Dynamic encryption authentication method and system based on channel adaptation and multi-modal fingerprint
By employing a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting, the latency and security issues of encryption authentication technology in semiconductor packaging equipment are resolved, achieving low-latency and high-security dynamic encryption authentication.
Patent Information
- Application Number
- CN202510923064.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-04
- Publication Date
- 2026-01-27
- Estimated Expiration
- 2045-07-04
AI Technical Summary
Existing encryption and authentication technologies for semiconductor packaging equipment are computationally complex, leading to communication delays. Furthermore, authentication mechanisms based on static keys or fixed certificates are easily cracked or leaked, posing security risks.
A dynamic encryption and authentication method based on channel adaptation and multimodal fingerprinting is adopted. By acquiring noise spectrum, channel state information, current spectrum, etc., a temporary session key is generated, and dynamic encryption and authentication is performed using a channel-adaptive encryption strategy.
It reduces communication latency, improves communication security, and ensures a balance between security and latency under different channel qualities.
Smart Images

Figure CN120614121B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data encryption technology, and in particular to a dynamic encryption authentication method and system based on channel adaptation and multimodal fingerprinting. Background Technology
[0002] Semiconductor packaging equipment, as a crucial link in integrated circuit manufacturing, involves a large amount of sensitive data exchange, including core process parameters, equipment control commands, and production information. Ensuring the confidentiality and low latency of these communications is vital for protecting intellectual property and ensuring product quality. Therefore, developing a dynamic encryption and authentication method that can adapt to the complex industrial environment, effectively resist attacks, and meet the low communication latency requirements of semiconductor packaging processes is urgently needed to improve the industry's security level.
[0003] The computational complexity and communication overhead of traditional encryption and authentication technologies in current semiconductor packaging equipment may introduce significant delays. Furthermore, existing authentication mechanisms based on static keys or fixed certificates are prone to key management issues, vulnerability to cracking or leakage, and therefore, the problems of communication delays and security urgently need to be addressed. Summary of the Invention
[0004] This invention provides a dynamic encryption authentication method and system based on channel adaptation and multimodal fingerprinting, the main purpose of which is to reduce communication latency and improve communication security.
[0005] To achieve the above objectives, this invention provides a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting, comprising:
[0006] Acquire the total equipment, spectrum analyzer, and test signals. The total equipment includes: transmitter, receiver, motor, and current transformer.
[0007] The noise spectrum is obtained at the receiving end, the noise floor power is obtained from the noise spectrum, the test signal spectrum is obtained based on the transmitting end, the receiving end and the test signal, the signal power is obtained from the test signal spectrum, and the signal-to-noise ratio is obtained from the signal power and the noise floor power.
[0008] Channel state information is obtained based on the pre-constructed physical layer units in the receiver, and the channel impulse response is obtained based on the channel state information and the pre-constructed inverse Fourier transform operation.
[0009] The current spectrum diagram is obtained based on the current transformer and the motor, and the harmonic amplitude ratio is obtained based on the current spectrum diagram.
[0010] The average bit error rate is calculated based on a pre-constructed formula for the average bit error rate.
[0011] The encryption algorithm and key length are obtained based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy.
[0012] The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length.
[0013] Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is completed using encryption algorithms and temporary session keys.
[0014] Optionally, the step of obtaining a noise spectrum at the receiving end, obtaining the noise floor power based on the noise spectrum, obtaining a test signal spectrum based on the transmitting end, the receiving end, and the test signal, obtaining the signal power based on the test signal spectrum, and obtaining the signal-to-noise ratio based on the signal power and the noise floor power includes:
[0015] A pause operation is performed on the sending end to obtain a sending end in a state of no signal transmission;
[0016] In the absence of signal transmission, noise is captured by the receiver to obtain noise sampling data, and a pre-constructed Fourier transform operation is performed on the noise sampling data to obtain the noise spectrum.
[0017] The average noise power is calculated based on the noise spectrum diagram, and the average noise power is set as the noise floor power.
[0018] The test signal is sent by the transmitting end to obtain the test signal in transmission. The test signal sampling data is obtained by capturing the test signal in transmission at the receiving end. The Fourier transform operation is performed on the test signal sampling data to obtain the test signal spectrum.
[0019] The average power of the test signal is calculated based on the spectrum of the test signal, and the average power of the test signal is set as the signal power.
[0020] The signal-to-noise ratio is obtained by calculating the ratio of signal power to noise floor power.
[0021] Optionally, the step of obtaining channel state information based on pre-built physical layer units in the receiver, and obtaining the channel impulse response based on the channel state information and a pre-built inverse Fourier transform operation, includes:
[0022] The original sequence signal is sent from the transmitting end to the receiving end to obtain the sequence signal in transit;
[0023] The receiver captures the transmitted sequence signal based on the physical layer unit, obtains the received sequence signal sample data, and performs a Fourier transform operation on the received sequence signal sample data to obtain the received sequence signal spectrum.
[0024] Channel state information is obtained based on the spectrum diagrams of the original sequence signal and the received sequence signal. The channel state information includes multiple subcarrier information, and the subcarrier information includes amplitude changes and phase changes.
[0025] Perform an inverse Fourier transform on the channel state information to obtain the channel impulse response.
[0026] Optionally, obtaining channel state information based on the spectrum diagrams of the original sequence signal and the received sequence signal includes:
[0027] Perform a Fourier transform on the original sequence signal to obtain its spectrum. Based on the spectrum, obtain multiple subcarriers, and perform the following operations on each of the subcarriers:
[0028] The original complex values of the subcarriers are extracted from the spectrum of the original sequence signal, where the original complex values include the original amplitude and the original phase.
[0029] The received complex values of the subcarrier are extracted from the spectrum of the received sequence signal, where the received complex values include the received amplitude and the received phase.
[0030] The difference between the received amplitude and the original amplitude of the subcarrier is calculated to obtain the amplitude change;
[0031] The phase change is obtained by calculating the difference between the received phase and the original phase of the subcarrier.
[0032] By summarizing the amplitude and phase changes, subcarrier information is obtained; by summarizing the subcarrier information, channel state information is obtained.
[0033] Optionally, the step of obtaining the current spectrum diagram based on the current transformer and the motor, and obtaining the harmonic amplitude ratio based on the current spectrum diagram, includes:
[0034] The current signal of the motor is collected by a current transformer to obtain time-domain current sampling data, and Fourier transform is performed on the time-domain current sampling data to obtain the current spectrum.
[0035] Obtain the maximum amplitude in the current spectrum and the frequency corresponding to the maximum amplitude. Set the frequency of the maximum amplitude as the fundamental frequency.
[0036] The third and fifth harmonic frequencies are obtained based on the fundamental frequency, and the amplitudes of the third and fifth harmonics are obtained based on the current spectrum, the third harmonic frequency, and the fifth harmonic frequency.
[0037] Calculate the ratio of the fifth harmonic amplitude to the third harmonic amplitude to obtain the harmonic amplitude ratio.
[0038] Optionally, the calculation of the average bit error rate based on the pre-constructed average bit error rate formula includes:
[0039] Based on the signal-to-noise ratio and the average bit error rate formula, the average bit error rate is calculated, where the average bit error rate formula is as follows:
[0040]
[0041] in, Indicates the average bit error rate. Indicates the channel fading index. Indicates the summation index. To represent factorial, This indicates the signal-to-noise ratio.
[0042] Optionally, obtaining the encryption algorithm and key length based on the signal-to-noise ratio, average bit error rate, and a preset encryption strategy includes:
[0043] If the signal-to-noise ratio is greater than or equal to a preset first decibel threshold and the average bit error rate is less than or equal to a preset first bit error rate threshold, the pre-constructed AES encryption is set as the encryption algorithm, and the preset optimal channel key length is set as the key length. Here, the first decibel threshold is 20 dB, and the first bit error rate threshold is... The optimal channel key length is 256 bits;
[0044] If the signal-to-noise ratio is less than or equal to a preset second decibel threshold and the average bit error rate is greater than or equal to a preset second bit error rate threshold, the pre-constructed ChaCha20 encryption is set as the encryption algorithm, and the preset poor channel key length is set as the key length. Here, the second decibel threshold is 10 dB, and the second bit error rate threshold is... The poor channel key length is 256 bits;
[0045] Otherwise, the pre-built SM4 encryption is set as the encryption algorithm, and the preset general channel key length is set as the key length, where the general channel key length is 128 bits.
[0046] Optionally, the step of generating a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length includes:
[0047] Extract the preset characteristic parameters from the channel impulse response to obtain the channel impulse response value;
[0048] The channel impulse response value, harmonic amplitude ratio, and error vector amplitude are repeatedly concatenated according to preset weights to obtain the key pre-string.
[0049] The intermediate key is obtained by using the key pre-string and the preset key derivation function, and the temporary session key is obtained based on the intermediate key, the key length and the pre-constructed pruning conditions.
[0050] Optionally, the step of obtaining an intermediate key using a key preamble string and a preset key derivation function, and obtaining a temporary session key based on the intermediate key, key length, and pre-constructed pruning conditions, includes:
[0051] Perform a hash value calculation operation on the key prefix string to obtain the first hash value;
[0052] A hash value calculation operation is performed on the first hash value to obtain a second hash value, wherein the key derivation function is a function that performs an XOR operation;
[0053] Perform an XOR operation on the first hash value and the second hash value to obtain the intermediate key;
[0054] If the key length is the same as the good channel key length or the poor channel key length, then the intermediate key is set as the temporary session key;
[0055] Otherwise, if the intermediate key is confirmed to meet the pruning conditions, the data corresponding to the preset position in the intermediate key is pruned to obtain a temporary session key, wherein the data corresponding to the preset position is the last 128 bits of data in the intermediate key.
[0056] To achieve the above objectives, the present invention also provides a dynamic encryption authentication system based on channel adaptation and multimodal fingerprinting, comprising:
[0057] The physical foundation module is used to acquire the total equipment, spectrum analyzer and test signals. The total equipment includes: transmitter, receiver, motor and current transformer.
[0058] The information collection module is used to acquire a noise spectrum diagram using the receiver, obtain the noise floor power based on the noise spectrum diagram, acquire a test signal spectrum diagram based on the transmitter, receiver, and test signal, obtain the signal power based on the test signal spectrum diagram, obtain the signal-to-noise ratio based on the signal power and noise floor power, acquire channel state information based on the pre-built physical layer units in the receiver, acquire the channel impulse response based on the channel state information and the pre-built inverse Fourier transform operation, acquire a current spectrum diagram based on the current transformer and motor, and obtain the harmonic amplitude ratio based on the current spectrum diagram.
[0059] The encryption decision module is used to calculate the average bit error rate based on a pre-built average bit error rate formula, and to obtain the encryption algorithm and key length based on the signal-to-noise ratio, average bit error rate and preset encryption strategy.
[0060] The key and encryption module is used to obtain the error vector amplitude using a spectrum analyzer, and generate a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights and key length. It then completes dynamic encryption authentication based on channel adaptation and multimodal fingerprinting according to the encryption algorithm and the temporary session key.
[0061] To address the above problems, the present invention also provides an electronic device, the electronic device comprising:
[0062] Memory, storing at least one instruction;
[0063] The processor executes the instructions stored in the memory to implement the dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting described above.
[0064] To address the aforementioned problems, the present invention also provides a computer-readable storage medium storing at least one instruction, which is executed by a processor in an electronic device to implement the aforementioned dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting.
[0065] To address the problems described in the background art, this invention acquires a total device, a spectrum analyzer, and a test signal. The total device includes a transmitter, a receiver, a motor, and a current transformer. The receiver acquires a noise spectrum diagram, and the noise floor power is obtained from the noise spectrum diagram. Based on the transmitter, receiver, and test signal, a test signal spectrum diagram is acquired, and the signal power is obtained from the test signal spectrum diagram. The signal-to-noise ratio (SNR) is obtained from the signal power and the noise floor power. This invention pre-constructs the required equipment and collects signal power and noise floor power to obtain SNR information, enabling real-time and accurate SNR information. Channel state information is acquired based on pre-constructed physical layer units in the receiver. Based on the channel state information and a pre-constructed inverse Fourier transform operation, the channel impulse response is acquired. A current spectrum diagram is acquired based on the current transformer and motor, and the harmonic amplitude ratio is obtained from the current spectrum diagram. This invention acquires the channel impulse response and harmonic amplitude ratio for subsequent key generation, improving security. The average bit error rate (BER) is calculated based on a pre-constructed average BER formula. This invention can estimate the BER based on existing data, facilitating the selection of subsequent encryption strategies. Based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy, the encryption algorithm and key length are obtained. It is evident that this invention balances security and latency by employing different encryption strategies under varying channel quality conditions, ensuring security while maintaining low latency. The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length. Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is then performed using the encryption algorithm and the temporary session key. This invention generates a temporary session key based on the physical characteristics of the channel, ensuring the security of dynamic encryption authentication. Therefore, this invention can reduce communication latency and improve communication security. Attached Figure Description
[0066] Figure 1 This is a flowchart illustrating a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting provided in an embodiment of the present invention.
[0067] Figure 2 This is a functional block diagram of a dynamic encryption authentication system based on channel adaptation and multimodal fingerprinting provided in an embodiment of the present invention;
[0068] Figure 3 This is a schematic diagram of the structure of an electronic device that implements the dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting, according to an embodiment of the present invention.
[0069] Explanation of reference numerals in the attached figures:
[0070] 10. Electronic device; 11. Processor; 12. Memory; 13. Bus.
[0071] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation
[0072] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
[0073] This application provides a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting. The executing entity of this dynamic encryption authentication method includes, but is not limited to, at least one of the following electronic devices that can be assigned to execute the method provided in this application: a server, a terminal, etc. In other words, the dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting can be executed by software or hardware installed on a terminal device or a server device, and the software can be a blockchain platform. The server includes, but is not limited to, a single server, a server cluster, a cloud server, or a cloud server cluster.
[0074] Reference Figure 1 The diagram shown is a flowchart illustrating a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting according to an embodiment of the present invention. In this embodiment, the dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting includes:
[0075] S1. Acquire the total equipment, spectrum analyzer and test signals, wherein the total equipment includes: transmitter, receiver, motor and current transformer.
[0076] Understandably, the "total equipment" refers to the entirety of the equipment used for dynamic encryption authentication based on channel adaptation and multimodal fingerprinting. The "spectrum analyzer" is an electronic instrument used to measure and display the intensity distribution of signals at different frequencies. The "test signal" is a pre-set, known signal used to test and evaluate the performance of the communication system. The "transmitter" is the device in the total equipment responsible for generating and transmitting signals. The "receiver" is the device in the total equipment responsible for receiving and processing incoming signals. The "motor" is the device in the total equipment used to drive the operation of the equipment. The "current transformer" is the device used to measure and record the current of the motor.
[0077] S2. Obtain the noise spectrum diagram using the receiving end, obtain the noise floor power based on the noise spectrum diagram, obtain the test signal spectrum diagram based on the transmitting end, receiving end and test signal, obtain the signal power based on the test signal spectrum diagram, and obtain the signal-to-noise ratio based on the signal power and noise floor power.
[0078] As is clear, the noise spectrum diagram refers to an image showing the power of background noise at various frequencies in a communication environment. The noise floor power refers to the average power of the inherent background noise of the receiving system when there is no signal. The test signal spectrum diagram refers to an image showing the power of the received test signal at various frequencies during transmission. The signal power refers to the average power of the received test signal during transmission. The signal-to-noise ratio (SNR) is the ratio between the signal power and the noise floor power.
[0079] Furthermore, the step of obtaining a noise spectrum at the receiving end, obtaining the noise floor power based on the noise spectrum, obtaining a test signal spectrum based on the transmitting end, the receiving end, and the test signal, obtaining the signal power based on the test signal spectrum, and obtaining the signal-to-noise ratio based on the signal power and the noise floor power includes:
[0080] A pause operation is performed on the sending end to obtain a sending end in a state of no signal transmission;
[0081] In the absence of signal transmission, noise is captured by the receiver to obtain noise sampling data, and a pre-constructed Fourier transform operation is performed on the noise sampling data to obtain the noise spectrum.
[0082] The average noise power is calculated based on the noise spectrum diagram, and the average noise power is set as the noise floor power.
[0083] The test signal is sent by the transmitting end to obtain the test signal in transmission. The test signal sampling data is obtained by capturing the test signal in transmission at the receiving end. The Fourier transform operation is performed on the test signal sampling data to obtain the test signal spectrum.
[0084] The average power of the test signal is calculated based on the spectrum of the test signal, and the average power of the test signal is set as the signal power.
[0085] The signal-to-noise ratio is obtained by calculating the ratio of signal power to noise floor power.
[0086] Explained, the pause operation refers to temporarily halting all signal transmission activities at the transmitting end. The no-signal transmission state refers to a state where there is no signal transmission between the transmitting and receiving ends. The noise sampling data refers to a series of data obtained after digitizing the background noise signal. The Fourier transform refers to an algorithm that converts the signal from the time domain to the frequency domain. The average noise power refers to the average noise power calculated based on the noise spectrum.
[0087] It is clear that under normal communication conditions, both signal and noise exist simultaneously. In order to avoid the influence of the signal on the noise measurement, communication must be stopped, that is, the signal transmission must be paused before noise can be captured in order to obtain the accurate noise floor power.
[0088] Explained, the "test signal in transmission" refers to the test signal being transmitted from the transmitting end to the receiving end. The "test signal sampling data" refers to a series of data obtained after digitizing the received test signal. The "average power of the test signal" refers to the average power of the test signal calculated based on the test signal spectrum.
[0089] It is easy to understand that in a complex communication environment, if real user data signals are used for measurement, their power, frequency, and content are constantly changing randomly, making them unsuitable as a measurement benchmark. Therefore, a known, repeatable, and predictable test signal is needed as the measurement benchmark. Typically, a pure sine wave signal can be used as the test signal.
[0090] S3. Obtain channel state information based on the pre-constructed physical layer units in the receiver, and obtain the channel impulse response based on the channel state information and the pre-constructed inverse Fourier transform operation.
[0091] It should be explained that the physical layer unit refers to the unit in the communication equipment responsible for processing signals. The channel state information refers to parameters describing the specific impact of the communication channel on the signal. The inverse Fourier transform operation refers to the inverse operation of the Fourier transform. The channel impulse response refers to parameters reflecting the time delay and multipath effects of the channel.
[0092] Furthermore, the step of obtaining channel state information based on pre-constructed physical layer units in the receiver, and obtaining the channel impulse response based on the channel state information and a pre-constructed inverse Fourier transform operation, includes:
[0093] The original sequence signal is sent from the transmitting end to the receiving end to obtain the sequence signal in transit;
[0094] The receiver captures the transmitted sequence signal based on the physical layer unit, obtains the received sequence signal sample data, and performs a Fourier transform operation on the received sequence signal sample data to obtain the received sequence signal spectrum.
[0095] Channel state information is obtained based on the spectrum diagrams of the original sequence signal and the received sequence signal. The channel state information includes multiple subcarrier information, and the subcarrier information includes amplitude changes and phase changes.
[0096] Perform an inverse Fourier transform on the channel state information to obtain the channel impulse response.
[0097] Explained, the original sequence signal refers to a standard sequence signal whose content and characteristics are known in advance. The sequence signal in transmission refers to the original sequence signal being transmitted from the transmitting end to the receiving end. The received sequence signal sampling data refers to the data obtained by digitizing the sequence signal received after transmission through the channel. The received sequence signal spectrum refers to the image of the power levels of the received in-transmission sequence signal at various frequencies. The subcarrier information refers to the parameter information of the narrowband subchannel carrying data in a multi-carrier communication system. The amplitude change refers to the difference between the received amplitude of the subcarrier and the original amplitude. The phase change refers to the difference between the received phase of the subcarrier and the original phase.
[0098] It is clear that in order to obtain channel state information, a known signal needs to be sent. By comparing the difference between the original known signal and the received signal, the channel state can be obtained. This known signal is the original sequence signal.
[0099] Furthermore, the step of obtaining channel state information based on the spectrum diagrams of the original sequence signal and the received sequence signal includes:
[0100] Perform a Fourier transform on the original sequence signal to obtain its spectrum. Based on the spectrum, obtain multiple subcarriers, and perform the following operations on each of the subcarriers:
[0101] The original complex values of the subcarriers are extracted from the spectrum of the original sequence signal, where the original complex values include the original amplitude and the original phase.
[0102] The received complex values of the subcarrier are extracted from the spectrum of the received sequence signal, where the received complex values include the received amplitude and the received phase.
[0103] The difference between the received amplitude and the original amplitude of the subcarrier is calculated to obtain the amplitude change;
[0104] The phase change is obtained by calculating the difference between the received phase and the original phase of the subcarrier.
[0105] By summarizing the amplitude and phase changes, subcarrier information is obtained; by summarizing the subcarrier information, channel state information is obtained.
[0106] It is clear that the original sequence signal spectrum refers to a graph displaying the intensity of each frequency component of the original sequence signal. The subcarrier refers to a narrowband subchannel carrying data in a multi-carrier communication system. Obtaining multiple subcarriers based on the original sequence signal spectrum means using the horizontal axis of the original sequence signal spectrum as the frequency position of the subcarrier, the vertical axis as the amplitude of the subcarrier, and the phase of the subcarrier is obtained by performing a Fourier transform on the original sequence signal. The received amplitude refers to the signal strength on the subcarrier after reception. The original amplitude refers to the signal strength on the subcarrier before reception. The received phase refers to the signal phase on the subcarrier after reception. The original phase refers to the signal phase on the subcarrier before reception.
[0107] S4. Obtain the current spectrum diagram based on the current transformer and the motor, and obtain the harmonic amplitude ratio based on the current spectrum diagram.
[0108] Understandably, the current spectrum diagram refers to an image displaying different frequency components and their intensities in the motor's operating current. The harmonic amplitude ratio refers to the ratio of the fifth harmonic amplitude to the third harmonic amplitude in the current spectrum diagram.
[0109] Furthermore, the step of obtaining the current spectrum diagram based on the current transformer and the motor, and obtaining the harmonic amplitude ratio based on the current spectrum diagram, includes:
[0110] The current signal of the motor is collected by a current transformer to obtain time-domain current sampling data, and Fourier transform is performed on the time-domain current sampling data to obtain the current spectrum.
[0111] Obtain the maximum amplitude in the current spectrum and the frequency corresponding to the maximum amplitude. Set the frequency of the maximum amplitude as the fundamental frequency.
[0112] The third and fifth harmonic frequencies are obtained based on the fundamental frequency, and the amplitudes of the third and fifth harmonics are obtained based on the current spectrum, the third harmonic frequency, and the fifth harmonic frequency.
[0113] Calculate the ratio of the fifth harmonic amplitude to the third harmonic amplitude to obtain the harmonic amplitude ratio.
[0114] It is clear that the current signal refers to the information about the change of current intensity in a circuit over time. The time-domain current sampling data refers to the data obtained after digitizing the current signal in chronological order. The maximum amplitude refers to the highest peak value in the current spectrum. The maximum amplitude frequency refers to the frequency corresponding to the maximum amplitude. Setting the maximum amplitude frequency as the fundamental frequency means treating the maximum amplitude frequency as the fundamental frequency. The third harmonic frequency refers to the frequency of a wave that is three times the fundamental frequency. The fifth harmonic frequency is similar to the third harmonic frequency and will not be described further. The third harmonic amplitude refers to the amplitude corresponding to the third harmonic frequency. The fifth harmonic amplitude is similar to the third harmonic amplitude and will not be described further.
[0115] S5. Calculate the average bit error rate based on the pre-constructed average bit error rate formula.
[0116] Understandably, the pre-constructed average bit error rate formula refers to a formula for calculating the average bit error rate based on experimental results. The average bit error rate refers to the average proportion of received erroneous bits in the transmitted data.
[0117] Furthermore, the calculation of the average bit error rate based on the pre-constructed average bit error rate formula includes:
[0118] Based on the signal-to-noise ratio and the average bit error rate formula, the average bit error rate is calculated, where the average bit error rate formula is as follows:
[0119]
[0120] in, Indicates the average bit error rate. Indicates the channel fading index. Indicates the summation index. To represent factorial, This indicates the signal-to-noise ratio.
[0121] Interpretable, the channel fading index refers to a parameter in the Nakagami-m distribution that describes the severity of signal strength fluctuations during transmission. The summation index refers to the independent variable in the summation function.
[0122] S6. Obtain the encryption algorithm and key length based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy.
[0123] It is clear that the preset encryption strategy refers to a pre-defined rule that selects a specific encryption algorithm and key length based on the current channel quality. The encryption algorithm refers to a specific set of mathematical methods for encrypting and decrypting data. The key length refers to the number of bits in the key used in the encryption algorithm.
[0124] Furthermore, the step of obtaining the encryption algorithm and key length based on the signal-to-noise ratio, average bit error rate, and a preset encryption strategy includes:
[0125] If the signal-to-noise ratio is greater than or equal to a preset first decibel threshold and the average bit error rate is less than or equal to a preset first bit error rate threshold, the pre-constructed AES encryption is set as the encryption algorithm, and the preset optimal channel key length is set as the key length. Here, the first decibel threshold is 20 dB, and the first bit error rate threshold is... The optimal channel key length is 256 bits;
[0126] If the signal-to-noise ratio is less than or equal to a preset second decibel threshold and the average bit error rate is greater than or equal to a preset second bit error rate threshold, the pre-constructed ChaCha20 encryption is set as the encryption algorithm, and the preset poor channel key length is set as the key length. Here, the second decibel threshold is 10 dB, and the second bit error rate threshold is... The poor channel key length is 256 bits;
[0127] Otherwise, the pre-built SM4 encryption is set as the encryption algorithm, and the preset general channel key length is set as the key length, where the general channel key length is 128 bits.
[0128] Explained, the first decibel threshold refers to a value used to judge the signal-to-noise ratio (SNR) quality. If the SNR is greater than or equal to the first decibel threshold, it indicates a high SNR and high quality. The second decibel threshold is similar to the first decibel threshold; if the SNR is less than or equal to the second decibel threshold, it indicates a low SNR and poor quality. The first bit error rate (BER) threshold refers to a value used to judge the average bit error rate (ABER) quality. If the average bit error rate is less than or equal to the first BER threshold, it indicates a low ABER and high quality. The second BER threshold is similar to the first BER threshold; if the average bit error rate is greater than or equal to the first BER threshold, it indicates a high ABER and poor quality. The pre-built AES encryption refers to the internationally accepted AES encryption standard. The pre-built ChaCha20 encryption refers to the internationally accepted ChaCha20 encryption standard. The pre-built SM4 encryption refers to the SM4 encryption standard in the Chinese national commercial cryptography standard. The preset optimal channel key length refers to the key length of the encryption algorithm used when both the SNR and ABER are of high quality. The preset poor channel key length refers to the key length of the encryption algorithm used when both the signal-to-noise ratio and average bit error rate are poor. The preset general channel key length refers to the key length of the encryption algorithm used in other situations.
[0129] It is clear that when both the signal-to-noise ratio (SNR) and average bit error rate (ABER) are of relatively high quality, it indicates high communication quality. Consequently, the channel latency itself is relatively low. Therefore, a relatively complex and secure AES encryption algorithm is used to ensure communication security. This invention sets the good channel key length to a common 256 bits. When both the SNR and ABER are of relatively poor quality, it indicates poor communication quality. At this point, the communication latency is already higher than when the communication quality is high. Therefore, this invention needs to use the simpler ChaCha20 encryption algorithm to minimize the high communication latency caused by the complex encryption algorithm. However, the general standard for the ChaCha20 encryption algorithm only supports 256-bit keys, hence the poor channel key length is 256 bits. When other conditions are met, it indicates that the communication quality is average, and the communication delay is higher than when the communication quality is high but lower than when the communication quality is poor. In this case, the present invention adopts a more balanced SM4 encryption algorithm to increase the security of the channel without causing excessive communication delay due to complex encryption algorithms. The general standard of the SM4 encryption algorithm only supports 128-bit keys, so the general channel key length is 128 bits.
[0130] S7. Use a spectrum analyzer to obtain the error vector amplitude, and generate a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights and key length.
[0131] It should be explained that the error vector amplitude refers to a value that measures the deviation between the actual received signal and the theoretically perfect signal. The preset weights refer to the proportions of the channel impulse response, harmonic amplitude ratio, and error vector amplitude, which are each set manually. The temporary session key refers to a one-time encryption key temporarily generated for a single communication session.
[0132] Furthermore, the generation of a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length includes:
[0133] Extract the preset characteristic parameters from the channel impulse response to obtain the channel impulse response value;
[0134] The channel impulse response value, harmonic amplitude ratio, and error vector amplitude are repeatedly concatenated according to preset weights to obtain the key pre-string.
[0135] The intermediate key is obtained by using the key pre-string and the preset key derivation function, and the temporary session key is obtained based on the intermediate key, the key length and the pre-constructed pruning conditions.
[0136] Explained, the preset characteristic parameters refer to the characteristic values in the desired channel impulse response selected manually, such as the number of paths in the multipath effect, the time difference of delay spread, and the signal strength of each path. The channel impulse response value refers to the value of the extracted characteristic parameters. The repeated splicing operation refers to repeatedly splicing the channel impulse response value, harmonic amplitude ratio, and error vector amplitude according to preset weights.
[0137] For example, if the channel impulse response value is A, the harmonic amplitude ratio is B, the error vector amplitude is C, and the preset weight is: channel impulse response value: harmonic amplitude ratio: error vector amplitude = 0.5: 0.3: 0.2, then the resulting key pre-string is: AAAAABBBCC.
[0138] It is clear that the key preamble string refers to the original data string used to generate the final key, which is formed by concatenating multiple data items.
[0139] It needs to be explained that the key pre-string is obtained by repeatedly concatenating the channel impulse response value, harmonic amplitude ratio, and error vector amplitude according to a preset weight. This is based on the channel physical parameters, ensuring the uniqueness of the key pre-string and enhancing security.
[0140] As is easily understood, the preset key derivation function refers to the algorithm used to generate a key based on a key prefix string. The intermediate key refers to the key obtained from the key derivation function that requires further processing. The pre-constructed pruning condition refers to the condition for processing the intermediate key based on the key length. Specifically, when the key length is not a good channel key length or a poor channel key length, the intermediate key needs to be pruned so that the pruned temporary session key is 128 bits.
[0141] It is clear that in order to ensure the irreversibility of the temporary session key, the key prefix string cannot be used directly as the encryption key. Instead, a key derivation function is used to generate an intermediate key that uniquely corresponds to the key prefix string but cannot be reversed, and the intermediate key is trimmed according to the key length requirements.
[0142] Furthermore, the step of obtaining an intermediate key using a key pre-string and a preset key derivation function, and obtaining a temporary session key based on the intermediate key, key length, and pre-constructed pruning conditions, includes:
[0143] Perform a hash value calculation operation on the key prefix string to obtain the first hash value;
[0144] Perform a hash value calculation operation on the first hash value to obtain the second hash value, wherein the preset key derivation function is a function that performs an XOR operation;
[0145] Perform an XOR operation on the first hash value and the second hash value to obtain the intermediate key;
[0146] If the key length is the same as the good channel key length or the poor channel key length, then the intermediate key is set as the temporary session key;
[0147] Otherwise, if the intermediate key is confirmed to meet the pruning conditions, the data corresponding to the preset position in the intermediate key is pruned to obtain a temporary session key, wherein the data corresponding to the preset position is the last 128 bits of data in the intermediate key.
[0148] Explained, the hash value calculation operation refers to a calculation method that converts data of arbitrary length into a string of fixed length data, where the fixed length is 256 bits. The first hash value refers to the hash value obtained by performing a hash value calculation operation on the key prefix string. The second hash value refers to the hash value obtained by performing a hash value calculation operation on the first hash value. The XOR operation refers to comparing the characters in the same number of bits of two binary strings; if they are the same, the result is 0; if they are different, the result is 1. For example, performing an XOR operation on "101011" and "110001" yields: 011010. For example, if the key length is 8 bits and the intermediate key is 1111000011000011, then the temporary session key obtained after pruning the last 8 bits of data is 11110000.
[0149] To address the problems described in the background art, this invention acquires a total device, a spectrum analyzer, and a test signal. The total device includes a transmitter, a receiver, a motor, and a current transformer. The receiver acquires a noise spectrum diagram, and the noise floor power is obtained from the noise spectrum diagram. Based on the transmitter, receiver, and test signal, a test signal spectrum diagram is acquired, and the signal power is obtained from the test signal spectrum diagram. The signal-to-noise ratio (SNR) is obtained from the signal power and the noise floor power. This invention pre-constructs the required equipment and collects signal power and noise floor power to obtain SNR information, enabling real-time and accurate SNR information. Channel state information is acquired based on pre-constructed physical layer units in the receiver. Based on the channel state information and a pre-constructed inverse Fourier transform operation, the channel impulse response is acquired. A current spectrum diagram is acquired based on the current transformer and motor, and the harmonic amplitude ratio is obtained from the current spectrum diagram. This invention acquires the channel impulse response and harmonic amplitude ratio for subsequent key generation, improving security. The average bit error rate (BER) is calculated based on a pre-constructed average BER formula. This invention can estimate the BER based on existing data, facilitating the selection of subsequent encryption strategies. Based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy, the encryption algorithm and key length are obtained. It is evident that this invention balances security and latency by employing different encryption strategies under varying channel quality conditions, ensuring security while maintaining low latency. The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length. Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is then performed using the encryption algorithm and the temporary session key. This invention generates a temporary session key based on the physical characteristics of the channel, ensuring the security of dynamic encryption authentication. Therefore, this invention can reduce communication latency and improve communication security.
[0150] like Figure 2 The diagram shown is a functional block diagram of a dynamic encryption authentication system based on channel adaptation and multimodal fingerprinting provided in an embodiment of the present invention.
[0151] The dynamic encryption authentication system 100 based on channel adaptation and multimodal fingerprinting described in this invention can be installed in an electronic device. Depending on the functions implemented, the dynamic encryption authentication system 100 may include a physical foundation module 101, an information collection module 102, an encryption decision module 103, and a key and encryption module 104. The module described in this invention can also be called a unit, which refers to a series of computer program segments that can be executed by the processor of an electronic device and can perform a fixed function, and is stored in the memory of the electronic device.
[0152] The physical infrastructure module 101 is used to acquire the total equipment, spectrum analyzer and test signals, wherein the total equipment includes: a transmitter, a receiver, a motor and a current transformer;
[0153] The information collection module 102 is used to acquire a noise spectrum diagram using the receiving end, acquire the noise floor power based on the noise spectrum diagram, acquire a test signal spectrum diagram based on the transmitting end, the receiving end, and the test signal, acquire the signal power based on the test signal spectrum diagram, acquire the signal-to-noise ratio based on the signal power and the noise floor power, acquire channel state information based on the pre-constructed physical layer units in the receiving end, acquire the channel impulse response based on the channel state information and the pre-constructed inverse Fourier transform operation, acquire a current spectrum diagram based on the current transformer and the motor, and acquire the harmonic amplitude ratio based on the current spectrum diagram.
[0154] The encryption decision module 103 is used to calculate the average bit error rate based on a pre-constructed average bit error rate formula, and to obtain the encryption algorithm and key length based on the signal-to-noise ratio, the average bit error rate and the preset encryption strategy.
[0155] The key and encryption module 104 is used to obtain the error vector amplitude using a spectrum analyzer, and generate a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights and key length, and complete dynamic encryption authentication based on channel adaptation and multimodal fingerprinting according to the encryption algorithm and the temporary session key.
[0156] In detail, the modules in the dynamic encryption authentication system 100 based on channel adaptation and multimodal fingerprinting described in this embodiment of the invention employ the same methods as described above. Figure 1 The method used is the same as the dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting described above, and it can produce the same technical effect, so it will not be repeated here.
[0157] like Figure 3 The diagram shown is a structural schematic of an electronic device that implements a dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting, according to an embodiment of the present invention.
[0158] The electronic device 1 may include a processor 10, a memory 11 and a bus 12, and may also include a computer program stored in the memory 11 and capable of running on the processor 10, such as a dynamic encryption authentication method program based on channel adaptation and multimodal fingerprinting.
[0159] The memory 11 includes at least one type of readable storage medium, such as flash memory, portable hard drive, multimedia card, card-type memory (e.g., SD or DX memory), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the memory 11 can be an internal storage unit of the electronic device 1, such as the portable hard drive of the electronic device 1. In other embodiments, the memory 11 can be an external storage device of the electronic device 1, such as a plug-in portable hard drive, smart media card (SMC), secure digital card (SD), flash card, etc., equipped on the electronic device 1. Furthermore, the memory 11 includes both internal storage units and external storage devices of the electronic device 1. The memory 11 can be used not only to store application software and various types of data installed on the electronic device 1, such as the code of a dynamic encryption authentication method program based on channel adaptation and multimodal fingerprinting, but also to temporarily store data that has been output or will be output.
[0160] In some embodiments, the processor 10 may be composed of integrated circuits, such as a single packaged integrated circuit or multiple integrated circuits with the same or different functions, including combinations of one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and various control chips. The processor 10 is the control unit of the electronic device, connecting various components of the entire electronic device through various interfaces and lines. It executes programs or modules stored in the memory 11 (e.g., dynamic encryption authentication methods based on channel adaptation and multimodal fingerprinting) and calls data stored in the memory 11 to perform various functions of the electronic device 1 and process data.
[0161] The bus 12 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus 12 can be divided into an address bus, a data bus, a control bus, etc. The bus 12 is configured to realize the connection and communication between the memory 11 and at least one processor 10, etc.
[0162] Figure 3 Only electronic devices with components are shown; those skilled in the art will understand that... Figure 3The structure shown does not constitute a limitation on the electronic device 1, and may include fewer or more components than shown, or combine certain components, or have different component arrangements.
[0163] For example, although not shown, the electronic device 1 may also include a power supply (such as a battery) to power the various components. Preferably, the power supply can be logically connected to the at least one processor 10 through a power management system, thereby enabling functions such as charging management, discharging management, and power consumption management through the power management system. The power supply may also include one or more DC or AC power supplies, recharging systems, power fault detection circuits, power converters or inverters, power status indicators, and other arbitrary components. The electronic device 1 may also include various sensors, Bluetooth modules, Wi-Fi modules, etc., which will not be described in detail here.
[0164] Furthermore, the electronic device 1 may also include a network interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a Wi-Fi interface, a Bluetooth interface, etc.), which is typically used to establish communication connections between the electronic device 1 and other electronic devices.
[0165] Optionally, the electronic device 1 may further include a user interface, which may be a display, an input unit (such as a keyboard), and optionally, a standard wired interface or a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, or an OLED (Organic Light-Emitting Diode) touchscreen, etc. The display may also be appropriately referred to as a screen or display unit, used to display information processed in the electronic device 1 and to display a visual user interface.
[0166] The dynamic encryption authentication method program based on channel adaptation and multimodal fingerprinting stored in the memory 11 of the electronic device 1 is a combination of multiple instructions. When run in the processor 10, it can achieve the following:
[0167] Acquire the total equipment, spectrum analyzer, and test signals. The total equipment includes: transmitter, receiver, motor, and current transformer.
[0168] The noise spectrum is obtained at the receiving end, the noise floor power is obtained from the noise spectrum, the test signal spectrum is obtained based on the transmitting end, the receiving end and the test signal, the signal power is obtained from the test signal spectrum, and the signal-to-noise ratio is obtained from the signal power and the noise floor power.
[0169] Channel state information is obtained based on the pre-constructed physical layer units in the receiver, and the channel impulse response is obtained based on the channel state information and the pre-constructed inverse Fourier transform operation.
[0170] The current spectrum diagram is obtained based on the current transformer and the motor, and the harmonic amplitude ratio is obtained based on the current spectrum diagram.
[0171] The average bit error rate is calculated based on a pre-constructed formula for the average bit error rate.
[0172] The encryption algorithm and key length are obtained based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy.
[0173] The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length.
[0174] Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is completed using encryption algorithms and temporary session keys.
[0175] Specifically, the processor 10's implementation method for the above instructions can be found in [reference needed]. Figures 1 to 3 The descriptions of the relevant steps in the corresponding embodiments are not repeated here.
[0176] Furthermore, if the modules / units integrated in the electronic device 1 are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. The computer-readable storage medium can be volatile or non-volatile. For example, the computer-readable medium may include: any entity or system capable of carrying the computer program code, a recording medium, a USB flash drive, a portable hard drive, a magnetic disk, an optical disk, a computer memory, or a read-only memory (ROM).
[0177] The present invention also provides a computer-readable storage medium storing a computer program, which, when executed by a processor of an electronic device, can perform the following:
[0178] Acquire the total equipment, spectrum analyzer, and test signals. The total equipment includes: transmitter, receiver, motor, and current transformer.
[0179] The noise spectrum is obtained at the receiving end, the noise floor power is obtained from the noise spectrum, the test signal spectrum is obtained based on the transmitting end, the receiving end and the test signal, the signal power is obtained from the test signal spectrum, and the signal-to-noise ratio is obtained from the signal power and the noise floor power.
[0180] Channel state information is obtained based on the pre-constructed physical layer units in the receiver, and the channel impulse response is obtained based on the channel state information and the pre-constructed inverse Fourier transform operation.
[0181] The current spectrum diagram is obtained based on the current transformer and the motor, and the harmonic amplitude ratio is obtained based on the current spectrum diagram.
[0182] The average bit error rate is calculated based on a pre-constructed formula for the average bit error rate.
[0183] The encryption algorithm and key length are obtained based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy.
[0184] The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length.
[0185] Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is completed using encryption algorithms and temporary session keys.
[0186] In the embodiments provided by this invention, it should be understood that the disclosed devices, systems, and methods can be implemented in other ways. For example, the system embodiments described above are merely illustrative, and actual implementations may have other classification methods.
[0187] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.
[0188] Furthermore, the functional modules in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or in the form of hardware plus software functional modules.
[0189] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.
[0190] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention.
Claims
1. A dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting, characterized in that, The method includes: Acquire the total equipment, spectrum analyzer, and test signals. The total equipment includes: transmitter, receiver, motor, and current transformer. The noise spectrum is obtained at the receiving end, the noise floor power is obtained from the noise spectrum, the test signal spectrum is obtained based on the transmitting end, the receiving end and the test signal, the signal power is obtained from the test signal spectrum, and the signal-to-noise ratio is obtained from the signal power and the noise floor power. Channel state information is obtained based on the pre-constructed physical layer units in the receiver, and the channel impulse response is obtained based on the channel state information and the pre-constructed inverse Fourier transform operation. The current spectrum diagram is obtained based on the current transformer and the motor, and the harmonic amplitude ratio is obtained based on the current spectrum diagram. The average bit error rate is calculated based on a pre-constructed formula for the average bit error rate. The encryption algorithm and key length are obtained based on the signal-to-noise ratio, average bit error rate, and preset encryption strategy. The error vector amplitude is obtained using a spectrum analyzer, and a temporary session key is generated based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length. Dynamic encryption authentication based on channel adaptation and multimodal fingerprinting is completed using encryption algorithms and temporary session keys; The process of obtaining the encryption algorithm and key length based on signal-to-noise ratio, average bit error rate, and a preset encryption strategy includes: If the signal-to-noise ratio is greater than or equal to a preset first decibel threshold and the average bit error rate is less than or equal to a preset first bit error rate threshold, the pre-constructed AES encryption is set as the encryption algorithm, and the preset optimal channel key length is set as the key length. Here, the first decibel threshold is 20 dB, and the first bit error rate threshold is... The optimal channel key length is 256 bits; If the signal-to-noise ratio is less than or equal to a preset second decibel threshold and the average bit error rate is greater than or equal to a preset second bit error rate threshold, the pre-constructed ChaCha20 encryption is set as the encryption algorithm, and the preset poor channel key length is set as the key length. Here, the second decibel threshold is 10 dB, and the second bit error rate threshold is... The poor channel key length is 256 bits; Otherwise, the pre-built SM4 encryption is set as the encryption algorithm, and the preset general channel key length is set as the key length, where the general channel key length is 128 bits; The process of generating a temporary session key based on channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length includes: Extract the preset characteristic parameters from the channel impulse response to obtain the channel impulse response value; The channel impulse response value, harmonic amplitude ratio, and error vector amplitude are repeatedly concatenated according to preset weights to obtain the key pre-string. Using the key preamble and a preset key derivation function, an intermediate key is obtained, and based on the intermediate key, key length, and pre-constructed pruning conditions, a temporary session key is obtained. The process of obtaining an intermediate key using a key pre-string and a preset key derivation function, and then obtaining a temporary session key based on the intermediate key, key length, and pre-constructed pruning conditions, includes: Perform a hash value calculation operation on the key prefix string to obtain the first hash value; A hash value calculation operation is performed on the first hash value to obtain a second hash value, wherein the key derivation function is a function that performs an XOR operation; Perform an XOR operation on the first hash value and the second hash value to obtain the intermediate key; If the key length is the same as the good channel key length or the poor channel key length, then the intermediate key is set as the temporary session key; Otherwise, if the intermediate key is confirmed to meet the pruning conditions, the data corresponding to the preset position in the intermediate key is pruned to obtain a temporary session key, wherein the data corresponding to the preset position is the last 128 bits of data in the intermediate key.
2. The dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting as described in claim 1, characterized in that, The process of obtaining a noise spectrum at the receiving end, obtaining the noise floor power based on the noise spectrum, obtaining a test signal spectrum based on the transmitting end, receiving end, and test signal, obtaining the signal power based on the test signal spectrum, and obtaining the signal-to-noise ratio based on the signal power and noise floor power includes: A pause operation is performed on the sending end to obtain a sending end in a state of no signal transmission; In the absence of signal transmission, noise is captured by the receiver to obtain noise sampling data, and a pre-constructed Fourier transform operation is performed on the noise sampling data to obtain the noise spectrum. The average noise power is calculated based on the noise spectrum diagram, and the average noise power is set as the noise floor power. The test signal is sent by the transmitting end to obtain the test signal in transmission. The test signal sampling data is obtained by capturing the test signal in transmission at the receiving end. The Fourier transform operation is performed on the test signal sampling data to obtain the test signal spectrum. The average power of the test signal is calculated based on the spectrum of the test signal, and the average power of the test signal is set as the signal power. The signal-to-noise ratio is obtained by calculating the ratio of signal power to noise floor power.
3. The dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting as described in claim 2, characterized in that, The process of obtaining channel state information based on pre-constructed physical layer units in the receiver, and obtaining the channel impulse response based on the channel state information and a pre-constructed inverse Fourier transform operation, includes: The original sequence signal is sent from the transmitting end to the receiving end to obtain the sequence signal in transit; The receiver captures the transmitted sequence signal based on the physical layer unit, obtains the received sequence signal sample data, and performs a Fourier transform operation on the received sequence signal sample data to obtain the received sequence signal spectrum. Channel state information is obtained based on the spectrum diagrams of the original sequence signal and the received sequence signal. The channel state information includes multiple subcarrier information, and the subcarrier information includes amplitude changes and phase changes. Perform an inverse Fourier transform on the channel state information to obtain the channel impulse response.
4. The dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting as described in claim 3, characterized in that, The process of obtaining channel state information based on the spectrum diagrams of the original sequence signal and the received sequence signal includes: Perform a Fourier transform on the original sequence signal to obtain its spectrum. Based on the spectrum, obtain multiple subcarriers, and perform the following operations on each of the subcarriers: The original complex values of the subcarriers are extracted from the spectrum of the original sequence signal, where the original complex values include the original amplitude and the original phase. The received complex values of the subcarrier are extracted from the spectrum of the received sequence signal, where the received complex values include the received amplitude and the received phase. The difference between the received amplitude and the original amplitude of the subcarrier is calculated to obtain the amplitude change; The phase change is obtained by calculating the difference between the received phase and the original phase of the subcarrier. By summarizing the amplitude and phase changes, subcarrier information is obtained; by summarizing the subcarrier information, channel state information is obtained.
5. The dynamic encryption authentication method based on channel adaptation and multimodal fingerprinting as described in claim 4, characterized in that, The process of obtaining the current spectrum diagram based on the current transformer and motor, and obtaining the harmonic amplitude ratio based on the current spectrum diagram, includes: The current signal of the motor is collected by a current transformer to obtain time-domain current sampling data, and Fourier transform is performed on the time-domain current sampling data to obtain the current spectrum. Obtain the maximum amplitude in the current spectrum and the frequency corresponding to the maximum amplitude, and set the frequency of the maximum amplitude as the fundamental frequency. The third and fifth harmonic frequencies are obtained based on the fundamental frequency, and the amplitudes of the third and fifth harmonics are obtained based on the current spectrum, the third harmonic frequency, and the fifth harmonic frequency. Calculate the ratio of the fifth harmonic amplitude to the third harmonic amplitude to obtain the harmonic amplitude ratio.
6. A dynamic encryption authentication system based on channel adaptation and multimodal fingerprinting, characterized in that, The system includes: The physical foundation module is used to acquire the total equipment, spectrum analyzer and test signals. The total equipment includes: transmitter, receiver, motor and current transformer. The information collection module is used to acquire a noise spectrum diagram using the receiver, obtain the noise floor power based on the noise spectrum diagram, acquire a test signal spectrum diagram based on the transmitter, receiver, and test signal, obtain the signal power based on the test signal spectrum diagram, obtain the signal-to-noise ratio based on the signal power and noise floor power, acquire channel state information based on the pre-built physical layer units in the receiver, acquire the channel impulse response based on the channel state information and the pre-built inverse Fourier transform operation, acquire a current spectrum diagram based on the current transformer and motor, and obtain the harmonic amplitude ratio based on the current spectrum diagram. The encryption decision module is used to calculate the average bit error rate based on a pre-built average bit error rate formula, and to obtain the encryption algorithm and key length based on the signal-to-noise ratio, average bit error rate and preset encryption strategy. The key and encryption module is used to obtain the error vector amplitude using a spectrum analyzer, and generate a temporary session key based on the channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights and key length. It then completes dynamic encryption authentication based on channel adaptation and multimodal fingerprinting according to the encryption algorithm and the temporary session key. The process of obtaining the encryption algorithm and key length based on signal-to-noise ratio, average bit error rate, and a preset encryption strategy includes: If the signal-to-noise ratio is greater than or equal to a preset first decibel threshold and the average bit error rate is less than or equal to a preset first bit error rate threshold, the pre-constructed AES encryption is set as the encryption algorithm, and the preset optimal channel key length is set as the key length. Here, the first decibel threshold is 20 dB, and the first bit error rate threshold is... The optimal channel key length is 256 bits; If the signal-to-noise ratio is less than or equal to a preset second decibel threshold and the average bit error rate is greater than or equal to a preset second bit error rate threshold, the pre-constructed ChaCha20 encryption is set as the encryption algorithm, and the preset poor channel key length is set as the key length. Here, the second decibel threshold is 10 dB, and the second bit error rate threshold is... The poor channel key length is 256 bits; Otherwise, the pre-built SM4 encryption is set as the encryption algorithm, and the preset general channel key length is set as the key length, where the general channel key length is 128 bits; The process of generating a temporary session key based on channel impulse response, harmonic amplitude ratio, error vector amplitude, preset weights, and key length includes: Extract the preset characteristic parameters from the channel impulse response to obtain the channel impulse response value; The channel impulse response value, harmonic amplitude ratio, and error vector amplitude are repeatedly concatenated according to preset weights to obtain the key pre-string. Using the key preamble and a preset key derivation function, an intermediate key is obtained, and based on the intermediate key, key length, and pre-constructed pruning conditions, a temporary session key is obtained. The process of obtaining an intermediate key using a key pre-string and a preset key derivation function, and then obtaining a temporary session key based on the intermediate key, key length, and pre-constructed pruning conditions, includes: Perform a hash value calculation operation on the key prefix string to obtain the first hash value; A hash value calculation operation is performed on the first hash value to obtain a second hash value, wherein the key derivation function is a function that performs an XOR operation; Perform an XOR operation on the first hash value and the second hash value to obtain the intermediate key; If the key length is the same as the good channel key length or the poor channel key length, then the intermediate key is set as the temporary session key; Otherwise, if the intermediate key is confirmed to meet the pruning conditions, the data corresponding to the preset position in the intermediate key is pruned to obtain a temporary session key, wherein the data corresponding to the preset position is the last 128 bits of data in the intermediate key.
Citation Information
Patent Citations
Coherent passive optical network physical layer security enhancement method and system
CN117278135A
Data transmission protection method and computer device
CN119089460A