Communication security data right confirmation method based on dynamic key negotiation and key fragmentation

Abstract

The invention relates to a communication security data right confirmation method based on dynamic key negotiation and key fragmentation, and belongs to the technical field of data security and right confirmation in a communication system. By combining data verification, meta-information management, dynamic key negotiation and key fragmentation mechanisms, the invention provides a reliable data right confirmation scheme, which is suitable for various communication security scenes and provides powerful support for data security of a communication system.

Description

Technical Field

[0001] The present invention belongs to the technical field of data security and rights confirmation in communication systems, and specifically relates to a communication security data rights confirmation method based on dynamic key negotiation and key fragmentation. Background Art

[0002] In modern communication security systems, data exchange between data processors and data generators requires a high degree of security and authenticity. In many real-world scenarios, data processors are trusted entities that undergo rigorous authentication and oversight, while the trustworthiness of data generators varies widely. Data processors face the risk of data injection from untrusted data generators, such as malicious data tampering and falsification of data sources. These actions can disrupt the normal business processes of data processors, leading to serious consequences such as poor decision-making and business losses.

[0003] Existing data security technologies are insufficient when dealing with scenarios where the data generator is untrusted. Traditional encryption and verification mechanisms often focus on preventing external attacks, but lack comprehensive and in-depth verification of the authenticity and integrity of internal data sources. When the data generator is untrustworthy, ensuring the authenticity, reliability, and traceability of data received by the data processor becomes a pressing issue. Furthermore, traditional key management methods pose the risk of key leakage when dealing with untrusted data generators. Once the data generator is compromised, the security of the entire communication system could collapse. Summary of the Invention

[0004] (1) Technical issues to be solved

[0005] The technical problem to be solved by the present invention is: to design a communication security data authentication scheme applied to the communication security system, so as to ensure that the data received by the data processing end is authentic and reliable and the source is traceable when the data generation end is untrustworthy, while ensuring the security of the key in the communication process, thereby ensuring safe and reliable data interaction between the data generation end and the processing end.

[0006] (2) Technical solution

[0007] In order to solve the above technical problems, the present invention provides a communication security data authentication method based on dynamic key agreement and key fragmentation, which includes the following steps:

[0008] Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end;

[0009] Step 2: The data generator generates the data to be sent, the digital certificate, and the hash value, encrypts them using the public key from the data sender, and signs them using the private key of the data generator.

[0010] Step 3: The data generation end uses a symmetric encryption algorithm and a symmetric key to encrypt the data to be sent, obtains the ciphertext, and sends the encrypted digital certificate, signed hash value, and ciphertext to the data processing end;

[0011] Step 4: After receiving the data, the data processing end first uses its own private key to decrypt the encrypted digital certificate to obtain the metadata. Then, it uses the public key of the data generation end to verify the signed hash value. If the hash value verification matches, it proceeds to the next step; otherwise, it refuses to process the data to be sent.

[0012] Step 5: The data processing end and the data generation end use a dynamic key negotiation mechanism to combine the key fragments they each hold to generate a complete key for subsequent data communication;

[0013] Step 6: The data processing end decrypts the encrypted data with the complete key.

[0014] The present invention also provides a device for implementing the method, comprising:

[0015] Data generation end: used to receive the public key of the data processing end, calculate the hash value of the data and sign it, generate and encrypt the digital certificate containing metadata, submit the hash value to the off-chain verification, receive partial key fragments sent by the data processing end, and send the encrypted digital certificate, signed hash value and original data to the data processing end;

[0016] Data processing end: used to generate public keys, private keys, key fragments and send public keys and partial key fragments, receive data sent by the data generation end, decrypt digital certificates, verify hash values, generate complete keys through a dynamic key negotiation mechanism in combination with the data generation end, confirm the integrity, authenticity and source legitimacy of the data, and perform data processing.

[0017] (3) Beneficial effects

[0018] Compared with the prior art, the present invention has the following beneficial effects:

[0019] 1. Strengthen data authenticity verification: Through digital signature and digital certificate mechanisms, not only the integrity of the data is verified, but also the source and metadata of the data are strictly verified to ensure that the data received by the data processing end is authentic and reliable, and effectively prevent malicious behavior from untrusted data generation ends.

[0020] 2. Intelligent Meta-Information Management: Introducing a meta-information management module to deeply mine and utilize data meta-information. This meta-information is used to optimize data processing flows, improve data processing efficiency and quality, and provide a richer basis for business decision-making.

[0021] 3. Dynamic Key Management: The data processing end regularly updates key pairs and key fragments to enhance key security and reduce the risk of key cracking. At the same time, through a dynamic key negotiation mechanism and blockchain smart contracts, the continuity and security of data interaction are guaranteed.

[0022] 4. Key Security: A key fragmentation mechanism is introduced, ensuring that even if the data generation end is compromised, the complete key cannot be obtained. Blockchain smart contracts ensure that the key generation process is auditable, further enhancing the security of key management.

[0023] 5. High adaptability: This technology can be applied to different encryption algorithms and communication protocols, has strong scalability, and can flexibly respond to various complex communication security scenarios to meet the data security needs of different industries. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 This is a flow chart of the data rights confirmation method of the present invention. DETAILED DESCRIPTION

[0025] In order to make the purpose, content and advantages of the present invention more clear, the specific implementation methods of the present invention are further described in detail below with reference to the accompanying drawings and examples.

[0026] The purpose of the present invention is to provide a data authentication method and processing device based on asymmetric encryption, hash verification and dynamic key negotiation mechanism, which is applied to a communication security system. It can ensure that the data received by the data processing end is authentic and reliable and the source is traceable when the data generation end is untrustworthy, and at the same time, it ensures the key security during the communication process through an innovative key management mechanism.

[0027] To this end, the present invention provides the following specific technical solutions:

[0028] 1. A data rights confirmation method for a communication security system

[0029] refer to Figure 1 , the method comprises the following steps:

[0030] Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end.

[0031] The data processing end (trusted party), as the initiator of the blockchain smart contract, initiates a smart contract to the blockchain module and generates an asymmetric key pair (public key Q and private key d) based on the Elliptic Curve Cryptography (ECC) algorithm. On the elliptic curve E, p is defined as a prime number, and the finite field composed of p elements is GF(p). A random integer d (1 < d < n - 1, where n is the order of the points on the elliptic curve) is selected as the private key, and the public key Q = dG, where G is the base point of the elliptic curve, and dG represents the accumulation of d Gs. At the same time, the data processing end uses the Shamir secret sharing algorithm to generate multiple key fragments for subsequent key negotiation. Suppose a key K is to be split into n key fragments, and at least k key fragments are required to recover the original key. The data processing end constructs a polynomial f(x) of degree k - 1 = a k-1 x k-1 +…+a1x+a0, where a0 = K, a1, …, a k-1 are k coefficients randomly selected over the finite field GF(p). Then n points (x i , f(x i )) are calculated, i = 1, …, n, and these points are the key fragments. The data processing end sends the public key Q to the data generation end through a secure channel and selects some key fragments to send to the data generation end. The data generation end only holds these partial key fragments.

[0032] Step 2: The data generation end generates the data to be sent, digital certificate, hash value, encrypts them using the public key from the data sending end, and signs them using the private key of the data generation end.

[0033] After receiving the public key Q from the data processing end, the data generation end processes the data M to be sent as follows:

[0034] First, the hash value H = SHA256(M) of the data M is calculated using a strong hash algorithm (such as SHA-256 or SHA-3). Then the hash value H is signed using its own private key. Suppose the private key of the data generation end is d gen , and the public key is Q gen . Using the ECDSA signature algorithm, a random integer k' is selected, 1 < k’ < n - 1, and the following is calculated:

[0035] R = k'G = (x R , y R ),

[0036] r = x R mod n,

[0037] s = k' -1 (H + d gen r) mod n

[0038] Then the signature result, i.e., the hashed value after signing, is (r, s), where R is a point obtained by multiplying k’ and G, with coordinates (x R , y R ), r is the result of taking the modulus of the x - coordinate of point R with respect to n and is part of the signature. At the same time, a digital certificate containing data - related meta - information (such as data type, generation time, intended use, etc.) is generated, and the digital certificate is encrypted using the public key of the data - processing end. If the Elliptic Curve Integrated Encryption Scheme (ECIES) encryption algorithm is used, a random integer r′ is randomly selected, 1 < r′ < n - 1, calculate C1 = r'G, S = r'Q, and derive the symmetric key K s , and use a symmetric encryption algorithm (such as AES) to encrypt the meta - information I to obtain The encrypted digital certificate is (C1, C2). The data - generation end can only submit the hashed value H to the blockchain module for off - chain verification and cannot directly control key generation. C1 is the public - key part of the ciphertext, which implicitly contains the random - number r′ information; S is the shared secret between the two parties, and the receiving party can calculate the same S through d and C1 to achieve key agreement; C2 is the encrypted ciphertext, which together with C1 forms the complete ciphertext.

[0039] Step 3: The data - generation end sends data.

[0040] The data - generation end uses the symmetric encryption algorithm AES and the symmetric key K s to encrypt the data M to be sent, obtaining The encrypted digital certificate (C1, C2), the hashed value after signing (r, s), and M 密文 are sent to the data - processing end together.

[0041] Step 4: The data - processing end decrypts and verifies.

[0042] After receiving the data, the data - processing end first uses its own private key d to decrypt the encrypted digital certificate (C1, C2), calculates S = dC1, and derives the symmetric key K s , and then decrypts C2 to obtain the meta - information I. In this step, S = dC1 is the calculation method of the data - processing end, and the calculation result is the same as the value calculated by the data - generation end using the formula S = r'Q in Step 2. Then, use the public key of the data - generation end to verify the hashed value after signing, and calculate:

[0043] w = s -1 mod n

[0044] u1 = Hw mod n

[0045] u2 = rw mod n

[0046] R′ = u1G + u2Q gen =(xR′ ,y R′ )

[0047] r''=x R′ mod n

[0048] If r''=r and H'=SHA256(M) calculated by the data processing end is consistent with the received H, the hash value verification matches and the next step is continued; otherwise, the data M is rejected.

[0049] Step 5: If the verification is successful, the data processing end and the data generation end use the dynamic key negotiation mechanism to combine the key fragments they each hold to generate the complete key K for subsequent data communication.

[0050] If the data processing end holds m1 fragments, the data generation end holds m2 fragments, and m1+m2≥k, use the Lagrange interpolation formula The original key K is recovered over the finite field GF(p). During this process, the blockchain module records and monitors the key generation process based on smart contracts. The contract records the key fragment information provided by each participant, the time and order of combination, etc., to ensure that the key generation process complies with predetermined rules and procedures.

[0051] Step 6: The data processing end decrypts the encrypted data using the key K.

[0052] Use the AES decryption function and key K to perform reverse operation on the ciphertext Restore the original data M.

[0053] Data integrity is verified by generating a key-based message authentication code. Data is cleansed based on metadata and business rules, such as desensitizing sensitive information. Key K can also be used in cryptographic calculations to protect privacy, such as in federated learning scenarios. During storage, data is encrypted with key K and stored in a database or file system. An encrypted index is generated based on the key to improve retrieval efficiency. Keys are used for access control, and regular key updates ensure data security.

[0054] 2. Refined encryption and decryption technology used in communication systems

[0055] As can be seen from the steps of the data rights confirmation method described above, the present invention utilizes an innovative key exchange mechanism that combines dynamic key negotiation with blockchain smart contracts. During the data verification and key negotiation phases, key exchange is performed using the dynamic key negotiation mechanism and blockchain smart contracts. Traditional key exchange methods lack real-time monitoring and immutable records, making them vulnerable to man-in-the-middle attacks and tampering. This invention introduces blockchain smart contracts to provide real-time monitoring and recording of the key exchange process. The dynamic key negotiation mechanism enables dynamic key generation and update based on actual conditions, enhancing key security and timeliness. The blockchain smart contract records the key fragments provided by each participant, along with the time and sequence of their combination, ensuring that the key generation process adheres to predefined rules and procedures. Furthermore, the immutable nature of blockchain ensures auditability of the key generation process. Any security issues can be traced and verified by querying blockchain records. Furthermore, the data processing end regularly updates key pairs and fragments, promptly notifying the generation end, further reducing the risk of key leakage and ensuring key security during communication.

[0056] Encryption process: At the data generation end, an asymmetric encryption algorithm such as RSA or elliptic curve cryptography (ECC) is used to encrypt the digital certificate to ensure the security of the digital certificate during transmission. At the data processing end, the corresponding private key is used to decrypt the data and obtain the data metadata.

[0057] Innovative verification mechanism combining hash value and digital signature: The present invention deeply integrates a strong hash algorithm (such as SHA-256 or SHA-3) with a digital signature and public key verification mechanism. Traditional verification mechanisms may rely solely on a single hash verification or signature verification, which is vulnerable to attacks. The present invention forms a double verification line of defense by signing the data hash value, which is then verified by the processing end using a public key. On the one hand, the hash algorithm ensures the integrity of the data, and any slight change in the data will result in a huge change in the hash value; on the other hand, the digital signature ensures the authenticity of the hash value and prevents the hash value from being tampered with. If the data is tampered with, the hash value verification fails, and the processing end can reject it in time, effectively preventing malicious tampering by the untrusted generating end, and greatly improving the accuracy and security of data verification.

[0058] 3. A data rights confirmation processing device for a communication security system

[0059] The device includes:

[0060] Data generation end: Responsible for receiving the public key of the data processing end, calculating the hash value of the data and signing it, generating a digital certificate containing metadata and encrypting it, submitting the hash value to off-chain verification, receiving partial key fragments sent by the data processing end, and sending the encrypted digital certificate, signed hash value and original data to the data processing end.

[0061] Data processing end: Responsible for generating public keys, private keys, key fragments and sending public keys and partial key fragments, receiving data sent by the data generation end, decrypting digital certificates, verifying hash values, generating complete keys through a dynamic key negotiation mechanism in combination with the data generation end, confirming the integrity, authenticity and legitimacy of the data, and performing data processing.

[0062] Encryption and decryption modules are deployed on both the data generation and processing ends. They perform asymmetric encryption and decryption operations such as RSA and ECC, while ensuring the security of key exchange during communication and preventing man-in-the-middle attacks. They also feature key update management, enabling them to update key pairs and key fragments on the data processing end according to set cycles or trigger conditions.

[0063] The metadata management module deployed on the data generation side is responsible for parsing and processing the metadata in the decrypted digital certificate, performing validity checks, and storing it. It also intelligently schedules and optimizes the data processing flow based on the metadata, for example, selecting the appropriate data processing algorithm based on the data's intended use.

[0064] Blockchain interaction modules are deployed on both the data generation end and the data processing end: on the data processing end, it is responsible for interacting with the blockchain module and initiating smart contracts to the blockchain module. The blockchain module records and supervises the key generation process based on the smart contract to ensure that the key generation process is auditable.

[0065] To facilitate a clearer understanding of the technical solution of the present invention, the following detailed description is based on specific application scenarios in communication systems. Consider a wireless communication network environment where a signal source, acting as a data generator, continuously generates various types of data, such as environmental monitoring data collected by sensors. A receiver, acting as a data processor, is responsible for receiving, processing, and storing this data.

[0066] 1. Key and Fragment Generation and Distribution: As the initiator of a blockchain smart contract, the receiver generates an asymmetric key pair (public key Q and private key d) using elliptic curve cryptography (ECC). Simultaneously, it uses the Shamir secret sharing algorithm to generate multiple key fragments. The receiver then sends the public key Q and some of the key fragments to the source via a secure wireless key distribution channel.

[0067] 2. Data preprocessing on the generation end: After receiving the public key Q, the source calculates the hash value H = SHA256(M) of the collected environmental monitoring data M. It signs H with its own private key, generating the signature result (r, s). The source generates a digital certificate containing data metadata (such as data collection location and time). It encrypts the digital certificate with the public key Q using the Elliptic Curve Integrated Cryptography (ECIES) scheme, resulting in the encrypted digital certificate (C1, C2). The source only submits the hash value H to the off-chain verification system for verification and does not participate in the key generation process.

[0068] 3. Data transmission: The source sends the encrypted digital certificate (C1, C2), the signed hash value (r, s) and the original environmental monitoring data M to the receiver through the wireless communication network.

[0069] 4. Data Verification and Key Agreement: After receiving the data, the receiver uses its private key d to decrypt the encrypted digital certificate and obtain the data's metadata. It then verifies the signed hash value using the source's public key to check its consistency with the hash value it calculated. If verification succeeds, the receiver and source use a dynamic key agreement mechanism to recover the complete key K using the Lagrange interpolation formula over the finite field GF(p) using their respective key fragments. During this process, the blockchain smart contract records the key fragments provided by both parties, along with the time and order of their combination, to ensure that the key generation process complies with security standards.

[0070] 5. Data Processing and Storage: The receiver uses the recovered key K to decrypt the encrypted environmental monitoring data M. Data integrity is verified by generating a key-based message authentication code. Data is cleansed based on data metadata and processing rules, such as removing anomalous monitoring data points. Key K is used in encryption calculations, and the processed data is stored in a database. During storage, an encrypted index is generated based on key K to facilitate subsequent rapid queries. Key K is also used for access control, ensuring that only authorized users or systems can access this data. The receiver updates key pairs and key fragments at a set interval and notifies the source of the information through a blockchain smart contract to ensure communication security. Throughout the communication process, if any data anomalies or key security issues arise, system administrators can query the blockchain smart contract records to trace the data source and key generation process, promptly identifying and resolving any issues and ensuring data security within the wireless communication network.

[0071] As can be seen, the present invention proposes a method and device for communication security data authentication based on dynamic key agreement and key fragmentation. Specifically, it involves a solution that integrates dynamic key agreement, key fragmentation, asymmetric encryption, blockchain smart contracts, and hash verification technologies. The solution aims to ensure secure and reliable data interaction between the data generation and processing ends, and can ensure ownership and secure data transmission on the data generation end even when the data processing end is not fully trusted. By combining data verification, metadata management, dynamic key agreement, and key fragmentation mechanisms, a reliable data authentication solution is provided, applicable to a variety of communication security scenarios, providing strong support for data security in communication systems.

[0072] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A communication security data authentication method based on dynamic key negotiation and key fragmentation, characterized in that: The method comprises the following steps: Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end; Step 2: The data generator generates the data to be sent, the digital certificate, and the hash value, encrypts them using the public key from the data sender, and signs them using the private key of the data generator. Step 3: The data generation end uses a symmetric encryption algorithm and a symmetric key to encrypt the data to be sent, obtains the ciphertext, and sends the encrypted digital certificate, signed hash value, and ciphertext to the data processing end; Step 4: After receiving the data, the data processing end first uses its own private key to decrypt the encrypted digital certificate to obtain the metadata. Then, it uses the public key of the data generation end to verify the signed hash value. If the hash value verification matches, it proceeds to the next step; otherwise, it refuses to process the data to be sent. Step 5: The data processing end and the data generation end use a dynamic key negotiation mechanism to combine the key fragments they each hold to generate a complete key for subsequent data communication; Step 6: The data processing end decrypts the encrypted data with the complete key.

2. The method according to claim 1, wherein Step 1 is as follows: As the initiator of the blockchain smart contract, the data processing end initiates a smart contract to the blockchain module and generates an asymmetric key pair based on the elliptic curve cryptography algorithm. Among them, on the elliptic curve E, p is defined as a prime number, and the finite field composed of p elements is GF(p). A random integer d is selected as the private key, where 1 < d < n - 1 and n is the order of the points on the elliptic curve. The public key Q = dG, where G is the base point of the elliptic curve, and dG represents the accumulation of d Gs. At the same time, the data processing end uses the Shamir secret sharing algorithm to generate multiple key fragments for subsequent key negotiation. Among them, assuming that a key K is to be split into n key fragments and at least k key fragments are required to recover the original key, the data processing end constructs a polynomial f(x) = a k-1 x k-1 +…+a1x+a0, where a0 = K, a1,…,a k-1 are k coefficients randomly selected in the finite field GF(p). Then, n points (x i , f(x i )) are calculated, where i = 1,…,n, and these points are the key fragments. The data processing end sends the public key Q to the data generation end through a secure channel and selects some key fragments to send to the data generation end. The data generation end only holds these partial key fragments.

3. The method according to claim 2, wherein Step 2 is as follows: After the data generation end receives the public key Q from the data processing end, it processes the data M to be sent as follows: First, calculate the hash value H = SHA256(M) of the data M using a strong hash algorithm (such as SHA-256 or SHA-3), and then sign this hash value H using its own private key. Assume the private key of the data generation end is d gen , and the public key is Q gen , using the ECDSA signature algorithm, randomly select an integer k', where 1 < k’ < n - 1, and calculate: R=k'G=(x R ,y R ), r=x R mod n, s=k' -1 (H+d gen r)mod n Then the signature result, i.e., the signed hash value, is (r, s), where R is a point obtained by multiplying k' and G, and the coordinates are (x R , y R ). r is the result of taking the modulus of the x-coordinate of point R with respect to n and is part of the signature. At the same time, a digital certificate containing data-related meta-information (such as data type, generation time, intended use, etc.) is generated, and the digital certificate is encrypted using the public key of the data processing end. If the elliptic curve integrated ECIES encryption algorithm is used, a random integer r' is selected, 1 < r' < n - 1, and C1 = r'G, S = r'Q are calculated, and the symmetric key K is derived from S s . The meta-information I is encrypted using the symmetric encryption algorithm AES to obtain . The encrypted digital certificate is (C1, C2). The data generation end can only submit the hash value H to the blockchain module for off-chain verification and cannot directly control the key generation. Among them, C1 is the public key part of the ciphertext; S is the shared secret between the two parties, and the receiver can calculate the same S through d and C1 to achieve key negotiation; C2 is the encrypted ciphertext, which together with C1 constitutes the complete ciphertext.

4. The method according to claim 3, wherein In step 3, the data generation end uses the symmetric encryption algorithm AES and the symmetric key K s Encrypt the sent data M and get the ciphertext The encrypted digital certificate (C1, C2), the signed hash value (r, s) and M 密文 Send it to the data processing end together.

5. The method according to claim 4, wherein Step 4 is as follows: After receiving the data, the data processing end first uses its own private key d to decrypt the encrypted digital certificate (C1, C2), calculates S = dC1, and derives the symmetric key K from S s , and then decrypt C2 to obtain the metadata I. Then, use the public key of the data generator to verify the signed hash value and calculate: w=s -1 mod n u1=Hw mod n u2=rw mod n R′=u1G+u2Q gen =(x R′ ,y R′ ) r’‘=x R′ mod n If r''=r and H'=SHA256(M) calculated by the data processing end is consistent with the received H, indicating that the hash value verification matches, then proceed to the next step; otherwise, refuse to process data M.

6. The method according to claim 5, wherein In step 5, if the data processing end holds m1 fragments, the data generation end holds m2 fragments, and m1+m2≥k, use the Lagrange interpolation formula Recover the key K over the finite field GF(p).

7. The method according to claim 6, wherein In the process of recovering the key K in step 5, the blockchain module records and supervises the key generation process based on the smart contract. The contract can record the key fragment information, combination time and sequence provided by each participant to ensure that the key generation process complies with the predetermined rules and procedures.

8. The method according to claim 6, wherein In step 6, the ciphertext is reversed using the AES decryption function and the complete key K. Restore the original data M.

9. The method according to any one of claims 1 to 8, characterized in that The method is applied in communication security system.

10. A device for implementing the method according to any one of claims 1 to 8, characterized in that: include: Data generation end: used to receive the public key of the data processing end, calculate the hash value of the data and sign it, generate and encrypt the digital certificate containing metadata, submit the hash value to the off-chain verification, receive partial key fragments sent by the data processing end, and send the encrypted digital certificate, signed hash value and original data to the data processing end; Data processing end: used to generate public keys, private keys, key fragments and send public keys and partial key fragments, receive data sent by the data generation end, decrypt digital certificates, verify hash values, generate complete keys through a dynamic key negotiation mechanism in combination with the data generation end, confirm the integrity, authenticity and source legitimacy of the data, and perform data processing.

Images