Encryption authentication method and device applied to 5G-A network, equipment and storage medium

Abstract

The invention provides an encryption authentication method and device applied to a 5G-A network, equipment and a storage medium, relates to the technical field of data security, and solves the problem that an authentication scheme in related technologies is difficult to provide effective protection for sensitive information. A corresponding authentication tag is provided while the ciphertext is generated, so that binding verification of the ciphertext and the authentication tag is realized, and by introducing an error vector and a trap door base, the authentication tag has unpredictability and also meets a preset relationship with the constructed mapping matrix, so that a server can perform verification conveniently, and the verification efficiency is improved. According to the technical scheme, an attacker is effectively prevented from counterfeiting the label or tampering the ciphertext, verification is carried out through the authentication label and the server, the forgery resistance of the ciphertext is improved, and the leakage risk of sensitive information is reduced.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to an encryption authentication method, apparatus, device and storage medium applied to a 5G-A network. Background Art

[0002] With the full deployment of 5G-Advanced (5G-A) technology, communication systems are increasingly demanding high bandwidth, low latency, multi-band convergence, and large-scale device access. 5G-A networks support multi-band aggregation (such as 3CC (3 Component Carriers)) and integrated synaptic communication. For example, using a static key distribution mechanism with the n78C+n79C+n41C band combination results in high key update latency and high resource overhead. Furthermore, malicious servers can potentially steal sensitive information (such as communication content and user data) through keyword guessing attacks (e.g., by counting the frequency of ciphertext-token matches). Traditional static key distribution mechanisms have a high success rate for malicious servers to obtain sensitive information, posing a significant risk of information leakage. Furthermore, the authentication schemes provided by related technologies lack effective authentication methods, failing to effectively reduce the success rate of malicious servers obtaining sensitive information, making it difficult to effectively protect sensitive information. Summary of the Invention

[0003] This application provides an encryption authentication method, device, equipment and storage medium for 5G-A networks, which solves the problem that authentication schemes in related technologies are difficult to provide effective protection for sensitive information. This scheme can generate authentication tags for verification with the server, improve the anti-counterfeiting of ciphertext, and help reduce the risk of leakage of sensitive information.

[0004] In a first aspect, the present application provides an encryption authentication method applied to a 5G-A network, which includes: Based on the initially set security parameters, determining a lattice dimension corresponding to the security parameter, a modulus associated with the lattice dimension, and an error distribution having a standard deviation associated with the modulus; Generate a random matrix and a first trapdoor basis according to the lattice dimension and the modulus, the random matrix being associated with the lattice dimension and the modulus, the first trapdoor basis and the random matrix satisfying a first preset relationship, and all elements in a product matrix obtained by multiplying the two matrices satisfying the first preset relationship are integer multiples of the modulus; Based on the pre-image sampling algorithm, a random matrix, a first trapdoor basis, a standard deviation, and a first vector are sampled to generate a user key. The first vector is a vector obtained by mapping the user terminal's identity and time information based on a hash function. When generating a ciphertext corresponding to the keyword based on the user key, generating a second trapdoor basis, the second trapdoor basis and the mapping matrix satisfying a first preset relationship, the mapping matrix being a matrix obtained by mapping the keyword to a non-singular matrix; Based on the second trapdoor basis and the error vector, an authentication tag is generated and the ciphertext and the authentication tag are sent to the server for the server to verify the authentication tag, where the error vector is associated with the error distribution.

[0005] In a second aspect, the present application provides an encryption authentication device applied to a 5G-A network, comprising: a lattice parameter configuration module configured to determine, based on the initially set security parameters, a lattice dimension corresponding to the security parameter, a modulus associated with the lattice dimension, and an error distribution having a standard deviation associated with the modulus; a first parameter generation module configured to generate a random matrix and a first trapdoor basis according to a lattice dimension and a modulus, wherein the random matrix is ​​associated with the lattice dimension and the modulus, the first trapdoor basis and the random matrix satisfy a first preset relationship, and all elements in a product matrix obtained by multiplying the two matrices satisfying the first preset relationship are integer multiples of the modulus; a key generation module configured to sample a random matrix, a first trapdoor basis, a standard deviation, and a first vector based on a pre-image sampling algorithm to generate a user key, where the first vector is a vector obtained by mapping an identity identifier and time information of a user terminal based on a hash function; a second parameter generation module configured to generate a second trapdoor basis when generating a ciphertext corresponding to the keyword based on the user key, wherein the second trapdoor basis and the mapping matrix satisfy a first preset relationship, and the mapping matrix is ​​a matrix obtained by mapping the keyword to a non-singular matrix; The tag generation module is configured to generate an authentication tag based on a second trapdoor basis and an error vector and send the ciphertext and the authentication tag to the server for the server to verify the authentication tag, wherein the error vector is associated with the error distribution.

[0006] In a third aspect, the present application further provides an electronic device, comprising: one or more processors; A storage device for storing one or more programs. When the one or more programs are executed by one or more processors, the one or more processors implement the encryption authentication method applied to the 5G-A network of the present application.

[0007] Fourthly, the present application also provides a storage medium for storing computer-executable instructions, which, when executed by a processor, are used to execute the encryption authentication method of the present application applied to the 5G-A network.

[0008] The present application scheme integrates lattice cryptography, 3CC carrier aggregation and interaceptive integration technology to generate ciphertext and provide corresponding authentication tags at the same time, thereby realizing the binding verification of ciphertext and authentication tag. By introducing error vector and trapdoor basis, the authentication tag is made unpredictable while satisfying the preset relationship with the constructed mapping matrix, so as to facilitate server verification, effectively prevent attackers from forging tags or tampering with ciphertext, and then verify with the server through authentication tag, which helps to improve the anti-counterfeiting of ciphertext and thus reduce the risk of leakage of sensitive information. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 A schematic diagram of the steps of an encryption authentication method provided in one embodiment of the present application.

[0010] Figure 2 A schematic diagram of the steps for determining the optimal frequency band provided in one embodiment of the present application.

[0011] Figure 3 A schematic diagram of the steps for dynamically adjusting grid parameters provided in one embodiment of the present application.

[0012] Figure 4 A schematic diagram of the structure of an encryption authentication device provided in one embodiment of the present application.

[0013] Figure 5 A schematic diagram of the structure of an electronic device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0014] The present application will be further described in detail below in conjunction with the accompanying drawings and examples. It will be understood that the specific embodiments described herein are merely intended to explain the embodiments of the present application and are not intended to limit the embodiments of the present application. It should also be noted that, for ease of description, the accompanying drawings only illustrate portions, rather than all, of the structures relevant to the embodiments of the present application. After reading this specification, those skilled in the art will appreciate that, as long as the technical features do not contradict each other, any combination of the technical features may constitute an optional embodiment.

[0015] The terms "first", "second", etc. in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of the same type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated before and after are in an "or" relationship. In the description of this application, "multiple" means two or more, and "several" means one or more.

[0016] With the full deployment of 5G-Advanced (5G-Advanced) technology, communication systems are increasingly demanding high bandwidth, low latency, multi-band convergence, and large-scale device access. 5G-Advanced (5G-Advanced) networks support multi-band aggregation and interoperability. For example, in the n78C, n79C, and n41C frequency band combination, the use of a static key distribution mechanism results in high key update latency and high resource overhead.

[0017] When a terminal device or server, or other electronic device, acts as a user terminal and interacts with a data storage server (hereinafter referred to as a database server), the initiating user terminal must compile ciphertext and send it to the database server, prompting the database server to respond with data associated with the ciphertext. This can easily lead to the leakage of sensitive information, such as communication content and user data, when a malicious server or terminal device launches a keyword guessing attack (e.g., by counting the frequency of ciphertext-token matches) and the database server is unable to distinguish them. Furthermore, under traditional static key distribution mechanisms, database servers struggle to prevent malicious attacks by malicious servers or terminal devices using a large number of keywords to perform data queries, relying solely on simple encryption and decryption of keywords. This leads to a high success rate for stealing sensitive information, posing a significant risk of information leakage. Therefore, the authentication schemes provided by related technologies lack effective authentication methods, fail to effectively reduce the success rate of malicious servers obtaining sensitive information, and thus struggle to provide effective protection for sensitive information.

[0018] In this regard, the present application provides an encryption authentication method applied to 5G-A networks. The method can be applied to electronic devices such as terminal devices or servers to interact with database servers as user terminals for data. The present scheme generates authentication tags and ciphertexts that comply with preset rules so that the data server can verify the authentication tags based on preset rules after receiving the ciphertexts and authentication tags, thereby excluding ciphertexts and authentication tags generated by other devices based on forged information, effectively improving the anti-counterfeiting ability of the encryption authentication scheme and reducing the risk of leakage of sensitive information.

[0019] Optionally, the terminal device may be an Internet of Things device such as a wearable device or a drone, and the terminal device may also be a device such as a mobile terminal or a computer. In the process of data interaction with the database server, electronic devices such as the terminal device or the server may generate ciphertexts and authentication tags by executing the encryption authentication method applied to the 5G-A network of this application for the database server to verify. Figure 1 It is a schematic diagram of the steps of the encryption authentication method provided by an embodiment of this application. As shown in the figure, the electronic device realizes the generation of the user key through the dynamic lattice basis authorization mechanism based on LWE of lattice cryptography to generate the corresponding ciphertext, and realizes the generation of the authentication tag based on the double trapdoor authentication hash mechanism, so that the database server verifies according to this mechanism. The specific steps are as follows: Step S110: Based on the security parameters set in the initialization, determine the lattice dimension corresponding to the security parameters, the modulus associated with the lattice dimension, and the error distribution of the standard deviation associated with the modulus.

[0020] The security parameter is a parameter set in the initialization, which can be used to generate corresponding lattice parameters, where the lattice parameters include the lattice dimension, the modulus, and the standard deviation of the error distribution. Specifically, the lattice dimension is associated with the security parameter. Optionally, the lattice dimension n = O(λ 2 )), such as the lattice dimension n takes the dimension corresponding to the square of the security parameter λ. The modulus is associated with the lattice dimension. Optionally, such as the modulus q = poly(n), that is, the modulus q is the value of the polynomial function poly(n) of the lattice dimension n. And the generated error distribution χ satisfies the discrete Gaussian distribution, and its standard deviation σ = a q, where a < 1. Thus, the selection of the lattice parameters is completed.

[0021] Step S120: Generate a random matrix and a first trapdoor basis according to the lattice dimension and the modulus. The random matrix is associated with the lattice dimension and the modulus, and the first trapdoor basis and the random matrix satisfy a first preset relationship.

[0022] Optionally, the generated first trapdoor basis and the random matrix satisfy a first preset relationship, where all elements in the product matrix obtained by multiplying the two matrices that satisfy the first preset relationship are integer multiples of the modulus. Specifically, the random matrix A is as follows:

[0023] Among them, Z q n×m is the integer ring (the set composed of all integers x that satisfy 0 < x < modulus q), and it is an n-row (the number of rows corresponds to the lattice dimension) and m-column matrix, and the value of the number of columns m satisfies m ≥ 2nlogq. And the generated first trapdoor basis is as follows:

[0024] Among them, Z m×mis the ring of integers (the set of all integers), the first trapdoor basis T A The length of (i.e. the maximum Euclidean norm of the matrix column vector) is the square root of the sum of the squares of the elements, which satisfies:

[0025] That is, length |T A The growth rate does not exceed Optionally, the first trapdoor basis and the random matrix that satisfy the first preset relationship satisfy the following formula:

[0026] That is, the random matrix A and the first trapdoor basis T A The product matrix of is equal to a zero matrix in modulus q, and the value of each element in the product matrix is ​​a multiple of the modulus.

[0027] Step S130: Based on the pre-image sampling algorithm, sample the random matrix, the first trapdoor basis, the standard deviation, and the first vector to generate a user key.

[0028] After determining the identity and time information of the electronic device of the user terminal, it can be mapped into a vector to obtain a first vector, that is, the first vector is a vector obtained by mapping the identity and time information of the user terminal based on the hash function. It can be understood that the identity is usually represented in the form of a string, such as a user name, device identification, etc., which can be used as an identity, and the time information is usually marked with an integer, such as a timestamp, cycle number, etc., which can be used as time information, and then the identity ID is mapped to the time information of the electronic device of the user terminal. i and time information T j , mapped to the corresponding vector space through the hash function to obtain the first vector v ij , optionally, the selected hash function is:

[0029] That is, {0,1}* represents a binary string of any length, which is used to input the user identity ID i ; Z + represents a set of positive integers, T j Used to enter time information; Z q n represents an n-dimensional integer vector space with a modulus of q. This means the output is a vector of length n, with each component in the range {0, 1, …, q−1}. By mapping both identity and time information into a vector, a unique identifier for a specific user during a specific time period can be generated, effectively preventing malicious attacks.

[0030] Moreover, the pre-image sampling algorithm relies on the first trapdoor basis and Gaussian sampling technology generated above, which is the core tool in lattice cryptography and is used to efficiently extract elements from the pre-image set. A , standard deviation σ and the first vector v ij After that, for the random matrix A and the first trapdoor basis T A , standard deviation σ and the first vector v ij Sampling is performed to generate the user key sk ij Optionally, the SamplePre() function is a function corresponding to the original image sampling algorithm, and the specific formula is as follows:

[0031] Step S140: When a ciphertext corresponding to the keyword is generated based on the user key, a second trapdoor basis is generated, and the second trapdoor basis and the mapping matrix satisfy a first preset relationship.

[0032] When generating ciphertext corresponding to a keyword based on a user key, a corresponding mapping matrix is ​​generated for the keyword. The mapping matrix is ​​the matrix obtained by mapping the keyword to a non-singular matrix. Optionally, the keyword is mapped to a non-singular matrix based on a hash function. For example, with the keyword as input (e.g., a finite-length binary string consisting of 0s and 1s), the output is an n×n matrix with element values ​​in the range {0, 1, …, q−1}. The second trapdoor basis can be generated based on a pre-image sampling algorithm. It satisfies the first preset relationship with the mapping matrix. That is, the product matrix of the second trapdoor basis and the mapping matrix is ​​a matrix in which each element value is a multiple of the modulus, that is, it satisfies the following formula:

[0033] Among them, H w is the mapping matrix, T w It is the base of the second trapdoor.

[0034] Step S150: Generate an authentication tag based on the second trapdoor basis and the error vector, and send the ciphertext and the authentication tag to the server for the server to verify the authentication tag.

[0035] The generated authentication tag is generated based on the second trapdoor basis and the error vector. Optionally, in one embodiment, when the second trapdoor basis is determined, a product matrix corresponding to the second trapdoor basis and the error vector is determined, and then a modular operation is performed on the product matrix corresponding to the second trapdoor basis and the error vector according to the modular number to obtain the authentication tag. The corresponding calculation formula is as follows:

[0036] Among them, σ w For authentication label, T w is the second trapdoor base, ew is an error vector. It can be understood that the error vector is associated with an error distribution and is randomly sampled from an n-dimensional discrete error distribution. That is, the error vector is a vector of length n, with each component independently sampled from the error distribution. The dimension of the error vector matches the lattice dimension. Sampling the error vector from a discrete Gaussian distribution ensures the randomness and concealment of the error, thereby maintaining the security of the scheme. An authentication tag is then generated by multiplying the error vector (modulo q) by a second trapdoor basis. This can be used to verify the integrity or authenticity of the ciphertext, thereby binding the ciphertext to specific security parameters. The introduction of the error vector and the second trapdoor basis makes the authentication tag unpredictable, preventing attackers from forging the tag or tampering with the ciphertext, thereby ensuring the integrity and anti-forgery properties of the ciphertext during transmission or storage.

[0037] Furthermore, the ciphertext and authentication tag are sent to the server. This means that during data exchange with the server, the ciphertext and authentication tag are used, allowing the server to verify the authentication tag and confirm whether the ciphertext is legal. If the ciphertext is legal after verification, the server allows access to the corresponding resource. If the ciphertext is illegal, the server denies the operation. The corresponding key can also be sent to the server for decryption. It is conceivable that, in the above example, when the electronic device, acting as a user terminal, exchanges data with the database server, the electronic device also provides the ciphertext and authentication tag for the database server to verify the authentication tag.

[0038] Optionally, when the electronic device is conducting legitimate encrypted communication with the server, that is, when the electronic device serves as a user terminal capable of effectively exchanging data with the server, the authentication tag provided by the electronic device and the mapping matrix satisfy a second preset relationship; whereas, the authentication tag provided by an illegal, malicious device and the mapping matrix do not satisfy the second preset relationship. The difference between each element in the product matrix of the two matrices satisfying the second preset relationship and the element at the corresponding position in the error vector is an integer multiple of the modulus.

[0039] In this regard, the server determines that the ciphertext passes encryption authentication and accesses the resource corresponding to the ciphertext when the authentication tag and the mapping matrix satisfy the second preset relationship, that is, the verified authentication tag and the mapping matrix satisfy the following formula:

[0040] Among them, σ w For the certification label, H w is the mapping matrix, e W is the error vector, that is, the difference between each element in the product matrix of the authentication tag and the mapping matrix and the element at the corresponding position in the error vector is an integer multiple of the modulus.

[0041] It can be seen from the above scheme that this scheme provides corresponding authentication tags while generating ciphertext, thereby realizing the binding verification of ciphertext and authentication tags. By introducing error vectors and trapdoor bases, the authentication tags are made unpredictable while satisfying the preset relationship with the constructed mapping matrix, so as to facilitate server verification, effectively preventing attackers from forging tags or tampering with ciphertext, and then verifying with the server through authentication tags, which helps to improve the anti-forgery of ciphertext and thus reduce the risk of leakage of sensitive information.

[0042] In one embodiment, the electronic device as the user terminal selects a corresponding frequency band in a preset frequency band combination to send the encrypted authentication tag to the server. For example, n78C+n79C+n41C is used as the corresponding frequency band combination, and the total bandwidth is 600MHz. Figure 2 As shown, Figure 2 This is a schematic diagram of the steps for determining the optimal frequency band provided in one embodiment of the present application. The electronic device can select a frequency band from a preset frequency band combination to perform encrypted communication with the server. The specific steps are as follows: Step S210: Dynamically select the optimal frequency band from the preset frequency band combination to establish an encrypted communication channel with the server based on the optimal frequency band.

[0043] Step S220: Send the ciphertext and authentication tag to the server through the encrypted communication channel.

[0044] It can be understood that in a multi-band frequency band combination, the electronic device can dynamically select a frequency band as the optimal frequency band, thereby building an encrypted communication channel with the server based on the optimal frequency band, and then sending ciphertext and authentication tags, which helps to reduce communication time.

[0045] Optionally, for the selection of the optimal frequency band, the electronic device can obtain the carrier bandwidth, transmit power, and channel gain corresponding to each frequency band in the frequency band combination, and determine the air interface rate corresponding to each frequency band based on the carrier bandwidth, transmit power, and channel gain corresponding to each frequency band in the frequency band combination. Then, referring to the sorting of air interface rates, the frequency band with the largest air interface rate is selected from the frequency band combination as the optimal frequency band. When n78C+n79C+n41C is used as the corresponding frequency band combination (i.e., there are three frequency bands: n78C, n79C, and n41C), the corresponding air interface rate is calculated as follows:

[0046] Among them, R total is the air interface rate, B k 、P k 、h kwhere is the bandwidth, transmit power, and channel gain of the kth carrier, respectively. N0 represents the noise power spectral density. The air interface rate for each frequency band is then calculated, and the frequency band with the highest air interface rate is selected as the optimal frequency band. It is conceivable that the selected optimal frequency band will also change in response to changes in transmit power and channel gain. Therefore, the corresponding frequency band can be dynamically selected for transmission based on the above method, thereby reducing distribution latency.

[0047] Optionally, the selection of the optimal frequency band can also be determined based on the total processing time. For example, when there are multiple keywords, all keywords are divided into multiple subsets based on the number of frequency bands in the frequency band combination. For example, when n78C+n79C+n41C is used as the corresponding frequency band combination, all keywords are divided into 3 subsets. The total processing time of each subset in different frequency bands is calculated, such as the total processing time of each subset in different frequency bands is determined based on the amount of computing resources corresponding to each frequency band and the processing time of a single keyword. It can be imagined that the amount of computing resources corresponding to different frequency bands is associated with the number of CPU (Central Processing Unit) cores of the device, so as to allocate corresponding computing resources to different frequency bands.

[0048] Furthermore, based on the amount of computing resources corresponding to each frequency band and the processing time of a single keyword, the frequency band processing time of each subset on different frequency bands is determined. The corresponding calculation formula is as follows:

[0049] Among them, Time1 is the frequency band processing time, B i is the amount of computing resources corresponding to the ith frequency band, W i is a keyword subset, t unit is the processing time of a single keyword. For example, the processing time of a single keyword is 0.1 seconds; for frequency band F1, the computing resource amount B1 is 50, and for frequency band F2, the computing resource amount B2 is 20; when subset W1 contains 100 keywords, the total processing time in frequency band F1 is 0.2 seconds, and in frequency band F2, the total processing time is 0.5 seconds. This is how the frequency band processing time of each subset in different frequency bands is calculated.

[0050] Different frequency bands are then pre-assigned to each subset, forming corresponding frequency band groups. Based on the frequency band processing time, the total processing time required to process the keywords of all subsets according to the different frequency band groups is determined. It is understood that different frequency band groups correspond to frequency band combinations with different arrangement orders. For example, if the frequency band combination includes frequency band F1, frequency band F2, and frequency band F3, frequency band group G1 can be frequency band F1, frequency band F2, and frequency band F3 in that order, and frequency band group G2 can be frequency band F1, frequency band F3, and frequency band F2 in that order. Accordingly, when calculating the total processing time, what is determined is the total time consumed to process each subset by frequency band grouping. For example, when processing the three subsets divided by frequency band grouping G1, subset W1 is processed with the computing resources of frequency band F1, subset W2 is processed with the computing resources of frequency band F2, and subset W3 is processed with the computing resources of frequency band F3. Then, based on the determined frequency band processing time of each subset in different frequency bands, the maximum time consumed is determined to obtain the total processing time of the frequency band grouping. The corresponding calculation formula for the total processing time is as follows:

[0051] Among them, Time search is the total processing time, B i is the amount of computing resources corresponding to the ith frequency band, W i is a keyword subset, t unit =The processing time for a single keyword. Since each subset is processed in a frequency band, the maximum processing time corresponds to the total processing time. For example, if frequency band F1 processes subset W1 in 0.2 seconds, frequency band F2 processes subset W2 in 0.3 seconds, and frequency band F3 processes subset W3 in 0.2 seconds, the total processing time for this frequency band group is 0.3 seconds.

[0052] After determining the total processing time for each frequency band group, the frequency band in the frequency band group with the shortest total processing time is selected as the optimal frequency band for each subset. For example, frequency band group G1 has the shortest total processing time, so frequency band F1 is selected as the optimal frequency band for subset W1, frequency band F2 is selected as the optimal frequency band for subset W2, and frequency band F3 is selected as the optimal frequency band for subset W3. By selecting corresponding frequency bands for keywords in different subsets, parallel processing can be achieved, further reducing processing time, facilitating rapid distribution in scenarios with multiple keywords.

[0053] Figure 3 This is a schematic diagram of the steps for dynamically adjusting the grid parameters provided in one embodiment of the present application. In one embodiment, the grid parameters can also be adjusted dynamically, such as by obtaining channel state information through synaesthesia technology and dynamically adjusting the grid parameters based on the channel state information to adapt to changes in the channel state information. The specific steps are as follows: Step S310: Determine the real-time signal-to-noise ratio and available bandwidth according to the channel state information.

[0054] Step S320: Based on the real-time signal-to-noise ratio and the signal-to-noise ratio threshold, determine the proportion of the updated value of the grid dimension in the initial value of the grid dimension, and update the value of the grid dimension with the updated value of the grid dimension.

[0055] Step S330: Based on the available bandwidth and the initial value of the modulus, determine the updated value of the modulus and update the value of the modulus.

[0056] It is understood that electronic devices can dynamically adjust grid parameters, such as grid dimension and modulus, by monitoring channel state information. By monitoring channel state information, the real-time signal-to-noise ratio and available bandwidth are determined, and a new value of the grid dimension is determined based on the real-time signal-to-noise ratio and the signal-to-noise ratio threshold. For example, the value of the grid dimension can be calculated by referring to the following formula:

[0057] Among them, n(t) is the updated grid dimension, n base is the initial value of the grid dimension, SNR(t) is the real-time signal-to-noise ratio, SNR th The signal-to-noise ratio threshold is used. The ratio of the real-time signal-to-noise ratio to the signal-to-noise ratio threshold is used as the percentage. The product of the initial value of the grid dimension and the percentage is then used as the updated value of the grid dimension to determine the value of the grid dimension. For the update of the modulus, the updated value is determined based on the available bandwidth and the initial value of the modulus. The corresponding calculation formula is as follows:

[0058] Among them, q(t) is the updated modulus, q base The initial value of the modulus is calculated, and BW(t) is the available bandwidth. The product of the initial value of the modulus and the arithmetic square root of the available bandwidth is then calculated. The logarithm of the product is then taken and used as the exponent to determine the updated modulus value. Therefore, this scheme improves anti-counterfeiting by dynamically adjusting the lattice parameters based on changes in channel status.

[0059] Figure 4 This is a structural diagram of an encryption authentication device provided in an embodiment of the present application. The device is used to execute the encryption authentication method applied to the 5G-A network provided in the above embodiment, and has corresponding functional modules and beneficial effects for executing the method. As shown in the figure, the encryption authentication device includes a grid parameter configuration module 401, a first parameter generation module 402, a key generation module 403, a second parameter generation module 404 and a label generation module 405.

[0060] The lattice parameter configuration module 401 is configured to determine, based on the security parameters initially set, a lattice dimension corresponding to the security parameter, a modulus associated with the lattice dimension, and an error distribution whose standard deviation is associated with the modulus; The first parameter generation module 402 is configured to generate a random matrix and a first trapdoor basis according to the lattice dimension and the modulus, wherein the random matrix is ​​associated with the lattice dimension and the modulus, the first trapdoor basis and the random matrix satisfy a first preset relationship, and all elements in a product matrix obtained by multiplying the two matrices satisfying the first preset relationship are integer multiples of the modulus; The key generation module 403 is configured to sample the random matrix, the first trapdoor basis, the standard deviation, and the first vector based on the pre-image sampling algorithm to generate a user key, where the first vector is a vector obtained by mapping the user terminal's identity and time information based on a hash function; The second parameter generation module 404 is configured to generate a second trapdoor basis when generating a ciphertext corresponding to the keyword based on the user key, wherein the second trapdoor basis and the mapping matrix satisfy a first preset relationship, and the mapping matrix is ​​a matrix obtained by mapping the keyword to a non-singular matrix; The tag generation module 405 is configured to generate an authentication tag based on the second trapdoor basis and an error vector and send the ciphertext and the authentication tag to the server for the server to verify the authentication tag, where the error vector is associated with the error distribution.

[0061] Based on the above embodiment, the tag generation module 405 is specifically configured as follows: When the second trapdoor basis is determined, determining a product matrix corresponding to the second trapdoor basis and the error vector; A modular operation is performed on a product matrix corresponding to the second trapdoor basis and the error vector according to a modular number to obtain an authentication tag.

[0062] Based on the above embodiment, the label generation module 405 is further configured to: Dynamically select the optimal frequency band from the preset frequency band combination to establish an encrypted communication channel with the server based on the optimal frequency band; The ciphertext and authentication tag are sent to the server through an encrypted communication channel.

[0063] Based on the above embodiment, the label generation module 405 is further configured to: Determine the air interface rate corresponding to each frequency band based on the carrier bandwidth, transmit power, and channel gain corresponding to each frequency band in the frequency band combination; The frequency band with the highest air interface rate is selected as the optimal frequency band in the frequency band combination.

[0064] Based on the above embodiment, the label generation module 405 is further configured to: In the case where there are multiple keywords, all keywords are divided into multiple subsets based on the number of frequency bands in the frequency band combination; Based on the amount of computing resources corresponding to each frequency band and the processing time of a single keyword, determine the frequency band processing time of each subset on different frequency bands; Based on the frequency band processing time, the total processing time consumed by processing the keywords of all subsets according to different frequency band groups is determined, and the frequency bands in the frequency band group with the shortest total processing time are selected as the optimal frequency bands corresponding to each subset. Different frequency band groups correspond to frequency band combinations with different arrangement orders.

[0065] Based on the above embodiment, the encryption authentication device further includes a parameter updating module, which is configured as follows: Determine the real-time signal-to-noise ratio and available bandwidth based on channel state information; Based on the real-time signal-to-noise ratio and the signal-to-noise ratio threshold, determine the proportion of the updated value of the grid dimension in the initial value of the grid dimension, and update the value of the grid dimension with the updated value of the grid dimension; Based on the available bandwidth and the initial value of the modulus, an updated value of the modulus is determined and the value of the modulus is updated.

[0066] Based on the above embodiment, when the authentication tag and the mapping matrix satisfy a second preset relationship, the server determines that the ciphertext passes the encryption authentication and accesses the resource corresponding to the ciphertext, and the difference between each element in the product matrix of the two matrices satisfying the second preset relationship and the element in the corresponding position in the error vector is an integer multiple of the modulus.

[0067] It is worth noting that in the embodiment of the above-mentioned device, the modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the embodiments of this application.

[0068] Figure 5This is a schematic diagram of the structure of an electronic device provided in one embodiment of the present application. The device is used to execute the encryption authentication method for 5G-A networks provided in the above embodiment and has functional modules and beneficial effects corresponding to the execution method. As shown in the figure, the device includes a processor 501, a memory 502, an input device 503, and an output device 504. The number of processors 501 can be one or more, and the figure uses one processor 501 as an example. The processor 501, memory 502, input device 503, and output device 504 can be connected via a bus or other means, and the figure uses a bus connection as an example. The memory 502, as a computer-readable storage medium, can be used to store software programs, computer executable programs, and modules, such as the program instructions / modules corresponding to the encryption authentication method for 5G-A networks in the embodiment of the present application. The processor 501 executes the software programs, instructions, and modules stored in the memory 502 to execute various corresponding functional applications and data processing, that is, to implement the above-mentioned encryption authentication method for 5G-A networks.

[0069] The memory 502 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data recorded or created during use, etc. In addition, the memory 502 may include a high-speed random access memory and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 502 may further include a memory remotely located relative to the processor 501, and these remotely located memories may be connected to the device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0070] The input device 503 can be used to input corresponding digital or character information to the processor 501, and generate key signal input related to the user settings and function control of the device; the output device 504 can be used to send or display key signal output related to the user settings and function control of the device.

[0071] An embodiment of the present application also provides a storage medium storing computer-executable instructions, which, when executed by a processor, are used to perform relevant operations in the encryption authentication method applied to the 5G-A network provided in any embodiment of the present application.

[0072] Computer-readable storage media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

[0073] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0074] Note that the above are only preferred embodiments of the present application and the technical principles employed. Those skilled in the art will understand that the present application is not limited to the specific embodiments herein, and that various obvious changes, readjustments, and substitutions can be made by those skilled in the art without departing from the scope of protection of the present application. Therefore, although the present application has been described in more detail through the above embodiments, the present application is not limited to the above embodiments and may include many other equivalent embodiments without departing from the scope of the present application. The scope of the present application is determined by the scope of the appended claims.

Claims

1. An encryption authentication method applied to a 5G-A network, characterized in that: include: Based on the initially set security parameters, determining a lattice dimension corresponding to the security parameters, a modulus associated with the lattice dimension, and an error distribution having a standard deviation associated with the modulus; generating a random matrix and a first trapdoor basis according to the lattice dimension and the modulus, wherein the random matrix is ​​associated with the lattice dimension and the modulus, the first trapdoor basis and the random matrix satisfy a first preset relationship, and all elements in a product matrix obtained by multiplying the two matrices satisfying the first preset relationship are integer multiples of the modulus; Based on a pre-image sampling algorithm, sampling the random matrix, the first trapdoor basis, the standard deviation, and a first vector to generate a user key, where the first vector is a vector obtained by mapping the identity identifier and time information of the user terminal based on a hash function; When generating a ciphertext corresponding to the keyword based on the user key, generating a second trapdoor basis, wherein the second trapdoor basis and a mapping matrix satisfy a first preset relationship, the mapping matrix being a matrix obtained by mapping the keyword to a non-singular matrix; An authentication tag is generated based on the second trapdoor basis and an error vector, and the ciphertext and the authentication tag are sent to a server for the server to verify the authentication tag, wherein the error vector is associated with the error distribution.

2. The encryption authentication method applied to 5G-A network according to claim 1, characterized in that: Generating an authentication tag based on the second trapdoor basis and the error vector includes: When the second trapdoor basis is determined, determining a product matrix corresponding to the second trapdoor basis and the error vector; A modular operation is performed on the product matrix corresponding to the second trapdoor basis and the error vector according to the modular number to obtain the authentication tag.

3. The encryption authentication method applied to 5G-A network according to claim 1, characterized in that: The sending the ciphertext and the authentication tag to the server includes: Dynamically selecting an optimal frequency band from a preset frequency band combination to establish an encrypted communication channel with the server based on the optimal frequency band; The ciphertext and the authentication tag are sent to the server through the encrypted communication channel.

4. The encryption authentication method applied to 5G-A network according to claim 3, characterized in that: The dynamically selecting the optimal frequency band from the preset frequency band combination includes: Determining an air interface rate corresponding to each frequency band based on the carrier bandwidth, transmit power, and channel gain corresponding to each frequency band in the frequency band combination; A frequency band with the highest air interface rate is selected from the frequency band combination as the optimal frequency band.

5. The encryption authentication method applied to 5G-A network according to claim 3, characterized in that: The dynamically selecting the optimal frequency band from the preset frequency band combination further includes: In the case where there are multiple keywords, all keywords are divided into multiple subsets based on the number of frequency bands in the frequency band combination; Based on the amount of computing resources corresponding to each frequency band and the processing time of a single keyword, determine the frequency band processing time of each subset on different frequency bands; Based on the frequency band processing time, the total processing time consumed for processing the keywords of all subsets according to different frequency band groups is determined, and the frequency band in the frequency band group with the shortest total processing time is selected as the optimal frequency band corresponding to each subset. Different frequency band groups correspond to frequency band combinations with different arrangement orders.

6. The encryption authentication method applied to a 5G-A network according to any one of claims 1 to 5, characterized in that: Before generating a random matrix and a first trapdoor basis according to the lattice dimension and the modulus, the method further includes: Determine the real-time signal-to-noise ratio and available bandwidth based on channel state information; Determine, based on the real-time signal-to-noise ratio and the signal-to-noise ratio threshold, the proportion of the updated value of the grid dimension in the initial value of the grid dimension, and update the value of the grid dimension with the updated value of the grid dimension; Based on the available bandwidth and the initial value of the modulus, an updated value of the modulus is determined and the value of the modulus is updated.

7. The encryption authentication method applied to 5G-A network according to claim 6, characterized in that: The server determines that the ciphertext passes the encryption authentication and accesses the resource corresponding to the ciphertext when the authentication tag and the mapping matrix satisfy a second preset relationship, and the difference between each element in the product matrix of the two matrices satisfying the second preset relationship and the element at the corresponding position in the error vector is an integer multiple of the modulus.

8. An encryption authentication device applied to a 5G-A network, characterized in that: include: a lattice parameter configuration module configured to determine, based on an initialized security parameter, a lattice dimension corresponding to the security parameter, a modulus associated with the lattice dimension, and an error distribution having a standard deviation associated with the modulus; a first parameter generation module configured to generate a random matrix and a first trapdoor basis according to the lattice dimension and the modulus, wherein the random matrix is ​​associated with the lattice dimension and the modulus, the first trapdoor basis and the random matrix satisfy a first preset relationship, and all elements in a product matrix obtained by multiplying the two matrices satisfying the first preset relationship are integer multiples of the modulus; a key generation module configured to sample the random matrix, the first trapdoor basis, the standard deviation, and a first vector based on a pre-image sampling algorithm to generate a user key, where the first vector is a vector obtained by mapping the identity identifier and time information of the user terminal based on a hash function; a second parameter generation module configured to generate a second trapdoor basis when generating a ciphertext corresponding to the keyword based on the user key, wherein the second trapdoor basis and a mapping matrix satisfy a first preset relationship, and the mapping matrix is ​​a matrix obtained by mapping the keyword to a non-singular matrix; The tag generation module is configured to generate an authentication tag based on the second trapdoor basis and an error vector, and send the ciphertext and the authentication tag to a server for the server to verify the authentication tag, wherein the error vector is associated with the error distribution.

9. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, so that the one or more processors implement the encryption authentication method applied to the 5G-A network as described in any one of claims 1-7.

10. A storage medium storing computer executable instructions, characterized in that: When executed by a processor, the computer executable instructions are used to execute the encryption authentication method applied to the 5G-A network as described in any one of claims 1 to 7.

Images