State query method and related device

Abstract

The invention discloses a state query method and a related device, the state query method is applied to a state query system, the state query system comprises a state query end and a plurality of state response ends, different state response ends have different identifiers, and the method comprises the following steps: the state query end provides a target state to be queried to each state response end; the at least one target state response end feeds back a first encryption result about the identifier of the at least one target state response end to the state query end, or one target state response end feeds back an aggregation result of the first encryption result about the identifier of each target state response end to the state query end, and the target state response end is a state response end in a target state; and the state query end decrypts the state query result to determine the identity of each target state response end, and the state query result is a first encryption result or an aggregation result of the identifier of each target state response end. According to the scheme, the data security of state query can be improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things, and in particular to a state query method, a state query system, an electronic device and a computer readable storage medium. BACKGROUND

[0002] State query refers to that a state query end queries a state response end in a target state. State query is needed in the fields of intelligent manufacturing and medical treatment. For example, in the field of intelligent manufacturing, an intelligent manufacturing control center needs to query production line equipment in a target state. For another example, in the field of medical treatment, a remote monitoring platform needs to query medical equipment in a target state, and the medical equipment can be MRI, a breathing machine and the like.

[0003] In a traditional state query method, state-related data of a state response end is directly transmitted in plaintext, the plaintext transmission does not perform any encryption processing on the state-related data, and thus the state-related data is extremely easy to be leaked in a transmission process, suffers from man-in-the-middle attacks, eavesdropping and tampering and the like, and therefore the data security of the traditional state query method is not high. SUMMARY

[0004] The present application provides a state query method, a state query system, an electronic device and a computer readable storage medium, and can solve the problem of low data security of a traditional state query method.

[0005] The present application provides a state query method applied to a state query system, the state query system including a state query end and a plurality of state response ends, the different state response ends having different identities, and the method including: the state query end providing a target state to be queried to each state response end; at least one target state response end feeding back a first encryption result about its own identity to the state query end, or one target state response end feeding back an aggregated result of first encryption results about the identities of each target state response end to the state query end, the target state response end being a state response end in a target state; and the state query end decrypting a state query result to determine the identities of each target state response end, the state query result being the first encryption result about the identity of each target state response end or the aggregated result.

[0006] The application provides a state query method, which is applied to a state query system. The state query system comprises a state query end, a plurality of state response ends, and the identities of different state response ends are different. The execution steps of the state query end comprise: providing target states to be queried to each state response end; receiving a state query result. The state query result is a first encryption result about the identity of at least one target state response end respectively fed back, or is an aggregated result of the first encryption results about the identities of each target state response end fed back by one target state response end. The target state response end is a state response end in a target state. The state query result is decrypted to determine the identities of each target state response end.

[0007] The application provides a state query method, which is applied to a state query system. The state query system comprises a state query end, a plurality of state response ends, and the identities of different state response ends are different. The execution steps of the state query end comprise: providing target states to be queried to each state response end; receiving a state query result. The state query result is a first encryption result about the identity of at least one target state response end respectively fed back, or is an aggregated result of the first encryption results about the identities of each target state response end fed back by one target state response end. The target state response end is a state response end in a target state. The state query result is decrypted to determine the identities of each target state response end.

[0008] The application provides a state query method, which is applied to a state query system. The state query system comprises a state query end, a plurality of state response ends, and the identities of different state response ends are different. The execution steps of the state query end comprise: providing target states to be queried to each state response end; receiving a state query result. The state query result is a first encryption result about the identity of at least one target state response end respectively fed back, or is an aggregated result of the first encryption results about the identities of each target state response end fed back by one target state response end. The target state response end is a state response end in a target state. The state query result is decrypted to determine the identities of each target state response end.

[0009] The application provides a state query system, which comprises a state query end, a state management end and a plurality of state response ends, so as to realize the state query method.

[0010] The application provides an electronic device, which comprises a memory and a processor. The processor is used for executing program instructions stored in the memory, so as to realize the state query method.

[0011] The application provides a computer readable storage medium, which stores program instructions. When the program instructions are executed by a processor, the state query method is realized.

[0012] In the above scheme, when the state query end has a query requirement for a target state, the state query end provides the target state to each state response end, at least one target state response end feeds back a first encryption result about its own identifier to the state query end, or one of the target state response ends feeds back an aggregated result of the first encryption results about the identifiers of each of the target state response ends to the state query end, the target state response end is a state response end in the target state, and the state query end decrypts the state query result (the first encryption result or the aggregated result) to determine the identity of each target state response end. Thus, in the target state query process, the first encryption result or the aggregated result about the identifier is transmitted instead of the identifier of the target state response end itself, which can avoid identifier leakage and improve the data security of state query.

[0013] It should be understood that the foregoing general description and the following detailed description are only exemplary and explanatory, rather than limiting the present application. BRIEF DESCRIPTION OF DRAWINGS

[0014] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the technical solutions of the present application.

[0015] Figure 1 is a structural schematic diagram of an embodiment of a state query system provided by the present application;

[0016] Figure 2 is a structural schematic diagram of another embodiment of a state query system provided by the present application;

[0017] Figure 3 is a flow schematic diagram of a first embodiment of a state query method provided by the present application;

[0018] Figure 4 is a flow schematic diagram of a second embodiment of a state query method provided by the present application;

[0019] Figure 5 is a flow schematic diagram of a third embodiment of a state query method provided by the present application;

[0020] Figure 6 is a flow schematic diagram of a fourth embodiment of a state query method provided by the present application;

[0021] Figure 7 is a flow schematic diagram of a fifth embodiment of a state query method provided by the present application;

[0022] Figure 8 is a flow schematic diagram of a sixth embodiment of a state query method provided by the present application;

[0023] Figure 9is a flowchart of the seventh embodiment of the state query method provided in the present application;

[0024] Figure 10 is a flowchart of the eighth embodiment of the state query method provided in the present application;

[0025] Figure 11 is a flowchart of the establishment of the correspondence between the identity and the identifier of the state response end;

[0026] Figure 12 is a flowchart of a specific example of the state query method provided in the present application;

[0027] Figure 13 is a flowchart of the ninth embodiment of the state query method provided in the present application;

[0028] Figure 14 is a flowchart of the tenth embodiment of the state query method provided in the present application;

[0029] Figure 15 is a flowchart of the eleventh embodiment of the state query method provided in the present application;

[0030] Figure 16 is a structural diagram of an embodiment of the electronic device provided in the present application;

[0031] Figure 17 is a structural diagram of an embodiment of the computer readable storage medium provided in the present application. DETAILED DESCRIPTION

[0032] The schemes of the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0033] In the following description, specific details are set forth in order to provide a thorough understanding of the present application. The present application can be practiced without some or all of the specific details. In some instances, well-known structures have not been described in detail in order not to obscure the application.

[0034] The term "and / or" herein is merely an associated relationship between the associated objects, which means that there can be three relationships, for example, A and / or B can mean that there are three cases of A alone, A and B together, and B alone. In addition, the character " / " herein generally represents an "or" relationship between the front and rear associated objects. In addition, "multiple" herein means two or more than two. In addition, the term "at least one" herein means any combination of any one or more of the multiple or at least two of the multiple, for example, including at least one of A, B and C can mean including any one or more elements selected from the set consisting of A, B and C.

[0035] The state query method provided in the present application is applied to a state query system.

[0036] Figure 1 is a structural schematic diagram of an embodiment of a state query system provided by the present application. As shown in Figure 1 , the state query system includes a state query end and a plurality of state response ends. The state query end and at least one state response end can communicate.

[0037] The state query end can be any device with a state query requirement, such as a server, a mobile terminal, etc. The server can be a physical server, a cloud server, etc.

[0038] The state response end can be an Internet of Things device, which can be a home device, a medical device, a production line device, a charging device, etc.

[0039] The state response end has at least two states. The state of the state response end can be a running state, a connection state, an energy state, a storage state, a security state, etc. The running state can include running, standby, hibernation, fault, calibration, etc. The connection state can include online, offline, reconnecting, limited connection. The energy state can include remaining power, charging state, etc. The storage state can include memory usage, storage remaining space, etc. The security state includes authenticated, authentication expired, certificate invalid, etc.

[0040] Figure 2 is a structural schematic diagram of another embodiment of a state query system provided by the present application. As shown in Figure 2 , the state query system includes a state query end, a state management end, and a plurality of state response ends. The state query end and the state management end can communicate, and the state management end and at least one state response end can communicate. That is, the state query end does not directly communicate with each state response end, but indirectly communicates with each state response end through the state management end.

[0041] The state management end can be an edge computing gateway, a controller, etc.

[0042] The following describes an embodiment of a state query method provided by the present application.

[0043] Figure 3 is a flowchart of a first embodiment of a state query method provided by the present application. In this embodiment, the state query system includes a state query end, a plurality of state response ends, and the identifiers of different state response ends are different. As shown in Figure 3 , in this embodiment, the state query method can include the following steps:

[0044] S11: The state query end provides a target state to be queried to each state response end.

[0045] The target state to be queried is one of the at least two states of each state response end.

[0046] Each state response end has an identifier, and the identifiers of different state response ends are different. The identifier of a state response end can be text, letters, numbers, etc. The numbers can be binary numbers, octal numbers, decimal numbers, hexadecimal numbers, etc.

[0047] In some embodiments, the identifier of each state response end is a number, and the binary forms of the identifiers of the state response ends are mutually exclusive. By mutually exclusive, it is meant that there is no bit that is simultaneously 1, that is, the arithmetic sum of the binary forms of the identifiers of the state response ends is consistent, the bitwise OR result is also consistent, and there is no repetition conflict. For example, the identifiers of the state response ends are a sequence of powers of 2 2 0 = 1, 2 1 = 2, 2 2 = 4, 2 3 = 8, 2 4 = 16, 2 5 = 32, 2 6 = 64, 2 7 = 128, …, and the corresponding binary forms are 00000001, 00000010, 00000100, 00001000, 00010000, 00100000, 01000000, 10000000, …, respectively, so that in the binary forms of the identifiers of the state response ends, only one bit is “1”, and the bit that is “1” is different for each state response end. It can be understood that in the case where the binary forms of the identifiers of the state response ends are mutually exclusive, the operation results of the identifiers of the state response ends in different combinations are unique and different.

[0048] In some embodiments, the task management system does not include a state management end, and the state query end can directly provide the target state to each state response end.

[0049] In some embodiments, the task management system includes a state management end, and the state query end can indirectly provide the target state to each state response end through the state management end.

[0050] S12: Each target state response end feeds back a first encryption result about its own identifier to the state query end.

[0051] The target state response end is a state response end in the target state.

[0052] The first encryption results about the own identifiers of different target state response ends are different.

[0053] In some embodiments, the task management system does not include a state management end, and the target state response end can directly feed back the first encryption result about its own identifier to the state query end.

[0054] In some embodiments, the task management system comprises a state management end, and the target state response end can feed back the first encrypted result about its own identity to the state query end indirectly through the state management end.

[0055] S13: The state query end decrypts the state query result to determine the identity of each target state response end.

[0056] The state query result is the first encrypted result of the identity of each target state response end.

[0057] In some embodiments, the first encrypted result about the identity of each target state response end can be decrypted respectively to obtain the identity of each target state response end; and the identity of each target state response end is determined based on the correspondence between the identity and the identity of each state response end.

[0058] Through the implementation of the present embodiment, when the state query end has a query demand for a target state, the state query end provides the target state to each state response end, the state response end in the target state feeds back the first encrypted result about its own identity to the state query end, and the state query end decrypts the first encrypted result to determine the identity of each target state response end. Thus, in the target state query process, the first encrypted result about the identity is transmitted instead of the identity of the target state response end itself, which can avoid identity leakage and improve the data security of state query.

[0059] Figure 4 is a flowchart of a second embodiment of the state query method provided by the present application. In the present embodiment, the state query system comprises a state query end and a plurality of state response ends, and the identities of different state response ends are different. As shown in Figure 4 The state query method can comprise the following steps:

[0060] S21: The state query end provides a target state to be queried to each state response end.

[0061] S22: One of the target state response ends feeds back an aggregated result of the first encrypted result about the identity of each target state response end to the state query end.

[0062] The aggregated result of the first encrypted result about the identity of the target state response end in different combinations is different. Therefore, in S22, the aggregated result obtained in the case of different target state response ends is also different.

[0063] In some embodiments, the task management system does not comprise a state management end, and one of the target state response ends can feed back the aggregated result directly to the state query end.

[0064] In some embodiments, the task management system comprises a state management end, wherein the target state response end can indirectly feed back the aggregation result to the state query end through the state management end.

[0065] S23: The state query end decrypts the state query result to determine the identity of each target state response end.

[0066] The state query result is the aggregation result.

[0067] For other detailed descriptions of this embodiment, please refer to the previous embodiments, which will not be repeated here.

[0068] Through the implementation of this embodiment, when the state query end has a query demand for the target state, the state query end provides the target state to each state response end, wherein a target state response end feeds back the aggregation result of the first encrypted result of each target state response end about its own identity to the state query end, and the state query end decrypts the aggregation result to determine the identity of each target state response end. Thus, in the target state query process, the transmission is the aggregation result, not the identity of the target state response end itself, which can avoid identity leakage and improve the data security of state query.

[0069] In some embodiments, the first encrypted result about the identity is a second encrypted result obtained by encrypting the identity.

[0070] Among them, each state response end pre-stores its own identity and the second encrypted result of its own identity. And the identity of each state response end and the corresponding second encrypted result are stored by each state response end after being provided by the state query end to each state response end in advance.

[0071] In some embodiments, the first encrypted result about the identity is the result of operation of the second encrypted result and the third encrypted result of the confusion number. The operation can be addition, multiplication, XOR, etc.

[0072] In some embodiments, the confusion number includes at least one of a first confusion number or a second confusion number. The first confusion number corresponding to different times of state query is different, and the second confusion number corresponding to different times of state query is the same or is updated periodically. That is, the first confusion number is dynamic, and the second confusion number is static.

[0073] It can be understood that, since the second confusion number is static, it can confuse the second encrypted result of the identity of the target state response end in each state query process, which can avoid that an attacker directly cracks the identity from the state query result compared with the case of directly taking the second encrypted result as the first encrypted result.

[0074] Since the first obfuscation number is dynamic, it can obfuscate the second encryption result of the identifier of the same target state response end in different state query processes. Compared with the case of directly using the second encryption result as the first encryption result, it can ensure the unpredictability and anti-replay characteristics of each state query result. Therefore, even if different state query processes are responded to by the same or the same batch of target state response ends, attackers cannot deduce the new state query result from the historical state query result.

[0075] Specifically, when the obfuscation number includes a first obfuscation number, the third encryption result of the obfuscation number is the third encryption result of the first obfuscation number. When the obfuscation number includes a second obfuscation number, the third encryption result of the obfuscation number is the third encryption result of the second obfuscation number. When the obfuscation number includes both a first obfuscation number and a second obfuscation number, the third encryption result of the obfuscation number is the result of performing an operation on the third encryption results of both the first and second obfuscation numbers.

[0076] The first confusion number and the second confusion number can be randomly generated numbers or specific numbers obtained according to a specific pattern.

[0077] In some embodiments, the third encryption result of the first obfuscation number comes from the status query terminal, and is obtained by the status query terminal encrypting the first obfuscation number during each status query process.

[0078] In some embodiments, the third encryption result of the second obfuscation number is pre-existing in the state query terminal, and is obtained and stored by the state query terminal encrypting the second obfuscation number before the state query or during the first state query process.

[0079] In some embodiments, the state management system includes a state management terminal, and the third encryption result of the second obfuscation number is pre-stored in the state management terminal. The state query terminal encrypts the second obfuscation number and sends it to the state management terminal before the state query or during the first state query process.

[0080] In some embodiments, in S11 / S12, the state query terminal may provide only the target state to each state response terminal.

[0081] In some embodiments, in S11 / S12, the state query terminal can provide the third encryption result of the target state and the number of obfuscations to each state response terminal.

[0082] In some embodiments, the obfuscation number includes a first obfuscation number and a second obfuscation number. Before the status query, the status query terminal encrypts the second obfuscation number to obtain a third encrypted result of the second obfuscation number and stores it. During the status query process, after the status query terminal encrypts the first obfuscation number to obtain a third encrypted result of the first obfuscation number, it performs a calculation on the third encrypted result of the first obfuscation number and the third encrypted result of the second obfuscation number to obtain a third encrypted result of the obfuscation number, which is then provided to each status response terminal.

[0083] In some embodiments, the obfuscation number includes a first obfuscation number and a second obfuscation number. Before the status query, the status query terminal encrypts the second obfuscation number to obtain a third encrypted result of the second obfuscation number and sends it to the status management terminal for storage. During the status query process, the status query terminal encrypts the first obfuscation number to obtain a third encrypted result of the first obfuscation number and sends it to the status management terminal. The status management terminal performs calculations on the third encrypted result of the first obfuscation number and the third encrypted result of the second obfuscation number to obtain a third encrypted result of the obfuscation number and sends it to each status response terminal.

[0084] In some embodiments, the obfuscation number includes a first obfuscation number. During the status query process, the status query end encrypts the first obfuscation number to obtain a third obfuscation number and provides it to each status response end.

[0085] In some embodiments, the obfuscation number includes a second obfuscation number. Before the status query, the status query end encrypts the second obfuscation number to obtain a third encrypted result of the second obfuscation number and stores it. During the status query process, the status query end provides the third encrypted result of the second obfuscation number to each status response end.

[0086] In some embodiments, the obfuscation number includes a second obfuscation number. Before a status query or during the first status query, the status query terminal encrypts the second obfuscation number to obtain a third encrypted result of the second obfuscation number and sends it to the status management terminal for storage. During the status query process, the status management terminal sends the third encrypted result of the second obfuscation number to each status response terminal.

[0087] Figure 5 This is a flowchart illustrating the third embodiment of the status query method provided in this application. This embodiment is a further extension of the foregoing embodiments, wherein S31-S32 are further extensions of S11, and S33-S34 are further extensions of S12. The status query system also includes a status management terminal.

[0088] like Figure 5 As shown, in this embodiment, the status query method may include the following steps:

[0089] S31: The status query terminal sends the query command to the status management terminal.

[0090] The query command includes the target status to be queried.

[0091] In some embodiments, the query instruction further includes a third encrypted result of the obfuscation number. The obfuscation number includes at least one of a first obfuscation number and a second obfuscation number.

[0092] S32: The status management terminal responds to the query command and sends the target status to at least each status response terminal.

[0093] In some embodiments, the first encryption result of the identifier is a second encryption result obtained by encrypting the identifier. In this case, S32 may include: the state management terminal only sends the target state to each state response terminal.

[0094] In some embodiments, the first encryption result for the identifier is the result of operating on the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number. In this case, S32 may include: the state management terminal sending the target state and the third encryption result of the obfuscation number to each state response terminal.

[0095] In some embodiments, the obfuscation number includes a first obfuscation number and a second obfuscation number, and the second encryption result of the second obfuscation number is pre-stored in the state management terminal. The state management terminal sends the target state and the third encryption result of the obfuscation number to each state response terminal, including: the state management terminal performs a calculation on the third encryption result of the first obfuscation number and the third encryption result of the second obfuscation number to obtain the third encryption result of the obfuscation number and sends it to each state response terminal.

[0096] In some embodiments, the state management terminal may broadcast the target state to each state response terminal at least once. Alternatively, the target state may be sent to each state response terminal individually.

[0097] S33: At least one target state response terminal sends the first encrypted result about its own identifier to the state management terminal.

[0098] In some embodiments, the first encryption result regarding the identifier is a second encryption result obtained by encrypting the identifier. In this case, S33 may include: at least one target state response terminal may directly send the first encryption result regarding its own identifier to the state management terminal. Alternatively, S33 may include: at least one target state response terminal may send the first encryption result regarding its own identifier to one of the state management terminals, and one of the target state response terminals may send the first encryption result of the identifiers of each target state response terminal to the state management terminal.

[0099] In some embodiments, the first encryption result regarding the identifier is the result of calculating the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number. In this case, S33 may include: at least one target state response terminal calculating the second encryption result and the third encryption result of its own identifier respectively to obtain the first encryption result of the at least one target state response terminal regarding its own identifier and sending it to the state management terminal.

[0100] S34: The status management terminal sends the status query results to the status query terminal.

[0101] Unlike the previous embodiments, in this embodiment, the status query end and the status response end communicate indirectly through the status management end. The status management end collects the first encrypted results of each target status response end regarding its own identifier, and the task query end performs a hierarchical decryption process, which significantly reduces network bandwidth consumption and the computational load of the task query end, and improves the overall throughput of the task query system.

[0102] Figure 6 This is a flowchart illustrating the fourth embodiment of the status query method provided in this application. This embodiment is a further extension of the foregoing embodiments, wherein S41-S42 are further extensions of S21, and S43-S44 are further extensions of S22. The status query system also includes a status management terminal. Figure 6 As shown, in this embodiment, the status query method may include the following steps:

[0103] S41: The status query terminal sends the query command to the status management terminal.

[0104] The query command includes the target status to be queried.

[0105] S42: The status management terminal responds to the query command and sends the target status to at least each status response terminal.

[0106] S43: One of the target state response terminals sends the aggregated result of the first encrypted result regarding the identifiers of each target state response terminal to the state management terminal.

[0107] In some embodiments, the first encryption result for the identifier is the result of operating on the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number. In this case, S43 may include: the first target state response terminal operating on the second encryption result and the third encryption result of its own identifier to obtain the aggregation result corresponding to the first target state response terminal; a non-first target state response terminal operating on the second encryption result of its own identifier and the aggregation result corresponding to the previous target state response terminal to obtain the aggregation result corresponding to the non-first target state response terminal; and the last target state response terminal obtaining the corresponding aggregation result and sending it to the state management terminal. Thus, the aggregation result corresponding to the last target state response terminal is the final aggregation result.

[0108] For example, there are five state response terminals, with state response terminals 1-3 serving as the target state response terminals. State response terminal 1 performs calculations on its own identifier's second and third encryption results to obtain aggregate result 1, which is then sent to state response terminal 2. State response terminal 2 performs calculations on its own identifier's second encryption result and aggregate result 1 to obtain aggregate result 2, which is then sent to state response terminal 3. State response terminal 3 performs calculations on its own identifier's second encryption result and aggregate result 2 to obtain aggregate result 3, which is then sent to the state management terminal.

[0109] In some embodiments, the first encryption result of the identifier is the result of operating on the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number. In this case, S43 may include: each target state response terminal sending the second encryption result of its own identifier to one of the target state response terminals, and the target state response terminal operating on the third encryption result and each of the second encryption results to obtain an aggregate result and sending it to the state management terminal.

[0110] For example, there are five state response terminals, with state response terminal 1-3 being the target state response terminal. State response terminal 1-2 sends its own identified second encryption result to state response terminal 3. State response terminal 3 performs calculations on the third encryption result and the second encryption result identified by state response terminal 1-3 to obtain an aggregated result, which is then sent to the state management terminal.

[0111] In some embodiments, the first encryption result of the identifier is a second encryption result obtained by encrypting the identifier. In this case, S43 may include: each target state response terminal sending the second encryption result of its own identifier to one of the target state response terminals, and the target state response terminal performing calculations on each of the second encryption results to obtain an aggregate result and sending it to the state management terminal.

[0112] For example, there are five state response terminals, with state response terminals 1-3 being the target state response terminal. State response terminal 1-2 sends its own identified second encryption result to state response terminal 3. State response terminal 3 performs calculations on the second encryption result identified by state response terminals 1-3, obtains the aggregated result, and sends it to the state management terminal.

[0113] In some embodiments, the first encryption result regarding the identifier is the result of operating on the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number. In this case, S43 may include: each target state response terminal operating on the second encryption result and the third encryption result of its own identifier to obtain the first encryption result regarding its own identifier, and sending it to one of the target state response terminals; the target state response terminal operating on each of the first encryption results to obtain an aggregated result and sending it to the state management terminal.

[0114] For example, there are state response terminals 1 to 5, with state response terminals 1-3 serving as the target state response terminal. State response terminals 1-3 perform calculations on the second and third encryption results of their own identifiers to obtain a first encryption result regarding their own identifiers and send it to state response terminal 3. State response terminal 3 then performs calculations on the first encryption results of state response terminals 1-3 regarding their identifiers to obtain an aggregated result and sends it to the state management terminal.

[0115] S44: The status management terminal sends the status query results to the status query terminal.

[0116] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0117] Unlike the previous embodiments, in this embodiment, the status query end and the status response end communicate indirectly through the status management end. The status management end performs the aggregation result collection of the first encryption result of the identifier of each target status response end, and the task query end performs the decryption hierarchical processing flow, which significantly reduces network bandwidth consumption and the computational load of the task query end, and improves the overall throughput of the task query system.

[0118] In some embodiments, the obfuscation number includes a first obfuscation number. Before S31 / S41, the process further includes: the status query terminal generating the first obfuscation number and encrypting it to obtain a third encrypted result of the first obfuscation number; sending the third encrypted result of the first obfuscation number to the status management terminal, or placing the third encrypted result of the first obfuscation number in a query instruction. In the former case, the third encrypted result of the first obfuscation number is not placed in the query instruction during the status query process, but is sent to the status management terminal separately from the query instruction. In the latter case, the status query terminal places the third encrypted result of the first obfuscation number and the target status together in the query instruction and sends it to the status management terminal.

[0119] Figure 7 This is a flowchart illustrating the fifth embodiment of the status query method provided in this application. This embodiment is a further extension of the foregoing embodiments. The status query system includes a status query terminal, a status management terminal, and various status response terminals. Figure 7 As shown, before S31 / S41, it also includes:

[0120] S51: The status query terminal generates several identifiers, encrypts several identifiers to obtain a second encryption result of several identifiers, and sends several identifiers and corresponding second encryption results to the status management terminal.

[0121] S52: The state management terminal distributes several identifiers and corresponding second encryption results to several state response terminals to obtain the correspondence between the identity and identifier of each state response terminal, and sends the correspondence to the state query terminal.

[0122] For example, the state management terminal assigns identifiers 1-5 and their corresponding second encryption results to state response terminals 1-5, so that state response terminal 1 corresponds to identifier 1, state response terminal 2 corresponds to identifier 2, state response terminal 3 corresponds to identifier 3, state response terminal 4 corresponds to identifier 4, and state response terminal 5 corresponds to identifier 5.

[0123] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0124] Unlike the previous embodiments, in this embodiment, the status query terminal provides the identifier and corresponding second encryption result indirectly to each status response terminal through the status management terminal before querying the status. The status management terminal then indirectly obtains the correspondence between the identity and the identifier of each status response terminal. Therefore, the identity of each target status query terminal can be obtained subsequently using the correspondence and the status query result.

[0125] Figure 8 This is a flowchart illustrating the sixth embodiment of the status query method provided in this application. This embodiment is a further extension of the foregoing embodiments, wherein S61 is a further extension of S11, and S62 is a further extension of S12. The status query system includes a status query terminal and various status response terminals. Figure 8 As shown, in this embodiment, the status query method may include the following steps:

[0126] S61: The status query terminal sends a query command to several status response terminals. The query command includes the target status to be queried.

[0127] In some embodiments, the query instruction may also include a third encrypted result of the obfuscation number.

[0128] S62: At least one target status response end responds to the query command and sends the first encrypted result about its own identifier to the status query end.

[0129] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0130] Figure 9 This is a flowchart illustrating the seventh embodiment of the status query method provided in this application. This embodiment is a further extension of the foregoing embodiments, wherein S71 is a further extension of S21, and S72 is a further extension of S22. The status query system includes a status query terminal and various status response terminals. Figure 9 As shown, in this embodiment, the status query method may include the following steps:

[0131] S71: The status query terminal sends the query command to several status response terminals.

[0132] The query command includes the target status to be queried.

[0133] S72: One of the target status response terminals sends the aggregated result of the first encrypted result regarding the identifiers of each target status response terminal to the status query terminal.

[0134] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0135] Figure 10 This is a flowchart illustrating the eighth embodiment of the status query method provided in this application. This embodiment is a further extension of S23. The first encryption result for the identifier is the result of calculating the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number, and the status query result is an aggregated result. Figure 10 As shown, in this embodiment, the status query method may include the following steps:

[0136] S81: The state query terminal decrypts the aggregation result and obtains the first calculation result of the confusion number and the identifier of each target state response terminal.

[0137] The first calculation result is the result of calculating the confusion number and the identifier of each target state response end.

[0138] In some embodiments, the binary forms of the identifiers of different state response terminals are mutually exclusive and the operation is additive, and the first operation result is the sum of the obfuscation number and the identifiers of each target state response terminal. In this case, S81 may include: the state query terminal decrypts the aggregation result to obtain the sum of the obfuscation number and the identifiers of each target state response terminal.

[0139] In some embodiments, the operation is multiplication, and the first result is the product of the obfuscation number and the identifier of each target state response terminal. In this case, S81 may include: the state query terminal decrypts the aggregation result to obtain the product of the obfuscation number and the identifier of each target state response terminal.

[0140] S82: The status query end uses the first calculation result and the confusion number to obtain the second calculation result of the identifier of each target status response end.

[0141] The second calculation result is the result of calculating the identifiers of each target state response terminal. The second calculation result is unique and different for the identifiers of different combinations of target state response terminals.

[0142] In some embodiments, the binary forms of the identifiers of different state response terminals are mutually exclusive and the operation is addition. S82 may include: the state query terminal subtracts the confusion number from the addition result to obtain the sum of the identifiers of each target state response terminal.

[0143] In some embodiments, the operation is multiplication, and S82 may include: the state query end dividing the multiplication result by the confusion number to obtain the product of the identifiers of each target state response end.

[0144] S83: The status query end uses the second calculation result to determine the identifier of each target status response end.

[0145] In some embodiments, the binary forms of the identifiers of different state response terminals are mutually exclusive and the operation is addition. S83 may include: the state query terminal converts the sum of the identifiers into binary form to obtain the binary conversion result of the sum of the identifiers; the state query terminal obtains the identifier of each target state response terminal based on the binary conversion result.

[0146] The binary conversion result is the sum of the binary forms of the identifiers of each target state response terminal. Since the positions of the "1" bits in the binary forms of the identifiers of each target state response terminal are different, there will be no carry when the binary forms of the identifiers of each target state response terminal are added together. Therefore, the identifier of each target state response terminal can be determined based on the positions of the "1" bits in the binary conversion result.

[0147] In some embodiments, the operation is multiplication, and S83 may include: factoring the product of identifiers to obtain the identifiers of each target state response endpoint. In this case, the product of identifiers for different combinations of target state response endpoints is different, and the product of identifiers has a unique factorization result.

[0148] S84: The status query terminal uses the identifier of each target status response terminal to determine the identity of each target status response terminal from the correspondence between the identity of each status response terminal and the identifier.

[0149] The encryption, decryption, and computation mentioned in this application are implemented based on the same encryption algorithm. This encryption algorithm supports direct computation on the encrypted result of the identifier / confusion number, and the decrypted result of the computation on the encrypted result is completely consistent with the result of performing the same computation on the identifier / confusion number, thus ensuring both data privacy and computational functionality. This encryption algorithm can be a homomorphic encryption algorithm, a composable encryption algorithm, etc.

[0150] Homomorphic encryption algorithms consist of three stages: homomorphic encryption, homomorphic operation, and homomorphic decryption. In the homomorphic encryption stage, the identifier / obfuscation number is encrypted using the public key to obtain the initial encryption result. In the homomorphic operation stage, a homomorphic operation is performed on the initial encryption result to obtain the final encryption result. In the decryption stage, the final encryption result is decrypted using the private key to obtain the result of the identifier / obfuscation number operation.

[0151] Homomorphic encryption algorithms can be further divided into additive homomorphic encryption algorithms and multiplicative homomorphic encryption algorithms. The homomorphic operation in additive homomorphic encryption algorithms is homomorphic addition, while the homomorphic operation in multiplicative homomorphic encryption algorithms is homomorphic multiplication. Additive homomorphic encryption algorithms can be exemplified by Paillier et al.

[0152] For example, D(E(m1)+E(m2))=m1+m2, where E() is the homomorphic encryption function under the homomorphic encryption algorithm, and D() is the homomorphic decryption function under the homomorphic encryption algorithm. m1 and m2 are the identifier / obfuscation numbers.

[0153] In some embodiments, encryption is homomorphic encryption, decryption is homomorphic decryption, and operation is homomorphic operation, which is homomorphic addition or homomorphic multiplication.

[0154] In the specific examples above, on the one hand, by using homomorphic encryption algorithms to transmit and process state-related data between the state query end, the state management end, and the state response end, it is possible to avoid leakage of state-related data and avoid the risk of man-in-the-middle attacks.

[0155] On the other hand, the binary form of the identifiers of each state response terminal is designed to be mutually exclusive, so that the identifiers of each state response terminal have a mathematical equivalence relationship of arithmetic addition and bitwise OR. This allows the state query terminal to quickly determine the target state response terminal through a single interaction and a single decryption operation, realizing batch state query with sublinear time complexity O(1), and improving the query efficiency of large-scale clusters (efficient batch query and accurate location of target state response terminal).

[0156] On the other hand, the design of a hierarchical processing flow in which the state management end collects the first encrypted result from each target state response end and the state query end decrypts the aggregated result can significantly reduce the network bandwidth consumption and computing load of the state query end, and improve the throughput (scalability and low power consumption) of the state query system.

[0157] On the other hand, by using different first obfuscation numbers in each state query process to achieve dynamic obfuscation of the second encryption result, the query result is not reusable, which can ensure the unpredictability and anti-replay characteristics of each state query result, thereby further enhancing the security of state query.

[0158] To facilitate understanding, the status query method provided in this application will be explained below with a specific example.

[0159] The status query system includes a status query terminal, a status management terminal, and a cluster. The cluster includes status response terminals 1-8.

[0160] I. Establish the correspondence between the identities and identifiers of status response terminals 1-8.

[0161] Figure 11 This is a flowchart illustrating the process of establishing the correspondence between the identity and identifier of the status response terminal in this application. For example... Figure 11 As shown, establishing the correspondence involves the following steps:

[0162] 1. The status query terminal generates and saves homomorphically encrypted private and public keys.

[0163] 2. The status query terminal randomly generates a second obfuscation number t, and encrypts t using the public key to obtain the third encryption result E(t). Also, it generates identifiers 1-8, which form a power-of-2 sequence 2. 0 =1,2 1 =2,2 2 =4,2 3 =8,2 4 =16, 2 5 =32, 2 6 =64, 2 7 =128, corresponding to the binary forms 00000001, 00000010, 00000100, 00001000, 00010000, 00100000, 01000000, 10000000. The identifiers 1-8 are then encrypted to obtain the corresponding second encryption result ah.

[0164] 3. The status query terminal sends the public key, E(t), identifiers 1-8 and the corresponding second encryption result ah to the status management terminal.

[0165] 4. The state management terminal stores the public key and E(t), and assigns the identifiers 1-8 and the corresponding second encryption result ah to the state response terminals 1-8 respectively, so as to obtain the correspondence between the identity and the identifier of the state response terminals 1-8, and sends the public key to each state response terminal 1-8 respectively.

[0166] 5. Status response terminals 1-8 all store the public key, and respectively store the assigned identifiers 1-8 and the corresponding second encryption result ah.

[0167] Specifically, state response terminal 1 stores the public key, identifier 1 and the corresponding a; state response terminal 2 stores the public key, identifier 2 and the corresponding b; state response terminal 3 stores the public key, identifier 3 and the corresponding c; state response terminal 4 stores the public key, identifier 4 and the corresponding d; state response terminal 5 stores the public key, identifier 5 and the corresponding e; state response terminal 6 stores the public key, identifier 6 and the corresponding f; state response terminal 7 stores the public key, identifier 7 and the corresponding g; and state response terminal 8 stores the public key, identifier 8 and the corresponding h.

[0168] 6. The status management terminal sends the corresponding relationship to the status query terminal.

[0169] 7. The status query terminal stores the corresponding relationship.

[0170] II. Querying the status response terminal in the target state

[0171] Figure 12 This is a flowchart illustrating a specific example of method one for querying the status of this application. For example... Figure 12 As shown, the status query method has the following steps:

[0172] 1. The status query terminal randomly generates the first obfuscation number R, and uses the public key to encrypt R to obtain the third encryption result E(R).

[0173] 2. The status query terminal places the target status and E(R) in the query command and sends the query command to the status management terminal.

[0174] 3. The state management terminal uses the public key to homomorphically add E(R) to the pre-stored E(t) to obtain the third encryption result of the confusion number sum0 = E(R) ⊕ E(t), and broadcasts sum0 to the cluster.

[0175] 4. The state response terminal 1 in the target state uses the public key to homomorphically add sum0 and a to obtain the aggregation result sum1 = E(R)⊕E(t)⊕a and sends it to the state response terminal 3 in the target state.

[0176] 5. The state response terminal 3 uses the public key to homomorphically add the aggregation result sum1 and c to obtain the aggregation result sum2 = E(R)⊕E(t)⊕a⊕c and sends it to the state response terminal 6 which is in the target state.

[0177] 6. The state response terminal 6 uses the public key to homomorphically add the aggregation result sum2 and f to obtain the aggregation result sum3 = E(R)⊕E(t)⊕a⊕c⊕f, and sends it to the state response terminal 8 which is in the target state.

[0178] 7. The state response terminal 8 uses the public key to homomorphically add the aggregation result sum3 and h to obtain the aggregation result sum4 = E(R)⊕E(t)⊕a⊕c⊕f⊕h and sends it to the state management terminal.

[0179] 8. The status management terminal sends sum4 to the status query terminal.

[0180] 9. The status query terminal uses the private key to decrypt sum4, and obtains the sum of R, t and the identifiers of status response terminals 1, 3, 6, and 8, res = R + t + 165, where 165 is the sum of the identifiers of status response terminals 1, 3, 6, and 8 (1 + 4 + 32 + 128).

[0181] 10. The status query end obtains res-Rt=165, converts 165 into binary form 10100101, and determines the binary form of the identifier of each target status response end according to 10100101, namely 10000000(1), 00100000(4), 00000100(32), 00000001(128), and uses the identifier of each target status response end to determine from the correspondence that status response ends 8, 6, 3, and 1 are in the target state.

[0182] Figure 13 This is a flowchart illustrating the ninth embodiment of the status query method provided in this application. Figure 13 As shown, in this embodiment, the status query method may include the following steps:

[0183] S91: Provide the target state to be queried to each state response end.

[0184] S92: Receive status query results.

[0185] The status query result is either a first encrypted result about its own identifier fed back by at least one target status response terminal, or an aggregated result of the first encrypted results about the identifiers of each target status response terminal fed back by one of the target status response terminals, where the target status response terminal is a status response terminal in the target state.

[0186] S93: Decrypt the status query results to determine the identity of each target status response terminal.

[0187] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0188] Figure 14 This is a flowchart illustrating the tenth embodiment of the status query method provided in this application. Figure 14 As shown, in this embodiment, the status query method may include the following steps:

[0189] S101: Receive the target status provided by the status query terminal.

[0190] The execution entity in this embodiment is the status response terminal.

[0191] S102: Determine whether the status response terminal is in the target state.

[0192] S103: In response to being in a target state, the first encrypted result regarding its own identifier is fed back to the state query end, or the aggregated result of the first encrypted result regarding the identifiers of each target state response end is fed back to the state query end.

[0193] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0194] Figure 15 This is a flowchart illustrating the eleventh embodiment of the status query method provided in this application.

[0195] like Figure 15 As shown, in this embodiment, the status query method may include the following steps:

[0196] S111: Receive the target status sent by the status query terminal.

[0197] The execution entity in this embodiment is the state management terminal.

[0198] S112: Send the target state to at least each state response terminal.

[0199] S113: Receive status query results.

[0200] The status query result is either a first encrypted result about its own identifier fed back by at least one target status response terminal, or an aggregated result of the first encrypted results about the identifiers of each target status response terminal fed back by one of the target status response terminals, where the target status response terminal is a status response terminal in the target state.

[0201] S114: Send the status query result to the status query terminal.

[0202] For further detailed descriptions of this embodiment, please refer to the preceding embodiments, which will not be repeated here.

[0203] Figure 16 This is a schematic diagram of the structure of an embodiment of the electronic device of this application. Figure 16As shown, the electronic device 120 includes a memory 121 and a processor 122. The processor 122 is used to execute program instructions stored in the memory 121 to implement the steps in any of the above method embodiments. In a specific implementation scenario, the electronic device 120 may include, but is not limited to, a microcomputer or a server. In addition, the electronic device 120 may also include a laptop computer, a tablet computer, or other carrier device, which is not limited here.

[0204] Specifically, processor 122 controls itself and memory 121 to implement the steps in any of the above method embodiments. Processor 122 may also be referred to as a CPU (Central Processing Unit). Processor 122 may be an integrated circuit chip with signal processing capabilities. Processor 122 may also be a general-purpose processor, digital signal processor (DSP), application-specific integrated circuit (ASIC), field-programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component. A general-purpose processor may be a microprocessor or any conventional processor. Furthermore, processor 122 may be implemented using integrated circuit chips.

[0205] Please see Figure 17 , Figure 17 This is a schematic diagram of a computer-readable storage medium according to an embodiment of the present application. The computer-readable storage medium 130 stores program instructions 131 thereon, which, when executed by a processor, implement the steps in any of the above method embodiments.

[0206] The description of the various embodiments above tends to emphasize the differences between the various embodiments. The similarities or similarities between them can be referred to, and for the sake of brevity, they will not be repeated here.

[0207] In the several embodiments provided in this application, it should be understood that the disclosed methods and apparatus can be implemented in other ways. For example, the apparatus implementations described above are merely illustrative. For instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, units or components may be combined or integrated into another system, or some features may be ignored or not executed. In another image location, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms.

[0208] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute all or part of the steps of the methods in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

Claims

1. A state query method, characterized in that, This is applied to a status query system, which includes a status query terminal and several status response terminals, each with a different identifier, including: The status query terminal provides the target status to be queried to each of the status response terminals; At least one target state response terminal respectively feeds back the first encryption result about its own identifier to the state query terminal, or one of the target state response terminals feeds back the aggregate result of the first encryption result about the identifiers of each target state response terminal to the state query terminal, wherein the target state response terminal is a state response terminal in the target state; The status query terminal decrypts the status query result to determine the identity of each target status response terminal. The status query result is either a first encrypted result of the identifier of each target status response terminal or the aggregated result.

2. The method according to claim 1, characterized in that, The first encryption result of the identifier is either the second encryption result obtained by encrypting the identifier, or the result of operating on the second encryption result and the third encryption result with the obfuscation number.

3. The method according to claim 2, characterized in that, The obfuscation number includes at least one of a first obfuscation number or a second obfuscation number. The third encryption result of the first obfuscation number comes from the status query terminal. The first obfuscation number is different for different status queries. The third encryption result of the second obfuscation number is pre-stored in the status management terminal of the status query system. The second obfuscation number is the same for different status queries. When the obfuscation number includes the first obfuscation number and the second obfuscation number, the third encryption result of the obfuscation number is the result of the operation of the third encryption result of the first obfuscation number and the third encryption result of the second obfuscation number. And / or, the encryption is homomorphic encryption, the decryption is homomorphic decryption, the operation is homomorphic operation, and the homomorphic operation is homomorphic addition or homomorphic multiplication.

4. The method according to any one of claims 1-3, characterized in that, The status query system also includes a status management terminal; The status query terminal provides the target status to be queried to each of the status response terminals, including: The status query terminal sends a query instruction to the status management terminal, and the query instruction includes the target status to be queried. In response to the query command, the status management terminal sends the target status to at least each of the status response terminals; The at least one target state response terminal respectively feeds back a first encrypted result about its own identifier to the state query terminal, or one of the target state response terminals feeds back an aggregated result of the first encrypted results about the identifiers of each target state response terminal to the state query terminal, including: The at least one target state response terminal sends a first encryption result about its own identifier to the state management terminal, or one of the target state response terminals sends an aggregated result of the first encryption results about the identifiers of each target state response terminal to the state management terminal; The status management terminal sends the status query result to the status query terminal.

5. The method according to claim 4, characterized in that, The first encryption result of the identifier is the result of calculating the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number; In response to the query command, the status management terminal sends the target status to at least each of the status response terminals, including: The state management terminal sends the target state and the third encryption result of the obfuscation number to each of the state response terminals; The at least one target state response terminal respectively sends a first encrypted result about its own identifier to the state management terminal, including: The at least one target state response terminal performs calculations on the second encryption result of its own identifier and the third encryption result to obtain the first encryption result of the at least one target state response terminal regarding its own identifier and sends it to the state management terminal. One of the target state response terminals sends an aggregated result of the first encryption result regarding the identifiers of each target state response terminal to the state management terminal, including: The first target state response terminal performs a calculation on its own identifier, the second encryption result, and the third encryption result to obtain the aggregate result corresponding to the first target state response terminal; The non-first target state response terminal performs a calculation on its own second encryption result and the aggregation result corresponding to the previous target state response terminal to obtain the aggregation result corresponding to the non-first target state response terminal. The last target status response terminal obtains the corresponding aggregation result and sends it to the status management terminal.

6. The method according to claim 5, characterized in that, The obfuscation number includes a first obfuscation number, and before the status query terminal sends the query command to the status management terminal, it also includes: The status query terminal generates the first obfuscated number and encrypts the first obfuscated number to obtain a third encrypted result of the first obfuscated number; the third encrypted result of the first obfuscated number is sent to the status management terminal, or the third encrypted result of the first obfuscated number is placed in the query instruction; And / or, the obfuscation number includes a first obfuscation number and a second obfuscation number, and the second encryption result of the second obfuscation number is pre-stored in the state management terminal; the state management terminal sends the target state and the third encryption result of the obfuscation number to each of the state response terminals, including: The state management terminal performs calculations on the third encryption result of the first obfuscation number and the third encryption result of the second obfuscation number to obtain the third encryption result of the obfuscation number and sends it to each of the state response terminals.

7. The method according to claim 4, characterized in that, Before the status query terminal sends the query command to the status management terminal, the following steps are also included: The status query terminal generates several identifiers, encrypts several identifiers to obtain a second encryption result of several identifiers, and sends several identifiers and the corresponding second encryption result to the status management terminal; The status management terminal assigns several identifiers and corresponding second encryption results to several status response terminals to obtain the correspondence between the identity of each status response terminal and the identifier, and sends the correspondence to the status query terminal.

8. The method according to any one of claims 1-3, characterized in that, The status query terminal provides the target status to be queried to each of the status response terminals, including: The status query terminal sends a query instruction to the plurality of status response terminals, and the query instruction includes the target status to be queried. The at least one target state response terminal respectively feeds back a first encrypted result about its own identifier to the state query terminal, or one of the target state response terminals feeds back an aggregated result of the first encrypted results about the identifiers of each target state response terminal to the state query terminal, including: The at least one target status response terminal responds to the query command by sending a first encrypted result about its own identifier to the status query terminal, or one of the target status response terminals sends an aggregated result of the first encrypted results about the identifiers of each of the target status response terminals to the status query terminal.

9. The method according to claim 1, characterized in that, The first encryption result of the identifier is the result of calculating the second encryption result obtained by encrypting the identifier and the third encryption result of the obfuscation number, and the status query result is the aggregated result; The status query terminal decrypts the status query results to determine the identity of each target status response terminal, including: The status query terminal decrypts the aggregation result to obtain the first calculation result of the obfuscation number and the identifier of each target status response terminal; The status query terminal uses the first calculation result and the confusion number to obtain a second calculation result for the identifier of each target status response terminal; The status query terminal uses the second calculation result to determine the identifier of each target status response terminal; The status query terminal uses the identifier of each target status response terminal to determine the identity of each target status response terminal from the correspondence between the identity of each status response terminal and the identifier.

10. The method according to claim 9, characterized in that, The binary forms of the identifiers of the different state response terminals are mutually exclusive, and the operation is addition; The status query terminal decrypts the aggregation result to obtain a first calculation result of the obfuscation number and the identifiers of each target status response terminal, including: The status query terminal decrypts the aggregation result to obtain the sum of the obfuscation number and the identifier of each target status response terminal; The status query terminal uses the first calculation result and the obfuscation number to obtain a second calculation result for the identifier of each target status response terminal, including: The status query terminal subtracts the obfuscation number from the summation result to obtain the sum of the identifiers of each target status response terminal; The status query terminal uses the second calculation result to determine the identifier of each target status response terminal, including: The status query terminal converts the sum of the identifiers into binary form to obtain the binary conversion result of the sum of the identifiers; The status query terminal obtains the identifier of each target status response terminal based on the binary conversion result.

11. A state query method, characterized in that, This is applied to a status query system, which includes a status query terminal and several status response terminals, each with a different identifier. The execution steps of the status query terminal include: The target state to be queried is provided to each of the state response terminals; Receive status query results, wherein the status query results are either first encrypted results about their own identifiers fed back by at least one target status response terminal, or aggregated results of first encrypted results about the identifiers of each target status response terminal fed back by one of the target status response terminals, wherein the target status response terminal is a status response terminal in the target state; The status query results are decrypted to determine the identity of each target status response terminal.

12. A state query method, characterized in that, This is applied to a status query system, which includes a status query terminal and several status response terminals. The different status response terminals have different identifiers, and the execution steps of each status response terminal include: Receive the target status provided by the status query terminal; Determine whether the status response terminal is in the target state; In response to being in the target state, a first encrypted result regarding its own identifier is fed back to the state query terminal, or an aggregated result of the first encrypted result regarding the identifiers of each of the target state response terminals is fed back to the state query terminal.

13. A state query method, characterized in that, This is applied to a status query system, which includes a status query terminal, a status management terminal, and several status response terminals. The different status response terminals have different identifiers. The execution steps of the status management terminal include: Receive the target status sent by the status query terminal; The target state shall be sent to each of the state response terminals at least once. Receive status query results, wherein the status query results are either first encrypted results about their own identifiers fed back by at least one target status response terminal, or aggregated results of first encrypted results about the identifiers of each target status response terminal fed back by one of the target status response terminals, wherein the target status response terminal is a status response terminal in the target state; The status query result is sent to the status query terminal.

14. A status query system, characterized in that, It includes a status query terminal, a status management terminal, and several status response terminals. The status query terminal is used to implement the method of any one of claims 1-10 or 11. The status management terminal is used to implement the method of any one of claims 1-10 or 13. The status response terminal is used to implement the method of any one of claims 1-10 or 12.

15. An electronic device, characterized in that, It includes a memory and a processor, the processor being configured to execute program instructions stored in the memory to implement the method of any one of claims 1 to 13.

16. A computer-readable storage medium having program instructions stored thereon, characterized in that, When the program instructions are executed by the processor, they implement the method of any one of claims 1 to 13.

Images