Assume the session key is SK = 0x89ABCDEFFEDCBA987654321001234567. In end-to-end encryption processing, the communication content is the plaintext M = 0x48656C6C6F20576F726C64 (i.e., the hexadecimal representation of "Hello World"). First, divide the plaintext M into 128-bit blocks, and each block is encrypted through the SM4 encryption algorithm.

[0026] For example, the first block M1 = 0x48656C6C6F20576F726C64 is encrypted through the SM4 encryption algorithm with the session key SK to obtain the ciphertext C1 = 0x1A2B3C4D5E6F708192A3B4C5D6E7F8. Then, encrypt the subsequent plaintext blocks in sequence, and finally obtain the complete encrypted communication data C = 0x1A2B3C4D5E6F708192A3B4C5D6E7F8. In the whole process, the SM4 algorithm ensures the security of the encrypted data through 32 rounds of non-linear transformation and linear transformation. Each round of transformation depends on the sub-key segments and the session key, thus realizing the end-to-end encryption protection of the communication content.

[0027] In one embodiment, the steps of determining whether the two communication parties of the encrypted communication data have identity desensitization identifiers, and if not, performing identity verification and triggering dynamic risk assessment when the verification is passed to obtain the dynamic risk assessment result include: Obtain the identity desensitization identifier by parsing the communication data to obtain the unique identifier result; Execute the zero-knowledge proof protocol according to the unique identifier result to determine the verification status; If the verification status is passed, generate a trigger signal according to the preset rules and judge that the trigger condition is established; Call the dynamic risk assessment module through the trigger signal to obtain the risk score data; Compare the risk score data with a preset threshold to determine the risk level; Adjust the evaluation start parameters according to the risk level to obtain an optimized evaluation strategy; Update the protocol execution process through the optimized evaluation strategy to determine the final verification result.

[0028] Specifically, in the identity de - identification label acquisition stage, both communication parties adopt anonymization processing based on the hash algorithm. For example, use SHA - 256 to perform a hash operation on the user's original identity identifier "user123@domain.com" to generate a de - identified identifier with a fixed length "a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3". The zero - knowledge proof protocol is implemented using the zk - SNARKs algorithm. The verifier sets the elliptic curve parameter as secp256k1 and generates a proof key pair (pk, vk). Among them, the prover calculates the commitment value h = g^x mod p = 16807 (p = 23) through the private key x = 5 and the public parameter g = 7, and proves that it knows the discrete logarithm without revealing x. The dynamic risk assessment model uses the logistic regression algorithm. The input features include 10 - dimensional features such as the login time difference Δt = 300 seconds, the historical verification success rate of 98%, and the device fingerprint matching degree of 92. Calculate the risk score S = σ(w^T·x)=78 (σ is the sigmoid function) through the weight vector w = [2, - 1,...]. When S exceeds the threshold of 7, secondary authentication is triggered. The entire process is automatically executed through a blockchain smart contract. The contract address 0x89ab...cd34 synchronizes and updates the risk assessment parameters every 30 blocks to ensure the immutability of the verification process. The system monitors the network latency index (currently 150ms) and throughput (1200TPS) in real - time. When the performance metrics exceed the preset range, the circuit scale of the zero - knowledge proof is automatically adjusted, and the arithmetic circuit with the original 1000 constraint terms is dynamically reduced to 600 constraint terms to maintain the system response time within 500ms.

[0029] In one embodiment, when it is determined that the risk level of the dynamic risk assessment result exceeds the preset threshold, the step of starting the permission fusing mechanism to block high - risk communication connections includes: Obtain dynamic risk data through real - time monitoring and calculate the evaluation result using a risk assessment model; Extract the risk level from the evaluation result and determine whether it exceeds the preset threshold; If the risk level exceeds the preset threshold, generate a trigger condition signal; Activate the permission fusing process according to the trigger condition signal and determine the execution scope of the fusing mechanism; For high-risk communication connections, perform blocking operations and update the connection status; Obtain the updated connection status and record the details of the blocking operation through logs; Analyze the frequency of blocking operations from the log records to judge the trend of system stability.

[0030] Specifically, during the dynamic risk assessment process, the system first collects network traffic data in real time, analyzes communication behaviors using an algorithm based on a Bayesian classifier, and calculates the risk score for each connection.

[0031] For example, when the proportion of abnormal traffic of a certain connection exceeds the preset 30%, the system will mark it as potentially high-risk. Then, the system combines historical data and current environmental factors, and uses the weighted average method to dynamically adjust the risk score to ensure the accuracy of the assessment results. When the risk score of a certain connection exceeds the preset threshold of 80, the system will automatically trigger the permission fusing mechanism to block all communications of this connection. During the blocking process, the system will record data such as the blocking time, connection information, and risk score, and generate a detailed log report for subsequent analysis and auditing. At the same time, the system will automatically adjust the weight parameters of the subsequent risk assessment according to the blocking situation, optimize the assessment algorithm, and improve the accuracy of risk identification.

[0032] For example, if a certain IP address triggers the fusing mechanism multiple times in a short period, the system will add it to the blacklist and give it a higher risk weight in subsequent assessments. Through this closed-loop risk assessment and fusing mechanism, the system can effectively reduce the threat of high-risk communications to network security and ensure the stability and security of the overall network environment.

[0033] In one embodiment, in the step of obtaining communication records, it further includes: Obtain communication audit logs, encrypt the logs using the SM9 algorithm, generate audit data, and store it in a specified database.

[0034] Obtain the audit logs in communication audits, extract complete records from the system through a preset interface to obtain an initial log set. For the initial log set, encrypt each record using the SM9 algorithm to generate an encrypted log set. Extract key fields from the encrypted log set, calculate a unique identifier through a hash function to obtain an identifier log set. If there are duplicate records in the identifier log set, merge the same identifiers through a deduplication operation to obtain a refined log set. According to the refined log set, write the data into a specified database using a storage protocol to obtain a storage confirmation status. Judge the data integrity through the storage confirmation status. If the integrity verification passes, generate final audit data. For the final audit data, establish a query structure using indexing technology to obtain retrievable audit records.

[0035] Specifically, in the process of obtaining communication audit logs, the system first extracts from network devices log records containing source IP address 19161, destination IP address 19162, communication time 2023-10-01 12:00:00, and packet size 1024 bytes. Then, the SM9 algorithm is used to encrypt the logs. The SM9 algorithm is an identity-based cryptographic algorithm, and its core lies in using bilinear pairing operations on elliptic curves. In specific operations, the system generates a random number r = 0x123456789abcdef and uses this random number to encrypt the log data, generating ciphertext C = SM9_Encrypt(log data, r). During the encryption process, the system uses elliptic curve parameters a = 0xFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF00000000FFFFFFFFFFFFFFFC and b = 0x28E9FA9E9D9F5E344D5A9E4BCF6509A7F39789F515AB8F92DDBCBD414D940E93 to ensure the security of encryption. After encryption is completed, the system stores the generated audit data in a specified MySQL database. The database table structure is designed to include fields such as id, encrypted data, timestamp, etc. Among them, the encrypted data field stores ciphertext C, and the timestamp field records the data storage time 2023-10-01 12:05:00. Throughout the process, the system realizes the extraction, encryption, and storage of logs through an automated script to ensure the security and integrity of the data.

[0036] Reference appendix Figure 2 A traceable and secure communication device based on a privacy number proposed by the present invention includes: A blockchain unit, configured to obtain communication records, generate a distributed unique identifier matching the communication records, sign the identifier and the communication records using the SM2 algorithm, obtain evidence data, and write it into a blockchain node; A key unit, configured to obtain a master key from the blockchain node, perform sharding processing on the master key to generate multiple sub-key fragments, determine the storage locations of the sub-key fragments, generate a session key using the SM4 algorithm according to the sub-key fragments, and perform end-to-end encryption processing on the communication content to obtain encrypted communication data; A first judgment unit, configured to judge whether the communication parties of the encrypted communication data have identity desensitization identifiers. If not, perform identity verification, and trigger dynamic risk assessment when the verification passes to obtain a dynamic risk assessment result; A second judgment unit, configured to start a permission fusing mechanism to block high-risk communication connections when the risk level of the dynamic risk assessment result exceeds a preset threshold.

[0037] Refer toFigure 3 , an embodiment of the present invention further provides a computer device, which may be a server, and its internal structure may be as Figure 3 shown. The computer device includes a processor, a memory, a display screen, an input device, a network interface, and a database connected through a system bus. Among them, the processor of the computer design is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store the corresponding data in this embodiment. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, the above method is implemented.

[0038] Those skilled in the art can understand that Figure 3 the structure shown in is only a block diagram of a part of the structure related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied.

[0039] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the above method is implemented. It can be understood that the computer-readable storage medium in this embodiment may be a volatile readable storage medium or a non-volatile readable storage medium.

[0040] In summary, by obtaining communication records and generating a distributed unique identifier, signing with the SM2 algorithm and writing the evidence data into the blockchain, the trustworthy storage of communication data is realized. At the same time, the present invention shards the preset master key, generates multiple sub-key fragments and determines the storage locations, and uses the SM4 algorithm to generate a session key to encrypt the communication content end-to-end, ensuring communication security. In addition, the present invention also introduces a zero-knowledge proof protocol for identity authentication, combined with a dynamic risk assessment and a permission fusing mechanism to effectively prevent high-risk communications, and comprehensively uses a variety of cryptographic technologies and security mechanisms to comprehensively improve the security, credibility, and auditability of the communication process.

[0041] Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to a memory, storage, database, or other medium provided by the present invention and used in the embodiments can include non-volatile and / or volatile memories. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (SSRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM, etc.

[0042] It should be noted that in this article, the terms "including", "comprising", or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, apparatus, article, or method including a series of elements not only includes those elements but also includes other elements not expressly listed, or further includes elements inherent to such process, apparatus, article, or method. Without further limitation, an element defined by the statement "including one..." does not exclude the existence of another identical element in the process, apparatus, article, or method including that element.

[0043] The above are only the preferred embodiments of the present invention, and do not limit the patent scope of the present invention accordingly. Any equivalent structure or equivalent process transformation made by using the specification and drawings of the present invention, or directly or indirectly applied in other related technical fields, shall be similarly included in the patent protection scope of the present invention.

Claims

1. A traceable and secure communication method based on a privacy number, characterized in that, It includes the following steps: Obtain communication records, generate a distributed unique identifier that matches the communication records, sign the identifier and the communication records using the SM2 algorithm, obtain the certified data and write it into the blockchain node; Obtain the master key from the blockchain node, perform sharding processing on the master key to generate multiple sub-key fragments, determine the storage locations of the sub-key fragments, generate a session key using the SM4 algorithm according to the sub-key fragments, and perform end-to-end encryption processing on the communication content to obtain encrypted communication data; Judge whether the communication parties of the encrypted communication data have identity de-sensitization identifiers, if not, perform identity verification, and trigger dynamic risk assessment when the verification passes to obtain the dynamic risk assessment result; When it is judged that the risk level of the dynamic risk assessment result exceeds the preset threshold, start the permission fusing mechanism to block high-risk communication connections.

2. The traceable secure communication method based on a privacy number according to claim 1, wherein The step of obtaining communication records, generating a distributed unique identifier that matches the communication records, and signing the identifier and the communication records using the SM2 algorithm, obtaining the certified data and writing it into the blockchain node, includes: Obtain communication records, extract keyword fields by parsing to obtain the original data set, and use a distributed generation method for the original data set to generate a unique identifier to obtain the identification data set; Extract the identifier from the identification data set, combine it with the original data set, perform signature processing using the SM2 algorithm to obtain the signature result, generate the certified data through the signature result, determine the data integrity to obtain the data set to be stored; Obtain the blockchain node address, perform a write operation on the data set to be stored to obtain the node confirmation information; according to the node confirmation information, judge whether the write is successful, if successful, record the log to obtain the operation completion status; Through the operation completion status, use the hash algorithm to verify the log to obtain the final certified voucher.

3. The traceable secure communication method based on a privacy number according to claim 1, characterized in that, The step of obtaining the master key from the blockchain node, performing sharding processing on the master key to generate multiple sub-key fragments, and determining the storage locations of the sub-key fragments, includes: For the generated sub-key fragments, use a hash function to calculate the identification values of the sub-key fragments, determine the unique identifier, and query the corresponding storage location through the preset mapping table according to the identification values of the sub-key fragments to obtain the storage allocation result; If the identification value of the sub-key fragment matches the mapping table, transmit the sub-key fragment to the corresponding storage location and judge the transmission completion status; obtain the storage location information of all sub-key fragments, and verify the integrity of each sub-key fragment through the verification algorithm to obtain the verification result; According to the verification result, if an abnormality is detected, obtain the master key source from the key management module again to generate new sub-key fragments; update the allocation record in the key management module through the storage location information and the verification result to determine the final state.

4. The traceable secure communication method based on a privacy number according to claim 1, characterized in that The step of generating a session key using the SM4 algorithm according to the sub-key fragments, and performing end-to-end encryption processing on the communication content to obtain encrypted communication data, includes: Generate a session key using the SM4 algorithm through the sub-key fragments to obtain the session key data, and perform encryption processing on the communication content according to the session key data to obtain the preliminary encryption result; Based on the preliminary encryption result, perform secondary encryption using end-to-end encryption to obtain encrypted communication data; then obtain the encrypted communication data, calculate the check value using a hash algorithm to obtain the data integrity identifier; if the data integrity identifier is consistent with the preset threshold, decrypt the encrypted communication data using the SM4 algorithm to obtain the decrypted communication content; Based on the decrypted communication content, determine whether there are abnormal characters to obtain the content security evaluation result, and based on the content security evaluation result, use a log recording tool to store the processing record to obtain the business operation log.

5. The traceable secure communication method based on a privacy number according to claim 1, wherein The steps of determining whether the two communication parties of the encrypted communication data have identity desensitization identifiers, and if not, performing identity verification, and triggering a dynamic risk assessment when the verification is passed to obtain the dynamic risk assessment result, include: Obtain the identity desensitization identifier by parsing the communication data to obtain the unique identifier result, execute the zero-knowledge proof protocol according to the unique identifier result to determine the verification status, if the verification status is passed, then generate a trigger signal according to the preset rules, and judge that the trigger condition is established; Call the dynamic risk assessment module through the trigger signal to obtain the risk score data, compare the risk score data with the preset threshold to judge the risk level, adjust the evaluation start parameters according to the risk level to obtain the optimized evaluation strategy, and update the protocol execution process through the optimized evaluation strategy to determine the final verification result.

6. The traceable secure communication method based on a privacy number according to claim 1, wherein The steps of starting the permission fusing mechanism to block the high-risk communication connection when the risk level of the dynamic risk assessment result exceeds the preset threshold include: Obtain the dynamic risk data through real-time monitoring, calculate the evaluation result using the risk assessment model, extract the risk level from the evaluation result, judge whether it exceeds the preset threshold, if the risk level exceeds the preset threshold, then generate a trigger condition signal, and activate the permission fusing process according to the trigger condition signal to determine the execution scope of the fusing mechanism; For the high-risk communication connection, perform a blocking operation, update the connection status, obtain the updated connection status, record the details of the blocking operation through the log, and analyze the blocking operation frequency from the log to judge the system stability trend.

7. The traceable secure communication method based on a privacy number according to claim 1, wherein In the step of obtaining the communication record, it also includes: Obtain the communication audit log, encrypt the log using the SM9 algorithm to generate audit data and store it in the specified database.

8. A traceable and secure communication device based on a privacy number, characterized in that, Include: The blockchain unit is used to obtain the communication record, generate a distributed unique identifier matching the communication record, sign the identifier and the communication record using the SM2 algorithm to obtain the evidence data and write it into the blockchain node; The key unit is used to obtain the main key from the blockchain node, perform sharding processing on the main key to generate multiple sub-key fragments, determine the storage location of each sub-key fragment, generate a session key using the SM4 algorithm according to the sub-key fragment, and perform end-to-end encryption processing on the communication content to obtain the encrypted communication data; The first judgment unit is used to judge whether the two communication parties of the encrypted communication data have identity desensitization identifiers, and if not, perform identity verification, and trigger a dynamic risk assessment when the verification is passed to obtain the dynamic risk assessment result; A second judgment unit, configured to start a permission fusing mechanism to block a high-risk communication connection when the risk level of the dynamic risk assessment result exceeds a preset threshold.

9. A computer device, comprising a memory and a processor, wherein a computer program is stored in the memory, characterized in that, When the processor executes the computer program, the steps of the traceable secure communication method based on a privacy number according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, the steps of the traceable secure communication method based on a privacy number according to any one of claims 1 to 7 are implemented.

Images