CN118316613A - Lightweight channel encryption method, device, equipment and storage medium - Google Patents

Abstract

The invention discloses a lightweight channel encryption method, a lightweight channel encryption device, lightweight channel encryption equipment and a lightweight channel encryption storage medium, wherein the lightweight channel encryption method comprises the following steps: generating a basic vector based on a secure two-party computing protocol, and determining an encryption key based on the basic vector; determining a target counter according to the basic vector, and determining a verification value of the target counter according to the channel number, the time stamp and the target counter of the sender node; and encrypting the channel number, the time stamp and the verification value according to the encryption key to generate a data synchronization signaling, and transmitting the data synchronization signaling to a receiver node. The invention improves the safety of data transmission.

Description

Lightweight channel encryption method, device, equipment and storage medium

Technical Field

The present invention relates to the field of computer technology, and in particular to a lightweight channel encryption method, device, equipment and storage medium.

Background technique

Under the command of the intelligent scheduling mechanism, big data finds matching computing nodes with the highest efficiency and lowest cost, completes the processing of data by computing power, and obtains results. In this process, a large amount of data is transmitted instantly in an unpredictable form between a large number of computing nodes distributed in the computing power network, and there is a risk that the data will be obtained by a third party, resulting in low security of data transmission.

Summary of the invention

The main purpose of the present invention is to provide a lightweight channel encryption method, device, equipment and storage medium, aiming to solve the problem of how to improve the security of data transmission.

To achieve the above object, the present invention provides a lightweight channel encryption method, which comprises the following steps:

generating a basis vector based on a secure two-party computation protocol, and determining an encryption key based on the basis vector;

Determine a target counter according to the base vector, and determine a verification value of the target counter according to the channel number of the sender node, the timestamp and the target counter;

The channel number, the timestamp and the verification value are encrypted according to the encryption key to generate data synchronization signaling, and the data synchronization signaling is sent to a receiving node.

Optionally, the step of generating a basis vector based on a secure two-party computing protocol includes:

generating a first random number;

Determine a second random number corresponding to the receiving node according to a secure two-party computing protocol and the first random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, the step of determining an encryption key based on the basis vector comprises:

determining an exclusive-or value of two terms of the basis vector;

A hash value of the XOR value is determined, and the encryption key is determined according to the hash value.

Optionally, after the step of sending the data synchronization signaling to the receiving node, the method further includes:

generating a stream cipher based on the encryption key and the target counter;

encrypting the data to be sent according to the stream cipher;

The encrypted data is sent to the receiving node.

To achieve the above object, the present invention further provides a lightweight channel encryption device, the device comprising:

A generation module, configured to generate a basis vector based on a secure two-party computing protocol, and determine an encryption key based on the basis vector;

a determination module, configured to determine a target counter according to the basic vector, and determine a verification value of the target counter according to a channel number of the sender node, a timestamp and the target counter;

The sending module is used to encrypt the channel number, the timestamp and the verification value according to the encryption key to generate data synchronization signaling, and send the data synchronization signaling to a receiving node.

To achieve the above object, the present invention also provides a lightweight channel encryption method, which is applied to a receiving node, and the method comprises:

A first computing module, configured to generate a basis vector based on a secure two-party computing protocol, and determine an encryption key based on the basis vector;

A receiving module, used to receive data synchronization signaling, and decrypt the data synchronization signaling according to the encryption key to obtain the channel number, timestamp and verification value of the target counter of the decrypted sender node;

A second calculation module, used to determine the counter to be determined according to the basic vector, and determine a reference verification value of each counter to be determined according to the channel number of the sender node, the timestamp and the counter to be determined;

A comparison module is used to compare the verification value of the target counter with the reference verification value, and determine the target counter selected by the sending node from the counters to be determined according to the comparison result.

Optionally, before the step of generating a basis vector based on the secure two-party computing protocol, the step further includes:

generating a second random number;

Determine a first random number of a sending node according to a secure two-party computing protocol and the second random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, after the step of comparing the verification value of the target counter with the reference verification value to obtain the target counter selected by the sending node, the step further includes:

Receive encrypted data;

determining a stream cipher based on the encryption key and a target counter selected by the sending node;

The data is decrypted according to the stream cipher.

To achieve the above-mentioned purpose, the present invention also provides a lightweight channel encryption device, which includes a memory, a processor, and a lightweight channel encryption program stored in the memory and executable on the processor. When the lightweight channel encryption program is executed by the processor, the various steps of the lightweight channel encryption method described above are implemented.

To achieve the above objectives, the present invention also provides a computer-readable storage medium, which stores a lightweight channel encryption program. When the lightweight channel encryption program is executed by a processor, it implements the various steps of the lightweight channel encryption method described above.

The present invention provides a lightweight channel encryption method, device, equipment and storage medium. The sending node generates a basic vector based on a secure two-party computing protocol, and determines an encryption key based on the basic vector; determines a target counter based on the basic vector, and determines a verification value of the target counter based on the channel number, timestamp and target counter of the sending node; encrypts the channel number, timestamp and verification value according to the encryption key to generate data synchronization signaling, and sends the data synchronization signaling to the receiving node. By generating data synchronization signaling, the sending node and the receiving node synchronize the encryption key and the counter, so that the sending node sends the encrypted data to the receiving node, and encrypts the data through the stream cipher generated by the encryption key and the counter, thereby improving the security of data transmission.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of the hardware structure of a lightweight channel encryption device according to an embodiment of the present invention;

FIG2 is a schematic diagram of a flow chart of an embodiment of a lightweight channel encryption method of the present invention;

FIG3 is a schematic diagram of nodes of a network structure of a lightweight channel encryption method of the present invention;

FIG4 is a schematic diagram of the interaction process between the sender node and the receiver node of the lightweight channel encryption method of the present invention;

FIG5 is a schematic diagram of data synchronization signaling of the lightweight channel encryption method of the present invention;

FIG6 is a schematic diagram of the interaction process between the sender node and the receiver node of the lightweight channel encryption method of the present invention;

FIG7 is a schematic diagram of data encryption of a lightweight channel encryption method of the present invention;

FIG8 is a schematic flow chart of another embodiment of a lightweight channel encryption method according to the present invention;

FIG9 is a schematic diagram of a data decryption process of a lightweight channel encryption method according to the present invention;

FIG10 is a flow chart of another embodiment of a lightweight channel encryption method of the present invention;

FIG11 is a schematic diagram of the logical structure of a lightweight channel encryption device according to an embodiment of the present invention;

FIG12 is a schematic diagram of the logical structure of a lightweight channel encryption device according to an embodiment of the present invention.

The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings.

Detailed ways

It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

The main solution of the embodiment of the present invention is: the sending node generates a basic vector based on a secure two-party computing protocol, and determines an encryption key based on the basic vector; determines a target counter according to the basic vector, and determines a verification value of the target counter according to the channel number, timestamp and target counter of the sending node; encrypts the channel number, timestamp and verification value according to the encryption key to generate data synchronization signaling, and sends the data synchronization signaling to the receiving node. By generating data synchronization signaling, the sending node and the receiving node synchronize the encryption key and the counter, so that the sending node sends the encrypted data to the receiving node, and encrypts the data through the stream cipher generated by the encryption key and the counter, thereby improving the data encryption efficiency and the security of data transmission.

As an implementation scheme, a lightweight channel encryption device may be as shown in FIG1 .

The embodiment of the present invention relates to a lightweight channel encryption device, which includes: a processor 101, such as a CPU, a memory 102, and a communication bus 103. The communication bus 103 is used to realize connection and communication between these components.

The memory 102 may be a high-speed RAM memory or a stable memory (non-volatile memory), such as a disk memory. As shown in FIG1 , the memory 102 as a computer-readable storage medium may include a lightweight channel encryption program; and the processor 101 may be used to call the lightweight channel encryption program stored in the memory 102 and perform the following operations:

generating a basis vector based on a secure two-party computation protocol, and determining an encryption key based on the basis vector;

Determine a target counter according to the base vector, and determine a verification value of the target counter according to the channel number of the sender node, the timestamp and the target counter;

The channel number, the timestamp and the verification value are encrypted according to the encryption key to generate data synchronization signaling, and the data synchronization signaling is sent to a receiving node.

Optionally, the processor 101 may be configured to call a lightweight channel encryption program stored in the memory 102, and perform the following operations:

generating a first random number;

Determine a second random number corresponding to the receiving node according to a secure two-party computing protocol and the first random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, the processor 101 may be configured to call a lightweight channel encryption program stored in the memory 102, and perform the following operations:

determining an exclusive-or value of two terms of the basis vector;

A hash value of the XOR value is determined, and the encryption key is determined according to the hash value.

Optionally, the processor 101 may be configured to call a lightweight channel encryption program stored in the memory 102, and perform the following operations:

generating a stream cipher based on the encryption key and the target counter;

encrypting the data to be sent according to the stream cipher;

The encrypted data is sent to the receiving node.

Optionally, the processor 101 may be configured to call a lightweight channel encryption program stored in the memory 102, and perform the following operations:

generating a basis vector based on a secure two-party computation protocol, and determining an encryption key based on the basis vector;

Receive data synchronization signaling, and decrypt the data synchronization signaling according to the encryption key to obtain the channel number, timestamp and verification value of the target counter of the decrypted sender node;

Determine the counter to be determined according to the basic vector, and determine a reference verification value of each counter to be determined according to the channel number of the sender node, the timestamp and the counter to be determined;

A comparison is performed between the verification value of the target counter and the reference verification value, and the target counter selected by the sending node is determined from among the counters to be determined according to the comparison result.

Optionally, the processor 101 may be used to call a lightweight channel encryption 5 program stored in the memory 102, and perform the following operations:

generating a second random number;

Determine a first random number of a sending node according to a secure two-party computing protocol and the second random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, the processor 101 may be configured to call a lightweight channel encryption program stored in the memory 102, and perform the following operations:

Receive encrypted data;

determining a stream cipher based on the encryption key and a target counter selected by the sending node;

The data is decrypted according to the stream cipher.

Based on the hardware architecture of the above-mentioned lightweight channel encryption device, an embodiment of the lightweight channel encryption method of the present invention is proposed.

2, FIG2 is a first embodiment of the lightweight channel encryption method of the present invention, the lightweight channel encryption method comprises the following steps: 0 step S10, based on the secure two-party computing protocol to generate a basis vector, and based on the basis vector to determine

Specify the encryption key.

Optionally, the method is applicable to any network structure to achieve efficient encrypted data transmission between two nodes in the network structure. Exemplarily, the network structure includes node A and node B, as shown in FIG3 , where node A is the sender node and node B is the receiver node. For example, the network structure is 5VPN (Virtual Private Network), which is used to establish a private network on a public network.

It is called a virtual network mainly because the two nodes of VPN do not use end-to-end physical links like traditional private networks, but are logical networks built on the public network, and user data is transmitted through logical links.

During the transmission and use of the network, data is transmitted in plain text on the network because no encryption service is provided. It can be easily intercepted by network attackers, and the text format and non-text binary data in the data can be easily restored. Therefore, it is very important to establish a safe and convenient network operating environment, provide sufficient protection for information, and encrypt the channel. Among them, the channel is a channel for transmitting data, such as TCP (Transmission Control Protocol) or IP (Internet Protocol) network. The channel can be understood logically as an abstract channel, or it can be an actual transmission channel with physical meaning. The channel encryption method focuses on solving the security problem of information during line transmission, and can well control the intrusion of illegal users.

Channel encryption uses link and network encryption technology to encrypt group information transmitted between communication nodes, such as IP network encryption machines. Channel encryption requires nodes to transmit encrypted synchronization information, occupying certain information resources of the channel. For nodes with limited resources and discontinuous information transmission, node channel resources must be fully utilized.

Optionally, the basis vector is generated by the sending node based on a secure two-party computation protocol, and the basis vector is used to generate an encryption key Key and a counter CTR.

Optionally, the sending node A generates a first random number Ra; determines a second random number Rb corresponding to the receiving node B according to a secure two-party computing protocol and the first random number Ra; and generates a basic vector according to the first random number Ra and the second random number Rb.

Among them, the secure two-party computing protocol can be a two-party garbled circuit protocol, and the computing function is the exclusive OR of Ra and Rb, that is, Rab = Ra⊕Rb. Both the sender node A and the receiver node B can obtain the Rab value, that is, Ra⊕Rb. During the interaction process, the sender node A and the receiver node B will not directly obtain the random number generated by the other party, and the third-party node will not obtain the first random number Ra of the sender node A and the second random number Rb of the receiver node B.

Optionally, as shown in FIG4 , the sending node A obtains the second random number Rb generated by the receiving node B by XORing the first random number Ra and Rab; the receiving node B obtains the first random number Ra generated by the sending node A by XORing the second random number Rb and Rab. The sending node A independently calculates Hash(Ra||Rb) and Hash(Rb||Ra), and the basic vector BaseVector＝{Hash(Ra||Rb), Hash(Rb||Ra)}. The receiving node B independently calculates Hash(Ra||Rb) and Hash(Rb||Ra), and the basic vector BaseVector＝{Hash(Ra||Rb), Hash(Rb||Ra)}. Among them, Hash() is the hash algorithm SM3, and the SM3 hash algorithm is suitable for the generation and verification of digital signatures and message authentication codes and the generation of random numbers, which can meet the security requirements of various cryptographic applications.

Optionally, an encryption key is determined based on the basic vector, an XOR value of two items of the basic vector is determined; a hash value of the XOR value is determined, and the encryption key Key is determined according to the hash value, as shown in the following formula:

Key = Hash(Hash(Ra||Rb)⊕Hash(Rb||Ra)).

At this time, the sending node A uses a secure multi-party computing protocol, such as a two-party confusion circuit protocol, to complete the encryption key initialization.

Step S20: determining a target counter according to the basic vector, and determining a verification value of the target counter according to the channel number of the sender node, the timestamp and the target counter.

Optionally, the sending node A randomly selects one of the two terms of the basic vector as the target counter CTR, while the receiving node B cannot know the target counter selected by the sending node A.

Optionally, the base vector BaseVector = {Hash(Ra||Rb), Hash(Rb||Ra)}; according to the base vector, the counter CTR = Hash(Ra||Rb), or the counter CTR = Hash(Rb||Ra) can be determined, and the target counter is one of the two counters.

Optionally, the sender node A determines the verification value of the target counter according to the channel number, timestamp and target counter associated with the sender node A. The channel number CID represents the logical channel associated with the data transmission, and each sending node has multiple logical channels; the timestamp Ts is the current standard time of the sender node A, accurate to seconds. Before each data transmission, the sender uses the channel number CID and timestamp Ts to participate in generating the verification value of the counter CTR.

Among them, when the target counter CTR is the counter Hash(Ra||Rb), the verification value of the target counter CTR is Hash(Hash(Ra||Rb)||CID||Ts); when the target counter CTR is the counter Hash(Rb||Ra), the verification value of the target counter CTR is Hash(Hash(Rb||Ra)||CID||Ts); among them, CID is the channel number and Ts is the timestamp.

Step S30: encrypt the channel number, the timestamp and the verification value according to the encryption key to generate data synchronization signaling, and send the data synchronization signaling to a receiving node.

Optionally, as shown in FIG6 , the channel number, timestamp and verification value are encrypted according to the encryption key to generate data synchronization signaling, as shown in FIG5 , wherein the data synchronization signaling includes the channel number, timestamp and verification value of the target counter. The sending node A sends the data synchronization signaling to the receiving node B. The data synchronization signaling is used to deliver necessary content to the receiving node so that the other party can restore the counter CTR; and to remind the receiving node to prepare for data reception.

Optionally, a stream cipher is generated according to the encryption key and the target counter. Optionally, a CTR encryption mode of the SM4 symmetric encryption algorithm is constructed according to the encryption key Key and the target counter CTR, that is, two parameters are required before each data encryption: the encryption key Key and the target counter CTR. Among them, different data blocks share the same encryption key Key, and the target counter CTR corresponding to each data block is increased by 1 based on the target counter CTR corresponding to the previous data block. Taking four groups of plaintext packets to be encrypted as an example, the encryption key and the target counter CTR generate a stream cipher to encrypt plaintext packet 1; the encryption key and the target counter CTR+1 generate a stream cipher to encrypt plaintext packet 2; the encryption key and the target counter CTR+2 generate a stream cipher to encrypt plaintext packet 3. Among them, after the data is encrypted, it does not need to conform to a specific format, and it can be transmitted only as an encrypted bit stream.

Among them, the SM4 symmetric encryption algorithm is a block symmetric encryption algorithm used to implement data encryption/decryption operations to ensure the confidentiality of data and information. The basic condition for ensuring the security of a symmetric encryption algorithm is that it has a sufficient key length. The SM4 algorithm has the same key length block length of 128 bits as the AES (Advanced Encryption Standard) algorithm, so it is more secure than the 3DES encryption algorithm.

The data to be sent is encrypted according to the stream cipher; the encrypted data is sent to the receiving node. As shown in Figure 7, taking four groups of plaintext packets to be encrypted as an example, plaintext packet 1 is encrypted according to the encryption key and the counter CTR to obtain ciphertext packet 1; plaintext packet 2 is encrypted according to the encryption key and the counter CTR+1 to obtain ciphertext packet 2; plaintext packet 3 is encrypted according to the encryption key and the counter CTR+2 to obtain ciphertext packet 3; plaintext packet 3 is encrypted according to the encryption key and the counter CTR+3 to obtain ciphertext packet 4.

This method does not use a public key cryptographic mechanism, but only a symmetric cryptographic mechanism, and does not require complex computing components such as large number operations and modular exponentiation operations. It is simpler and more efficient to implement this solution using pure software; in resource-constrained environments, such as network card firmware, optical module firmware, and embedded devices, this solution is easy to implement. This method uses a secure multi-party computing (two-party obfuscated circuit) protocol based on an obfuscated circuit to generate the initial synchronization parameters of the key stream in the symmetric cryptographic CTR mode through two-party calculations. This method has the convenience and flexibility of key negotiation, while avoiding the use of complex computing components such as large number operations and modular exponentiation operations. This solution only relies on a symmetric cryptographic mechanism, and the required cryptographic computing components are lighter than those of SSL and IPsec. Combined with the mode of the symmetric encryption algorithm CTR, an efficient stream cipher algorithm is constructed to achieve automatic synchronization of key streams between adjacent transmission nodes; parameter obfuscation technology is used to reduce the risk of channel monitoring; and a timestamp verification mechanism is used to identify replay attacks.

In the technical solution of this embodiment, the sending node generates a basic vector based on a secure two-party computing protocol, and determines an encryption key based on the basic vector; determines a target counter based on the basic vector, and determines a verification value of the target counter based on the channel number, timestamp and target counter of the sending node; encrypts the channel number, timestamp and verification value according to the encryption key to generate data synchronization signaling, and sends the data synchronization signaling to the receiving node. By generating data synchronization signaling, the sending node and the receiving node synchronize the encryption key and the counter, and realizes automatic synchronization of the key stream between the data transmission nodes so that the sending node sends the encrypted data to the receiving node, and encrypts the data through the stream cipher generated by the encryption key and the counter, thereby improving the data encryption efficiency and the security of data transmission.

8, FIG8 is a second embodiment of the lightweight channel encryption method of the present invention, the lightweight channel encryption method comprises the following steps:

Step S40, generating a basis vector based on a secure two-party computation protocol, and determining an encryption key based on the basis vector;

Step S50, receiving data synchronization signaling, and decrypting the data synchronization signaling according to the encryption key to obtain the channel number, timestamp and verification value of the target counter of the decrypted sender node;

Step S60, determining the counter to be determined according to the basic vector, and determining a reference verification value of each counter to be determined according to the channel number of the sender node, the timestamp and the counter to be determined;

Step S70: compare the verification value of the target counter with the reference verification value, and determine the target counter selected by the sending node from the counters to be determined according to the comparison result.

Optionally, the method is applicable to any network structure to achieve efficient encrypted data transmission between two nodes in the network structure. Exemplarily, the network structure includes node A and node B, as shown in FIG3 , where node A is a sender node and node B is a receiver node.

Optionally, the basis vector is generated by the receiving node based on a secure two-party computation protocol, and the basis vector is used to generate an encryption key Key and a counter CTR.

Optionally, the receiving node B generates a second random number Rb; determines the first random number Ra of the sending node according to the secure two-party computing protocol and the second random number Rb; and generates a basic vector according to the first random number Ra and the second random number Rb.

Among them, the secure two-party computing protocol can be a two-party garbled circuit protocol, and the computing function is the exclusive OR of Ra and Rb, that is, Rab = Ra⊕Rb. Both the sender node A and the receiver node B can obtain the Rab value, that is, Ra⊕Rb. During the interaction process, the sender node A and the receiver node B will not directly obtain the random number generated by the other party, and the third-party node will not obtain the first random number Ra of the sender node A and the second random number Rb of the receiver node B.

Optionally, as shown in FIG4 , the receiving node B obtains the first random number Ra generated by the sending node A by XORing the second random number Rb and Rab. The receiving node B independently calculates Hash(Ra||Rb) and Hash(Rb||Ra), and the basic vector BaseVector＝{Hash(Ra||Rb), Hash(Rb||Ra)}. Among them, Hash() is the hash algorithm SM3, and the SM3 hash algorithm is suitable for the generation and verification of digital signatures and message authentication codes and the generation of random numbers, which can meet the security requirements of various cryptographic applications.

Optionally, an encryption key is determined based on the basic vector, an XOR value of two items of the basic vector is determined; a hash value of the XOR value is determined, and the encryption key Key is determined according to the hash value, as shown in the following formula:

Key = Hash(Hash(Ra||Rb)⊕Hash(Rb||Ra)).

At this time, the receiving node B uses a secure multi-party computing protocol, such as a two-party confusion circuit protocol, to complete the encryption key initialization.

Optionally, the sender node A determines the verification value of the target counter according to the channel number, timestamp and target counter associated with the sender node A. The channel number CID represents the logical channel associated with the data transmission, and each sending node has multiple logical channels; the timestamp Ts is the current standard time of the sender node A, accurate to seconds. Before each data transmission, the sender uses the channel number CID and timestamp Ts to participate in generating the verification value of the counter CTR.

Among them, when the target counter CTR is the counter Hash(Ra||Rb), the verification value of the target counter CTR is Hash(Hash(Ra||Rb)||CID||Ts); when the target counter CTR is the counter Hash(Rb||Ra), the verification value of the target counter CTR is Hash(Hash(Rb||Ra)||CID||Ts); among them, CID is the channel number and Ts is the timestamp.

Optionally, as shown in Figure 6, the receiving node B determines the counter to be determined according to the base vector, and determines the reference verification value of each counter to be determined according to the channel number, timestamp and the counter to be determined of the sending node. Optionally, the base vector BaseVector = {Hash(Ra||Rb), Hash(Rb||Ra)}; according to the base vector, the counter to be determined CTR = Hash(Ra||Rb) or the counter to be determined CTR = Hash(Rb||Ra).

Optionally, the receiving node B compares the verification value of the target counter with the reference verification value, and determines the target counter selected by the sending node in the counter to be determined according to the comparison result. That is, the counter to be determined CTR1 = Hash (Ra||Rb), or the counter to be determined CTR2 = Hash (Rb||Ra), when the verification value of the target counter is Hash (Ra||Rb), the target counter is counter CTR1; when the verification value of the target counter is Hash (Rb||Ra), the target counter is CTR2.

Optionally, after step S70, the method further includes: receiving encrypted data; determining a stream cipher according to the encryption key and a target counter selected by the sending node; and decrypting the data according to the stream cipher.

Optionally, the data synchronization signaling includes a channel number, a timestamp and a verification value of a target counter as shown in FIG4 . The receiving node B receives the data synchronization signaling of the sending node A.

Optionally, as shown in FIG6 , the receiving node B generates a stream cipher according to the encryption key and the target counter. Optionally, the SM4 symmetric encryption algorithm CTR encryption mode is constructed according to the encryption key Key and the target counter CTR, that is, two parameters are required before each data decryption: the encryption key Key and the target counter CTR. Among them, different data blocks share the same encryption key Key, and the target counter CTR corresponding to each data block is added by 1 based on the target counter CTR corresponding to the previous data block. Taking four groups of ciphertext groups to be decrypted as an example, the encryption key and the target counter CTR generate a stream cipher to encrypt ciphertext group 1; the encryption key and the target counter CTR+1 generate a stream cipher to encrypt ciphertext group 2; the encryption key and the target counter CTR+2 generate a stream cipher to encrypt ciphertext group 3.

Decrypt the encrypted data according to the stream cipher. As shown in Figure 9, taking four groups of ciphertext groups to be decrypted as an example, ciphertext group 1 is decrypted according to the encryption key and counter CTR to obtain plaintext group 1; ciphertext group 2 is decrypted according to the encryption key and counter CTR+1 to obtain plaintext group 2; ciphertext group 3 is decrypted according to the encryption key and counter CTR+2 to obtain plaintext group 3; ciphertext group 3 is decrypted according to the encryption key and counter CTR+3 to obtain plaintext group 4.

In the technical solution of this embodiment, the sending node and the receiving node synchronize the encryption key and the counter through data synchronization signaling. The sending node sends the encrypted data to the receiving node. The receiving node can decrypt the encrypted data by using the stream cipher generated by the encryption key and the counter, thereby improving the security of data transmission.

In one embodiment, referring to FIG10, the sender node A generates a basis vector based on the secure two-party computing protocol, and determines an encryption key based on the basis vector; determines a target counter based on the basis vector, and determines a verification value of the target counter based on the channel number, timestamp and target counter of the sender node; encrypts the channel number, timestamp and verification value according to the encryption key to generate data synchronization signaling, and sends the data synchronization signaling to the receiver node. At the same time, the receiver node B generates a basis vector based on the secure two-party computing protocol, and determines an encryption key based on the basis vector.

The receiving node B receives the data synchronization signaling, and decrypts the data synchronization signaling according to the encryption key to obtain the channel number, timestamp and verification value of the target counter of the decrypted sending node; 5 determines the counter to be determined according to the basic vector, and determines the reference verification value of each counter to be determined according to the channel number, timestamp and counter to be determined of the sending node; compares the verification value of the target counter with the reference verification value, and determines the target counter selected by the sending node in the counter to be determined according to the comparison result.

0 Referring to FIG. 11 , the present invention further provides a lightweight channel encryption device, the device comprising:

A generating module 100, configured to generate a basis vector based on a secure two-party computing protocol, and determine an encryption key based on the basis vector;

A determination module 200 is used to determine a target counter according to the basic vector, and to determine a verification value of the target counter according to the channel number, the timestamp and the target counter of the sending node; a sending module 300 is used to encrypt the channel number, the timestamp and the verification value according to the encryption key to generate data synchronization signaling, and to send the data synchronization signaling to the receiving node.

Optionally, the step of generating a basis vector based on a secure two-party computing protocol includes:

generating a first random number;

0. Determine a second random number corresponding to the receiving node according to a secure two-party computing protocol and the first random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, the step of determining an encryption key based on the basis vector comprises:

determining an exclusive-or value of two terms of the basis vector;

5. Determine a hash value of the XOR value, and determine the encryption key according to the hash value.

Optionally, after the step of sending the data synchronization signaling to the receiving node, the method further includes:

generating a stream cipher based on the encryption key and the target counter;

encrypting the data to be sent according to the stream cipher;

0 sends the encrypted data to the receiving node.

12, the present invention also provides a lightweight channel encryption device, the device comprising:

A first computing module 400, configured to generate a basis vector based on a secure two-party computing protocol, and determine an encryption key based on the basis vector;

The receiving module 500 is used to receive the data synchronization signaling, and decrypt the data synchronization signaling according to the encryption key to obtain the channel number, timestamp and verification value of the target counter of the decrypted sending node;

A second calculation module 600, configured to determine a counter to be determined according to the basic vector, and determine a reference verification value of each counter to be determined according to the channel number of the sender node, the timestamp and the counter to be determined;

The comparison module 700 is used to compare the verification value of the target counter with the reference verification value, and determine the target counter selected by the sending node from the counters to be determined according to the comparison result.

Optionally, before the step of generating a basis vector based on the secure two-party computing protocol, the step further includes:

generating a second random number;

Determine a first random number of a sending node according to a secure two-party computing protocol and the second random number;

A basis vector is generated according to the first random number and the second random number.

Optionally, after the step of comparing the verification value of the target counter with the reference verification value to obtain the target counter selected by the sending node, the step further includes:

Receive encrypted data;

determining a stream cipher based on the encryption key and a target counter selected by the sending node;

The data is decrypted according to the stream cipher.

The present invention also provides a lightweight channel encryption device, which includes a memory, a processor, and a lightweight channel encryption program stored in the memory and executable on the processor. When the lightweight channel encryption program is executed by the processor, the various steps of the lightweight channel encryption method described in the above embodiment are implemented.

The present invention also provides a computer-readable storage medium, which stores a lightweight channel encryption program. When the lightweight channel encryption program is executed by a processor, it implements the various steps of the lightweight channel encryption method described in the above embodiment.

The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, system, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, system, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, system, article or device including the element.

Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment system can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a computer-readable storage medium (such as ROM/RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for enabling a terminal device (which can be a mobile phone, a computer, a parking management device, an air conditioner, or a network device, etc.) to execute the system described in each embodiment of the present invention.

The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims (10)

1. A lightweight channel encryption method, for use with a sender node, the method comprising:

Generating a basic vector based on a secure two-party computing protocol, and determining an encryption key based on the basic vector;

determining a target counter according to the basic vector, and determining a verification value of the target counter according to the channel number, the time stamp and the target counter of the sender node;

And encrypting the channel number, the time stamp and the verification value according to the encryption key to generate a data synchronization signaling, and transmitting the data synchronization signaling to a receiver node.

2. The lightweight channel encryption method as set forth in claim 1, wherein the step of generating the basis vector based on the secure two-party computing protocol includes:

generating a first random number;

Determining a second random number corresponding to the receiver node according to the secure two-party computing protocol and the first random number;

and generating a basic vector according to the first random number and the second random number.

3. The lightweight channel encryption method as set forth in claim 1, wherein the step of determining an encryption key based on the basis vector includes:

Determining an exclusive or value of two terms of the base vector;

and determining the hash value of the exclusive or value, and determining the encryption key according to the hash value.

4. The lightweight channel encryption method as set forth in claim 1, further comprising, after the step of transmitting the data synchronization signaling to the receiver node:

generating a stream cipher according to the encryption key and the target counter;

encrypting the data to be transmitted according to the stream cipher;

And sending the encrypted data to the receiver node.

5. A lightweight channel encryption method for use with a receiver node, the method comprising:

Generating a basic vector based on a secure two-party computing protocol, and determining an encryption key based on the basic vector;

Receiving a data synchronization signaling, decrypting the data synchronization signaling according to the encryption key, and obtaining a channel number, a time stamp and a verification value of a target counter of a decrypted sender node;

determining a counter to be determined according to the basis vector, and determining a reference verification value of each counter to be determined according to the channel number, the time stamp and the counter to be determined of the sender node;

And comparing the verification value of the target counter with the reference verification value, and determining a target counter selected by the sender node from the counters to be determined according to the comparison result.

6. The lightweight channel encryption method as set forth in claim 5, further comprising, prior to the step of generating the basis vector based on the secure two-party computing protocol:

generating a second random number;

determining a first random number of a sender node according to a secure two-party calculation protocol and the second random number;

and generating a basic vector according to the first random number and the second random number.

7. The lightweight channel encryption method as set forth in claim 5, wherein after the step of comparing the verification value of the target counter with the reference verification value to obtain the target counter selected by the sender node, further comprising:

Receiving the encrypted data;

Determining a stream cipher according to the encryption key and a target counter selected by the sender node;

Decrypting the data according to the stream cipher.

8. A lightweight channel encryption device, said device comprising:

the generation module is used for generating a basic vector based on a secure two-party computing protocol and determining an encryption key based on the basic vector;

A determining module, configured to determine a target counter according to the base vector, and determine a verification value of the target counter according to the channel number of the sender node, the timestamp, and the target counter;

and the sending module is used for encrypting the channel number, the time stamp and the verification value according to the encryption key to generate a data synchronous signaling, and sending the data synchronous signaling to a receiver node.

9. A lightweight channel encryption device, characterized in that the lightweight channel encryption device 5 comprises a memory, a processor and a lightweight channel encryption routine stored in the memory and executable on the processor, the lightweight channel encryption routine, when executed by the processor, implementing the steps of the lightweight channel encryption method according to any of claims 1-4 or 5-7.

10. A computer readable storage medium, characterized in that the computer readable storage medium 0 stores a lightweight channel encryption routine, which when executed by a processor, implements the respective steps of the lightweight channel encryption method according to any one of claims 1-4 or 5-7.