A Communication Security Data Ownership Confirmation Method Based on Dynamic Key Negotiation and Key Fragmentation

Abstract

This invention relates to a data ownership confirmation method for secure communication based on dynamic key negotiation and key fragmentation, belonging to the field of data security and ownership confirmation technology in communication systems. By combining data verification, metadata management, dynamic key negotiation, and key fragmentation mechanisms, this invention provides a reliable data ownership confirmation scheme applicable to various communication security scenarios, offering strong support for data security in communication systems.

Description

Technical Field

[0001] This invention belongs to the field of data security and ownership confirmation technology in communication systems, specifically relating to a communication security data ownership confirmation method based on dynamic key negotiation and key fragmentation. Background Technology

[0002] In modern communication security systems, data interaction between the data processing end and the data generation end requires a high degree of security and authenticity assurance. In many real-world scenarios, the data processing end is a rigorously certified and regulated trusted entity, while the trustworthiness of the data generation end varies. The data processing end faces the risk of data injection from untrusted data generation ends, such as malicious data tampering and falsifying data sources. These actions may disrupt the normal business processes of the data processing end, leading to serious consequences such as decision-making errors and business losses.

[0003] Existing data security technologies are insufficient when dealing with scenarios where the data generator is untrusted. Traditional encryption and verification mechanisms often focus on preventing external attacks, and their verification of the authenticity and integrity of internal data sources is not comprehensive or in-depth enough. Ensuring the authenticity, reliability, and traceability of data received by the data processing end when the data generator is untrusted becomes a pressing issue. Furthermore, traditional key management methods are vulnerable to key leakage when facing untrusted data generators; if the data generator is compromised, the entire communication system's security defenses may collapse. Summary of the Invention

[0004] (a) Technical problems to be solved

[0005] The technical problem to be solved by this invention is to design a communication security data ownership scheme for use in a communication security system, so as to ensure that the data received by the data processing end is authentic, reliable and traceable in the case that the data generation end is untrusted, while ensuring the security of the key during the communication process, thereby ensuring secure and reliable data interaction between the data generation end and the processing end.

[0006] (II) Technical Solution

[0007] To address the aforementioned technical problems, this invention provides a method for secure data ownership verification in communication based on dynamic key negotiation and key fragmentation. This method includes the following steps:

[0008] Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end;

[0009] Step 2: The data generator generates the data to be sent, a digital certificate, and a hash value, encrypts them using the public key from the data sender, and signs them using the private key from the data generator.

[0010] Step 3: The data generation end uses a symmetric encryption algorithm and a symmetric key to encrypt the data to be sent, obtaining ciphertext. The encrypted digital certificate, the hash value after signing, and the ciphertext are then sent to the data processing end.

[0011] Step 4: After receiving the data, the data processing end first uses its own private key to decrypt the encrypted digital certificate to obtain the metadata. Then, it uses the public key of the data generation end to verify the hash value after signing. If the hash value verification matches, it continues to the next step; otherwise, it refuses to process the data to be sent.

[0012] Step 5: The data processing end and the data generation end use a dynamic key negotiation mechanism to combine the key fragments they hold to generate a complete key for subsequent data communication;

[0013] Step Six: The data processing end decrypts the encrypted data using the complete key.

[0014] The present invention also provides an apparatus for implementing the method, comprising:

[0015] Data generation end: Used to receive the public key of the data processing end, calculate the hash value of the data and sign it, generate a digital certificate containing metadata and encrypt it, submit the hash value to off-chain verification, receive partial key fragments sent by the data processing end, and send the encrypted digital certificate, the signed hash value and the original data to the data processing end.

[0016] Data processing end: Used to generate public keys, private keys, and key fragments, and send public keys and partial key fragments; receive data sent by the data generation end; decrypt digital certificates; verify hash values; combine with the data generation end through a dynamic key negotiation mechanism to generate a complete key; confirm the integrity, authenticity, and legality of the data source; and perform data processing.

[0017] (III) Beneficial Effects

[0018] Compared with the prior art, the present invention has the following beneficial effects:

[0019] 1. Strengthen data authenticity verification: Through digital signature and digital certificate mechanisms, not only is the integrity of the data verified, but the source and metadata of the data are also strictly verified to ensure that the data received by the data processing end is authentic and reliable, and to effectively prevent malicious behavior from untrusted data generation ends.

[0020] 2. Intelligent Metadata Management: A metadata management module is introduced to deeply mine and utilize data metadata. Based on this metadata, data processing workflows are optimized, improving data processing efficiency and quality, and providing richer evidence for business decisions.

[0021] 3. Dynamic Key Management: The data processing end periodically updates key pairs and key fragments to enhance key security and reduce the risk of key cracking. Simultaneously, a dynamic key negotiation mechanism and blockchain smart contracts ensure the continuity and security of data interaction.

[0022] 4. Key Security Guarantee: A key fragmentation mechanism is introduced, ensuring that even if the data generation end is compromised, the complete key cannot be obtained. Blockchain smart contracts ensure the key generation process is auditable, further enhancing the security of key management.

[0023] 5. High adaptability: This technology can be applied to different encryption algorithms and communication protocols, has strong scalability, can flexibly cope with various complex communication security scenarios, and meet the data security needs of different industries. Attached Figure Description

[0024] Figure 1 This is a flowchart of the data ownership confirmation method of the present invention. Detailed Implementation

[0025] To make the objectives, contents, and advantages of the present invention clearer, the specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings and examples.

[0026] The purpose of this invention is to provide a data ownership confirmation method and processing device based on asymmetric encryption, hash verification and dynamic key negotiation mechanism, which can be applied to communication security systems. It can ensure that the data received by the data processing end is authentic, reliable and traceable in the case that the data generation end is untrusted. At the same time, it can ensure key security in the communication process through an innovative key management mechanism.

[0027] Therefore, the present invention provides the following specific technical solutions:

[0028] 1. A data ownership confirmation method for communication security systems

[0029] refer to Figure 1 The method includes the following steps:

[0030] Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end.

[0031] The data processing end (trusted party), as the initiator of the blockchain smart contract, initiates a smart contract to the blockchain module and generates an asymmetric key pair (public key Q and private key d) based on the Elliptic Curve Cryptography (ECC) algorithm. On the elliptic curve E, p is defined as a prime number, and the finite field composed of p elements is GF(p). A random integer d (1 < d < n - 1, where n is the order of the points on the elliptic curve) is selected as the private key, and the public key Q = dG, where G is the base point of the elliptic curve, and dG represents the accumulation of d Gs. At the same time, the data processing end uses the Shamir secret sharing algorithm to generate multiple key fragments for subsequent key negotiation. Suppose a key K is to be split into n key fragments, and at least k key fragments are required to recover the original key. The data processing end constructs a polynomial f(x) of degree k - 1 = a

[0032] x k-1 +…+a1x+a0, where a0 = K, a1,…, a s<s>0000003< / s>are k coefficients randomly selected over the finite field GF(p). Then, n points (x i , f(x i )) are calculated, i = 1,…, n, and these points are the key fragments. The data processing end sends the public key Q to the data generation end through a secure channel and selects some key fragments to send to the data generation end, and the data generation end only holds these partial key fragments.

[0032] Step 2: The data generation end generates the data to be sent, digital certificate, hash value, encrypts them using the public key from the data sending end, and signs them using the private key of the data generation end.

[0033] After receiving the public key Q from the data processing end, the data generation end processes the data M to be sent as follows:

[0034] First, use a strong hash algorithm (such as SHA-256 or SHA-3) to calculate the hash value H = SHA256(M) of the data M. Then use its own private key to sign this hash value H. Suppose the private key of the data generation end is d gen , and the public key is Q gen < / s>, use the ECDSA signature algorithm, randomly select an integer k', 1 < k’ < n - 1, and calculate:

[0035] R = k'G = (x R , y R ),

[0036] r = x R mod n,

[0037] s = k' -1 (H + d gen r) mod n

[0038] Then the signature result, i.e., the signed hash value, is (r, s), where R is a point obtained by multiplying k' and G, and its coordinates are (x R , y R ). r is the result of taking the modulus of the x-coordinate of point R with respect to n and is part of the signature. At the same time, a digital certificate containing data-related meta-information (such as data type, generation time, intended use, etc.) is generated, and the digital certificate is encrypted using the public key of the data processing end. If the Elliptic Curve Integrated Encryption Scheme (ECIES) encryption algorithm is used, a random integer r' is randomly selected, 1 < r' < n - 1, calculate C1 = r'G, S = r'Q, and derive the symmetric key K from S s , and use a symmetric encryption algorithm (such as AES) to encrypt the meta-information I to obtain The encrypted digital certificate is (C1, C2). The data generation end can only submit the hash value H to the blockchain module for off-chain verification and cannot directly control the key generation. C1 is the public key part of the ciphertext, which implicitly contains the random number r' information; S is the shared secret between the two parties, and the receiver can calculate the same S through d and C1 to achieve key negotiation; C2 is the encrypted ciphertext, which together with C1 constitutes the complete ciphertext. [[ID=IO]]

[0039] Step 3: The data generation end sends data.

[0040] The data generation end uses the symmetric encryption algorithm AES and the symmetric key K s to encrypt the data M to be sent, and obtains The encrypted digital certificate (C1, C2), the signed hash value (r, s), and M 密文 are sent to the data processing end together.

[0041] Step 4: The data processing end decrypts and verifies.

[0042] After receiving the data, the data processing end first decrypts the encrypted digital certificate (C1, C2) using its own private key d, calculates S = dC1, and derives the symmetric key K from S s . Then, it decrypts C2 to obtain the meta-information I. In this step, S = dC1 is the calculation method of the data processing end, and the calculation result is the same as the value calculated by the data generation end using the formula S = r'Q in Step 2. Then, it uses the public key of the data generation end to verify the signed hash value, and calculates:

[0043] w = s -1 mod n

[0044] u1 = Hw mod n

[0045] u2 = rw mod n

[0046] R' = u1G + u2Q gen = (xR′ ,y R′ )

[0047] r''=x R′ mod n

[0048] If r'' = r and the calculated H' = SHA256(M) from the data processing end matches the received H, then the hash value verification matches, and the next step continues; otherwise, the data M is rejected.

[0049] Step 5: If the verification is successful, the data processing end and the data generation end will use the key fragments they hold to generate a complete key K for subsequent data communication through a dynamic key negotiation mechanism.

[0050] If the data processing end holds m1 fragments and the data generation end holds m2 fragments, and m1 + m2 ≥ k, use the Lagrange interpolation formula. The original key K is recovered over the finite field GF(p). In this process, the blockchain module records and monitors the key generation process based on smart contracts. The contracts record the key fragment information provided by each participant, the time and order of their combination, etc., to ensure that the key generation process conforms to the predetermined rules and procedures.

[0051] Step Six: The data processing end uses key K to decrypt the encrypted data.

[0052] Use the AES decryption function and key K to reverse the ciphertext. Restore the original data M.

[0053] Data integrity is verified by generating key-based message authentication codes, and data is cleaned according to metadata and business rules, such as anonymizing sensitive information. Key K can also be used in encrypted computations to protect privacy, such as in federated learning scenarios. During storage, data is encrypted with key K before being stored in a database or file system. An encrypted index is generated based on the key to improve retrieval efficiency, access control is performed using the key, and the key is updated regularly to ensure data security.

[0054] 2. Refined encryption and decryption techniques used in communication systems

[0055] As can be seen from the steps of the data ownership confirmation method above, this invention employs an innovative key exchange mechanism combining dynamic key negotiation and blockchain smart contracts: During the data verification and key negotiation stages, key exchange is conducted using a dynamic key negotiation mechanism and blockchain smart contracts. Traditional key exchange methods lack real-time monitoring and immutable records, making them vulnerable to man-in-the-middle attacks and tampering. This invention introduces blockchain smart contracts to monitor and record the key exchange process in real time. The dynamic key negotiation mechanism allows keys to be dynamically generated and updated according to actual conditions, increasing key security and timeliness. The blockchain smart contract records the key fragment information provided by each participant, the time and order of their combination, etc., ensuring that the key generation process conforms to predetermined rules and procedures. Simultaneously, the immutability of the blockchain provides auditability for the key generation process; in the event of a security issue, it can be traced and verified by querying blockchain records. Furthermore, the data processing end periodically updates key pairs and fragments, promptly notifying the generation end, further reducing the risk of key leakage and ensuring key security during communication.

[0056] Encryption process: At the data generation end, asymmetric encryption algorithms such as RSA or elliptic curve cryptography (ECC) are used to encrypt the digital certificate to ensure its security during transmission. At the data processing end, the corresponding private key is used for decryption to obtain the data metadata.

[0057] An innovative verification mechanism combining hash values ​​and digital signatures: This invention deeply integrates strong hash algorithms (such as SHA-256 or SHA-3) with digital signatures and public-key verification mechanisms. Traditional verification mechanisms may rely solely on hash verification or signature verification, making them vulnerable to attacks. This invention, however, forms a dual-layer verification defense by signing the data's hash value and then verifying it using a public key at the processing end. On one hand, the hash algorithm ensures data integrity; any slight modification to the data will result in a significant change in the hash value. On the other hand, the digital signature ensures the authenticity of the hash value, preventing tampering. If the data is tampered with, hash verification fails, and the processing end can promptly reject the verification, effectively preventing malicious tampering by untrusted generators and greatly improving the accuracy and security of data verification.

[0058] 3. A data ownership verification processing device for a communication security system.

[0059] The device includes:

[0060] Data generation end: Responsible for receiving the public key from the data processing end, calculating the hash value of the data and signing it, generating a digital certificate containing metadata and encrypting it, submitting the hash value to off-chain verification, receiving partial key fragments sent by the data processing end, and sending the encrypted digital certificate, the signed hash value and the original data to the data processing end.

[0061] Data processing end: Responsible for generating public keys, private keys, and key fragments, and sending public keys and some key fragments; receiving data sent by the data generation end; decrypting digital certificates; verifying hash values; combining with the data generation end through a dynamic key negotiation mechanism to generate a complete key; confirming the integrity, authenticity, and legality of the data source; and performing data processing.

[0062] Both the data generation and processing ends are equipped with encryption / decryption modules: these modules perform asymmetric encryption and decryption operations such as RSA and ECC, while ensuring the security of key exchange during communication and preventing man-in-the-middle attacks. They also feature key update management capabilities, allowing the key pairs and key fragments on the data processing end to be updated according to set periods or trigger conditions.

[0063] The metadata management module deployed on the data generation end is responsible for parsing and processing the metadata in the decrypted digital certificate, performing legality checks, and storing it. Simultaneously, it intelligently schedules and optimizes the data processing flow based on the metadata, for example, selecting appropriate data processing algorithms according to the data's intended use.

[0064] Both the data generation and data processing ends are equipped with blockchain interaction modules: On the data processing end, the module is responsible for interacting with the blockchain module and initiating smart contracts with the blockchain module. The blockchain module records and supervises the key generation process based on the smart contracts to ensure that the key generation process is auditable.

[0065] To facilitate a clearer understanding of the technical solution of this invention, the following detailed description is provided in conjunction with a specific application scenario in a communication system. Assume a wireless communication network environment where the information source, as the data generator, continuously produces various types of data, such as environmental monitoring data collected by sensors. The receiver, as the data processing end, is responsible for receiving, processing, and storing this data.

[0066] 1. Key and Fragment Generation and Distribution: As the initiator of the blockchain smart contract, the receiver generates an asymmetric key pair (public key Q and private key d) based on the Elliptic Curve Cryptography (ECC) algorithm. Simultaneously, it generates multiple key fragments using the Shamir Secret Sharing algorithm. Through a secure wireless key distribution channel, the receiver sends the public key Q and some key fragments to the source.

[0067] 2. Data Preprocessing at the Generation End: After receiving the public key Q, the source calculates the hash value H = SHA256(M) of the collected environmental monitoring data M. It then signs H using its private key, generating a signature result (r, s). The source generates a digital certificate containing metadata (such as data collection location and time), and encrypts the digital certificate using the Elliptic Curve Integration Cryptography (ECIES) scheme with the public key Q, obtaining the encrypted digital certificate (C1, C2). The source only submits the hash value H to the off-chain verification system for verification and does not participate in the key generation process.

[0068] 3. Data transmission: The source sends the encrypted digital certificate (C1,C2), the signed hash value (r,s), and the original environmental monitoring data M to the receiver via a wireless communication network.

[0069] 4. Data Verification and Key Negotiation: After receiving the data, the receiver uses its private key d to decrypt the encrypted digital certificate and obtain the data's metadata. It then verifies the hash value of the signed data using the source's public key, checking if it matches its own calculated hash value. If the verification is successful, the receiver and source, through a dynamic key negotiation mechanism, use their respective key fragments to recover the complete key K over the finite field GF(p) based on the Lagrange interpolation formula. The blockchain smart contract meticulously records the key fragment information, combination time, and order provided by both parties during this process, ensuring that the key generation process complies with security standards.

[0070] 5. Data Processing and Storage: The receiver decrypts the encrypted environmental monitoring data M using the recovered key K. Data integrity is verified by generating a key-based message authentication code. Data is cleaned according to data metadata and processing rules, such as removing abnormal monitoring data points. Key K is used in encryption calculations, and the processed data is stored in the database. During storage, an encrypted index is generated based on key K for easy subsequent retrieval. Access control is also implemented using key K, allowing only authorized users or systems to access this data. The receiver updates the key pair and key fragments according to a set period and notifies the source via a blockchain smart contract, ensuring communication security. Throughout the communication process, if data anomalies or key security issues occur, system administrators can query the blockchain smart contract records to trace the data source and key generation process, promptly identify and resolve problems, and ensure the data security of the wireless communication network.

[0071] As can be seen, this invention proposes a method and apparatus for secure data ownership confirmation in communication based on dynamic key negotiation and key fragmentation. Specifically, it relates to a scheme integrating technologies such as dynamic key negotiation, key fragmentation, asymmetric encryption, blockchain smart contracts, and hash verification. The aim is to ensure secure and reliable data interaction between the data generation end and the processing end, ensuring ownership of the data at the data generation end and secure data transmission even when the data processing end is not entirely trustworthy. By combining data verification, metadata management, dynamic key negotiation, and key fragmentation mechanisms, a reliable data ownership confirmation scheme is provided, applicable to various communication security scenarios, and offering strong support for data security in communication systems.

[0072] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A communication security data ownership confirmation method based on dynamic key negotiation and key fragmentation, characterized in that, The method includes the following steps: Step 1: The data processing end generates an asymmetric key pair and key fragments, and sends the public key and some key fragments to the data generation end; Step 2: The data generator generates the data to be sent, a digital certificate, and a hash value, encrypts them using the public key from the data sender, and signs them using the private key from the data generator. Step 3: The data generation end uses a symmetric encryption algorithm and a symmetric key to encrypt the data to be sent, obtaining... The encrypted digital certificate, the signed hash value, and Send them together to the data processing end; Step 4: After receiving the data, the data processing end first uses its own private key to decrypt the encrypted digital certificate to obtain the metadata. Then, it uses the public key of the data generation end to verify the hash value after signing. If the hash value verification matches, it continues to the next step; otherwise, it refuses to process the data to be sent. Step 5: The data processing end and the data generation end use a dynamic key negotiation mechanism to combine the key fragments they hold to generate a complete key for subsequent data communication; Step Six: The data processing end decrypts the encrypted data using the complete key; Step one is as follows: As the initiator of the blockchain smart contract, the data processing end initiates a smart contract to the blockchain module and generates an asymmetric key pair based on the elliptic curve cryptography algorithm. Among them, on the elliptic curve E, it is defined that p is a prime number, and the finite field composed of p elements is , randomly select an integer as the private key, 1 < < n - 1, where n is the order of the points on the elliptic curve, and the public key Q = G , where G is the base point of the elliptic curve, dG represents d ones G accumulated; at the same time, the data processing end uses the Shamir secret sharing algorithm to generate multiple key fragments for subsequent key negotiation. Among them, assume that a key K is to be split into key fragments, and it is required that at least [[ID=2G]] key fragments are needed to recover the original key. The data processing end constructs a -degree polynomial , where , are randomly selected coefficients on the finite field , and then calculate points Q , and these points are the key fragments. The data processing end sends the public key Q to the data generation end through a secure channel and selects some key fragments to send to the data generation end. The data generation end only holds these partial key fragments.

2. The method as described in claim 1, characterized in that, Step two is as follows: The data generator receives the public key from the data processor. Q Then, the data to be sent M Perform the following processing: First, calculate the hash value of the data using a strong hash algorithm M Then, sign the hash value with its own private key . Assume that the private key of the data generation end is , and the public key is . Using the ECDSA signature algorithm, randomly select an integer , 1 < k’ < n - 1, and calculate: , 1 < k’ < n - 1, calculate: The signature result, i.e., the hash value after signing, is... Where R is k' and G The coordinates of the point obtained by multiplication are... r is the result of taking the x-coordinate of point R modulo n, and is part of the signature; simultaneously, a digital certificate containing data-related metadata is generated, and the digital certificate is encrypted using the public key of the data processing end; if the Elliptic Curve Integration (ECIES) encryption algorithm is used, an integer is randomly selected. , ,calculate , Q ,from Exporting the symmetric key The symmetric encryption algorithm AES is used to encrypt the metadata. Encryption is performed to obtain The encrypted digital certificate is The data generator can only submit hash values. Off-chain verification is performed by the blockchain module, making it impossible to directly control key generation; among other things... S is the public key portion of the ciphertext; S is the shared secret between the two parties, which the receiver can access via... d and Calculate the same S to achieve key negotiation; The encrypted ciphertext, and Together they form a complete ciphertext.

3. The method as described in claim 2, characterized in that, In step three, the data generation end uses the symmetric encryption algorithm AES and a symmetric key. Data to be sent M Encryption, obtaining ciphertext , encrypt the digital certificate Hash value after signing as well as Send them together to the data processing end.

4. The method as described in claim 3, characterized in that, Step four is as follows: After receiving the data, the data processing end first uses its own private key. d Decrypted digital certificate Calculate S = d C1, Derive the symmetric key K from S. s Then, C2 is decrypted to obtain metadata I. Next, the public key from the data generator is used to verify the hash value after signing, and the following calculations are performed: like And the data processing end calculates If the hash value matches the received H, the process continues to the next step; otherwise, the data is rejected. M .

5. The method as described in claim 4, characterized in that, In step five, if the data processing end holds... A fragment, held by the data generator. A fragment, and Using the Lagrange interpolation formula In a finite field Key recovery .

6. The method as described in claim 5, characterized in that, In step five, the key is recovered. During the process, the blockchain module records and monitors the key generation process based on smart contracts. The smart contracts record the key fragment information provided by each participant, the time and order of their combination, and ensure that the key generation process complies with predetermined rules and procedures.

7. The method as described in claim 5, characterized in that, In step six, the AES decryption function and the complete key are used. Reverse the operation on the ciphertext Restore original data M .

8. The method according to any one of claims 1 to 7, characterized in that, This method is applied in communication security systems.

9. An apparatus for implementing the method as described in any one of claims 1 to 7, characterized in that, include: Data generation end: Used to receive the public key of the data processing end, calculate the hash value of the data and sign it, generate a digital certificate containing metadata and encrypt it, submit the hash value to off-chain verification, receive partial key fragments sent by the data processing end, and send the encrypted digital certificate, the signed hash value and the original data to the data processing end. Data processing end: Used to generate public keys, private keys, and key fragments, and send public keys and partial key fragments; receive data sent by the data generation end; decrypt digital certificates; verify hash values; combine with the data generation end through a dynamic key negotiation mechanism to generate a complete key; confirm the integrity, authenticity, and legality of the data source; and perform data processing.

Images