An anonymous group threshold aggregation storage certificate method

Abstract

The application discloses an anonymous group threshold aggregation storage evidence method. A server or an edge node generates a geographic fence window object, and a plurality of vehicle-mounted terminals generate local group segment objects according to the geographic fence window object. The server or the edge node generates a regional signaling aggregation proof object according to a threshold signature rule and an aggregation summary rule, and performs verification, and outputs a regional level statistical result, a threshold establishment result or an aggregation storage evidence result, so that a regional level space signaling proof is formed without disclosing original tracks of single vehicles.

Claims

1. A method for distributed spatial signaling anonymity fragment threshold aggregation and evidence preservation, characterized in that, The method, executed collaboratively by multiple vehicle-mounted terminals, optional edge nodes, and a server, includes: the server or the edge node generating a geofence window object, the geofence window object including at least one or more of a fence area reference, a time window reference, a group size threshold reference, and a rule version reference; multiple vehicle-mounted terminals located within the fenced area exchanging one or more of anonymous signaling digests, member commitment digests, and session random number digests via short-range links under the constraints of the geofence window object, respectively generating local group fragment objects; and the multiple vehicle-mounted terminals or the edge node normalizing the local group fragment objects into regional signaling aggregation proof objects according to threshold signature rules, aggregation digest rules, and restricted disclosure rules. The aggregated proof object includes at least one or more of the following: regional signaling statistical digest, member number proof digest, anonymity consistency result, and threshold signature result. The server verifies the regional signaling aggregated proof object and, after confirming that multiple local group fragment objects satisfy the fence window consistency, proximity co-existence witness validity, and member number threshold, outputs one or more of the following: regional signaling high concurrency early warning result, channel occupancy status proof result, or network node clustering event identification result. The regional signaling aggregated proof object is used to characterize the regional anonymity group co-existence and signaling aggregation validity, rather than the pairing and mutual verification result between a single terminal or the third-party node presence witness result. The server retains aggregated proof references and rule version references to support historical playback and dispute review.

2. A distributed spatial signaling anonymity fragment threshold aggregation and evidence storage system, characterized in that, The system includes multiple vehicle-mounted terminals, optional edge nodes, and a server; wherein the multiple vehicle-mounted terminals are used to generate local group fragment objects, the edge nodes are used to perform aggregation and threshold signature collaboration, and the server is used to perform verification and evidence storage; the system is configured to perform the method of claim 1.

3. A computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method of claim 1.

4. The method according to claim 1, wherein the near-range link switching includes at least one or more of session random number broadcasting, member commitment digest exchange, anonymous signaling digest acknowledgment, and local group fragment object solidification.

5. The method according to claim 1, wherein the member commitment summary includes at least one or more of the following: anonymous member identifier commitment, window session commitment, geofence binding commitment, random number binding commitment, sub-window overlay binding commitment, or motion state bucketing binding commitment.

6. The method according to claim 1, wherein the threshold signature rule requires at least that the number of valid members participating in generating the regional signaling aggregation proof object reaches a preset threshold, and that different member fragment objects satisfy time window consistency, fenced area consistency, and uniqueness within the anonymous member label window; when the threshold signature rule is not satisfied, one or more of the following are output: partial aggregation failure status, fragment supplementation request, or low-confidence aggregation flag.

7. The method according to claim 1, wherein the server outputs only one or more of the following to the outside world: regional signaling statistical digest, proof result code, threshold signature verification result, or aggregated evidence reference, and does not output the original trajectory plaintext of the vehicle or the complete signaling plaintext of the vehicle to the low-privilege subject.

8. The method according to claim 1, wherein when the anonymity consistency result shows one or more of the following: insufficient number of members, abnormal close-range interaction, templated fragment aggregation, or fence binding conflict, the server outputs one or more of the following: rejection result, observation result, or supplementary verification result.

9. The method according to claim 1, wherein the aggregated evidence reference is at least bound to one or more of the following: geofence window object reference, regional signaling aggregated evidence object reference, threshold signature result reference, regional signaling statistical summary reference, and rule version reference.

10. The method of claim 1, wherein when a dispute is triggered, the server issues a restricted audit request to an edge node or multiple vehicle terminals, the restricted audit request including at least one or more of an authorization token, a field mask, a window random number, and an audit scope reference, to perform a controlled review of the consistency between the regional signaling aggregation proof object and the local group fragment object.

Images