193 results about "Security guarantee" patented technology

The invention provides an industrial control network security service security guarantee system based on behavior analysis, which belongs to the technical field of industrial control network security, and comprises a multi-source data fusion acquisition module, a dynamic behavior modeling engine, a federal learning analysis cluster, an attack chain prediction module, a self-adaptive protection strategy executor and a model evolution feedback ring, wherein the multi-source data fusion acquisition module synchronously acquires industrial control network flow (including OPC UA / Modbus / DNP3 protocol analysis), equipment operation logs, user operation behavior fingerprints and physical interface state data, and the physical interface state data comprises electrical characteristic fluctuation monitoring of USB / network interfaces. According to the scheme, through multi-technology fusion and closed-loop design, the problems of static performance, single-dimension analysis defects and response lag of a traditional industrial control security scheme are effectively solved, a comprehensive protection system with dynamic modeling, intelligent decision making, privacy protection and continuous optimization is constructed, and the security and service reliability of an industrial control network are remarkably improved.

The invention discloses a self-learning intelligent question answering system and method with long and short term memory, and the system comprises a self-learning module, a large model reply module, a short term memory module, a long term memory module, and a safety guarantee module. The self-learning module realizes real-time learning and updating, so that the system can be continuously improved according to latest user interaction; the long-short term memory module processes short-term information and long-term information respectively, so that the system can flexibly meet various different types of user requirements, and accurate and timely answers are provided. According to the technical scheme, the technical problem that an existing system lacks self-learning ability and long-short-term memory design is solved, the intelligent level and user experience of the system are remarkably improved, more intelligent and efficient services are provided for a user, and the advantages and the positive effects are beneficial to popularization and application. Therefore, the system has strong competitiveness and wide application prospect in the market.

The invention provides an IKE (Internet Key Exchange) protocol security enhancement method based on PUF (Physical Unclonable Function) dynamic authentication and a post-quantum mixed key, which organically combines a PUF, a post-quantum cryptographic algorithm (PQC, especially Kyber KEM) and an improved Internet Key Exchange Protocol (IKE) to realize key exchange of post-quantum security and enhanced identity authentication. The method comprises the following steps: generating a dynamic pre-shared key (PSK) by utilizing the PUF; the method comprises the following steps: integrating a Kyber KEM to an IKE protocol, and replacing traditional Diffie-Hellman key exchange; the PUF-driven dynamic PSK is used as an identity authentication method of the IKE; meanwhile, Kyber KEM and ECDH are adopted for key exchange, and a final session key is generated through joint participation of a Kyber negotiation key, an ECDH negotiation key and PSK derived by PUF; and an IKE protocol process is optimized, and Kyber key exchange and PUF (Physical Unclonable Function) authentication are completed in an IKESAINIT stage and an IKEINTERMEDIATE stage. According to the method, key exchange is post-quantum secure, identity authentication is also post-quantum secure, and the final key integrates three key components of Kyber, ECDH and PUF, so that triple security assurance is provided.

The invention provides an intelligent collaborative innovation incubation and campus security fusion management platform, which relates to the technical field of fusion management and comprises a multi-modal data acquisition and fusion system, an intelligent decision and strategy optimization engine, an edge calculation and security communication architecture, a scenarized analysis and prediction module and a security assurance and model adaptation system. The multi-modal data acquisition and fusion system comprehensively collects multi-source data of a campus environment, personnel behaviors and equipment states through a multi-sensor array, realizes efficient fusion of different modal features by using a feature fusion algorithm based on tensor decomposition, provides a comprehensive and refined data basis for subsequent analysis, and improves the accuracy of data fusion. And the intelligent decision-making and strategy optimization engine learns and generates an optimal decision-making strategy for various scenes of campus safety management by virtue of a plurality of advanced algorithms such as a consensus double-Q network algorithm, an artificial fish swarm optimization algorithm based on Levy flight, a particle swarm optimization algorithm based on quantum behaviors and the like.

The invention relates to the technical field of computers, and discloses a data control method and system, electronic equipment and a storage medium, and the method comprises the steps: receiving a data control strategy defined by a data owner, and the data control strategy is constructed based on a quintuple framework and comprises a subject, an object, an environment condition, an operation behavior and an effect; compiling the data control strategy into an intelligent contract code, and generating a source code based on an intelligent contract template; deploying the smart contract code to a block chain network to form a decentralized strategy decision point; intercepting the data access request, triggering the smart contract to verify the access request, and generating an access credential when the verification is passed; and allowing data access based on the access credential, and monitoring a data use behavior to ensure consistency with the data control strategy. According to the method, the fine granularity and the whole-process coverage of data control can be improved, the auditing credibility can be improved, the automation level and the efficiency of a control system can be improved, and the end-to-end safety guarantee capability is enhanced.

The invention relates to the field of large language models, and provides a safety guarantee method for text generation of a large language model. The existing watermarking technology can detect whether a text comes from a specific model or not, but cannot trace the identity of a user, so that responsibility can not be traced when the text is spread or tampered for the second time. According to the main scheme, a statistical signal is embedded in a generated text based on a relaxed red-green dictionary method, and a model tends to select a green list token by adjusting the token sampling probability when the language model is generated; the user information is a mobile phone number or an identity card number, Base4 coding is carried out, and offset information is obtained; in the basic watermark text, starting from the first green token, generating a synonym list based on the context every two continuous token positions, and selecting corresponding synonyms for replacement according to the offset so as to implicitly embed user information; the method comprises the following steps: detecting a basic watermark, recovering a text by using a Transform-based sequence denoising auto-encoder, and extracting user information according to a replacement position and an offset.

The invention provides an intelligent prediction method and system applied to system log security audit, and the method comprises the steps: firstly obtaining a historical log data set of a power monitoring system, carrying out the event correlation modeling, generating a log event correlation model, generating a security event prediction rule library based on the log event correlation model through a rule mining algorithm, and carrying out the prediction of the security event. And then obtaining a real-time log data stream, inputting the log event association model to obtain a real-time event association result, matching the real-time event association result with the rule base to generate an abnormal event prediction result, finally generating a security audit report according to the abnormal event prediction result, sending the security audit report to the power monitoring terminal, and updating rule base parameters according to feedback information. Therefore, the abnormal event in the power monitoring system can be predicted in advance, and the intelligent level and the safety guarantee capability of system safety auditing are improved.

The invention relates to the technical field of data transmission, and particularly discloses a block chain-based data security storage and verification method, which comprises the following steps: collecting biological characteristics, generating a first dynamic key, the first dynamic key being used for encrypting first data, and updating during each access to ensure the key timeliness; dividing the first data into a plurality of segments according to logic, generating segmented hash values, and storing the segmented hash values on a chain; dynamically loading the corresponding fragment according to the user permission, and realizing anonymous verification through a homomorphic encryption technology; based on the Internet of Things technology, the first positioning parameter and the first state parameter are combined, the access permission is dynamically adjusted, and a self-destruction mark is set to avoid the overtime access risk; and in the storage process of the data fragments, dynamic security scoring and path adjustment are performed through distributed storage. According to the method, the static problem in data storage and access control is solved, and a more flexible and reliable security guarantee can be provided in a dynamic access scene.

The invention relates to the technical field of data analysis, and discloses an intelligent safety guarantee platform for a crane. The platform is characterized in that a data acquisition module acquires crane operation parameters through a sensing network and performs feature extraction; the state monitoring module monitors and evaluates the states of steel wire rope abrasion and brake clearance key components; the basic operation and maintenance module formulates a maintenance plan based on the health indexes and historical data; the operation guarantee module carries out safety assessment on hoisting operation and generates a control scheme; the system management module monitors a platform operation process; and the knowledge base module performs association analysis on various data and constructs an intelligent operation and maintenance knowledge base. The method is suitable for various cranes such as portal cranes, bridge cranes and gantry cranes specified in GB / T 20776, and intelligence and precision of the crane maintenance process are achieved.

The invention discloses an intelligent and safe express logistics supporting system and an intelligent and safe logistics supporting method. The method comprises the following steps: (1) receiving and processing an order; (2) cargo collection and packaging; (3) tracking and positioning goods; (4) intelligent sorting and loading intelligent sorting; (5) intelligent distribution and transportation; (6) receiving and signing; (7) data analysis and optimization; (8) safety guarantee and exception handling; and (9) customer service and feedback. According to the invention, accurate comparison needs to be carried out according to order placing information during order placing and pick-up, so that a user is prevented from replacing goods during pick-up at the stage, after the sent goods are confirmed to be received after being correct, a courier also carries out monitoring in the pick-up and delivery process, and a pick-up person also carries out real-time monitoring during pick-up; and after the goods are confirmed to be correct, the goods can be taken, and after the goods are monitored to have problems, the loss is assessed through video evidence obtaining, so that unnecessary disputes are avoided.

Provided in the present application is a function management method. The method comprises: receiving a function call trigger event triggered by a user for a target function; on the basis of a function identifier of the target function, acquiring functionality classification information of the target function; on the basis of the functionality classification information of the target function and a mapping relationship between a function functionality and a container type, determining a target container type matching the functionality classification information of the target function; allocating, from a container resource pool, a container of the target container type to the target function; and loading, in the container, a code package of the target function, so as to execute a corresponding system call behavior. In the method, isolation technology for matching differentiated containers for functions according to requirements is provided, the functions are classified from a security dimension, and the functionalities of containers are separated, such that the functions of different security types are operated in different types of containers, and thus the calculation and data security of the functions themselves are achieved, and the security guarantee for a serverless platform is realized, thereby preventing a malicious function from performing container escaping to destroy an operation environment of the serverless platform.

The invention discloses a cloud-side collaborative household arrhythmia early warning AI agent, and relates to the technical field of AI agents. The system specifically comprises a data acquisition module, an edge computing module, a cloud computing module, an application module and a safety guarantee module, the data acquisition module acquires electrocardio and related physiological signals in real time through wearable equipment, and the edge computing module performs preprocessing and preliminary anomaly detection on data, quickly responds and screens key data and uploads the key data to a cloud; the cloud computing module carries out deep analysis and personalized model training; the application module converts a cloud result into real-time early warning and health suggestions and pushes the real-time early warning and health suggestions to the user and medical personnel; the security guarantee module runs through the whole process, and ensures the privacy and security of data in acquisition, transmission, storage and application. According to the invention, data processing is scientific and efficient, data can be comprehensively collected and preprocessed, meanwhile, real-time preliminary screening and secure transmission are realized, and the transmission pressure and privacy risk are reduced.

The invention discloses an optical cable network automatic monitoring system based on industrial equipment, which relates to the field of industrial automation and comprises a dynamic monitoring module, an abnormity repairing module, a structure analysis module, a cloud management platform module, an automatic alarm module, a safety guarantee module, an intelligent maintenance module and an expansion compatible module. Wherein the output end of the dynamic monitoring module is connected with the input ends of the abnormity repairing module and the cloud management platform module; the output end of the abnormity repairing module is connected with the input end of the structure analysis module; the output end of the cloud management platform module is connected with the input end of the automatic alarm module; the output end of the automatic alarm module is connected with the input ends of the intelligent maintenance module and the safety guarantee module; the output ends of the safety guarantee module and the intelligent maintenance module are connected with the input ends of the cloud management platform module and the expansion compatibility module; according to the method, the problems that a fault point cannot be predicted, a network topology structure cannot be automatically identified and optimized and the compatibility is poor in a traditional monitoring system are solved.

The invention provides a function management method, which comprises the following steps of: receiving a function call trigger event which is triggered by a user and aims at a target function, acquiring function classification information of the target function according to a function identifier of the target function, and performing function call according to the function classification information of the target function and a mapping relationship between a function and a container type, and determining a target container type matched with the function classification information of the target function, allocating a container of the target container type to the target function from a container resource pool, and loading a code package of the target function in the container to execute a corresponding system calling behavior. According to the method, an isolation technology for matching the functions with the differentiated containers as required is provided, the functions are classified from security dimensions, and the functions of the containers are separated, so that the functions of different security types are operated in different container types, the calculation and data security of the functions are realized, the security guarantee of the serverless platform is realized, and the safety of the serverless platform is ensured. And the malicious function is prevented from escaping from the container and damaging the operation environment of the serverless platform.

The invention relates to an information management method for a supply chain comprehensive management platform, and the method comprises the steps: obtaining and sorting supply chain related enterprises, and determining a plurality of block chain nodes; obtaining operation data of supply chain associated enterprises, and storing the operation data to corresponding block chain nodes; label set mapping is carried out on the operation data based on the sorting result; respectively inputting the operation data into the prediction model and the optimization model; performing association analysis on the operation demand prediction information and the operation optimization information to generate an operation optimization strategy; the operation optimization strategy is stored in the block chain node correspondingly associated with the operation optimization strategy; according to the method, the blockchain technology is introduced, so that the transparency and traceability of supply chain information are realized, and the problems of information asymmetry and data islands are solved; demand prediction and process optimization are carried out through the pre-training model, so that the real-time response capability to market changes and risks is improved; and by generating and storing an optimization strategy, a basis and a safety guarantee are provided for continuous improvement of the supply chain.

The invention discloses an inner product encryption method, device and system based on a GR-LWE problem, and belongs to the technical field of information encryption, and the method comprises the following steps: generating a main public key and a corresponding main private key based on a dihedral non-exchangeable group ring and preset security parameters; obtaining vector data used for decryption, and carrying out operation on the vector data and the main private key to generate a decryption key used for decryption operation; vector data to be encrypted and plaintext data to be encrypted are obtained and are operated with the public key part in the main public key to generate a ciphertext; and a decryption key is used for carrying out decryption operation on the ciphertext, and when and only when the inner product result of the vector data for decryption and the vector data to be encrypted is 0, correct plaintext data can be obtained. According to the invention, an inner product encryption scheme is expanded to the dihedral non-exchangeable group ring, so that the security of the encryption scheme is improved, and long-term security guarantee is provided for resisting quantum computer attacks.

The invention provides a dynamic security division method and related equipment, and relates to the technical field of artificial intelligence. The method comprises the steps that environment element description information and user element description information are obtained from a spatial ontology knowledge model, the environment element description information is information for describing environment element categories, and the user element description information is information for describing user element categories; according to a preset security interaction rule, security interaction information between the environment element description information and the user element description information is constructed, and the security interaction rule is used for determining whether a security interaction relationship exists between the environment element and the user element; performing security assessment according to the security interaction information to obtain a security assessment result; and carrying out security division on the area in the application scene space according to a security evaluation result. According to the method and the device, security area division is carried out for the user in the application scene space, the space security guarantee of family members is improved, and the application scene space customized for area security is provided for the user.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of medical information security, in particular to a security guarantee method and system in a medical data interaction process, and the method comprises the steps: firstly carrying out the read-only solidification and disk encryption of data, and building a fingerprint hash tree; zero-knowledge proof and dynamic privacy budget are generated according to strategies such as purposes and calling times, and semantic vectors are obtained through encoding and signed into a revocation chain; the algorithm is divided into linear, nonlinear and pulse sub-graphs in a credible environment, three-domain ciphertext calculation is carried out, Laplace noise is injected into pulse output according to budget and then fusion is carried out, and a re-linearization key is derived; a hypergraph commitment is generated based on a fused ciphertext, a semantic vector and a key drive delay function are utilized to take a random value and a proof, a composite commitment is obtained through a threshold signature and a random bit sequence, cross-chain evidence storage with root hash is carried out, and differential privacy and long-term auditing are realized.

The invention discloses an AI large model-oriented financial private network optimization method and system, and relates to the technical field of communication networks. According to the method, an exclusive path strategy is generated for AI training, reasoning and sensitive data traffic by collecting AI service requirements and network states and utilizing the SID programming capability of SRv6; the load of the computing power node is monitored in real time, the computing power state is linked with network scheduling, and network-computing power collaborative optimization is realized; a hop-by-hop path authentication mechanism based on a dynamic authentication segment identifier Auth-SID is introduced, so that the security of a data transmission path is enhanced; and end-to-end visual operation and maintenance and closed-loop feedback of the service flow are realized by adopting a flow-following detection technology. According to the invention, the problems of mismatching of flow scheduling and AI service requirements, insufficient network and computing power collaboration, lack of path security guarantee and weak operation and maintenance visualization capability in the prior art are solved, deep adaptation of network resources and the AI service requirements is realized, and the computing power collaboration efficiency, the path security and the operation and maintenance intelligence level are improved.

The invention discloses a zero-trust gateway single packet authentication method and system for a new energy fan control system, computing equipment, a computer storage medium, a computer program product and a chip. The authentication method comprises the steps of generating an authentication material; exchanging and deriving a mixed key; binding Hash calculation is carried out; encrypting and assembling the message; receiving and verifying by the gateway; and binding verification and registration are carried out. The invention relates to a zero-trust gateway single packet authentication method combining a post quantum cryptography algorithm and a national commercial cryptography algorithm. The method is applied to secure communication between a wind power plant and a centralized control center, an SM2, SM3 and SM4 combined algorithm in a national secret system is combined with a post-quantum key agreement algorithm CRYSTALS-Kyber512, identity authentication, encryption and integrity verification are completed through a single message, confidentiality protection and anti-quantum security guarantee under one-time interaction are achieved, and the security of the wind power plant is improved. The method is especially suitable for new energy scenes with wide fan distribution, complex links and high real-time requirements.

The invention discloses a data transmission optimization system based on a communication network. According to the invention, the symmetric encryption module adopts an AES algorithm, and the high-speed encryption performance of the symmetric encryption module is used for quickly encrypting a large amount of data, so that the real-time performance of data transmission is ensured. And the asymmetric encryption module carries out security encryption on the symmetric key by using an RSA algorithm, so that the security of the key in the transmission process is ensured, and the risk of key leakage is prevented. The hybrid encryption controller module ingeniously combines the advantages of symmetric encryption and asymmetric encryption, generates a key in real time through the dynamic key generation module, and optimizes encrypted data through the ciphertext processing module, thereby constructing a multi-level and all-around security protection system. According to the design, various network attacks are effectively resisted, the integrity and non-tampering property of data transmission are guaranteed, and a solid security guarantee is provided for data transmission in a communication network.

The invention relates to the field of vulnerability detection, in particular to an intelligent contract vulnerability detection method and system based on taint analysis, and the method comprises the steps: carrying out the control flow analysis of an EVM byte code of an intelligent contract, and extracting key operation instructions in a control flow diagram and key parameters of each key operation instruction; performing access right control identification on the EVM byte code based on a defined access right control condition, and identifying access right control check and access right control state variables; setting a taint sink based on a key operation instruction and an access authority control state variable, performing taint analysis, generating a constraint condition of a taint flow path through symbolic execution, efficiently and accurately distinguishing expected normal operation in the smart contract from a real security vulnerability, negating the constraint condition to obtain a negative constraint condition, and finally obtaining an access authority control state variable. And negative constraint conditions are further solved, so that the accuracy and reliability of security analysis of the smart contract are remarkably improved, and powerful support is provided for security assurance of the smart contract.

The invention provides an equipment safety measure automatic generation rule base construction method and system, and relates to the technical field of equipment safety management.The method comprises the steps that initial deployment states of a power grid and power grid equipment are obtained, and initial comprehensive environment characteristics are generated; generating an initial security measure rule base according to the initial comprehensive environment characteristics; monitoring the power grid and the power grid equipment to obtain current operation data, and fusing the current operation data to obtain multi-source data of the power grid equipment; performing feature extraction on the multi-source data to obtain current comprehensive environment features; judging whether the operation environment of the power grid equipment is changed or not according to the current comprehensive environment characteristics and the initial comprehensive environment characteristics; if yes, updating the initial security measure rule base through a deep enhancement model according to the current comprehensive environment features and the initial comprehensive environment features, and obtaining a current security measure rule base. According to the invention, a more reliable and intelligent safety guarantee is provided for power grid equipment in a complex and changeable operation environment.

The invention relates to the technical field of data security, and discloses a data encryption strategy making and data full-life-cycle security guarantee system and method based on artificial intelligence, the system comprises a plurality of public clouds and an intelligent encryption and decryption engine, and a business system, a database, an encryption judgment service system and an encryption and decryption service system are respectively deployed on a plurality of public cloud platforms. The intelligent encryption and decryption engine comprises a cataloguing system, a key management service system and an authorization management service system; by introducing an intelligent encryption engine, a cataloguing system, an encryption judgment service, a key management module and an artificial intelligence algorithm, intelligent identification, dynamic updating and automatic execution of a data encryption strategy are realized, and a set of security guarantee system covering the full life cycle of data is constructed in combination with a plurality of links such as authorization management and encryption and decryption services.

The invention discloses a quantum key distribution system and method. According to the system, a phase coherence monitoring mechanism is innovatively introduced, and early attack detection is realized through a dynamic consensus sampling protocol; a zero-trust relay network is constructed by adopting a wavefront fragmentation principle, and trust dependence on relay nodes is eliminated; self-adaptive safety monitoring is realized based on a finite state automaton, and a system safety strategy is dynamically adjusted. According to the method, the problems of resource consumption type attack, relay trust dependence, static protocol limitation and the like faced by an existing QKD system are solved through a strict mathematical framework, and long-distance quantum key distribution with efficient resources, endogenous security and elasticity and physical layer security guarantee is realized. Experiments show that compared with a traditional scheme, the detection delay of the system is reduced by about 38%, the resource waste is reduced by about 40%, and the availability of the system reaches 99.995% or above.

The invention provides an insurance customer cross-institution credit risk assessment system based on federated learning, and relates to the technical field of credit risk assessment, and the system comprises a data preprocessing module, a federated training module, a privacy protection module, a block chain excitation module, an interpretability enhancement module, a model optimization module and a risk assessment module. Through federal learning, available and invisible collaboration of cross-mechanism data is realized, exclusive risk features of the insurance industry are extracted, training strategies and privacy protection intensity are dynamically adjusted, mechanism contributions are quantified, automatic excitation is performed, compliance interpretable evaluation results are generated, and an insurance service cycle optimization model is adapted. According to the invention, comprehensive improvement of risk assessment accuracy, business scene adaptability, privacy security guarantee and supervision compliance is realized through cooperation of multiple modules, and an efficient, safe and feasible integrated technical scheme is provided for cross-institution credit risk assessment in the insurance industry.

The invention discloses a cross-platform accounting automatic carry-over system which comprises a front-end application module, a data synchronization engine module, an intelligent carry-over module and a data analysis and safety guarantee module. The front-end application module is in real-time two-way communication with the rear end through WebSocket, monitors account operation of a user, and packages the account operation into a JSON data packet containing an operation type, a timestamp and a data fingerprint; the data synchronization engine module receives the operation data, stores the operation data into a database after standardization conversion and integrity verification, and pushes the operation data to a target platform in real time; a neural network model based on historical data and artificial sample training is built in the intelligent carry-over module, data needing to be carried over are automatically screened, and compliance subject conversion is executed; the data analysis and security assurance module generates a multi-dimensional financial statement, and data security is ensured by adopting encryption, redundant storage and abnormal monitoring; through the automatic processing flow, the efficiency of account transfer is improved, and manual intervention and errors are avoided.

The invention discloses an instruction tamper-proofing device for a traffic information board system, relates to the field of traffic information security, and solves the three technical problems of key clone risk, high computing power dependence and poor environmental adaptability of a traditional encryption scheme. A tamper-proof system is constructed through a triple cooperation mechanism: a unique unclonable physical feature is extracted based on a physical unclonable circuit, efficient integrity verification is realized through a segmented cascade parity check circuit, and a timestamp is accurately compared in combination with a temperature compensation clock; and multi-dimensional features are fused, spliced and integrated, tampering recognition is performed through feature comparison, and ultimate protection is formed if irreversible hardware is triggered to fail if tampering recognition is performed. The device achieves pure hardware millisecond-level response, thoroughly eliminates software dependence, maintains zero misjudgment rate in an extreme environment, ensures full-life-cycle safety of instructions through physical-level protection, and provides unduplicated safety guarantee for an information board system.

The present invention discloses a lightweight distributed security communication authentication method and system based on blockchain. The method completes the preliminary configuration and preprocessing through a security management center, generates the public parameters of the system and the information used in the signature authentication process by using the elliptic curve digital signature algorithm, and publishes the authentication information to the blockchain; the edge nodes perform the processing and operation of data locally to complete the authentication process of multiple subjects between the edge nodes and devices and between devices; after the multi-subject authentication process is completed, the negotiation of the shared key is realized through the transmission of three pieces of information. The present invention uses blockchain to realize the storage of key information, ensures the publicity and traceability of data, and reduces the centralization function of the security management center. In the multi-subject authentication process, the data is stored distributively, the distributed authentication between devices is realized, and the negotiation of the shared key is completed, providing security guarantee for the subsequent data transmission.