Encryption communication method, communication node, medium and program product

Abstract

The embodiment of the invention discloses an encryption communication method, a communication node, a medium and a program product. Comprising the following steps: synchronously acquiring a second public key of a second communication node through a key of the second communication node, and generating a common key according to the second public key and a first private key of a first communication node; processing the to-be-sent message through a half-fold spiral splitting algorithm, and determining a first half-fold spiral fingerprint; the to-be-sent message is a generative message; constructing a target ciphertext according to the common key, the first private key, the first folded and half spiral fingerprint and the to-be-sent message, and sending the target ciphertext to the second communication node; and receiving and verifying the ciphertext feedback message, and determining an encrypted communication result according to an obtained verification result. According to the invention, the tampering resistance of the message needing to be transmitted in the encryption communication process is improved, the integrity of the transmitted information in the encryption communication process is further ensured through the verification of the half-folded spiral fingerprint, and the security of the whole information transmission of the communication system is improved.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to an encrypted communication method, communication node, medium, and program product. Background Technology

[0002] With the continuous in-depth research and exploration of artificial intelligence applications, artificial intelligence agents, as intelligent agents that can autonomously perceive the environment, plan and make decisions, and call tools to execute tasks, are becoming more and more powerful and their application scenarios are becoming more and more diversified. Multiple artificial intelligence agents have also been able to collaborate to complete a complex event.

[0003] The current multi-agent coordination refers to a systematic technology in which multiple AI agents with autonomous decision-making capabilities work together to complete complex tasks through a collaborative mechanism. It can be applied to communication systems based on role division and dynamic negotiation mechanisms. Each AI agent has local perception capabilities, achieves global goal optimization through information sharing, and realizes communication between AI agents by sharing information among them.

[0004] However, since AI agent communication systems based on role division and dynamic negotiation mechanisms use information sharing to achieve communication between AI agents, there are still security risks in the process of information transmission and processing. For example, if a malicious AI agent interferes with the communication process, the coordination between multiple AI agents will fail, bringing huge security risks to the entire communication system. Summary of the Invention

[0005] This invention provides an encrypted communication method, communication node, medium, and program product. It introduces a common key and a binary spiral splitting algorithm into the encrypted communication process between artificial intelligence agents. Through secondary encryption, multiple artificial intelligence agents can communicate encryptedly, and the integrity of the encrypted communication is ensured through binary spiral fingerprint verification, thereby improving the security of information transmission in the communication system.

[0006] In a first aspect, embodiments of the present invention provide an encrypted communication method, applied to a first communication node, comprising: The second public key of the second communication node is obtained by synchronizing the key with the second communication node, and a common key is generated based on the second public key and the first private key of the first communication node. The message to be sent is processed using a binary spiral splitting algorithm to determine the first binary spiral fingerprint; the message to be sent is a generative message. The target ciphertext is constructed based on the common key, the first private key, the first helical fingerprint, and the message to be sent, and then sent to the second communication node. Receive and verify the encrypted feedback message, and determine the encrypted communication result based on the verification result.

[0007] Secondly, embodiments of the present invention also provide an encrypted communication method, applied to a second communication node, comprising: The first public key of the first communication node is obtained by synchronizing the key with the first communication node, and a common key is generated based on the first public key and the second private key of the second communication node. Receive the target ciphertext, and use the first public key and the common key to sign, verify and decrypt the target ciphertext to determine the message to be received; the message to be received is a generative message. The received message is processed using a binary spiral splitting algorithm to determine the second binary spiral fingerprint; The second half-helix fingerprint is verified by the first half-helix fingerprint in the target ciphertext. If the verification is successful, the ciphertext feedback message constructed based on the second private key, the first half-helix fingerprint, and the first signature in the target ciphertext is sent to the first communication node.

[0008] Thirdly, embodiments of the present invention also provide a communication node, including: a memory, a processor, a program stored in the memory and executable on the processor, and a data bus for implementing communication between the processor and the memory. When the program is executed by the processor, it implements the encrypted communication method provided in any embodiment of the present invention.

[0009] Fourthly, embodiments of the present invention also provide a storage medium containing computer-executable instructions, which, when executed by a computer processor, enable the computer processor to execute the encrypted communication method of any embodiment of the present invention.

[0010] Fifthly, embodiments of the present invention also provide a computer program product, including a computer program, which, when executed by a processor, is used to perform the encrypted communication method of any embodiment of the present invention.

[0011] This invention provides an encrypted communication method, communication node, medium, and program product. The method involves obtaining the second public key of a second communication node through key synchronization with the second communication node, generating a common key based on the second public key and the first private key of a first communication node, processing the message to be sent using a folded-helix splitting algorithm to determine a first folded-helix fingerprint, identifying the message as a generative message, constructing a target ciphertext based on the common key, the first private key, the first folded-helix fingerprint, and the message to be sent, and sending the target ciphertext to the second communication node, receiving and verifying the ciphertext feedback message, and determining the encrypted communication result based on the verification result. By adopting the above technical solution, in a communication system composed of multiple AI agents, the confidentiality of communication between two AI agents that need to communicate with each other is ensured by constructing a common key. A binary spiral fingerprint verification is then superimposed on this key, integrating the role of the AI ​​agent's private key with the binary spiral fingerprint verification method. In addition to encryption based on the common key, the binary spiral fingerprint obtained by the binary spiral splitting algorithm is further processed using the first private key, improving the immutability of the transmitted messages during encrypted communication. Furthermore, the binary spiral fingerprint verification ensures the integrity of the information transmitted during encrypted communication, thus enhancing the overall information transmission security of the communication system.

[0012] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of this application, nor is it intended to limit the scope of this application. Other features of this application will become readily apparent from the following description. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0014] Figure 1 A flowchart of an encrypted communication method provided in Embodiment 1 of the present invention; Figure 2 This is a flowchart of an encrypted communication method provided in Embodiment 2 of the present invention; Figure 3 A flowchart of an encrypted communication method provided in Embodiment 3 of the present invention; Figure 4 A flowchart of an encrypted communication method provided in Embodiment 4 of the present invention; Figure 5 This is a schematic diagram of the structure of an encrypted communication device provided in Embodiment 5 of the present invention; Figure 6This is a schematic diagram of the structure of an encrypted communication device provided in Embodiment Six of the present invention; Figure 7 This is a schematic diagram of the structure of a communication node provided in Embodiment 7 of the present invention. Detailed Implementation

[0015] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0016] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0017] Example 1 Figure 1 This is a flowchart illustrating an encrypted communication method provided in Embodiment 1 of the present invention. This embodiment is applicable to communication systems with multiple AI agents, specifically for encrypted communication between different AI agents. The method can be executed by an encrypted communication device, which can be implemented in hardware and / or software and integrated on a communication node. The method can be applied to a first communication node, which can be a device acting as an information sender in the communication system, such as an AI agent acting as an information sender in a multi-AI agent communication system. This embodiment does not impose any limitations on this. It is understood that the same AI agent in a multi-AI agent communication system can act as both an information sender and an information receiver in different communication needs. This embodiment does not impose any limitations on this.

[0018] like Figure 1 As shown in the figure, an encrypted communication method provided by an embodiment of the present invention specifically includes the following steps: S101. Obtain the second public key of the second communication node by synchronizing the key with the second communication node, and generate a common key based on the second public key and the first private key of the first communication node.

[0019] In this embodiment, the second communication node can be specifically understood as a communication node corresponding to the first communication node, acting as an information receiver. For example, in a multi-AI agent communication system, it can be understood as an AI agent acting as an information receiver.

[0020] In this embodiment, the second public key can be specifically understood as the public part of the key pair generated by the second communication node based on the asymmetric encryption algorithm, which can be used for encryption or signature verification.

[0021] In this embodiment, the first private key can be understood as the confidential part of the key pair generated by the first communication node based on the asymmetric encryption algorithm, which can be used for decryption or signature generation.

[0022] In this embodiment, the common key can be understood as the same key used by both communicating parties in a symmetric encryption algorithm. It is understood that the common key typically needs to be securely distributed using a public key for asymmetric encryption so that both communicating parties can generate the same common key. For example, the aforementioned symmetric encryption algorithm can be the Advanced Encryption Standard (AES) algorithm, or other types of symmetric encryption algorithms; this embodiment of the invention does not impose any limitations on this.

[0023] Specifically, the public keys of the first and second communication nodes, which need to conduct encrypted communication, are synchronized using an asymmetric encryption algorithm. This allows the first communication node to obtain the second public key of the second communication node, and the second communication node to obtain the first public key of the first communication node. Then, based on the obtained second public key and its own first private key, the first communication node can independently calculate the common key according to the key negotiation protocol.

[0024] Optionally, key synchronization with the second communication node includes: Send the first public key of the first communication node to the second communication node; Receive the second public key sent by the second communication node.

[0025] It is understood that the above sending and receiving steps can be performed simultaneously or in any order, and the embodiments of the present invention do not impose any restrictions on this.

[0026] For example, the relationship between public and private keys between the same communication nodes, and the generation of a common key based on the public and private keys of different nodes, can be represented by elliptic curve cryptography. Assuming the first public key of the first communication node is represented as Apk and the first private key as Ask, the relationship between the first public key and the first private key can be represented as Apk = G1Ask, where G1 can be understood as the base point of the elliptic curve in elliptic curve cryptography, which can be obtained by cryptographic standards such as secp256r1 or secp256k1. Assuming the second public key of the second communication node is represented as Bpk and the second private key as Bsk, the relationship between the second public key and the second private key can also be represented as Bpk = G1Bsk. After the first communication node obtains the second public key Bpk of the second communication node, it can generate a common key based on its own Ask and Bpk. The calculation method of the common key MKey can be expressed as: M key=(Bpk)Ask=(G1Bsk)Ask=G1Bsk*Ask; Similarly, after obtaining the first public key Apk from the first communication node, the second communication node can generate a common key based on its own Bsk and Apk. The calculation method for the common key M key can be expressed as follows: M key=(Apk)Bsk=(G1Ask)Bsk=G1Ask*Bsk; As can be seen from the two formulas above, the first and second communication nodes can calculate the exact same common key based on the obtained public key of the other side and their own private key.

[0027] S102. The message to be sent is processed by the folded spiral splitting algorithm to determine the first folded spiral fingerprint.

[0028] Among them, the message to be sent is a generative message.

[0029] In this embodiment, the message to be sent can be understood as containing the message itself that the first communication node needs to transmit to the second communication node, as well as the message related to cryptographic security rules. The message to be sent can be a generative message generated by the artificial intelligence agent.

[0030] In this embodiment, the binary spiral splitting algorithm can be understood as a feature extraction and matching algorithm for target data. Its core lies in the binary recursive partitioning of the target data to achieve multi-scale feature extraction, as well as spiral path feature traversal centered on the core data point. In this embodiment of the invention, it can be used as an authentication method for the data to be transmitted before encryption during encrypted communication, so as to ensure the integrity of encrypted communication.

[0031] In this embodiment, the first folded spiral fingerprint can be specifically understood as fingerprint information obtained by using the message to be sent by the first communication node as its own fingerprint, and then processing it with a folded spiral splitting algorithm to extract feature templates, which can be used as a basis for identity comparison.

[0032] Specifically, the message that the first communication node needs to transmit to the second communication node and that conforms to cryptographic security rules is identified as the message to be sent. This message to be sent is then processed as the fingerprint of the first communication node using a binary spiral splitting algorithm, and the result of the processing is identified as the first binary spiral fingerprint.

[0033] For example, the following describes the specific processing method for the message to be sent based on the binary spiral splitting algorithm. Assume the message to be sent is represented by K, and the first binary spiral fingerprint is represented by Kr. The binary spiral splitting algorithm can process the message K into a 128-bit first binary spiral fingerprint Kr using the MimcSplit function, which is used for feature value splitting and fragment encryption. It is understandable that for brute-force attacks, the MimcSplit function must be a synthesis of three calculation modes: linear transformation, nonlinear transformation, and round key addition. The specific function formula can be expressed as Kr = MimcSplit(K). The specific calculation steps of the MimcSplit function are described below: 1) First, based on the binary spiral splitting algorithm, 256 random constants C1, C2, ..., C256 and a 128-bit prime number P are selected for the communication system of multiple AI agents. The selected 256 random constants C1, C2, ..., C256 and the 128-bit prime number P are then distributed to each AI agent (i.e., the first communication node and the second communication node proposed in this embodiment of the invention), so that each AI agent can use these constants as the standard input of the MimcSplit function, and these 256 random constants will remain unchanged.

[0034] 2) Split K into two parts, where the left data is represented as Kleft and the right data is represented as Kright.

[0035] 3) Construct the loop function for the bi-half spiral fingerprint: result = CircleSplit(Xleft, Xright).

[0036] The calculation steps of result = CircleSplit(Xleft, Xright) can be represented by the following pseudocode: Let i=0, loop 256 times. { M=Xright+((Xleft+Ci)3)mod P; Xright = Xleft; Xleft=M; i = i + 1; } result=Xleft Where (Xleft+Ci)3 is equivalent to a nonlinear transformation, Ci is equivalent to round key addition, and mod P is equivalent to a linear transformation.

[0037] 4) Substitute Kleft and Kright into the above function to calculate the first half-spiral fingerprint Kr=CircleSplit(Kleft, Kright).

[0038] S103. Construct the target ciphertext based on the common key, the first private key, the first helical fingerprint, and the message to be sent, and send the target ciphertext to the second communication node.

[0039] In this embodiment, the target ciphertext can be specifically understood as the ciphertext of a message sent from the first communication node to the second communication node after fingerprint addition and message encryption, which meets the requirements of encrypted communication integrity and security.

[0040] Specifically, the message to be sent is encrypted using a common key, the first folded helical fingerprint is signed using a first private key, and the information obtained after encryption and signing is combined in a pre-defined format to form a target ciphertext that meets the requirements of encrypted communication integrity and security. The resulting target ciphertext is then sent to the second communication node.

[0041] S104. Receive and verify the ciphertext feedback message, and determine the encrypted communication result based on the obtained verification result.

[0042] In this embodiment, the ciphertext feedback message can be specifically understood as a feedback message given by the second communication node to the first communication node after successfully receiving the target ciphertext and completing the verification, indicating that it has successfully completed the message reception.

[0043] In this embodiment, the encrypted communication result can be specifically understood as the result information used to indicate whether the encrypted communication between the first communication node and the second communication node has been successfully completed.

[0044] Specifically, when the first communication node receives the ciphertext feedback message from the second communication node, it can be assumed that the second communication node has successfully received the target ciphertext it sent and verified that the reception was correct. At this point, the first communication node will verify the ciphertext feedback message given by the second communication node to determine whether it is indeed a message fed back by the second communication node that received the target ciphertext. If the verification is successful, it means that the second communication node has successfully received the message to be sent by the first communication node, and the encrypted communication result can be determined to be successful. Otherwise, if the verification fails or the first communication node fails to receive the ciphertext feedback message, it can be assumed that the second communication node has not successfully received the message to be sent by the first communication node, and the encrypted communication result can be determined to be failed.

[0045] The technical solution of this embodiment obtains the second public key of the second communication node through key synchronization with the second communication node, generates a common key based on the second public key and the first private key of the first communication node, processes the message to be sent using a folded spiral splitting algorithm to determine the first folded spiral fingerprint, the message to be sent is a generative message, constructs the target ciphertext based on the common key, the first private key, the first folded spiral fingerprint and the message to be sent, and sends the target ciphertext to the second communication node, receives and verifies the ciphertext feedback message, and determines the encrypted communication result based on the obtained verification result. By adopting the above technical solution, in a communication system composed of multiple AI agents, the confidentiality of communication between two AI agents that need to communicate with each other is ensured by constructing a common key. A binary spiral fingerprint verification is then superimposed on this key, integrating the role of the AI ​​agent's private key with the binary spiral fingerprint verification method. In addition to encryption based on the common key, the binary spiral fingerprint obtained by the binary spiral splitting algorithm is further processed using the first private key, improving the immutability of the transmitted messages during encrypted communication. Furthermore, the binary spiral fingerprint verification ensures the integrity of the information transmitted during encrypted communication, thus enhancing the overall information transmission security of the communication system.

[0046] Example 2 Figure 2This is a flowchart of an encrypted communication method provided in Embodiment 2 of the present invention. The technical solution of this embodiment further optimizes the above-mentioned optional technical solutions. Given a common key, a first private key, a first helical fingerprint, and a message to be sent, encryption of the message to be sent is performed using the common key, and signing of the first helical fingerprint is performed using the first private key. The combined effect of the common key and the first private key enhances the immutability of the transmitted message during encrypted communication. Upon receiving a ciphertext feedback message from the second communication node, signature verification of the ciphertext feedback message can be performed using the synchronized second public key to determine whether the second communication node has successfully received the encrypted communication message. Further verification of the helical fingerprint during the signature verification process ensures the integrity of the information transmitted during encrypted communication, thereby improving the overall security of information transmission in the communication system.

[0047] like Figure 2 As shown in the figure, an encrypted communication method provided by an embodiment of the present invention specifically includes the following steps: S201. Obtain the second public key of the second communication node by synchronizing the key with the second communication node, and generate a common key based on the second public key and the first private key of the first communication node.

[0048] S202. The message to be sent is processed by the folded spiral splitting algorithm to determine the first folded spiral fingerprint.

[0049] Among them, the message to be sent is a generative message.

[0050] S203. Encrypt the message to be sent using the common key to determine the ciphertext of the message.

[0051] Specifically, the message to be sent is encrypted using a symmetric encryption algorithm with a shared key, and the encrypted message is determined as the ciphertext. For example, the symmetric encryption algorithm can be AES, or other symmetric encryption algorithms; this embodiment of the invention does not limit the specific algorithm used.

[0052] S204. Sign the first helical fingerprint using the first private key to determine the first signature.

[0053] In this embodiment, the first signature can be specifically understood as the signature value obtained by the first communication node signing the feature string used for authentication using its own first private key.

[0054] For example, taking elliptic curve cryptography as an example, the method of signing the first folded spiral fingerprint Kr using the first private key Ask can include: 1) Perform a hash operation on the fingerprint feature string corresponding to the first folded spiral fingerprint to obtain the fingerprint hash value h; 2) Use the randomly generated integer k (1 < k < n, where n is the order of G1) that conforms to the elliptic curve specification to perform elliptic curve scalar multiplication on the elliptic curve base point G1, and determine the abscissa value of the obtained point on the elliptic curve as the first part r of the first signature; 3) Calculate the multiplicative inverse of the random number k within the finite field of the elliptic curve to obtain k -1 ; 4) Combine the first private key Ask, the fingerprint hash value h, the first part r of the first signature, and k -1 to determine the second part s of the first signature, where the calculation method of s can be: s = k -1 *(h + Ask * r) mod n; 5) Combine the obtained first part r and the second part s, and determine the obtained (r, s) as the first signature obtained by the first private key signing the first halved spiral fingerprint.

[0055] S205: Combine the message ciphertext, the first halved spiral fingerprint, and the first signature to determine the target ciphertext.

[0056] Exemplarily, assume that the message ciphertext can be represented as Q, the first halved spiral fingerprint can be represented as Kr, and the first signature can be represented as KrA. Combining them in a preset form can obtain the target ciphertext that the first communication node needs to send to the second communication node. For example, the combination method of the message ciphertext, the first halved spiral fingerprint, and the first signature can be {Q, Kr, KrA}. It can be understood that the combination method can be adjusted arbitrarily according to the actual situation, and the embodiments of the present invention do not limit this.

[0057] S206: The second communication node receives the ciphertext feedback message.

[0058] Among them, the ciphertext feedback message includes the first halved spiral fingerprint, the first signature, and the second signature.

[0059] In this embodiment, the second signature can be specifically understood as the signature value obtained by the second communication node signing with the second private key degree used as the identity authentication feature string it has.

[0060] It can be understood that if the second communication node successfully completes the reception and verification of the target ciphertext, the halved spiral fingerprint obtained by its parsing and processing for identity comparison should be consistent with the first halved spiral fingerprint. Therefore, when it feeds back to the first communication node, it can directly use the first halved spiral fingerprint as the information carried in the ciphertext feedback message without distinguishing the halved spiral fingerprint obtained by its parsing and the first halved spiral fingerprint.

[0061] S207. Verify the second signature using the second public key. If the verification result is a failure, the encrypted communication result is determined to be a failure; if the verification result is a success, the encrypted communication result is determined to be a success.

[0062] Specifically, since the second signature obtained by signing with the second private key can only be verified by the second public key corresponding to it from the same communication node, after receiving the ciphertext feedback message, the first communication node can verify the second signature carried in the ciphertext feedback message using the second public key. If the verification result is successful, it can be considered that the second communication node has indeed successfully received the target ciphertext and successfully parsed it, obtaining the message to be sent by the first communication node. At this time, the encrypted communication result can be determined as successful. If the verification result is unsuccessful, it can be considered that the communication node that sent the ciphertext feedback message is not the second communication node, that is, it can be considered that the second communication node has not successfully received the target ciphertext and successfully parsed it. At this time, the encrypted communication result can be determined as unsuccessful.

[0063] Optionally, after the first communication node confirms successful encrypted communication, to ensure the traceability of the communication process, after confirming the successful encrypted communication result, the process further includes: The encrypted message, the first helical fingerprint, the first signature, and the second signature are written into the blockchain to complete the recording of the encrypted communication process.

[0064] Following the example above, assuming the second signature can be represented as KrB, then {Q, Kr, KrA, KrB} can be written into the blockchain to record the current communication process between the first and second communication nodes, thus completing the encrypted communication between the first and second communication nodes.

[0065] The technical solution of this embodiment, given a common key, a first private key, a first helical fingerprint, and the message to be sent, encrypts the message using the common key and signs the first helical fingerprint using the first private key. The combined effect of the common key and the first private key enhances the immutability of the transmitted message during encrypted communication. Upon receiving a ciphertext feedback message from the second communication node, the signature of the ciphertext feedback message can be verified using the synchronized second public key to determine whether the second communication node has successfully received the encrypted communication message. Further verification of the helical fingerprint during the signature verification process ensures the integrity of the information transmitted during encrypted communication, thus improving the overall security of the communication system's information transmission.

[0066] Example 3 Figure 3This is a flowchart of an encrypted communication method provided in Embodiment 3 of the present invention. This embodiment is applicable to communication systems with multiple AI agents, specifically for encrypted communication between different AI agents. The method can be executed by an encrypted communication device, which can be implemented in hardware and / or software and integrated on the communication node. The method can be applied to a second communication node, which can be a device acting as an information receiver in the communication system, such as an AI agent acting as an information receiver in a multi-AI agent communication system. This embodiment of the present invention does not impose any limitations on this method.

[0067] like Figure 3 As shown in the figure, an encrypted communication method provided by an embodiment of the present invention specifically includes the following steps: S301. Obtain the first public key of the first communication node by synchronizing the key with the first communication node, and generate a common key based on the first public key and the second private key of the second communication node.

[0068] Optionally, key synchronization with the first communication node includes: Send the second public key of the second communication node to the first communication node; Receive the first public key sent by the first communication node.

[0069] It is understandable that the key synchronization method between the second communication node and the first communication node, as well as the method of generating the common key, are the same. That is, the implementation method here is the same as in S101 above, and will not be repeated here.

[0070] S302. Receive the target ciphertext, and verify and decrypt the target ciphertext using the first public key and the common key to determine the message to be received.

[0071] Among them, the message to be received is a generative message.

[0072] In this embodiment, the message to be received can be specifically understood as the message that the first communication node hopes the second communication node will receive, which is obtained by decrypting the target ciphertext.

[0073] Specifically, the second communication node receives the encrypted target ciphertext from the first communication node. Based on a pre-obtained first public key, it verifies any signatures that may exist in the target ciphertext to determine if the target ciphertext was sent by the first communication node from which encrypted information needs to be transmitted. Then, based on the shared key, it decrypts the ciphertext within the target ciphertext that needs to be decrypted, obtaining the message that the first communication node expects the second communication node to receive. It is understandable that, similar to the message to be sent, the message to be received obtained by the second communication node after decryption should also be a generative message.

[0074] S303. The received message is processed using a folded-spiral splitting algorithm to determine the second folded-spiral fingerprint.

[0075] Specifically, since the fingerprints obtained after processing different messages using the folded spiral splitting algorithm will definitely be different, in order to ensure that the message to be received by the second communication node is indeed the message to be received sent by the first communication node, that is, to ensure the integrity of the message to be received in the encrypted communication process, the message to be received needs to be processed in the same way as the message to be sent using the folded spiral splitting algorithm, and the result of the processing is determined as the second folded spiral fingerprint.

[0076] S304. Verify the second half-helix fingerprint using the first half-helix fingerprint in the target ciphertext, and if the verification is successful, send the ciphertext feedback message constructed based on the second private key, the first half-helix fingerprint, and the first signature in the target ciphertext to the first communication node.

[0077] Specifically, by comparing and verifying the first and second helical fingerprints in the target ciphertext, if they match, the message to be sent and the message to be received are considered to be identical, meaning the first communication node has successfully encrypted the message transmission to the second communication node. At this point, the second communication node constructs a ciphertext feedback message based on the second private key, the first helical fingerprint, and the first signature in the target ciphertext to indicate successful message reception, and sends this ciphertext feedback message to the first communication node.

[0078] The technical solution of this embodiment obtains the first public key of the first communication node through key synchronization with the first communication node, and generates a common key based on the first public key and the second private key of the second communication node; receives the target ciphertext, and performs signature verification and decryption on the target ciphertext using the first public key and the common key to determine the message to be received; the message to be received is a generative message; processes the message to be received using a folded spiral splitting algorithm to determine the second folded spiral fingerprint; verifies the second folded spiral fingerprint using the first folded spiral fingerprint in the target ciphertext, and if the verification is successful, sends a ciphertext feedback message constructed based on the second private key, the first folded spiral fingerprint, and the first signature in the target ciphertext to the first communication node. By adopting the above technical solution, in a communication system composed of multiple AI agents, the confidentiality of communication between two AI agents that need to communicate with each other is ensured by constructing a common key. A binary spiral fingerprint verification is then superimposed on this key, integrating the role of the AI ​​agent's private key with the binary spiral fingerprint verification method. In addition to encryption based on the common key, a second private key is used to further process the binary spiral fingerprint obtained by the binary spiral decomposition algorithm, improving the immutability of the transmitted messages during encrypted communication. Furthermore, the binary spiral fingerprint verification ensures the integrity of the information transmitted during encrypted communication, thus enhancing the overall information transmission security of the communication system.

[0079] Example 4 Figure 4 This is a flowchart of an encrypted communication method provided in Embodiment 4 of the present invention. The technical solution of this embodiment further optimizes the above-mentioned optional technical solutions. After receiving the target ciphertext, the first signature in the target ciphertext is first verified using the first public key to confirm that the target ciphertext was indeed sent by the first communication node. Then, the message ciphertext in the target ciphertext is decrypted using the common key. The common key and the second public key work together to improve the immutability of the message to be transmitted during encrypted communication. The target ciphertext is then re-authenticated based on the regenerated second helical fingerprint, further ensuring the integrity of the information transmitted during encrypted communication. The second signature is obtained by signing the first helical fingerprint using the second private key and is fed back to the first communication node as part of the ciphertext feedback message. This allows the first communication node to also re-verify the identity information of the message recipient, ensuring the integrity of the information transmitted during encrypted communication and improving the overall security of information transmission in the communication system.

[0080] like Figure 4 As shown in the figure, an encrypted communication method provided by an embodiment of the present invention specifically includes the following steps: S401. Obtain the first public key of the first communication node by synchronizing the key with the first communication node, and generate a common key based on the first public key and the second private key of the second communication node.

[0081] S402, Receive target ciphertext.

[0082] S403. Verify the first signature in the target ciphertext using the first public key. If the verification result is a failure, determine the encrypted communication result as a failure. If the verification result is a success, decrypt the message ciphertext in the target ciphertext using the common key to determine the message to be received.

[0083] It is understood that the method of verifying the first signature in the target ciphertext using the first public key is consistent with the method of verifying the second signature using the second public key in S207 above, and will not be described again in this embodiment of the invention.

[0084] Specifically, the first signature in the target ciphertext is verified using the first public key. If the verification fails, it can be assumed that the target ciphertext was not sent by the first communication node, meaning that the encrypted communication failed between the first and second communication nodes, and the encrypted communication result can be determined as a failure. If the verification succeeds, since the first and second communication nodes have the same common key, the second communication node can use this common key to decrypt the ciphertext obtained by encrypting the message in the target ciphertext with the common key in the first communication node, and obtain the message to be received corresponding to the message to be sent in the first communication node.

[0085] S404. The received message is processed using the folded spiral splitting algorithm to determine the second folded spiral fingerprint.

[0086] S405. Compare the first and second folded spiral fingerprints in the target ciphertext. If the comparison results are the same, the verification is successful; if the comparison results are different, the encrypted communication result is determined to be a failure.

[0087] Specifically, the first and second helical fingerprints in the target ciphertext are compared. If the comparison results are the same, the message to be sent to generate the first helical fingerprint is considered to be consistent with the message to be received to generate the second helical fingerprint, and the second communication node has successfully completed the message reception in the encrypted transmission. At this time, the verification can be determined to be successful. If the comparison results are different, the message to be sent to generate the first helical fingerprint is considered to be inconsistent with the message to be received to generate the second helical fingerprint. The encrypted transmission between the first and second communication nodes may have incomplete data transmission. At this time, the encrypted communication result can be directly determined to be a failure.

[0088] S406. If the verification is successful, the first folded spiral fingerprint is signed using the second private key to determine the second signature.

[0089] Specifically, if the verification is successful, the second helical fingerprint is completely identical to the first helical fingerprint. Therefore, when sending feedback to the first communication node, the first helical fingerprint can be directly signed using the second private key of the second communication node to complete the determination of the second signature.

[0090] It is understandable that the way the second private key signs the first half-helix fingerprint is the same as the way the first private key signs the first half-helix fingerprint, and will not be repeated here.

[0091] S407. Combine the first folded spiral fingerprint, the first signature and the second signature in the target ciphertext to determine the ciphertext feedback message.

[0092] Following the example above, the combination of the first folded helical fingerprint, the first signature and the second signature in the target ciphertext can be {Kr, KrA, KrB}, or other combinations. This embodiment of the invention does not limit this.

[0093] S408. Send the encrypted feedback message to the first communication node.

[0094] The technical solution of this embodiment, upon receiving the target ciphertext, first verifies the first signature in the target ciphertext using the first public key to confirm that the target ciphertext was indeed sent by the first communication node. Then, it decrypts the message ciphertext in the target ciphertext using the common key. The common key and the second public key work together to enhance the immutability of the transmitted message during encrypted communication. Secondary authentication of the target ciphertext is performed based on the regenerated second helical fingerprint, further ensuring the integrity of the information transmitted during encrypted communication. A second signature is obtained by signing the first helical fingerprint using the second private key, and this signature is sent as part of the ciphertext feedback message to the first communication node. This allows the first communication node to also perform secondary verification of the message recipient's identity information, ensuring the integrity of the information transmitted during encrypted communication and improving the overall security of information transmission in the communication system.

[0095] Example 5 Figure 5 This is a schematic diagram of an encrypted communication device provided in Embodiment 5 of the present invention. The encrypted communication device can be set in a first communication node. The encrypted communication device includes: a key generation module 51, a first fingerprint determination module 52, a ciphertext sending module 53, and a communication result determination module 54.

[0096] The key generation module 51 is used to obtain the second public key of the second communication node by synchronizing with the key of the second communication node, and generate a common key based on the second public key and the first private key of the first communication node; the first fingerprint determination module 52 is used to process the message to be sent using a binary spiral splitting algorithm to determine the first binary spiral fingerprint; the message to be sent is a generative message; the ciphertext sending module 53 is used to construct the target ciphertext based on the common key, the first private key, the first binary spiral fingerprint and the message to be sent, and send the target ciphertext to the second communication node; the communication result determination module 54 is used to receive and verify the ciphertext feedback message, and determine the encrypted communication result based on the obtained verification result.

[0097] The technical solution of this embodiment ensures the confidentiality of communication between two AI agents that need to communicate with each other in a communication system composed of multiple AI agents by constructing a common key. A binary spiral fingerprint verification is then superimposed on this key, integrating the private key of the AI ​​agent with the binary spiral fingerprint verification method. In addition to encryption based on the common key, the binary spiral fingerprint obtained by the binary spiral decomposition algorithm is further processed using the first private key. This enhances the immutability of the transmitted messages during encrypted communication and further ensures the integrity of the information transmitted during encrypted communication through binary spiral fingerprint verification, thereby improving the overall information transmission security of the communication system.

[0098] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of this application, nor is it intended to limit the scope of this application. Other features of this application will become readily apparent from the following description.

[0099] Optionally, key synchronization with the second communication node includes: Send the first public key of the first communication node to the second communication node; Receive the second public key sent by the second communication node.

[0100] Optional, the encrypted transmission module 53 is specifically used for: The message to be sent is encrypted using a shared key to determine the ciphertext. The first signature is determined by signing the first helical fingerprint using the first private key. The target ciphertext is determined by combining the ciphertext, the first helical fingerprint, and the first signature.

[0101] Optionally, the communication result determination module 54 is specifically used for: The second communication node receives the encrypted feedback message; the encrypted feedback message includes the first helical fingerprint, the first signature, and the second signature; The second signature is verified using the second public key. If the verification result is a failure, the encrypted communication result is determined to be a failure; if the verification result is a success, the encrypted communication result is determined to be a success.

[0102] Optionally, after determining that the encrypted communication result is successful, the following steps are also included: The encrypted message, the first helical fingerprint, the first signature, and the second signature are written into the blockchain to complete the recording of the encrypted communication process.

[0103] The encrypted communication device provided in the embodiments of the present invention can execute the encrypted communication method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0104] Example 6 Figure 6 This is a schematic diagram of an encrypted communication device provided in Embodiment 6 of the present invention. The encrypted communication device can be set in a second communication node. The encrypted communication device includes: a key generation module 61, a received message determination module 62, a second fingerprint determination module 63, and a feedback message sending module 64.

[0105] The key generation module 61 is used to obtain the first public key of the first communication node through key synchronization with the first communication node, and generate a common key based on the first public key and the second private key of the second communication node; the message receiving determination module 62 is used to receive the target ciphertext, and perform signature verification and decryption on the target ciphertext using the first public key and the common key to determine the message to be received; the message to be received is a generative message; the second fingerprint determination module 63 is used to process the message to be received using a folded-helix splitting algorithm to determine the second folded-helix fingerprint; the feedback message sending module 64 is used to verify the second folded-helix fingerprint using the first folded-helix fingerprint in the target ciphertext, and if the verification is successful, send the ciphertext feedback message constructed based on the second private key, the first folded-helix fingerprint and the first signature in the target ciphertext to the first communication node.

[0106] The technical solution of this embodiment ensures the confidentiality of communication between two AI agents that need to communicate with each other in a communication system composed of multiple AI agents by constructing a common key. A binary spiral fingerprint verification is then superimposed on this key, integrating the role of the AI ​​agent's private key with the binary spiral fingerprint verification method. In addition to encryption based on the common key, a second private key is used to further process the binary spiral fingerprint obtained by the binary spiral decomposition algorithm, improving the immutability of the transmitted messages during encrypted communication. Furthermore, the binary spiral fingerprint verification ensures the integrity of the information transmitted during encrypted communication, thus enhancing the overall information transmission security of the communication system.

[0107] Optionally, key synchronization with the first communication node includes: Send the second public key of the second communication node to the first communication node; Receive the first public key sent by the first communication node.

[0108] Optionally, the message receiving determination module 62 is specifically used for: The first signature in the target ciphertext is verified using the first public key. If the verification result fails, the encrypted communication result is determined to be a failure. If the verification result is successful, the message ciphertext in the target ciphertext is decrypted using the common key to determine the message to be received.

[0109] Optionally, the feedback message sending module 64 is specifically used for: The first and second helical fingerprints in the target ciphertext are compared. If the comparison results are the same, the verification is considered successful; if the comparison results are different, the encrypted communication result is considered a failure. If the verification is successful, the first helical fingerprint is signed using the second private key to determine the second signature; The first half-helix fingerprint, the first signature and the second signature in the target ciphertext are combined to determine the ciphertext feedback message; Send the encrypted feedback message to the first communication node.

[0110] The encrypted communication device provided in the embodiments of the present invention can execute the encrypted communication method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0111] Example 7 Figure 7 This is a schematic diagram of a communication node provided in Embodiment 7 of the present invention. The communication node 70 can represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, communication base stations, and other suitable computers. The communication node 70 can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smartphones, wearable devices (such as helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0112] like Figure 7As shown, the communication node 70 includes at least one processor 71 and a memory, such as a read-only memory (ROM) 72 and a random access memory (RAM) 73, communicatively connected to the at least one processor 71. The memory stores computer programs executable by the at least one processor. The processor 71 can perform various appropriate actions and processes based on the computer program stored in the ROM 72 or loaded into the RAM 73 from storage unit 78. The RAM 73 can also store various programs and data required for the operation of the communication node 70. The processor 71, ROM 72, and RAM 73 are interconnected via a bus 74. An input / output (I / O) interface 75 is also connected to the bus 74.

[0113] Multiple components in communication node 70 are connected to I / O interface 75, including: input unit 76, such as keyboard, mouse, etc.; output unit 74, such as various types of monitors, speakers, etc.; storage unit 78, such as disk, optical disk, etc.; and communication unit 79, such as network card, modem, wireless transceiver, etc. Communication unit 79 allows communication node 70 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0114] Processor 71 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 71 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 71 performs the various methods and processes described above, such as encrypted communication methods.

[0115] In some embodiments, the encrypted communication method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 78. In some embodiments, part or all of the computer program may be loaded and / or installed on communication node 70 via ROM 72 and / or communication unit 79. When the computer program is loaded into RAM 73 and executed by processor 71, one or more steps of the encrypted communication method described above may be performed. Alternatively, in other embodiments, processor 71 may be configured to execute the encrypted communication method by any other suitable means (e.g., by means of firmware).

[0116] Optionally, embodiments of the present invention also provide a computer program product, including a computer program that, when executed by a processor, implements the encrypted communication method provided in any embodiment of the present invention.

[0117] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0118] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0119] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0120] To provide interaction with the user, the systems and techniques described herein can be implemented on a communication node having: a display device for displaying information to the user (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor); and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the communication node. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0121] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0122] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0123] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0124] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. An encrypted communication method, characterized in that, Applied to the first communication node, including: The second public key of the second communication node is obtained by synchronizing the key with the second communication node, and a common key is generated based on the second public key and the first private key of the first communication node. The message to be sent is processed using a binary spiral splitting algorithm to determine the first binary spiral fingerprint; the message to be sent is a generative message; The target ciphertext is constructed based on the common key, the first private key, the first helical fingerprint, and the message to be sent, and then the target ciphertext is sent to the second communication node. Receive and verify the encrypted feedback message, and determine the encrypted communication result based on the verification result.

2. The encrypted communication method according to claim 1, characterized in that, The key synchronization with the second communication node includes: Send the first public key of the first communication node to the second communication node; Receive the second public key sent by the second communication node.

3. The encrypted communication method according to claim 1, characterized in that, The step of constructing the target ciphertext based on the common key, the first private key, the first helical fingerprint, and the message to be sent includes: The message to be sent is encrypted using the shared key to determine the ciphertext of the message; The first signature is determined by signing the first helical fingerprint using the first private key. The message ciphertext, the first helical fingerprint, and the first signature are combined to determine the target ciphertext.

4. The encrypted communication method according to claim 1, characterized in that, The process of receiving and verifying the ciphertext feedback message, and determining the encrypted communication result based on the obtained verification result, includes: The second communication node receives a ciphertext feedback message; the ciphertext feedback message includes the first helical fingerprint, the first signature, and the second signature; The second signature is verified using the second public key. If the verification result is a failure, the encrypted communication result is determined to be a failure; if the verification result is a success, the encrypted communication result is determined to be a success.

5. The encrypted communication method according to claim 4, characterized in that, After determining that the encrypted communication result is successful, the following is also included: The encrypted message, the first helical fingerprint, the first signature, and the second signature are written into the blockchain to complete the recording of the encrypted communication process.

6. An encrypted communication method, characterized in that, Applied to the second communication node, including: The first public key of the first communication node is obtained by synchronizing the key with the first communication node, and a common key is generated based on the first public key and the second private key of the second communication node. Receive the target ciphertext, and verify and decrypt the target ciphertext using the first public key and the common key to determine the message to be received; the message to be received is a generative message. The message to be received is processed using a binary spiral splitting algorithm to determine the second binary spiral fingerprint; The second half-helix fingerprint is verified by the first half-helix fingerprint in the target ciphertext, and if the verification is successful, a ciphertext feedback message constructed based on the second private key, the first half-helix fingerprint and the first signature in the target ciphertext is sent to the first communication node.

7. The encrypted communication method according to claim 6, characterized in that, The key synchronization with the first communication node includes: Send the second public key of the second communication node to the first communication node; Receive the first public key sent by the first communication node.

8. The encrypted communication method according to claim 6, characterized in that, The step of signing, verifying, and decrypting the target ciphertext using the first public key and the common key to determine the message to be received includes: The first signature in the target ciphertext is verified using the first public key. If the verification result fails, the encrypted communication result is determined to be a failure. If the verification result is successful, the message ciphertext in the target ciphertext is decrypted using the common key to determine the message to be received.

9. The encrypted communication method according to claim 6, characterized in that, The step of verifying the second half-helix fingerprint using the first half-helix fingerprint in the target ciphertext, and, if the verification is successful, sending a ciphertext feedback message constructed based on the second private key, the first half-helix fingerprint, and the first signature in the target ciphertext to the first communication node, includes: The first and second helical fingerprints in the target ciphertext are compared. If the comparison results are the same, the verification is considered successful; if the comparison results are different, the encrypted communication result is considered a failure. If the verification is successful, the first helical fingerprint is signed using the second private key to determine the second signature; The first helical fingerprint, the first signature and the second signature in the target ciphertext are combined to determine the ciphertext feedback message; The encrypted feedback message is sent to the first communication node.

10. A communication node, characterized in that, include: The program includes a memory, a processor, a program stored in the memory and executable on the processor, and a data bus for establishing communication between the processor and the memory, wherein the program, when executed by the processor, implements the encrypted communication method as described in any one of claims 1-5 or 6-9.

11. A storage medium containing computer-executable instructions, characterized in that, The computer-executable instructions, when executed by a computer processor, are used to perform the encrypted communication method as described in any one of claims 1-5 or 6-9.

12. A computer program product, characterized in that, It includes a computer program that, when executed by a processor, implements the encrypted communication method as described in any one of claims 1-5 or 6-9.

Images