Anti-theft data security access method and system based on reliable authentication link

Abstract

To provide an anti-theft data security access method and system based on a reliable authentication link.SOLUTION: A method includes: establishing a reliable authentication link; performing registration authentication on an access terminal through the reliable authentication link; transmitting a data access request, taking the data access request after success of the communication authentication as a legal request, performing communication through key agreement in a first memory, and the first memory acquiring decrypted data from the inside of a second memory and storing the data; executing a power interruption instruction on the data access request when the communication authentication is unsuccessful; after the first memory executing the power interruption instruction, deleting the stored decrypted data; and the access terminal responding to the legal request. A system includes an authentication link construction module, a registration authentication module, a communication authentication module, and a data response module.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to the technical field of data security, in particular to a method for detecting and detecting a data leak based on a trusted authentication link. Secure data collection and use to prevent unauthorized data collection The present invention relates to an access method and system. [Background technology]

[0002] In today's life and work, we are increasingly exposed to data, and the importance of data security is becoming more and more important. In the field of data security, data access actions cannot be avoided, so the process of data access is Confidential data illegally obtained How to prevent this from happening? to ensure confidential data is safe In the prior art, data security is generally achieved by using encryption methods, but in this processing method, even after the encrypted data is decrypted, the decrypted data still has some access to it. Leaked The issue of the possibility of this is being overlooked.

[0003] As the technology of Internet of Things develops rapidly, the application of Internet of Things is gradually expanding. Data leak In order to solve the problems above, the data security field has increasingly begun to introduce edge computing technology into the Internet of Things. Compared with the traditional Internet of Things structure, the Internet of Things network structure that introduces edge computing technology is ,hierarchy are becoming more complex, and the Internet of Things is Body Due to topology instability, the network connection relationship between the terminal device and the edge computing server is dynamically changed and updated. Device It is difficult to guarantee the reliability and validity of authentication, and the Internet of Things is This poses a potential security risk to communications and may lead to data leakage. , the probability of occurrence of situations such as network attacks increases significantly. Summary of the Invention

[0004] In view of this, the present invention Examples are , based on a trusted authentication link Secure data collection and use to prevent unauthorized data collection The purpose of the present invention is to provide an access method and system. , efficient and reliable certification Confidential data is illegally obtained through This prevents unauthorized access to the network. Secure death , Sensitive Data The safe storage of the information can be protected.

[0005] No. 1 Aspects of In the implementation of the present invention Examples are , based on a trusted authentication link Secure data collection and use to prevent unauthorized data collection Access methods Disclose I have , below Lower child Including .

[0006] Selecting a plurality of edge authentication servers in a plurality of communication domains of the Internet of Things, and connecting the blockchain authentication server and the plurality of edge authentication servers and is the authentication node. , mutually To perform trusted authentication and establish a trusted authentication link.

[0007] The trusted authentication link Through To perform registration authentication for an access terminal.

[0008] In the access terminal teeth , a first memory; A second memory is provided, the second memory having Encrypted data is stored To do so.

[0009] Data Request From the side Data access request to the access terminal To sending When it is believed , 1st Edge Authentication Server Through the bar The access terminal is Testimony is given , communication certification If the proof is successful Data Access Requests The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Retrieve and store the decrypted data from the

[0010] Communication authentication is successful. If it doesn't work, Data Access Requests The unauthorized Request and power cut-off command To do so.

[0011] The first memory is a volatile memory, and By carrying out Stored decrypted data To disappear.

[0012] The second memory is a non-volatile memory. To be.

[0013] The access terminal receives the edge authentication server The legitimate Receive the request and Recorded To respond to requests.

[0014] No. 1 In relation to the aspect of , Implementation of the present invention Examples are: No. 1 Aspects of A first possible embodiment of the present invention is presented. In this embodiment, , the access terminal receives from the edge authentication server The legitimate receiving a request and prior to responding to said data access request, further comprising: Includes:

[0015] Data Request From the side Cross-domain data access request to the access terminal To sending When it is believed , 2nd Edge Authentication Server Through the bar performing cross-domain communication authentication on the access terminal; If the proof is successful Cross-Domain Data Access Requests To Cross Domain The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Obtain and save the decrypted data. and.

[0016] Cross-domain communication authentication is successful. If it doesn't work, Data Access Requests The unauthorized Request and power cut-off command Do R thing .

[0017] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A second possible embodiment of the present invention is presented. In this embodiment, , the trusted authentication link Through to the access terminal conduct Registration Proof , including:

[0018] The access terminal is connected to the trusted authentication link. Inside the Sending registration request information M1 to the edge authentication server.

[0019] The edge authentication server receives the registration request information M1 Decrypt the Inspection Testimony , the access terminal is legitimate Access terminal or not Determine To do.

[0020] The access terminal is legitimate Access terminal If it is determined that The edge authentication server is connected to the trusted authentication link. Inside the The blockchain authentication server receives the certificate signing request information M2 of To send.

[0021] The blockchain authentication server receives the certificate signing request information M2 of Conduct validity verification.

[0022] The certificate signing request M2 is valid If it is proved that , the blockchain generates and stores a digital certificate corresponding to the access terminal, the digital certificate including a registration hash value h1 corresponding to the access terminal.

[0023] The blockchain authentication server transmits the registration hash value h1 to the access terminal. Reply to To do.

[0024] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A third possible embodiment of the present invention is provided. In this embodiment, The first edge authentication server Through to the access terminal conduct Communication authentication Proof , including:

[0025] The access terminal transmits to the first edge authentication server a terminal hash value h t and transmitting communication request information M3 including the above.

[0026] The first edge authentication server decrypts the communication request information M3 and transmits it to the access terminal. Last Device Perform authentication and determine whether the access terminal is registered Determine To do.

[0027] The access terminal is registered If it is determined that The first edge authentication server is connected to the trusted authentication link. Inside the Sending the first terminal hash request information M4 to the blockchain authentication server.

[0028] The blockchain authentication server performs validity verification on the first terminal hash request information M4.

[0029] The first terminal hash request information M4 is valid. If it is proved that The blockchain authentication server sends the registration hash value h1 corresponding to the access terminal to the first edge authentication server.

[0030] The first edge authentication server receives the registration hash value h1 and the terminal hash value h t and To compare and verify the above.

[0031] The registration hash value h1 and the terminal hash value h t and Matching If it is proven that , the access end Last Communication authentication The proof was successful. The first edge authentication server sends authentication success information M5 to the access terminal.

[0032] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A fourth possible embodiment of the present invention is provided. In this embodiment, The second edge authentication server Through the bar To the access terminal conduct Cross-domain communication authentication Proof , including:

[0033] The access terminal transmits to the first edge authentication server a terminal hash value h t and sending cross-domain communication request information M6 including:

[0034] The second edge authentication server transmits cross-domain authentication request information M7 to the first edge authentication server.

[0035] The first edge authentication server sends registration information M8 corresponding to the access terminal to the second edge authentication server.

[0036] The second edge authentication server performs validity authentication on the registration information of the access terminal.

[0037] The registration information M8 is valid If The second edge authentication server Inside the Sending second terminal hash request information M9 to the blockchain authentication server.

[0038] The blockchain authentication server performs validity verification on the second terminal hash request information M9.

[0039] The second terminal hash request information M9 is valid. If it is proved that The blockchain authentication server sends the registration hash value h1 corresponding to the access terminal to the second edge authentication server.

[0040] The second edge authentication server receives the registration hash value h1 and the terminal hash value h t and To compare and verify the above.

[0041] The registration hash value h1 and the terminal hash value h t and Matches If it is proven that , the access end Last Cross-domain communication authentication The testimony is successful thing.

[0042] No. 1 In relation to the aspect of , Implementation of the present invention Examples are: No. 1 Aspects of A fifth possible embodiment of the present invention is provided. In this embodiment, The communication confirmation If the proof is successful Data Access Requests The legitimate As a request , session key of Through Teto believe This includes the following:

[0043] The second memo In before Recorded Dynamic encryption of requests to ensure identity (identification information) and 1 Dynamic Random Key To generate.

[0044] First memo In The identification information and the 1 Dynamic Random Key and receiving a first signal using the identification information as an index. 2 Dynamic Random Key and generating said 1 Dynamic Random Key and the above 2 Dynamic random keys and Verify whether they are the same.

[0045] If they are the same, transmitting the identification information to the second memory to obtain decoded data.

[0046] If they are not the same, an error occurs based on the number of validations. Notify And also is a dynamic random key Regenerate it and continue the verification.

[0047] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A sixth possible embodiment of the present invention is provided. In this embodiment, The cross-domain communication authentication If the proof is successful Cross-domain data access requests are The legitimate The request is stored in the first memory. The session key is of Through and communicating with the second memo. Rika Obtaining decoded data from the encoded data includes:

[0048] The second memo In The cross-domain data access request is dynamically encrypted to obtain cross-domain identification information and cross-domain number. 1 Dynamic Random Key To generate.

[0049] First memo In The cross-domain identification information and the cross-domain 1 Dynamic Random Key and receiving a cross-domain first identification information as an index. 2 Dynamic Random Key and generating the cross-domain first 1 Dynamic Random Key and the cross-domain 2 Dynamic random keys and Verify whether they are the same.

[0050] If the cross-domain identification information is the same, then transmitting the cross-domain identification information to the second memory to obtain decoded data.

[0051] If they are not the same, an error occurs based on the number of validations. Notify And also is a dynamic random keyRegenerate it and continue the verification.

[0052] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A seventh possible embodiment of the present invention is provided. In this embodiment, , the second memo Li The above 1 Dynamic Random Key When generating teeth , the first memo In The data request T side Cut off communication connection with thing .

[0053] Session Key Based on By decryption Decryption Data Ta raw was completed Then, the first memo In A communication connection with the second memory is cut off, and the data request is T side Reconnect with thing .

[0054] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of An eighth possible embodiment of the present invention is provided. In this embodiment, , the access terminal receives from the edge authentication server The legitimate Receiving a request and responding to the data access request includes:

[0055] The access terminal receives the edge authentication server The legitimate Receiving a request.

[0056] The decoded data in the first memory From inside Target data corresponding to the data access request Identify The target data is then added to the data request. T side to send and respond to.

[0057] Second Aspects of In the implementation of the present invention Examples are In addition, it is based on a trusted authentication link. Secure data collection and use to prevent unauthorized data collection access Disclose the system I have , this system The following Including .

[0058] Selecting a plurality of edge authentication servers in a plurality of communication domains of the Internet of Things, and connecting the blockchain authentication server and the plurality of edge authentication servers and is the authentication node. , mutually An authentication link building module for performing trusted authentication and establishing a trusted authentication link.

[0059] The trusted authentication link Through and an enrollment authentication module for performing enrollment authentication on the access terminal via the access terminal.

[0060] Data Request From the side Data access request to the access terminal To sending When it is believed , 1st Edge Authentication Server Through the bar A communication authentication is performed on the access terminal. If the proof is successful Data Access Requests The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika A communication authentication module for retrieving and storing decrypted data from the encrypted data.

[0061] Data Request From the side Cross-domain data access request to the access terminal To sending When it is believed , 2nd Edge Authentication Server Through the bar performing cross-domain communication authentication on the access terminal; If the proof is successful Cross-domain data access requests are The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Cross-domain communication authentication module to retrieve and store decrypted data from the

[0062] Store encrypted data , legitimate Request, Cross Domain The legitimate Dynamic encryption for requests The transformation has been carried out. , identification information and 1 Dynamic random key raw To be completed Second memory for.

[0063] The identification information and the 1 Dynamic Random Key Received Believe, Inspection The proof is given Inspection Proof Growth If successful Obtaining the decrypted data from the second memory and If you lose Power cut off Order fruit By row , protection Existed Decrypted Data Disappeared The first memory to.

[0064] The access terminal is Rade Data access request received Believe a data response module for responding to said data access requests.

[0065] The beneficial effects of the embodiments of the present invention are as follows:

[0066] (1) "Terminal-Edge Authentication-Blockchain Authentication" of network hierarchy The structure is built and the blockchain authentication server issues the certificate. Issue of The certificate hash value held by the terminal device and the certificate hash value on the blockchain are all stored on the blockchain. and By comparing the Internet of Things terminal devices Device Achieving authentication. Is blockchain tamper-proof? Tracking This method can be used to make the Internet of Things terminal devices Device Authentication efficiency and and Safety can be improved.

[0067] (2) Data Access Request Process The session key is If you want to communicate using , Dynamic Random Key Since the decrypted data cannot be obtained until the validity of the Side prevents users from directly obtaining the decrypted data. , Fraud Hand Stepped side channel Attack Private key So that you can't get , Security of the session key We have been improving , concise And it is efficient.

[0068] (3) Each time a data access request is made, Dynamic random key raw Accomplished Since it is encrypted, some unknown Unauthorized Even if a portion of the dynamically encrypted data is obtained by some means, the encrypted data and the corresponding Dynamic random key The update mechanism Fraud Data collected on will be immediately deactivated So, data access The user illegally acquires Based on some of the data Private keys and confidential data Contents Reverse guess (reverse calculation) This prevents data from being lost and improves the safety of data storage. Secured It is possible. [Brief description of the drawings]

[0069] In order to more clearly explain the technical solutions of the embodiments of the present invention, the following briefly introduces drawings that need to be used in the embodiments. However, it should be understood that the following drawings only illustrate some embodiments of the present invention, and should not be regarded as limiting the scope. Those skilled in the art can also obtain other related drawings based on these drawings on the premise that they do not perform creative labor.

[0070] FIG. 1 shows a system based on the trusted authentication link of the present invention. Secure data collection and use to prevent unauthorized data collection 1 is a flowchart of an access method.

[0071] FIG. 2 shows a block diagram of a trusted authentication link according to the present invention. Secure data collection and use to prevent unauthorized data collection FIG. 2 is a logical schematic of the access method. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0072] In order to make the objectives, technical solutions and advantages of the embodiments of the present invention clearer, the following description will be directed to the drawings in the embodiments of the present invention. In relation to A clear and complete description of the technical solutions in the embodiments of the present invention is provided. Of course, the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. Generally, the embodiments of the present invention are depicted and shown in the drawings herein. Components There are various In configuration Distribution reference It can be designed.

[0073] Referring to FIG. 1 and FIG. 2, in a first embodiment of the present invention, Secure data collection and use to prevent unauthorized data collection It provides access methods, including:

[0074] A plurality of edge authentication servers are selected in a plurality of communication domains of the Internet of Things, and the blockchain authentication server and the plurality of edge authentication servers are set as authentication nodes. , mutually To perform trusted authentication and establish a trusted authentication link.

[0075] The trusted authentication link Through To perform registration authentication for an access terminal.

[0076] In the access terminal teeth , a first memory; A second memory is provided, the second memory having Encrypted data is stored To do so.

[0077] Data Request From the side Data access request to the access terminal To sending When it is believed First Edge Authentication Server Through the bar A communication authentication is performed on the access terminal. If the proof is successful Data Access Requests The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Retrieve and store the decrypted data from the

[0078] Communication authentication is successful. If it doesn't work, Data Access Requests The unauthorized Request and power cut-off command Do To do so.

[0079] The first memory is a volatile memory, and By carrying out Protection Existed Decrypted Data Disappeared To do.

[0080] The second memory is a non-volatile memory.

[0081] The access terminal receives the edge authentication server The legitimate Receive the request and Recorded To respond to requests.

[0082] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A first possible embodiment of the present invention is provided. In this embodiment, , the access terminal receives from the edge authentication server The legitimate and before receiving the request and responding to the data access request, further comprising:

[0083] Data Request From the side Cross-domain data access request to the access terminal To sending When it is believed Second edge authentication server Through the bar performing cross-domain communication authentication on the access terminal; If the proof is successful Cross-domain data access requests are The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Retrieve and store the decrypted data from the

[0084] Cross-domain communication authentication is successful. If it doesn't work, Data Access Requests The unauthorized Request and power cut-off command Do To do so.

[0085] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A second possible embodiment of the present invention is provided. In this embodiment, , the trusted authentication link Through to the access terminal conduct Registration Proof , including:

[0086] The access terminal is connected to the trusted authentication link. Inside the Sending registration request information M1 to the edge authentication server.

[0087] The edge authentication server receives the registration request information M1 Decrypt the Inspection Testimony , the access terminal is legitimate Access terminal or not Determine To do.

[0088] The access terminal is legitimate Access terminal If it is determined that The edge authentication server is connected to the trusted authentication link. Inside the The blockchain authentication server receives the certificate signing request information M2 of To send.

[0089] The blockchain authentication server receives the certificate signing request information M2 of Conduct validity verification.

[0090] The certificate signing request M2 is valid If it is proved that , the blockchain Authentication Server generating and storing a digital certificate corresponding to the access terminal, the digital certificate including an enrollment hash value h1 corresponding to the access terminal.

[0091] The blockchain authentication server transmits the registration hash value h1 to the access terminal. Reply to To do.

[0092] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A third possible embodiment of the present invention is provided. In this embodiment, The first edge authentication server conduct Communication authentication Proof , including:

[0093] The access terminal transmits to the first edge authentication server a terminal hash value h t and transmitting communication request information M3 including the above.

[0094] The first edge authentication server decrypts the communication request information M3 and transmits it to the access terminal. Last Device Perform authentication and determine whether the access terminal is registered Determine To do.

[0095] The access terminal is registered If it is determined that The first edge authentication server is connected to the trusted authentication link. Inside the Sending the first terminal hash request information M4 to the blockchain authentication server.

[0096] The blockchain authentication server performs validity verification on the first terminal hash request information M4.

[0097] The first terminal hash request information M4 is valid. If it is proved that The blockchain authentication server sends the registration hash value h1 corresponding to the access terminal to the first edge authentication server.

[0098] The first edge authentication server receives the registration hash value h1 and the terminal hash value h t and To compare and verify the above.

[0099] The registration hash value h1 and the terminal hash value h t and Matching If it is proven that , the access end Last Communication authentication The proof was successful. The first edge authentication server sends authentication success information M5 to the access terminal.

[0100] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A fourth possible embodiment of the present invention is provided. In this embodiment, The second edge authentication server Through the bar To the access terminal conduct Cross-domain communication authentication Proof , including:

[0101] The access terminal transmits to the second edge authentication server a terminal hash value h t and sending cross-domain communication request information M6 including:

[0102] The second edge authentication server transmits cross-domain authentication request information M7 to the first edge authentication server.

[0103] The first edge authentication server sends registration information M8 corresponding to the access terminal to the second edge authentication server.

[0104] The second edge authentication server performs validity authentication on the registration information of the access terminal.

[0105] The registration information M8 is valid If The second edge authentication server Inside the Sending second terminal hash request information M9 to the blockchain authentication server.

[0106] The blockchain authentication server performs validity verification on the second terminal hash request information M9.

[0107] The second terminal hash request information M9 is valid. If it is proved that The blockchain authentication server sends the registration hash value h1 corresponding to the access terminal to the second edge authentication server.

[0108] The second edge authentication server receives the registration hash value h1 and the terminal hash value h t and To compare and verify the above.

[0109] The registration hash value h1 and the terminal hash value h t and Matches If it is proven that The access terminal performs cross-domain communication authentication. Be successful thing.

[0110] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A fifth possible embodiment of the present invention is provided. In this embodiment, The communication confirmation If the proof is successful Data Access Requests The legitimate The request is stored in the first memory. The session key is of Through Communicating with the second memory to obtain the decoded data from the second memory includes:

[0111] The second memo In before Recorded Dynamic encryption of requests to identify and 1 Dynamic Random Key To generate.

[0112] First memo In The identification information and the 1 Dynamic Random Key and receiving a first signal using the identification information as an index. 2 Dynamic Random Key and generating said 1 Dynamic Random Key and the above 2 Dynamic random keys and Verify whether they are the same.

[0113] If they are the same, transmitting the identification information to the second memory to obtain decoded data.

[0114] If they are not the same, an error occurs based on the number of validations. Notify And also is a dynamic random key Regenerate it and continue the verification.

[0115] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A sixth possible embodiment of the present invention is provided. In this embodiment, The cross-domain communication authentication If the proof is successful Cross-domain data access requests are The legitimate The request is stored in the first memory. The session key is of Through and communicating with the second memo. Rika Obtaining decoded data from the encoded data includes:

[0116] The second memo In The cross-domain data access request is dynamically encrypted to obtain cross-domain identification information and cross-domain number. 1 Dynamic Random Key To generate.

[0117] First memo In The cross-domain identification information and the cross-domain 1 Dynamic Random Key and receiving a cross-domain first identification information as an index. 2 Dynamic Random Key and generating the cross-domain first 1 Dynamic Random Key and the cross-domain 2 Dynamic random keys and Verify whether they are the same.

[0118] If the cross-domain identification information is the same, then transmitting the cross-domain identification information to the second memory to obtain decoded data.

[0119] If they are not the same, an error occurs based on the number of validations. Notify And also is a dynamic random key Regenerate it and continue the verification.

[0120] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of A seventh possible embodiment of the present invention is provided. In this embodiment, ,

[0121] The second memo In The above 1 Dynamic Random Key When generating teeth , the first memo In The data request T side The communication connection with the

[0122] Session Key After decoding and generating the decoded data based on So , the first memo In A communication connection with the second memory is cut off, and the data request is T side and reconnect.

[0123] No. 1 In relation to the aspect of , Implementation of the present invention Examples are No. 1 Aspects of An eighth possible embodiment of the present invention is provided. In this embodiment, , the access terminal receives from the edge authentication server The legitimate Receiving a request and responding to the data access request includes:

[0124] The access terminal receives the edge authentication server The legitimate Receiving a request.

[0125] The decoded data From inside Target data corresponding to the data access request Identify The target data is then added to the data request. T side to send and respond to.

[0126] In a second embodiment of the present invention, a trusted authentication link is used. Secure data collection and use to prevent unauthorized data collection access system It offers, among other things, the following:

[0127] A plurality of edge authentication servers are selected in a plurality of communication domains of the Internet of Things, and the blockchain authentication server and the plurality of edge authentication servers are set as authentication nodes. , mutually An authentication link building module for performing trusted authentication and establishing a trusted authentication link.

[0128] The trusted authentication link Through and an enrollment authentication module for performing enrollment authentication on the access terminal via the access terminal.

[0129] Data Request From the side Data access request to the access terminal To sending When it is believed A first edge authentication server performs communication authentication on the access terminal, If the proof is successful Data Access Requests The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika A communication authentication module for retrieving and storing decrypted data from the encrypted data.

[0130] Data Request From the side Cross-domain data access request to the access terminal To sending When it is believed , 2nd Edge Authentication Server Through the bar performing cross-domain communication authentication on the access terminal; If the proof is successful Cross-domain data access requests are The legitimate The request is stored in the first memory. The session key is of Through and communicates with the first memo. In The second memo Rika Cross-domain communication authentication module to retrieve and store decrypted data from the

[0131] Store encrypted data , legitimate Request, Cross Domain The legitimate Dynamic encryption for requests The transformation has been carried out. , identification information and 1 Dynamic random key raw To be completed Second memory for.

[0132] The identification information and the 1 Dynamic Random Key Received Believe, Inspection The proof is given Inspection Proof Growth If successful Obtaining the decoded data from the second memory; Proof loss If you lose Power cut off Order fruit By row Stored decrypted data Disappeared The first memory to.

[0133] The access terminal receives the edge authentication server The legitimate Receive a request Believe a data response module for responding to said data access requests.

[0134] The embodiment of the present invention is based on a trusted authentication link. Secure data collection and use to prevent unauthorized data collection The purpose is to protect access methods and systems, and has the following effects:

[0135] 1. "Terminal-Edge Authentication-Blockchain Authentication" Network Hierarchy The structure is built and the blockchain authentication server issues the certificate. Issue of The certificate hash value held by the terminal device and the certificate hash value on the blockchain are all stored on the blockchain. and By comparing the Internet of Things terminal devices Device Achieving authentication. Is blockchain tamper-proof? Tracking This method can be used to make the Internet of Things terminal devices Device Authentication efficiency and and Safety can be improved.

[0136] 2. Data Access Request Process The session key is If you want to communicate using , Dynamic Random KeySince the decrypted data cannot be obtained until the validity of the Side prevents users from directly obtaining the decrypted data. , Fraud Hand Stepped side channel Attack Private key So that you can't get , Security of the session key We have been improving , concise And it is efficient.

[0137] 3. Every time there is a data access request, Dynamic random key Newly born Accomplished Since it is encrypted, some unknown Unauthorized Even if a portion of the dynamically encrypted data is obtained by some means, the encrypted data and the corresponding Dynamic random key The update mechanism Fraud Data collected on will be immediately deactivated So, data access The user illegally acquires Based on some of the data Private keys and confidential data Contents Reverse guess (reverse calculation) This prevents data from being lost and improves the safety of data storage. Secured It is possible.

[0138] Based on the trusted authentication link provided in the embodiment of the present invention, Secure data collection and use to prevent unauthorized data collection The computer program product of the access method and apparatus includes a computer-readable storage medium having program code stored thereon, and instructions contained in the program code can be used to execute the methods in the method embodiments listed above, and specific implementations can be referred to the method embodiments, so they will not be repeated here.

[0139] Specifically, the storage medium can be a general-purpose storage medium such as a mobile disk or a hard disk. When the computer program on the storage medium is executed, the computer program is authenticated based on the above-mentioned trusted authentication link. Secure data collection and use to prevent unauthorized data collection It allows implementing access methods that are efficient and reliable. Confidential data may be stolen through This prevents data from being stolen by unauthorized parties and improves network security. Secure death , Sensitive Data This allows the safe storage of the information to be protected.

[0140] If the functionality is implemented in the form of a software functional unit and sold or used as an independent product, it is treated as non-volatile computer readable data executable by a processor. Read The computer software product may be stored in a readable storage medium. Based on this understanding, the technical solution of the present invention, in essence or in the part of the contribution to the existing technology, or in the part of the technical solution, may be embodied in the form of a software product, and the computer software product is stored in a storage medium and includes some instructions for making a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method in each embodiment of the present invention. The storage medium includes various media that can store program code, such as U disk, mobile hard disk, Read-Only Memory (ROM), Random Access Memory (RAM), magnetic disk, or optical disk.

[0141] Finally, it should be explained that the above examples are merely specific embodiments for explaining the technical solutions of the present invention, and are not intended to limit the same, and the scope of protection of the present invention is not limited thereby. Although the present invention has been described in detail with reference to the above examples, those skilled in the art should understand that, within the technical scope disclosed in the present invention, a technician familiar with this technical field may make modifications or easily conceivable changes to the technical solutions described in the above examples, or make equivalent replacements for some of the technical features therein, but such modifications, changes or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions in the examples of the present invention, and are all included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the above claims.

Claims

1. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link, comprising: Selecting a plurality of edge authentication servers in a plurality of communication domains of the Internet of Things, the blockchain authentication server and the plurality of edge authentication servers are authentication nodes, and performing mutually trustworthy authentication to establish a trustworthy authentication link; performing registration authentication for an access terminal over the trusted authentication link; a first memory and a second memory are provided within the access terminal, and encrypted data is stored in the second memory; When a data access request is transmitted from a data request side to the access terminal, a communication authentication is performed on the access terminal via a first edge authentication server, and when the communication authentication is successful, the data access request is determined to be a valid request, communication is performed through a session key in the first memory, and decrypted data is obtained from the second memory and stored in the first memory; If the communication authentication is not successful, the data access request is determined to be an unauthorized request, and a power cut-off command is issued; The first memory is a volatile memory, and the decrypted data stored therein is lost when a power cut command is executed; the second memory being a non-volatile memory; The access terminal receives a legitimate request from the edge authentication server and responds to the legitimate request. A secure access method based on a trusted authentication link to prevent unauthorized data retrieval.

2. and before the access terminal receives a valid request from the edge authentication server and responds to the data access request, further comprising: When a cross-domain data access request is sent from a data request side to the access terminal, a cross-domain communication authentication is performed on the access terminal via a second edge authentication server, and when the cross-domain communication authentication is successful, the cross-domain data access request is regarded as a legitimate cross-domain request, communication is performed through a session key in the first memory, and decrypted data is obtained from the second memory and stored in the first memory; If the cross-domain communication authentication is not successful, the cross-domain data access request is determined to be an unauthorized request, and a power cut-off command is issued. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 1.

3. performing registration authentication on the access terminal via the trusted authentication link, The access terminal sends registration request information M to the edge authentication server in the trusted authentication link. １ and transmitting The edge authentication server decrypts and verifies the registration request information M1 to determine whether the access terminal is a legitimate access terminal; When it is determined that the access terminal is a legitimate access terminal, the edge authentication server sends certificate signing request information M2 to the block chain authentication server in the trusted authentication link; Verifying the validity of the certificate signing request information M2 via the block chain authentication server; The certificate signing request information M ２ If it is proven to be valid, the blockchain authentication server registers the registration hash value h corresponding to the access terminal. １ generating and storing a digital certificate corresponding to said access terminal; The blockchain authentication server detects the registered hash value h １ and returning the request to the access terminal. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 2.

4. The communication authentication performed on the access terminal via the first edge authentication server includes: The access terminal transmits to the first edge authentication server a terminal hash value h ｔ Communication request information M including ３ and transmitting The first edge authentication server receives the communication request information M ３ to perform device authentication of the access terminal to determine whether the access terminal is registered; If it is determined that the access terminal is registered, the first edge authentication server transmits the first terminal hash request information M to the blockchain authentication server in the trusted authentication link. ４ and transmitting The blockchain authentication server receives the first terminal hash request information M ４ To verify the validity of the The first terminal hash request information M ４ is verified to be valid, the blockchain authentication server authenticates the access terminal with the registration hash value h １ sending the first edge authentication server; The first edge authentication server １ and the terminal hash value h ｔ To compare and verify the above. The registered hash value h １ and the terminal hash value h ｔ If it is proved that the two match, the communication authentication of the access terminal is successful, and the first edge authentication server sends authentication success information M to the access terminal. ５ and transmitting A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 3.

5. The cross-domain communication authentication performed on the access terminal via the second edge authentication server includes: The access terminal transmits to the second edge authentication server a terminal hash value h ｔ Cross-domain communication request information M ６ and transmitting The second edge authentication server transmits the cross-domain authentication request information M to the first edge authentication server. ７ and transmitting The first edge authentication server transmits registration information M corresponding to the access terminal to the second edge authentication server. ８ and transmitting the second edge authentication server performs validity authentication on the registration information M8 of the access terminal; The registration information M ８ If the second edge authentication server is valid, the second edge authentication server transmits the second terminal hash request information M to the blockchain authentication server in the trusted authentication link. ９ and transmitting The block chain authentication server verifies the validity of the second terminal hash request information M9; The second terminal hash request information M ９ is verified to be valid, the blockchain authentication server authenticates the access terminal with the registration hash value h １ sending the second edge authentication server; The second edge authentication server １ and the terminal hash value h ｔ To compare and verify the above. The registered hash value h １ and the terminal hash value h ｔ and if it is proved that the two match, the access terminal succeeds in the cross-domain communication authentication. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 3.

6. determining that the data access request is a valid request when the communication authentication is successful, and communicating in the first memory using a session key to obtain decrypted data from the second memory in the first memory; performing dynamic encryption on the legitimate request in the second memory to generate identification information and a first dynamic random key; receiving, in the first memory, the identification information and the first dynamic random key, generating a second dynamic random key using the identification information as an index, and verifying whether the first dynamic random key and the second dynamic random key are the same; if the identification information is the same, transmitting the identification information to the second memory to obtain decoded data; If the verification count is not the same, an error is notified based on the verification count, or the dynamic random key is regenerated and verification is continued. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 1.

7. if the cross-domain communication authentication is successful, the cross-domain data access request is regarded as a valid cross-domain request, and communication is performed through a session key in the first memory to obtain decrypted data from the second memory; performing dynamic encryption on the cross-domain data access request in the second memory to generate cross-domain identification information and a cross-domain first dynamic random key; receiving, in the first memory, the cross-domain identification information and the cross-domain first dynamic random key, generating a cross-domain second dynamic random key by using the cross-domain identification information as an index, and verifying whether the cross-domain first dynamic random key and the cross-domain second dynamic random key are the same; If the cross-domain identification information is the same, then transmitting the cross-domain identification information to the second memory to obtain decoded data; If the verification results are not the same, an error is notified based on the verification count, or a dynamic random key is regenerated to continue the verification. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 2.

8. When generating the first dynamic random key in the second memory, a communication connection between the first memory and the data requesting side is cut off; After generating decrypted data by decrypting the data based on the session key, the first memory disconnects from the second memory and reconnects to the data request side. A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to claim 6.

9. The access terminal receiving a valid request from the edge authentication server and responding to the data access request includes: receiving a valid request from the edge authentication server at the access terminal; identifying target data corresponding to the data access request from the decoded data in the first memory, and transmitting the target data to the data request side in response, A secure access method for preventing unauthorized data acquisition based on a trusted authentication link according to any of claims 6 and 7.

10. A secure access system that prevents unauthorized data acquisition based on a trusted authentication link, comprising: An authentication link construction module for selecting a plurality of edge authentication servers in a plurality of communication domains of the Internet of Things, and using the blockchain authentication server and the plurality of edge authentication servers as authentication nodes, and performing mutually reliable authentication to establish a reliable authentication link; an authentication module for performing authentication on an access terminal via the trusted authentication link; a communication authentication module for performing communication authentication of the access terminal via a first edge authentication server when a data access request is transmitted from a data request side to the access terminal, determining that the data access request is a valid request when the communication authentication is successful, communicating through a session key in a first memory, and acquiring and storing decrypted data from the second memory in the first memory; a cross-domain communication authentication module for performing cross-domain communication authentication on the access terminal via a second edge authentication server when a cross-domain data access request is sent from a data request side to the access terminal, and determining that the cross-domain data access request is a legitimate cross-domain request when the cross-domain communication authentication is successful, communicating through a session key in the first memory, and acquiring and storing decrypted data from the second memory in the first memory; the second memory for storing encrypted data, and for performing dynamic encryption for a legitimate request and a cross-domain legitimate request, and for generating identification information and a first dynamic random key; the first memory for receiving the identification information and the first dynamic random key, verifying the identification information and the first dynamic random key, acquiring the decrypted data from the second memory if the verification is successful, and losing the stored decrypted data by executing a power cut-off command if the verification is unsuccessful; and a data response module for responding to the data access request when the access terminal receives a valid request from the edge authentication server. A secure access system that prevents unauthorized data acquisition based on a trusted authentication link.

Images