Method and system for generating device ID based on device information and quantum random number

Abstract

The invention discloses a method and system for generating a device ID based on device information and a quantum random number, and the method comprises the steps: obtaining at least one piece of hardware feature information and software feature information in a device of which the ID is to be generated, building a first incidence relation rel1, and generating a first identifier sign1 based on the first incidence relation rel1; then, negotiating with equipment to generate a first quantum random number rand1, and performing hash calculation based on the first quantum random number rand1 and the first identifier sign1 to obtain a first hash value H1; then executing an XOR operation to obtain an equipment ID, and issuing the equipment ID to the equipment of which the ID is to be generated; and after receiving the equipment ID, the equipment executes verification operation, and stores the equipment ID if verification succeeds. According to the invention, the equipment ID corresponds to the incidence relation between the hardware information and the software information, and the replacement of any one aspect of the equipment can cause the difference of the generated equipment ID, so that the equipment ID effectively corresponds to the equipment, and the possibility of counterfeiting or disguising is avoided.

Description

Technical Field

[0001] This invention relates to the field of communication equipment security technology, specifically to a method and system for generating device IDs based on device information and quantum random numbers. Background Technology

[0002] In traditional IT, a Device ID is a unique identifier used to identify a device. It is typically generated from a single piece of information (such as a MAC address or CPU serial number) and assigned and written into the device by the hardware manufacturer during production. It is usually a string used to track device usage and maintenance. Through the Device ID, administrators can more easily track and monitor the device's status and location. Furthermore, the Device ID can be used for remote device management, such as remotely accessing and operating the device when updates or repairs are needed. However, because the traditional Device ID is written into the device during production and is a publicly available number, unauthorized users can modify or copy the Device ID to impersonate a device and infiltrate traditional communication networks, causing security problems such as the leakage of communication information.

[0003] With the development of information technology, quantum-secure communication technology represents a new direction for protecting information security and has become an important solution in the current information security field. In quantum-secure communication technology, the quantum-secure network built for secure communication also connects a large number of devices. These devices often need to communicate and interact within the network; therefore, tracking the communication devices and network elements in the quantum-secure network is also essential. Thus, the concept of device IDs from traditional information technology can be introduced into quantum-secure networks to uniquely identify each device, enabling the association and combination of devices to form a more complex and intelligent system. The introduction of device IDs can also help improve the security and reliability of quantum-secure network systems, preventing unauthorized devices from accessing the network and reducing data leaks and device failures.

[0004] As mentioned above, although the concept of device IDs is necessary in quantum-safe networks, the traditional device IDs directly written into devices in the field of information technology are not feasible. Therefore, how to generate unique and privacy-preserving device IDs for communication devices in quantum-safe networks has become a pressing technical problem to be solved in this field. Summary of the Invention

[0005] Purpose of the Invention: The purpose of this invention is to provide a method and system for generating device IDs based on device information and quantum random numbers. This solves the security problem that existing device IDs are written into the device during manufacturing, allowing unauthorized users to modify or copy the device ID to impersonate devices and intrude into communication networks, resulting in the leakage of communication information. This invention establishes a mapping between the device ID and hardware and software information. Replacing any aspect of the device will result in a different generated device ID, effectively linking the device ID to the specific device and eliminating the possibility of counterfeiting or impersonation. Simultaneously, the inclusion of quantum random numbers further ensures the privacy of the device ID, preventing it from being known or forged by third parties.

[0006] Technical solution: This invention provides a method for generating device IDs based on device information and quantum random numbers, the method comprising the following steps:

[0007] (1) Obtain at least one hardware feature information and at least one software feature information from the device to be generated with ID, establish a first association relationship rel1 for the hardware feature information and the software feature information, and generate a first identifier sign1 based on the first association relationship rel1;

[0008] (2) Then, negotiate with the device to generate the ID to generate a first quantum random number rand1, and perform a hash calculation based on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1;

[0009] (3) Perform an XOR operation between the first identifier sign1 and the first hash value H1 to obtain the device ID, and send the device ID to the device whose ID is to be generated;

[0010] (4) After receiving the device ID, the device to be generated performs a verification operation. If the verification is successful, the device ID is stored; otherwise, the verification fails and the device to be generated applies for a new device ID.

[0011] Furthermore, the hardware feature information includes the CPU serial number, host number, board serial number, MAC address, and hard disk serial number of the device to be generated with an ID; the software feature information includes the operating system UUID and operating system installation time of the device to be generated with an ID.

[0012] Furthermore, the first association relationship rel1 = (hardware feature information, software feature information); the first identifier sign1 is a string.

[0013] Furthermore, the specific process of performing hash calculation based on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1 is as follows:

[0014] 1) Encode the first identifier sign1 in string format into an integer sequence sequ, and read the length L of the integer sequence sequ;

[0015] 2) Locally generate an irreducible polynomial p1 and an input random number s1 based on length L. Record the string str1 consisting of the coefficients of each term in the irreducible polynomial p1 except for the highest term. Use the irreducible polynomial p1 and the input random number s1 to generate the first hash function h. p1,s1 Using the first hash function h p1,s1 The hash value of the first quantum random number rand1 and the first identifier sign1 is used to obtain the first hash value H1=h. p1,s1 (rand1,sign1), where the length of the first hash value H1 is L.

[0016] Furthermore, the XOR operation refers to performing an XOR operation between the first hash value H1 and the integer sequence sequ encoded by the first identifier sign1.

[0017] Furthermore, the device ID includes an ID content portion and a checksum, wherein the ID content portion is the result of an XOR operation, and the checksum is a first hash value H1.

[0018] Furthermore, the specific process of performing the verification operation is as follows:

[0019] A1: The device to be generated obtains the relevant parameters of the device ID, namely the length L, the string str1', and the input random number s1'. Then, it checks whether the length of the received device ID is 2L. If it is, it continues to the next step to perform the verification operation; otherwise, the verification fails and a new device ID is requested.

[0020] A2: For the device to generate an ID, the first half of the device ID with a length of L, ID1, is separated out. The second half of the device ID with a length of L, ID2, i.e., the first hash value H1, is then XORed with the first half ID1 to obtain the integer sequence sequ.

[0021] A3: Decode the integer sequence sequ to obtain the second identifier sign1';

[0022] A4: Next, based on the coefficients of each term of the polynomial (excluding the highest term) corresponding to each digit of the received string str1', an irreducible polynomial p1' with a highest term coefficient of 1 is generated. The second hash function h' is then generated using the irreducible polynomial p1' and the received input random number s1'. p1,s1 Then, obtain the first quantum random number rand1 generated locally and use the second hash function h' p1,s1The hash value of the first quantum random number rand1 and the second identifier sign1' is used to obtain the second hash value H2=h'. p1,s1 (rand1,sign1');

[0023] A5: Compare whether the latter half of the device ID, ID2, is consistent with the second hash value H2. If they are consistent, the comparison passes, indicating successful verification, and the device to be generated will store the device ID. If they are inconsistent, the comparison fails, indicating verification failure, and the device to be generated will reapply for a new device ID.

[0024] The present invention also includes a system for generating device IDs based on device information and quantum random numbers, the system comprising a device reading unit, a random number generation unit, a hash calculation unit, an ID generation unit, and an ID distribution unit connected in sequence;

[0025] The device reading unit is used to obtain hardware feature information and software feature information in the device to be generated ID, and to establish a first association relationship rel1 for the hardware feature information and software feature information, and generate a first identifier sign1 based on the first association relationship rel1;

[0026] The random number generation unit is used to negotiate with the device whose ID is to be generated to generate a first quantum random number rand1;

[0027] The hash calculation unit is used to perform hash calculation on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1;

[0028] The ID generation unit is used to perform an XOR operation between the first identifier sign1 and the first hash value H1 to obtain the device ID;

[0029] The ID distribution unit is used to distribute the device ID to the device whose ID needs to be generated.

[0030] The beneficial effects of this invention are:

[0031] (1) The device ID is associated with the hardware information and software information. Any replacement of the device will result in a different generated device ID, which effectively associates the device ID with the device and eliminates the possibility of counterfeiting or disguise. Moreover, the introduction of the association relationship makes the source combination of device ID generation more diverse. Apart from the system that generates the device ID, other third-party illegal devices will find it difficult to accurately determine which combination of association relationship is from the large amount of hardware information and software information. At the same time, the addition of quantum random numbers further ensures the privacy of the device ID, which cannot be known or forged by third parties.

[0032] (2) A verification code is added to the device ID. By using the authentication method in this invention, it is ensured that the device ID obtained by the device from the system that generates the device ID is not tampered with during the distribution process, thus ensuring the uniqueness of the device ID in subsequent use. Attached Figure Description

[0033] Figure 1 This is a schematic diagram of the system for generating device IDs based on device information and quantum random numbers according to the present invention;

[0034] Figure 2 This is a schematic diagram of the participants in the method of the present invention;

[0035] Figure 3 This is a schematic diagram of the method flow of the present invention.

[0036] Figure 4 This is a schematic diagram of the device ID structure;

[0037] Figure 5 This is a diagram illustrating the length of the device ID. Detailed Implementation

[0038] The present invention will be further described below with reference to the accompanying drawings and embodiments:

[0039] The introduction of device IDs can help improve the security and reliability of quantum-safe network systems, prevent unauthorized devices from accessing the network, and reduce data leaks and device failures. However, existing device IDs are written into the device during manufacturing and are publicly available numbers. This allows malicious users to modify or copy the device ID to impersonate a device and intrude into the communication network, causing security problems such as the leakage of communication information. Therefore, how to generate unique and privacy-preserving device IDs for communication devices in quantum-safe networks has become an urgent technical problem to be solved in this field.

[0040] In view of this, this embodiment proposes a system for generating device IDs based on device information and quantum random numbers. This system is communicatively connected to the device whose ID needs to be generated, such as... Figure 1 As shown, the system includes a device reading unit 1, a random number generation unit 2, a hash calculation unit 3, an ID generation unit 4, and an ID distribution unit 5 connected in sequence.

[0041] Device reading unit 1 is used to acquire hardware and software characteristic information of the device whose ID is to be generated. The hardware characteristic information includes the device CPU serial number obtained through the device's operating system instructions, the device motherboard serial number obtained through the BIOS (Basic Input / Output System) interface, etc. The software characteristic information includes the operating system's UUID (Universally Unique Identifier), installation time, and other operating system characteristics. A first association relationship rel1 is established between the hardware and software characteristic information, for example: first association rel1 = (hardware characteristic information, software characteristic information) = (CPU serial number, operating system UUID), and a first identifier sign1 is generated based on the first association relationship rel1.

[0042] The random number generation unit 2 is used to negotiate with the device whose ID is to be generated to generate a first quantum random number rand1. The first quantum random number rand1 indirectly guarantees the uniqueness and privacy of the device ID.

[0043] Hash calculation unit 3 is used to perform hash calculation on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1. The hash function used for hash calculation is generated by an irreducible polynomial and the input random number.

[0044] ID generation unit 4 is used to perform an XOR operation on the first identifier sign1 and the first hash value H1 to obtain the device ID. The device ID includes an ID content part and a check code. The data in the ID content part is the result of the XOR operation. The check code can use the first hash value H1 as the data in the check code, or it can use a CRC check code.

[0045] ID distribution unit 5 is used to distribute device IDs to devices whose IDs are to be generated.

[0046] The device ID generation system of the present invention maps the device ID to the association between hardware information and software information. At the same time, the addition of quantum random numbers further ensures the privacy of the device ID, making it impossible for third parties to know or forge it. Moreover, the addition of a check code to the device ID ensures that the obtained device ID is not tampered with during the distribution process.

[0047] This embodiment also proposes a method for generating device IDs based on device information and quantum random numbers, such as... Figure 2 and Figure 3 As shown, the participants in the method include the system that generates the device ID and the device whose ID is to be generated. The specific method includes the following steps:

[0048] (1) Obtain at least one hardware feature information and at least one software feature information from the device to be generated with ID, establish a first association relationship rel1 for the hardware feature information and the software feature information, and generate a first identifier sign1 based on the first association relationship rel1;

[0049] The hardware characteristics of the device to be ID generated include the CPU serial number and host number obtained through the device's operating system instructions, the board serial number obtained through the BIOS (Basic Input / Output System) interface, the MAC address read through the device's network port information, and the hard drive serial number read through the device's operating system API interface, etc. The software characteristics of the device to be ID generated include the operating system UUID (Universally Unique Identifier) ​​and operating system characteristics such as the operating system installation time, etc., and may also include application characteristics such as the list of applications installed on the device.

[0050] The identification method for the first association rel1 can be using information pairs, such as: first association rel1 = (hardware feature information, software feature information). For example, rel1 = (CPU serial number, operating system UUID) represents the association between the hardware feature information CPU serial number of the device to be generated and the software feature information operating system UUID of the device to be generated. The introduction of association makes the source combination of device ID generation more diverse. Apart from the system that generates the device ID, it is difficult for other third-party illegal devices to accurately determine which combination of association relationship is being generated from the numerous hardware and software information.

[0051] The first identifier can be generated in the traditional way based on a single piece of information (such as MAC address, CPU serial number, etc.) to generate a traditional device ID. The first identifier sign1 can be a string. The first identifier sign1 only corresponds to the first association rel1 and cannot correspond to any other association.

[0052] (2) Then, the system that generates the device ID negotiates with the device whose ID is to be generated to generate a first quantum random number rand1 based on the first identifier sign1, and performs a hash calculation based on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1. The specific process is as follows:

[0053] 1) The system that generates the device ID encodes the first identifier sign1 in string format into an integer sequence sequ, and reads the length L of the integer sequence sequ;

[0054] 2) Then, the system that generates the device ID locally generates an irreducible polynomial p1 and an input random number s1 based on the length L. It records the string str1 consisting of the coefficients of each term in the irreducible polynomial p1 except for the highest term. It then uses the irreducible polynomial p1 and the input random number s1 to generate the first hash function h. p1,s1 Using the first hash function h p1,s1 The hash value of the first quantum random number rand1 and the first identifier sign1 is used to obtain the first hash value H1=h. p1,s1 (rand1,sign1), where the length of the first hash value H1 is L.

[0055] (3) Perform an XOR operation between the first identifier sign1 and the first hash value H1 to obtain the device ID, and send the device ID to the device whose ID is to be generated;

[0056] Since hash values ​​are essentially integers, the XOR operation performed in this step actually means that the object of the XOR operation with the first hash value H1 is the integer sequence sequ obtained by encoding the first identifier sign1. That is, the first hash value H1 and the integer sequence sequ obtained by encoding the first identifier sign1 are XORed.

[0057] To ensure that the device receiving the device ID can perform a verification operation, such as... Figure 4 As shown, the device ID includes an ID content part and a check code. The data in the ID content part is the result of an XOR operation, i.e., sequ⊕H1. In this embodiment, the check code is the first hash value H1. Of course, the data in the check code can also be a CRC check code, and this invention does not limit this.

[0058] After the device to be generated receives the device ID, a verification operation needs to be performed in the next step to ensure the immutability of the received device ID.

[0059] (4) After receiving the device ID, the device to be generated performs a verification operation. If the verification is successful, the device ID is stored; otherwise, the verification fails and the device to be generated applies for a new device ID.

[0060] The specific process of performing the verification operation is as follows:

[0061] A1: The device to be generated obtains the relevant parameters of the device ID from the system that generates the device ID, namely the length L, the string str1', and the input random number s1'. Then, it performs a verification operation based on these parameters: First, the device to be generated checks whether the length of the received device ID is 2L. If it is, it continues to the next step of the verification operation; otherwise, the verification fails and it re-applies for a new device ID from the system that generates the device ID.

[0062] A2: As Figure 5 As shown, the device to be generated will separate the first half of the device ID, ID1, which is of length L, and perform an XOR operation with the second half of the device ID, ID2, which is the first hash value H1, to obtain the integer sequence sequ.

[0063] A3: Decode the integer sequence sequ to obtain the second identifier sign1';

[0064] A4: Next, the device to be generated with an ID generates an irreducible polynomial p1' with a coefficient of 1 for each term of the polynomial except for the highest term, based on the coefficients of each term of the polynomial corresponding to each digit of the received string str1'. It then uses the irreducible polynomial p1' and the received input random number s1' as parameters to generate a second hash function h'. p1,s1 Then, obtain the first quantum random number rand1 generated locally and use the second hash function h' p1,s1 The hash value of the first quantum random number rand1 and the second identifier sign1' is used to obtain the second hash value H2=h'. p1,s1 (rand1,sign1');

[0065] A5: Compare the latter half of the device ID, ID2, with the second hash value H2. If they match, the comparison passes, indicating successful verification, and the device to be generated stores the device ID. If they do not match, the comparison fails, indicating verification failure, and the device to be generated requests a new device ID from the system that generates device IDs. Thus, the system that generates device IDs has generated a unique and private device ID for the device to be generated, with its uniqueness and privacy guaranteed by the first quantum random number rand1 negotiated by both parties.

[0066] This invention establishes a mapping between device IDs and hardware and software information. Replacing any aspect of the device will result in a different generated device ID, effectively linking the device ID to the device and eliminating the possibility of counterfeiting or forgery. Simultaneously, the inclusion of quantum random numbers further ensures the privacy of the device ID, preventing it from being known or forged by third parties. Furthermore, this invention incorporates a verification code into the device ID. By using the authentication method described in this invention, it ensures that the device ID obtained from the system that generates the device ID has not been tampered with during the distribution process, guaranteeing the uniqueness of the device ID in subsequent use.

Claims

1. A method for generating device IDs based on device information and quantum random numbers, characterized in that, The method includes the following steps: (1) Obtain at least one hardware feature information and at least one software feature information from the device to be generated with ID, establish a first association relationship rel1 for the hardware feature information and the software feature information, and generate a first identifier sign1 based on the first association relationship rel1; (2) Then, negotiate with the device to generate the ID to generate a first quantum random number rand1, and perform a hash calculation based on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1; (3) Perform an XOR operation between the first identifier sign1 and the first hash value H1 to obtain the device ID, and send the device ID to the device whose ID is to be generated; (4) After receiving the device ID, the device to be generated performs a verification operation. If the verification is successful, the device ID is stored; otherwise, the verification fails and the device to be generated applies for a new device ID.

2. The method for generating a device ID based on device information and quantum random numbers according to claim 1, characterized in that: The hardware characteristics include the CPU serial number, host number, board serial number, MAC address, and hard disk serial number of the device to be generated with an ID; the software characteristics include the operating system UUID and operating system installation time of the device to be generated with an ID.

3. The method for generating device IDs based on device information and quantum random numbers according to claim 1, characterized in that: The first association relationship rel1 = (hardware feature information, software feature information); the first identifier sign1 is a string.

4. The method for generating device IDs based on device information and quantum random numbers according to claim 1, characterized in that: The specific process of obtaining the first hash value H1 by hash calculation based on the first quantum random number rand1 and the first identifier sign1 is as follows: 1) Encode the first identifier sign1 in string format into an integer sequence sequ, and read the length L of the integer sequence sequ; 2) Locally generate an irreducible polynomial p1 and an input random number s1 based on length L. Record the string str1 consisting of the coefficients of each term in the irreducible polynomial p1 except for the highest term. Use the irreducible polynomial p1 and the input random number s1 to generate the first hash function h. p1,s1 Using the first hash function h p1,s1 The hash value of the first quantum random number rand1 and the first identifier sign1 is used to obtain the first hash value H1=h. p1,s1 (rand1,sign1), where the length of the first hash value H1 is L.

5. The method for generating a device ID based on device information and quantum random numbers according to claim 4, characterized in that: The XOR operation refers to performing an XOR operation between the first hash value H1 and the integer sequence sequ obtained by encoding the first identifier sign1.

6. The method for generating a device ID based on device information and quantum random numbers according to claim 4, characterized in that: The device ID includes an ID content part and a check code, wherein the ID content part is the result of an XOR operation, and the check code is the first hash value H1.

7. The method for generating a device ID based on device information and quantum random numbers according to claim 6, characterized in that: The specific process for performing the verification operation is as follows: A1: The device to be generated obtains the relevant parameters of the device ID, namely the length L, the string str1', and the input random number s1'. Then, it checks whether the length of the received device ID is 2L. If it is, it continues to the next step to perform the verification operation; otherwise, the verification fails and a new device ID is requested. A2: For the device to generate an ID, the first half of the device ID with a length of L, ID1, is separated out. The second half of the device ID with a length of L, ID2, i.e., the first hash value H1, is then XORed with the first half ID1 to obtain the integer sequence sequ. A3: Decode the integer sequence sequ to obtain the second identifier sign1'; A4: Next, based on the coefficients of each term of the polynomial (excluding the highest term) corresponding to each digit of the received string str1', an irreducible polynomial p1' with a highest term coefficient of 1 is generated. The second hash function h' is then generated using the irreducible polynomial p1' and the received input random number s1'. p1,s1 Then, obtain the first quantum random number rand1 generated locally through negotiation, and use the second hash function h' p1,s1 The hash value of the first quantum random number rand1 and the second identifier sign1' is used to obtain the second hash value H2=h'. p1,s1 (rand1,sign1'); A5: Compare whether the latter half of the device ID, ID2, is consistent with the second hash value H2. If they are consistent, the comparison passes, indicating successful verification, and the device to be generated will store the device ID. If they are inconsistent, the comparison fails, indicating verification failure, and the device to be generated will reapply for a new device ID.

8. A system based on the method for generating device IDs based on device information and quantum random numbers as described in any one of claims 1 to 7, characterized in that: The system includes a device reading unit, a random number generation unit, a hash calculation unit, an ID generation unit, and an ID distribution unit connected in sequence. The device reading unit is used to obtain hardware feature information and software feature information in the device to be generated ID, and to establish a first association relationship rel1 for the hardware feature information and software feature information, and generate a first identifier sign1 based on the first association relationship rel1; The random number generation unit is used to negotiate with the device whose ID is to be generated to generate a first quantum random number rand1; The hash calculation unit is used to perform hash calculation on the first quantum random number rand1 and the first identifier sign1 to obtain the first hash value H1; The ID generation unit is used to perform an XOR operation between the first identifier sign1 and the first hash value H1 to obtain the device ID; The ID distribution unit is used to distribute the device ID to the device whose ID needs to be generated.

Images