Data aggregation method and device

Abstract

The embodiment of the invention provides a data aggregation method and device, and the method comprises the steps: an edge gateway carries out the aggregation operation of data from a plurality of data producers, and generates an aggregation signature, the data is a ciphertext which is encrypted and digitally signed by the corresponding data producers, and the aggregation signature is generated by the edge gateway; by means of the data aggregation method and device, the problem that an existing industrial internet data aggregation scheme is not comprehensive in consideration in the aspect of data storage safety is solved, and then the privacy and integrity of the data are guaranteed.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of data security, and in particular, to a data aggregation method and device. Background Art

[0002] In the 5G+ Industrial Internet application, 5G technology can provide high-speed, low-latency, and high-capacity network connectivity for the Industrial Internet, further promoting the aggregation and analysis of industrial data. Through 5G networks, devices can reliably upload data to the cloud in real time, while the cloud can rapidly process and analyze large amounts of data. Data aggregation, however, requires appropriate security and privacy protections for data sources and usage.

[0003] 5G+ Industrial Internet Data Aggregation Business Process: In the 5G+ Industrial Internet, multiple data producers (hereinafter referred to as "data producers") within the industrial network send data to edge gateways, where it is aggregated and then transmitted to 5G edge cloud storage. Only the data owner can decrypt the plaintext data stored in the cloud. To use the plaintext data, other data users must re-encrypt it with the data owner to obtain the decryption key.

[0004] Functions of various entities in the 5G+ Industrial Internet data aggregation service: In this service, data producers encrypt industrial data and generate digital signatures; edge gateways aggregate the data, implementing re-encryption and homomorphic signing; and the edge cloud stores the aggregated industrial data. After data users obtain data usage rights, data owners utilize a re-encryption mechanism to allow the cloud to obtain the decryption key, thereby enabling authorized access to the data.

[0005] Regarding the problem that the existing 5G+ industrial Internet data aggregation solutions do not fully consider data storage security, relevant technologies have not yet proposed a suitable solution. Summary of the Invention

[0006] The embodiments of the present invention provide a data aggregation method and device to at least solve the problem that the existing 5G+ industrial Internet data aggregation solution does not fully consider the data storage security.

[0007] According to one embodiment of the present invention, a data aggregation method is provided, comprising:

[0008] The edge gateway aggregates the data from multiple data producers and generates an aggregate signature, wherein the data is ciphertext encrypted and digitally signed by the corresponding multiple data producers;

[0009] The edge gateway stores the aggregated data in the edge cloud.

[0010] In an exemplary embodiment, an edge gateway is provided, comprising:

[0011] an aggregation module, configured to aggregate data from multiple data producers and generate an aggregate signature, wherein the data from the multiple data producers are encrypted and digitally signed by the corresponding data producers;

[0012] The sending module is used to send the aggregated data to the edge cloud.

[0013] According to another embodiment of the present invention, an edge cloud is provided, including:

[0014] A receiving module, configured to receive a re-encryption key from a data owner;

[0015] The encryption module is used to perform a re-encryption operation on the decryption key using the re-encryption key, so that the data user can obtain the decryption key through the decryption operation and decrypt the data using the decryption key.

[0016] According to yet another embodiment of the present invention, a computer-readable storage medium is provided, in which a computer program is stored. The computer program is configured to execute the steps of any one of the above method embodiments when run.

[0017] According to another embodiment of the present invention, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform the steps in any one of the above method embodiments.

[0018] In the above embodiment of the present invention, the edge gateway can aggregate data from multiple data producers and aggregate signatures without knowing the plaintext information. Therefore, the privacy and integrity of the data are guaranteed during the data aggregation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 is a hardware structure block diagram of a computer terminal according to a data aggregation method according to an embodiment of the present invention;

[0020] Figure 2 is a flow chart of a data aggregation method according to an embodiment of the present invention (I);

[0021] Figure 3 is a flow chart of a data aggregation method according to an embodiment of the present invention (II);

[0022] Figure 4 This is a structural block diagram of an edge gateway according to an embodiment of the present invention;

[0023] Figure 5 This is a structural block diagram of an edge cloud according to an embodiment of the present invention. DETAILED DESCRIPTION

[0024] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and in combination with embodiments.

[0025] It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0026] The current 5G+ industrial Internet data storage security and requirements are mainly reflected in the following four aspects:

[0027] 1. Industrial Data Privacy: Because edge clouds are often provided by telecom operators, industrial network users who use edge clouds to store industrial production data worry about cloud data leaks, which could threaten the company's normal production processes, lead to financial losses, and even legal disputes. Therefore, data producers must encrypt their data before safely storing it in the cloud.

[0028] 2. Industrial Data Integrity: Similar to data privacy requirements, data producers are also concerned about cloud data being tampered with by other users. Therefore, data producers must sign the data stored in the cloud.

[0029] 3. Industrial Data Aggregation: The Industrial Internet Edge Gateway aggregates data from multiple industrial terminals, performing addition operations on the data from multiple terminals. However, the Edge Gateway cannot access the plaintext data. Furthermore, without knowing the plaintext, the Edge Gateway generates a new signature for the newly generated plaintext to ensure the integrity of the industrial data.

[0030] 4. Decryption Key Re-encryption: The data owner encrypts the decryption key and stores it on the edge cloud. If a data user is authorized to access the data, the data owner performs a proxy re-encryption operation on the ciphertext and passes the re-encryption key to the edge cloud, which then executes the re-encryption algorithm. The data user can then decrypt the data encryption key and use it to decrypt the industrial data.

[0031] To this end, an embodiment of the present invention provides a data aggregation method and device to at least meet some of the above-mentioned 5G+ industrial Internet data security requirements.

[0032] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking running on a computer terminal as an example, Figure 1 This is a hardware structure diagram of a computer terminal running a data aggregation method according to an embodiment of the present invention. Figure 1As shown, the computer terminal may include one or more ( Figure 1 Only one is shown) a processor 102 (the processor 102 may include but is not limited to a microprocessor MCU or a programmable logic device FPGA and other processing devices) and a memory 104 for storing data. The computer terminal may also include a transmission device 106 and an input / output device 108 for communication functions. It will be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above-mentioned computer terminal. For example, the computer terminal may also include Figure 1 More or fewer components than shown, or with Figure 1 Different configurations shown.

[0033] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as a computer program corresponding to a data aggregation method in an embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, implementing the above-mentioned method. The memory 104 may include a high-speed random access memory and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely located relative to the processor 102, and these remote memories may be connected to the computer terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0034] The transmission device 106 is used to receive or send data via a network. A specific example of the aforementioned network may include a wireless network provided by a computer terminal's communications provider. In one embodiment, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices via a gateway to enable communication with the Internet. In another embodiment, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0035] This embodiment provides a data aggregation method running on the above-mentioned computer terminal, Figure 2 Flowchart (1) of a data aggregation method according to an embodiment of the present invention, such as Figure 2 As shown, the process includes the following steps:

[0036] In step S202, the edge gateway aggregates the data from the multiple data producers and generates an aggregate signature, wherein the data is ciphertext encrypted and digitally signed by the corresponding multiple data producers.

[0037] In step S204, the edge gateway stores the aggregated data in the edge cloud.

[0038] Specifically, (1) the edge gateway performs aggregation operations on the data from t data producers according to the following steps:

[0039] Assume that the data ciphertext from t data producers is η={c1,...,c t}, the corresponding digital signature is τ={τ1,...,τ t}, the edge gateway first performs aggregation operations on the data ciphertext Then calculate the digital signature of the aggregated data

[0040] (2) The edge gateway performs data storage according to the following steps:

[0041] After completing the above aggregation operation, the edge gateway stores the aggregated ciphertext π and digital signature Ω in the edge cloud.

[0042] Through the above steps S202 and S204, the edge gateway can perform aggregation operations on the ciphertext and digital signatures from multiple data producers without obtaining plaintext information, which can solve the problem of incomplete consideration of data storage security in the existing 5G+ industrial Internet data aggregation solution and ensure the privacy and integrity of the data.

[0043] In this embodiment, after the edge gateway stores the aggregated data in the edge cloud, the edge cloud can receive the re-encryption key from the data owner, and the edge cloud performs a re-encryption operation on the decryption key using the re-encryption key, so that the data user obtains the decryption key through the decryption operation and decrypts the data using the decryption key.

[0044] Specifically, the edge cloud can re-encrypt the first ciphertext α according to the following steps to obtain a second ciphertext that can be decrypted by the data user:

[0045] (1) Edge cloud computing

[0046] (2) The edge cloud obtains the second ciphertext α′=(α1′,α2,R).

[0047] Therefore, the edge cloud can re-encrypt the ciphertext of the data encryption key without knowing the plaintext, allowing data users to decrypt the data encryption key with their own private key. Therefore, the privacy of the data decryption key is guaranteed.

[0048] In this embodiment, before the edge gateway aggregates data from multiple data producers and generates an aggregate signature, the trusted center initializes its own key material, generates a master signature key, and the corresponding public key and private key of the trusted center. For example:

[0049] The trusted center initializes the key material of the edge gateway, generates an aggregate key for the edge gateway, and sends the private key of the aggregate key to the edge gateway through a first secure channel;

[0050] The trusted center generates a key pair for each data producer respectively, and sends the private key of each data producer's key pair to the corresponding data producer through a second secure channel;

[0051] The trusted center generates a key pair for the data owner, and sends the private key of the key pair to the data owner through a third secure channel, and makes the public key of the key pair public;

[0052] The trusted center generates a key pair for the data user, sends the private key of the key pair to the data user through a fourth secure channel, and makes the public key of the key pair of the data user public.

[0053] Specifically, the trusted center initializes the parameters of the cryptographic system to protect the subsequent data aggregation and re-encryption process. The parameters of the cryptographic system are initialized according to the following steps:

[0054] (1) The trusted center first initializes its own key material. The trusted center randomly generates two prime numbers q1 and q2, and calculates N = q1q2, λ = lcm(q1-1,q2-1), and Φ(N) = (q1-1)(q2-1), where lcm represents the least common multiple, obtained using the Euclidean algorithm. The trusted center randomly generates l numbers a1 <a2<...<a l , where a1,...,a l Pairwise coprime, then calculate The trusted center randomly generates the master signature key sk s ∈(a l ,A m ) and calculate the corresponding public key The trusted center obtains its own private key sk KDC ={a1,a2,...,a l ,Am ,sk s ,q1,q2} and public key pk KDC ={pk s ,A,N};

[0055] (2) The trusted center initializes the edge gateway key material and generates an aggregate key sk for the edge gateway gw =sk s moda1, the trusted center calculates A1=A / a1 and The trusted center sends the private key sk of the edge gateway through the first secure channel GW ={A1,B1,sk gw}Send to edge gateway;

[0056] (3) The trusted center generates a key pair for each data producer. For the i-th data producer, the trusted center calculates sk SMi =sk s mod a i+1 , A i+1 =A / a i+1 , The trusted center sends the private key sk of the i-th data producer through the second secure channel i ={sk SMi ,A i+1 ,B i+1}Sent to the corresponding data producer;

[0057] (4) The trusted center generates a key pair for the data owner. The trusted center randomly generates (or let h = N + 1), the trusted center defines And calculate μ=(L(h λ modN 2 )) -1 modN, the trusted center randomly generates sk A ∈Z Φ(N) , The trusted center then sends the data owner’s private key (λ, μ, sk A ) is sent to the data owner, and the corresponding public key (N,h,pk A )public;

[0058] (5) The trusted center generates a key pair for the data user, and the trusted center randomly generates sk B ∈Z Φ(N) , The trusted center passes the data owner's private key sk through the fourth security channel B Send it to the data user and send the corresponding public key pk B public.

[0059] In this embodiment, the edge gateway performs an aggregation operation on data from multiple data producers and generates an aggregate signature, including:

[0060] The edge gateway performs an aggregation operation on the ciphertexts from multiple data producers through the edge gateway aggregation key, and calculates the digital signature of the aggregated data, wherein the ciphertext is the ciphertext obtained by each data producer encrypting their respective data through the data owner's public key, and the digital signature is the digital signature of the ciphertext generated by each data producer through the data producer's private key.

[0061] Specifically, the i-th data producer uses the Dataupload algorithm to encrypt the data and generate a signature according to the following steps:

[0062] (1) The i-th data producer uses the data owner’s public key (N, h) to generate the data m i ∈Z N Encryption, data producer randomly generates r∈Z N , then the data producer calculates the ciphertext

[0063] (2) The i-th data producer uses his own private key to generate data m i The ciphertext c i Generate a digital signature

[0064] In this embodiment, the edge cloud receives the re-encryption key from the data owner, including:

[0065] The edge cloud receives a first ciphertext from the data owner, wherein the first ciphertext is generated by the data owner encrypting the decryption key after receiving a re-encryption request from the data user;

[0066] The edge cloud receives the re-encryption key from the data owner, wherein the re-encryption key is the re-encryption key requested by the data owner from the trusted center.

[0067] Specifically, the data owner encrypts the decryption keys λ and μ and uploads them to the cloud according to the following steps:

[0068] (1) The data owner randomly generates r,g∈Z N , and calculate R = g r modn;

[0069] (2) Data owner calculation α2=H1(R||λ||μ);

[0070] (3) The data owner obtains the first ciphertext α = (α1, α2, R) and uploads the ciphertext to the edge cloud.

[0071] The data owner generates a re-encryption key according to the following steps and sends it to the edge cloud:

[0072] Data Owner Calculation And the re-encryption key rk A→B Leave it to the edge cloud.

[0073] In this embodiment, the edge cloud performs a re-encryption operation on the decryption key using the re-encryption key, so that the data user obtains the decryption key through the decryption operation and decrypts the data using the decryption key, including:

[0074] The edge cloud re-encrypts the first ciphertext using the re-encryption key to generate a second ciphertext, so that the data user can download the second ciphertext from the edge cloud and decrypt the second ciphertext using the data user's private key to obtain the decryption key, and enables the data user to download the aggregated data from the edge cloud and verify whether the data has been tampered with. If the data has not been tampered with, the data is decrypted using the decryption key.

[0075] Specifically, the data user downloads the second ciphertext α′=(α1′,α2,R) from the edge cloud according to the following steps and decrypts it to obtain the data encryption key (λ,μ):

[0076] (1) Data user calculation

[0077] (2) The data user verifies α2? = H1(R||λ||μ) to ensure the integrity of (λ,μ).

[0078] The data user decrypts the acquired data and verifies the integrity of the data according to the following steps:

[0079] (1) Data users verify whether the aggregated data π has been tampered with If the above formula is true, the data has not been tampered with, otherwise the data has been tampered with;

[0080] (2) Decryption

[0081] Through the above embodiments of the invention, the problem of incomplete consideration of data storage security in the existing 5G+ industrial Internet data aggregation solution can be solved, thereby achieving the effect of ensuring the privacy and integrity of the data and the privacy of the data decryption key.

[0082] In another embodiment of the present invention, a data aggregation method is provided. Figure 3 Flowchart (II) of the data aggregation method provided according to an embodiment of the present invention, such as Figure 3 As shown, the process includes the following steps:

[0083] (1) Multiple data producers send data to the edge gateway;

[0084] (2) The edge gateway performs aggregate re-encryption and homomorphic signing;

[0085] (3) The edge gateway sends the aggregated data to the edge cloud;

[0086] (4) The edge cloud stores the received data;

[0087] (5) The data user sends a re-encryption request to the data owner;

[0088] (6) The re-encryption key requested by the data owner from the trusted center;

[0089] (7) The edge cloud re-encrypts the first ciphertext using the re-encryption key to generate a second ciphertext;

[0090] (8) The data user decrypts the second ciphertext using the data user's private key to obtain a decryption key;

[0091] (9) The data user downloads the second ciphertext from the edge cloud, so that the data user downloads the aggregated data from the edge cloud.

[0092] In this embodiment, an edge gateway and an edge cloud are also provided, which are used to implement the above-mentioned embodiments and preferred implementation modes. The details that have been described will not be repeated here. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceivable.

[0093] Figure 4 is a structural block diagram of an edge gateway according to an embodiment of the present invention. Figure 4 As shown, the edge gateway 400 provided in this embodiment may include:

[0094] Aggregation module 42, configured to aggregate data from multiple data producers and generate an aggregate signature, wherein the data from the multiple data producers are encrypted and digitally signed by the corresponding data producers;

[0095] The sending module 44 is used to send the aggregated data to the edge cloud.

[0096] Specifically, the edge gateway can perform aggregation operations on data from t data producers:

[0097] Assume that the data ciphertext from t data producers is η={c1,...,c t}, the corresponding digital signature is τ={τ1,...,τ t}, the edge gateway first performs aggregation operations on the data ciphertext Then calculate the digital signature of the aggregated data

[0098] After completing the above aggregation operation, the edge gateway stores the aggregated ciphertext π and digital signature Ω in the edge cloud.

[0099] The edge gateway provided in this embodiment can perform aggregation operations on ciphertexts and digital signatures from multiple data producers without obtaining plaintext information, thereby ensuring the privacy and integrity of the data.

[0100] In this embodiment, the aggregation module also includes a sub-aggregation module, which is used by the edge gateway to perform aggregation operations on ciphertexts from multiple data producers through the edge gateway aggregation key, and calculate the digital signature of the aggregated data, wherein the ciphertext is the ciphertext obtained by each data producer encrypting their respective data through the data owner's public key, and the digital signature is the digital signature of the ciphertext generated by each data producer through the data producer's private key.

[0101] Figure 5 This is a structural diagram of an edge cloud according to an embodiment of the present invention. Figure 5 As shown, the edge cloud 500 provided in this embodiment may include:

[0102] A receiving module 52, configured to receive a re-encryption key from a data owner;

[0103] The encryption module 54 is configured to perform a re-encryption operation on the decryption key using the re-encryption key, so that a data user can obtain the decryption key through a decryption operation and decrypt the data using the decryption key.

[0104] In this embodiment, the receiving module may include a sub-receiving module, which is used by the edge cloud to receive a first ciphertext from the data owner, wherein the first ciphertext is the first ciphertext generated by the data owner by encrypting the decryption key after receiving the re-encryption request from the data user; and is also used by the edge cloud to receive the re-encryption key from the data owner, wherein the re-encryption key is the re-encryption key requested by the data owner to the trusted center.

[0105] In this embodiment, the encryption module may include a sub-encryption module, which is used to re-encrypt the first ciphertext using the re-encryption key in the edge cloud to generate a second ciphertext, so that the data user can download the second ciphertext from the edge cloud and decrypt the second ciphertext using the data user's private key to obtain the decryption key, and enable the data user to download the aggregated data from the edge cloud and verify whether the data has been tampered with. If the data has not been tampered with, the data is decrypted using the decryption key.

[0106] Specifically, the edge cloud can re-encrypt the first ciphertext α in the following manner to obtain a second ciphertext that can be decrypted by the data user:

[0107] (3) Edge cloud computing

[0108] (4) The edge cloud obtains the second ciphertext α′=(α′1,α2,R).

[0109] The edge cloud provided by this embodiment can re-encrypt the ciphertext of the data encryption key without knowing the plaintext, allowing data users to decrypt the data encryption key using their own private key. Therefore, the privacy of the data decryption key is guaranteed.

[0110] In order to facilitate the understanding of the technical solution provided by the present invention, the following is described in detail with reference to specific embodiments:

[0111] Specific embodiments of the present invention (can be combined with Figure 3 ) includes four stages: initialization, aggregation (including data upload, data aggregation and data storage), re-encryption (including re-encryption request, re-encryption authorization, re-encryption and data encryption key acquisition), and data download.

[0112] Example 1

[0113] The initialization phase has the following main steps:

[0114] S11: The trusted center initializes its own key material;

[0115] S12: The trusted center initializes the edge gateway key material;

[0116] S13: The trusted center generates a key pair for each data producer;

[0117] S14: The trusted center generates a key pair for the data owner;

[0118] S15: The trusted center generates a key pair for the data user.

[0119] The steps in Example 1 are described as follows:

[0120] Initialization algorithm Initialize: The trusted center initializes the parameters of the cryptographic system to protect the subsequent data aggregation and re-encryption process. The cryptographic system parameters are initialized according to the following steps;

[0121] S11: The trusted center first initializes its own key material. The trusted center randomly generates two prime numbers q1 and q2, and calculates N = q1q2, λ = lcm(q1-1,q2-1), and Φ(N) = (q1-1)(q2-1), where lcm represents the least common multiple, obtained using the Euclidean algorithm; the trusted center randomly generates a number a1 <a2<...<a l , where a1,...,a l Pairwise coprime, then calculate The trusted center randomly generates the master signature key sk s ∈(a l ,A m ) and calculate the corresponding public key The trusted center obtains its own private key sk KDC ={a1,a2,...,a l ,A m ,sk s ,q1,q2} and public key pk KDC ={pk s ,A,N}.

[0122] S12: The trusted center initializes the key material of the edge gateway. The trusted center generates an aggregate key sk for the edge gateway. gw =sk s moda1; the trusted center calculates A1=A / a1 and Finally, the trusted center sends the private key sk of the edge gateway through the first secure channel. GW ={A1,B1,sk gw}Sent to the edge gateway.

[0123] S13: The trusted center generates a key pair for each data producer. For the i-th data producer, the trusted center calculates sk SMi =sk s mod a i+1 , A i+1 =A / a i+1 , Finally, the trusted center sends the private key sk of the i-th data producer through the second secure channel i ={sk SMi ,A i+1 ,B i+1}Sent to the corresponding data producer.

[0124] S14: The trusted center generates key materials for the data owner. The trusted center randomly generates (or let h = N + 1), the trusted center defines And calculate μ=(L(h λ modN 2 )) -1 modN, the trusted center randomly generates sk A ∈Z Φ(N) , Finally, the trusted center sends the data owner’s private key (λ, μ, sk A ) is sent to the data owner, and the corresponding public key (N,h,pk A )public.

[0125] S15: The trusted center generates a key pair for the data user. The trusted center randomly generates sk B ∈Z Φ(N) , Finally, the trusted center sends the data user's private key sk through the fourth security channel B Send it to the data user and send the corresponding public key pk B public.

[0126] Example 2

[0127] The aggregation phase has the following main steps:

[0128] S21: The data producer uses the data owner’s public key to encrypt the data and generate ciphertext;

[0129] S22: The data producer uses the private key to generate a digital signature for the ciphertext of the data;

[0130] S23: The edge gateway aggregates the data of the data producer and calculates the digital signature of the aggregated data.

[0131] S24: The edge gateway stores the aggregated ciphertext and digital signature in the edge cloud.

[0132] The steps in Example 2 are described as follows:

[0133] Data upload algorithm Dataupload: The i-th data producer uses the Dataupload algorithm to encrypt the data and generate a signature according to the following steps;

[0134] S21: Encryption. The i-th data producer uses the data owner’s public key (N, h) to encrypt the data m produced by him. i ∈Z N Encryption. First, the data producer randomly generates r∈Z N, then the data producer calculates the ciphertext

[0135] S22: Signature. The i-th data producer uses his own private key to sign the data m i The ciphertext c i Generate a digital signature

[0136] Data Aggregation Algorithm DataAggre: The edge gateway performs aggregation operations on the data from t data producers according to the following steps;

[0137] S23: Assume that the data ciphertext from t data producers is η={c1,...,c t}, the corresponding digital signature is τ={τ1,...,τ t}, the edge gateway first performs an aggregation operation on the data ciphertext Then calculate the digital signature of the aggregated data

[0138] Data storage algorithm DataStore: The edge gateway performs data storage according to the following steps;

[0139] S24: After completing the aggregation operation, the edge gateway stores the aggregated ciphertext π and digital signature Ω in the edge cloud.

[0140] Example 3:

[0141] The re-encryption phase has the following main steps:

[0142] S31: The data owner randomly generates parameter R;

[0143] S32: The data owner uses the parameters and public key to encrypt and generate ciphertexts α1 and α2;

[0144] S33: The data owner uploads the first ciphertext α = (α1, α2, R) to the edge cloud;

[0145] S34: The data owner calculates the re-encryption key and sends it to the edge cloud;

[0146] S35: The edge cloud re-encrypts the ciphertext α using the re-encryption key to obtain the second ciphertext α';

[0147] S36: The edge cloud uploads the second ciphertext α' to the edge cloud storage;

[0148] S37: The data user downloads the second ciphertext α' from the edge cloud and decrypts it using the private key to obtain the data encryption key (λ, μ);

[0149] S38: The data user verifies α2 to ensure integrity.

[0150] The steps in Example 3 are described as follows:

[0151] Encryption and decryption key Encdkey: The data owner encrypts the decryption key according to the following steps and uploads it to the cloud;

[0152] S31: The data owner randomly generates r,g∈Z N , and calculate R = g r modn.

[0153] S32: Data Owner Calculation α2=H1(R||λ||μ).

[0154] S33: The data owner obtains the first ciphertext α=(α1, α2, R) and uploads the ciphertext to the edge cloud.

[0155] Reencauth: The data owner generates a re-encryption key according to the following steps and sends it to the edge cloud.

[0156] S34: Data Owner Calculation And the re-encryption key rk A→B Leave it to the edge cloud.

[0157] Re-encryption algorithm Reenc: The edge cloud re-encrypts the first ciphertext α according to the following steps to obtain a second ciphertext that can be decrypted by the data user;

[0158] S35: Edge Cloud Computing

[0159] S36: The edge cloud obtains the second ciphertext α′=(α1′, α2, R).

[0160] Data encryption key acquisition algorithm Denckey: The data user downloads the second ciphertext α′=(α1′,α2,R) from the edge cloud according to the following steps and decrypts it to obtain the data encryption key (λ,μ);

[0161] S37: Data User Computing

[0162] S38: The data user verifies α2? = H1(R||λ||μ) to ensure the integrity of (λ,μ).

[0163] Example 4:

[0164] The data download phase has the following main steps:

[0165] S41: Data users verify whether the aggregated data has been tampered with;

[0166] S42: The data user performs a data decryption operation to obtain the original data.

[0167] The steps in Example 4 are described as follows:

[0168] Data download algorithm Download: The data user decrypts the acquired data and verifies the integrity of the data according to the following steps;

[0169] S41: Data users verify whether the aggregated data π has been tampered with If the above equation is true, the data has not been tampered with, otherwise the data has been tampered with.

[0170] S42: Decryption

[0171] Through the above-mentioned specific embodiments, the problem of incomplete consideration of data storage security in the existing 5G+ industrial Internet data aggregation solution is solved, thereby achieving the effect of ensuring the privacy and integrity of the data and the privacy of the data decryption key.

[0172] It should be noted that the above modules can be implemented through software or hardware. For the latter, it can be implemented in the following ways, but not limited to: the above modules are all located in the same processor; or the above modules are located in different processors in any combination.

[0173] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus the necessary general hardware platform, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in each embodiment of the present invention.

[0174] An embodiment of the present invention further provides a computer-readable storage medium, in which a computer program is stored. The computer program is configured to execute the steps of any one of the above method embodiments when running.

[0175] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk, or an optical disk.

[0176] An embodiment of the present invention further provides an electronic device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0177] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0178] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail here.

[0179] Obviously, those skilled in the art will appreciate that the various modules or steps of the present invention described above can be implemented using a general-purpose computing device, can be centralized on a single computing device, or can be distributed across a network of multiple computing devices. They can be implemented using program code executable by the computing device, and thus, can be stored in a storage device and executed by the computing device. In some cases, the steps shown or described herein can be performed in a different order than that shown, or can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular combination of hardware and software.

[0180] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A data aggregation method, characterized in that: include: The edge gateway aggregates the data from multiple data producers and generates an aggregate signature, wherein the data is ciphertext encrypted and digitally signed by the corresponding multiple data producers; The edge gateway stores the aggregated data in the edge cloud.

2. The method according to claim 1, characterized in that After the edge gateway stores the aggregated data in the edge cloud, the method further includes: The edge cloud receives a re-encryption key from a data owner; The edge cloud performs a re-encryption operation on the decryption key using the re-encryption key, so that the data user obtains the decryption key through the decryption operation and decrypts the data using the decryption key.

3. The method according to claim 1 or 2, characterized in that Before the edge gateway performs an aggregation operation on data from multiple data producers and generates an aggregate signature, the method includes: The trusted center initializes its own key material, generates a master signature key, and the corresponding public and private keys of the trusted center; The trusted center initializes the key material of the edge gateway, generates an aggregate key for the edge gateway, and sends the private key of the aggregate key to the edge gateway through a first secure channel; The trusted center generates a key pair for each data producer respectively, and sends the private key of each data producer's key pair to the corresponding data producer through a second secure channel; The trusted center generates a key pair for the data owner, and sends the private key of the key pair to the data owner through a third secure channel, and makes the public key of the key pair public; The trusted center generates a key pair for the data user, sends the private key of the key pair to the data user through a fourth secure channel, and makes the public key of the key pair of the data user public.

4. The method according to claim 3, characterized in that The edge gateway aggregates data from multiple data producers and generates an aggregate signature, including: The edge gateway performs an aggregation operation on the ciphertexts from multiple data producers through the edge gateway aggregation key, and calculates the digital signature of the aggregated data, wherein the ciphertext is the ciphertext obtained by each data producer encrypting their respective data through the data owner's public key, and the digital signature is the digital signature of the ciphertext generated by each data producer through the data producer's private key.

5. The method according to claim 3, characterized in that The edge cloud receives the re-encryption key from the data owner, including: The edge cloud receives a first ciphertext from the data owner, wherein the first ciphertext is generated by the data owner encrypting the decryption key after receiving a re-encryption request from the data user; The edge cloud receives the re-encryption key from the data owner, wherein the re-encryption key is the re-encryption key requested by the data owner from the trusted center.

6. The method according to claim 3, characterized in that The edge cloud performs a re-encryption operation on the decryption key using the re-encryption key, so that the data user obtains the decryption key through the decryption operation and decrypts the data using the decryption key, including: The edge cloud re-encrypts the first ciphertext using the re-encryption key to generate a second ciphertext, so that the data user can download the second ciphertext from the edge cloud and decrypt the second ciphertext using the data user's private key to obtain the decryption key, and enables the data user to download the aggregated data from the edge cloud and verify whether the data has been tampered with. If the data has not been tampered with, the data is decrypted using the decryption key.

7. An edge gateway, characterized in that: include: an aggregation module, configured to aggregate data from multiple data producers and generate an aggregate signature, wherein the data from the multiple data producers are encrypted and digitally signed by the corresponding data producers; The sending module is used to send the aggregated data to the edge cloud.

8. An edge cloud, characterized in that: include: A receiving module, configured to receive a re-encryption key from a data owner; The encryption module is used to perform a re-encryption operation on the decryption key using the re-encryption key, so that the data user can obtain the decryption key through the decryption operation and decrypt the data using the decryption key.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, wherein the computer program implements the steps of the method described in any one of claims 1 to 6 when executed by a processor.

10. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

Images