CN114301612A - Information processing method, communication apparatus, and encryption apparatus - Google Patents

Abstract

The present invention provides an information processing method, a communication device and an encryption device. The information processing method includes: sending encrypted device information of an encrypted device supported by the first communication device to the blockchain; receiving first data sent by the second communication device, the first data being based on the support of the first communication device The encrypted device information is calculated; and the received first data is processed. The scheme of the present invention can avoid forgery of PKG information and malicious PKG attack.

Description

Information processing method, communication device and encryption device

technical field

The present invention relates to the technical field of communication, and in particular, to an information processing method, a communication device and an encryption device.

Background technique

Identity-Based Cryptograph (IBC) is an asymmetric public key cryptography system. In an identity-based cryptosystem, each entity has an identity, which can be any meaningful string, and the entity's identity itself is used as the entity's public key. Since the identity itself is the entity's public key, such systems no longer rely on certificates and certificate management systems, greatly simplifying the complexity of managing cryptographic systems.

The basic structure of the cryptosystem based on IBC technology is shown in the following figure. The private key generator (PKG, Private KeyGenerator) is the core part of IBC. Its main function is to generate the master key (Master Key) and public parameters (Public Params) when the IBC system is initialized, and to publish the public parameters publicly. User ID (such as IMSI, email address, mobile phone number and other public information) to generate the corresponding private key for the user. It can be divided into identity-based encryption algorithm (IBE, Identity Based Encryption), and identity-based signature algorithm (IBS, Identity Based Signature).

Compared with the traditional PKI (Public Key Infrastructure) system, the user of the IBC system can easily obtain the public key of the communicating party (determined directly by the ID), without using a special digital certificate to bind the identity information and public key, There is no need for certificate request and certificate delivery process, which can effectively reduce the communication overhead caused by certificate delivery in the process of data interaction, and simplify the certificate management mechanism and process during authentication.

When using the IBC technology, users need to obtain the public parameters of the IBC system from the PKG first. With the development of the technology, there may be multiple sets of IBC systems connected to the network. If the public parameters of the IBC system are unprotected, the attacker may publish false public parameters to use other legitimate IBC systems; making users encrypt data with false public parameters and the identity of the receiver, since the public parameters are published by the attacker , then the attacker can decrypt the user's encrypted data, and can impersonate the receiver to sign.

In order to prevent attackers from tampering or publishing false PKG public parameters, PKG needs to protect the public parameters of the system to ensure the integrity and validity of the public parameters. At present, a more feasible way is to use PKI technology to sign the public parameters of PKG, and store the signature information together with the public parameters as part of the public parameters. When users use the public parameters, they first verify the validity of the public parameters to prevent attackers. Tampering with public parameters. However, using this scheme not only needs to preset a trusted digital certificate on the user terminal, but also needs to verify the signature of the PKI during identity verification (currently, 1024 or 2048-bit RSA algorithm is mostly used), resulting in a large calculation. load, increasing the burden of message delivery. At the same time, IBC users also have another requirement, that is, they do not want to register themselves on a large number of PKGs.

SUMMARY OF THE INVENTION

The present invention provides an information processing method, a communication device and an encryption device. It can protect PKG based on the blockchain, avoiding the forgery of PKG information and malicious PKG attacks.

For solving the above-mentioned technical problems, the technical scheme of the present invention is as follows:

An information processing method, applied to a first communication device, comprising:

sending the encrypted device information of the encrypted device supported by the first communication device to the blockchain;

receiving first data sent by the second communication device, where the first data is calculated based on encrypted device information supported by the first communication device;

The received first data is processed.

Optionally, sending the encrypted device information of the encrypted device supported by the first communication device to the blockchain includes:

Send the encrypted device information supported by the first communication device to the verification node of the blockchain;

The user identity of the first communication device is verified by the verification node, and the blockchain is queried for the consistency between the encrypted device information supported by the first communication device and the encrypted device information stored in the blockchain. The encryption device information of the supported encryption devices of the first communication device is recorded in the blockchain.

Optionally, the encryption device information includes a user identifier of the first communication device, a user identifier of the encryption device, and public parameters.

Optionally, the first data calculated according to the encrypted device information supported by the first communication device includes at least one of the following:

An encrypted message calculated according to the user identity and public parameters of the first communication device, wherein the encrypted message includes the user identity, public parameters and ciphertext of the first communication device;

The signed message calculated based on the private key and public parameters of the second communication device, the signed message includes the user identification of the second communication device, the original message, the signature, and the user identification and public parameters of the encryption device.

Optionally, processing the received first data includes at least one of the following:

When the first communication device receives the encrypted message, decrypt the encrypted message by using the private key of the first communication device;

When the first communication device receives the signed message, the signed message is verified using the user identification and public parameters of the second communication device.

Optionally, the encryption device is a private key generator in an identity-based cryptographic system.

Optionally, the encrypted device information further includes a uniform resource locator URL message of the encrypted device.

An information processing method, applied to a second communication device, the method comprising:

Query the encrypted device information of the encrypted device supported by the first communication device from the blockchain;

Calculate the first data to be sent based on the encrypted device information supported by the first communication device;

The first data is sent to the first communication device.

Optionally, the encryption device information includes a user identifier of the first communication device, a user identifier of the encryption device, and public parameters.

Optionally, calculating the first data to be sent based on the encrypted device information supported by the first communication device includes at least one of the following:

The encrypted message is calculated and obtained according to the user identification and public parameters of the first communication device, wherein the encrypted message includes the user identification, public parameters and ciphertext of the first communication device;

Obtain the private key of the second communication device, and calculate signature information based on the private key of the second communication device and the public parameters, where the signature information includes the user ID of the second communication device, the original message, the signature, the user ID of the encryption device and the disclosure parameter.

Optionally, sending the first data to the first communication device includes at least one of the following:

sending the encrypted message to the first communication device;

The signature information is sent to the first communication device.

Optionally, sending the encrypted message to the first communication device includes:

sending the encrypted message to a security gateway;

The security gateway verifies whether the encrypted device information carried in the encrypted message is consistent with the encrypted device information of the encrypted device supported by the first communication device on the blockchain, and if so, sends the encrypted message to the first communication device; otherwise, deletes the encrypted message.

Optionally, the encryption device is a private key generator in an identity-based cryptographic system.

Optionally, the encrypted device information further includes a URL message of the encrypted device.

A method for reporting encrypted device information, applied to an encrypted device, comprising:

generate at least one public parameter;

sending the user identification of the encryption device and the at least one public parameter to the verification node of the blockchain,

Record the user ID and at least one public parameter verified by the verification node of the blockchain to the blockchain.

Optionally, the method further includes:

The encryption device issues a public parameter update request;

Use the private key of the encryption device to sign the public parameters to be updated to generate signature information;

Send the signature information to the verification node of the blockchain;

The verification node of the blockchain queries the blockchain for the public parameters of the encryption device, and uses the user ID of the encryption device and the public parameters to verify the signature information. After the verification is passed, the public parameters to be updated are uploaded to the blockchain.

Optionally, the encryption device is a private key generator in an identity-based cryptographic system.

A first communication device, comprising:

The first sending module sends the encrypted device information of the encrypted device supported by the first communication device to the blockchain;

a receiving module that receives first data sent by the second communication device, where the first data is calculated based on encrypted device information supported by the first communication device;

The processing module processes the received first data.

A second communication device, comprising:

a query module, which queries the blockchain for encrypted device information of the encrypted device supported by the first communication device;

a calculation module, which calculates the first data to be sent based on the encrypted device information supported by the first communication device;

The second sending module sends the first data to the first communication device.

An encryption device comprising:

Generate a module that generates at least one public parameter;

The third sending module sends the user identification of the encryption device and the at least one public parameter to the verification node of the blockchain,

The recording module records the user ID and at least one public parameter verified by the verification node of the blockchain to the blockchain.

An embodiment of the present invention also provides a communication device, comprising: a processor and a memory storing a computer program, the computer program executing the above method when the processor is run.

Embodiments of the present invention also provide a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the above-described method.

The above-mentioned scheme of the present invention at least includes the following beneficial effects:

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

Description of drawings

1 is a schematic flowchart of an information processing method according to an embodiment of the present invention;

Fig. 2 is the schematic diagram of the PKG identity protection system of the embodiment of the present invention;

3 is a schematic diagram of PKG information supported by a user according to an embodiment of the present invention;

4 is another schematic flow chart of the information processing method according to the embodiment of the present invention;

5 is a schematic flowchart of a method for reporting encrypted device information according to an embodiment of the present invention;

6 is a schematic diagram of PKG information reported by PKG according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a first communication device according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of a second communication device according to an embodiment of the present invention;

FIG. 9 is a schematic diagram of an encryption device according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided so that the present disclosure will be more thoroughly understood, and will fully convey the scope of the present disclosure to those skilled in the art.

As shown in FIG. 1, an embodiment of the present invention provides an information processing method, applied to a first communication device, including:

Step 110, sending the encrypted device information of the encrypted device supported by the first communication device to the blockchain;

Step 120: Receive first data sent by the second communication device, where the first data is calculated based on encrypted device information supported by the first communication device;

Step 130: Process the received first data.

In the above solution of the present invention, the first communication device is the sender of the information in the IBC system, the second communication device is the receiver of the information, and the encryption device is the PKG in the IBC system.

Figure 2 shows a decentralized PKG identity protection system, which consists of several PKG, IBC private key users, IBC relying parties, and verification nodes, and performs PKG information release, user-supported PKG information release, and IBC encryption processes , IBC signature process, PKG information update and other processes.

First, the system architecture of the system shown in FIG. 2 will be described.

Blockchain: Store PKG and its public parameter information, IBC relying party and its trusted PKG information.

PKG: The private key generator in the IBC system generates public parameters, sends the public parameters to the verification node, and records the information after the verification node has passed the verification in the blockchain.

IBC Relying Party: A party that trusts and uses a PKG, and the relying party does not need to have a private key; for example, the encrypting party (message sender) in the encryption model, the verifier (message receiver) in the signature model.

IBC private key user: a participant who needs to register in PKG and apply for a private key; for example, the decryptor (message receiver) in the encryption model, and the signer (message sender) in the signature model;

Blockchain verification node: Receive PKG information submitted by PKG and PKG update information, and verify these information; receive trusted PKG and its public parameters submitted by IBC private key users or IBC relying parties, and verify these information .

In an optional embodiment of the present invention, step 110 includes:

Send the encrypted device information supported by the first communication device to the verification node of the blockchain;

The user identity of the first communication device is verified by the verification node, and the blockchain is queried for the consistency between the encrypted device information supported by the first communication device and the encrypted device information stored in the blockchain. The encryption device information of the supported encryption devices of the first communication device is recorded in the blockchain.

In this embodiment, the IBC private key user or relying party publishes the PKG information it supports. This process is mainly used for IBC private key users or IBC relying parties to publish their own trusted PKGs. Since there may be multiple PKGs, IBC private key users or relying parties (such as end users or operator network elements) may only trust some PKGs. Then these users or network elements can publish the trusted PKG information to the blockchain. When other users or network elements send IBC messages to these nodes, they need to use the PKG public parameters trusted by the receiver to calculate the IBC message.

The user sends the PKG information he trusts to the verification node. The verification node verifies the user's identity information, and queries the blockchain for the public parameter information of the PKG supported by the user, and verifies the consistency of the public parameters submitted by the user with the information in the blockchain. After the verification is passed, the user information and its trusted PKG Information will be recorded into the blockchain.

In an optional embodiment of the present invention, the encryption device information includes a user identifier of the first communication device, a user identifier of the encryption device, and public parameters.

In this embodiment, the PKG trusted by the user includes [user ID, PKG supported by the user, and public parameter information list]. As shown in Figure 3, the supportable PKG information declared by the user is expressed in block format. A block is divided into a block header and a block body. The block header uses the current general technology. The block body contains several records, which are supported PKG information declared by the user, mainly including user ID, PKG identity information, and public parameter information. It can also contain information such as the URL of the PKG. Each user can put their own supported PKG and public parameters on the blockchain.

In an optional embodiment of the present invention, the data calculated according to the encrypted device information supported by the first communication device includes at least one of the following:

An encrypted message calculated according to the user identity and public parameters of the first communication device, wherein the encrypted message includes the user identity, public parameters and ciphertext of the first communication device;

The signed message calculated based on the private key and public parameters of the second communication device, the signed message includes the user identification of the second communication device, the original message, the signature, and the user identification and public parameters of the encryption device.

In an optional embodiment of the present invention, step 130 includes at least one of the following:

When the first communication device receives the encrypted message, decrypt the encrypted message by using the private key of the first communication device;

When the first communication device receives the signed message, the signed message is verified using the user identification and public parameters of the second communication device.

In the IBC system, the information transmission process is mainly divided into two types, namely the IBC encryption process and the IBC front signature process.

In the IBC encryption process, for example, the mobile user (IBC relying party) sends an encrypted message to the operator's network element (IBC private key user). When the IBC relying party needs to send an encrypted message to the IBC private key user, the relying party first queries the blockchain for the PKG and public parameters trusted by the IBC private key user; the IBC relying party uses the IBC private key user's identity information and public parameters to calculate Encrypted message, the message contains the identity information, public parameters, ciphertext, etc. of the IBC private key user; the IBC relying party sends the encrypted message to the IBC private key user; after receiving the encrypted message, the private key user uses the private key Decrypt the message.

Specifically, the encryption process of the blockchain-based IBC system is as follows:

(1) A trusted PKG generates a master key (Master Key) and public parameters (Public Params), and publicly publishes information in the format [PKG_ID, Public Params] to the blockchain; such as [PKG_IoT1, Public Params_IoT1], [ PKG_IoT1, Public Params_IoT2].

(2) The recipient user declares the blockchain they support, public parameter information, and publishes it to the blockchain, for example: [Bob_ID, PKG_IoT1, Public Params_IoT2].

(3) When the sender user needs to send an encrypted message to the receiver user, query the receiver user's ID and supported Public Params from the blockchain, and calculate the receiver user's public key PubKeyBob=F(IDBob, PKG_IoT1, Public Params_IoT2), and then perform an encryption operation to obtain the ciphertext Cipher; wherein, the function F for calculating the public key is a public algorithm.

(4) The sender user sends the message [IDBob, Public Params_IoT2, Cipher] to the receiver user. After receiving the ciphertext, the recipient user uses the private key to decrypt it; if it is not registered, the private key corresponding to its ID (calculated by Master Key and ID) is obtained from PKG_IoT1.

(5) In order to avoid DoS attacks on the receiver, a security gateway can also be set up. In step (4), the sender user sends the message [IDBob, Public Params_IoT2, Cipher] to the security gateway. The validity of the message by the security gateway Verify: Query and verify from the blockchain. If the recipient user has declared support [PKG_IoT1, PublicParams_IoT2] on the blockchain, the information will be forwarded to the recipient user; otherwise, the information will be discarded.

In the ICB signing process, for example, the mobile user (IBC private key user) sends a signed message to the operator's network element (IBC relying party). When the IBC private key user needs to sign the message and the IBC relying party verifies it, the IBC private key user queries the blockchain for the PKG and public parameters supported by the IBC relying party, and applies for private key according to the supported PKG and its public parameters. The IBC private key user uses the applied private key and public parameters to calculate the signature, and sends the signed message to the relying party, where the signed message includes the IBC private key user's identity, the original text of the signed message, the signature, the PKG logo, and the PKG public. Parameters and other content; after the IBC relying party receives the signed message, it uses the IBC private key user identity information and PKG public parameters and other information to verify the signature.

Specifically, the signature process of the blockchain-based IBC system is as follows:

(1) The recipient user declares the blockchain they support, public parameter information, and publishes it in the blockchain, for example: [Bob_ID, PKG_IoT1, Public Params_IoT2];

(2) When the sender user needs to sign the message M and verify it by the receiver user, query the blockchain for the PKG and its public parameters supported by the receiver user, and apply for a private key according to the supported PKG and its public parameters ;

(3) The sender user uses the applied private key SkAlice and the public parameter Public Params_IoT2 of PKG to calculate the signature: SigAlice=F(M, SkAlice, Public Params), where F is the public algorithm;

(4) The sender user sends the message [Alice_ID, M, SigAlice, Public Params_IoT2] to the receiver user;

(5) After receiving the signed message sent by the sender user, the receiver user verifies the signature using the sender user's ID and public parameters to obtain the verification result.

In an optional embodiment of the present invention, the encryption device is a private key generator in an identity-based cryptographic system.

In an optional embodiment of the present invention, the encryption device information further includes a uniform resource locator URL message of the encryption device.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

As shown in FIG. 4 , an embodiment of the present invention provides an information processing method, which is applied to a second communication device, and the method includes:

Step 410, query the block chain for the encryption device information of the encryption device supported by the first communication device;

Step 420, calculating the first data to be sent based on the encrypted device information supported by the first communication device;

Step 430: Send the first data to the first communication device.

In an optional embodiment of the present invention, the encryption device information includes a user identifier of the first communication device, a user identifier of the encryption device, and public parameters.

In an optional embodiment of the present invention, step 420 includes at least one of the following:

The encrypted message is calculated and obtained according to the user identification and public parameters of the first communication device, wherein the encrypted message includes the user identification, public parameters and ciphertext of the first communication device;

Obtain the private key of the second communication device, and calculate signature information based on the private key of the second communication device and the public parameters, where the signature information includes the user ID of the second communication device, the original message, the signature, the user ID of the encryption device and the disclosure parameter.

In an optional embodiment of the present invention, step 430 includes at least one of the following:

sending the encrypted message to the first communication device;

The signature information is sent to the first communication device.

In an optional embodiment of the present invention, sending the encrypted message to the first communication device includes:

sending the encrypted message to a security gateway;

The security gateway verifies whether the encrypted device information carried in the encrypted message is consistent with the encrypted device information of the encrypted device supported by the first communication device on the blockchain, and if so, sends the encrypted message to the first communication device; otherwise, deletes the encrypted message.

In this embodiment, in order to avoid DoS attacks on the receiver, a security gateway can also be set, and the sender user sends the message [IDBob, Public Params_IoT2, Cipher] to the security gateway, and the security gateway verifies the validity of the message: from Query verification on the blockchain, if the recipient user has declared support [PKG_IoT1, PublicParams_IoT2] on the blockchain, the information will be forwarded to the recipient user; otherwise, the information will be discarded.

In an optional embodiment of the present invention, the encryption device is a private key generator in an identity-based cryptographic system.

In an optional embodiment of the present invention, the encrypted device information further includes a URL message of the encrypted device.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

As shown in Figure 5, a method for reporting encrypted device information, applied to an encrypted device, includes:

Step 510, generating at least one public parameter;

Step 520, sending the user identification of the encryption device and the at least one public parameter to the verification node of the blockchain,

Step 530: Record the user ID and at least one public parameter that are verified by the verification node of the blockchain into the blockchain.

In an optional embodiment of the present invention, the method for reporting encrypted device information further includes:

The encryption device issues a public parameter update request;

Use the private key of the encryption device to sign the public parameters to be updated to generate signature information;

Send the signature information to the verification node of the blockchain;

The verification node of the blockchain queries the blockchain for the public parameters of the encryption device, and uses the user ID of the encryption device and the public parameters to verify the signature information. After the verification is passed, the public parameters to be updated are uploaded to the blockchain.

In the IBC system, the PKG information release process is as follows:

(1) PKG generates public parameters, and one PKG can generate multiple sets of public parameters;

(2) PKG sends its own information (including PKG name, URL, etc.) and public parameter information to the verification node;

(3) The verification node verifies the information submitted by PKG. After the verification is passed, the information will be recorded in the blockchain.

When PKG needs to update public parameters and other information, PKG executes the PKG information update process, as follows:

(1) When PKG needs to update information, such as generating new public parameters [PKG_IoT1, Public Params_IoT3], then PKG generates a public information release request, and uses the original IBC private key to sign the new public parameters;

(2) PKG sends the signature to the verification node;

(3) The verification node queries the blockchain for the public parameter information of PKG, and uses its ID and public parameters to verify the correctness of the signature. After verification, the new public parameters will be recorded in the blockchain.

As shown in FIG. 6, PKG information is represented using a block format. The block is divided into a block header and a block body. The block header uses the current general technology, and the block body contains several records, mainly including the identity information and public parameter information of the PKG. Each PKG puts its own public parameters on the blockchain. Optionally, the PKG information supported by the user and the information disclosed by the PKG itself may be recorded in the same blockchain, or may be recorded in different blockchains, which is not limited here.

In an optional embodiment of the present invention, the encryption device is a private key generator in an identity-based cryptographic system.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

As shown in FIG. 7, an embodiment of the present invention provides a first communication device 70, including:

The first sending module 710 sends the encrypted device information of the encrypted device supported by the first communication device to the blockchain;

A receiving module 720, receiving first data sent by the second communication device, where the first data is calculated based on encrypted device information supported by the first communication device;

The processing module 730 processes the received first data.

In the embodiment of the present disclosure, the illustrated first sending module 710 is specifically used for:

Send the encrypted device information supported by the first communication device to the verification node of the blockchain;

The user identity of the first communication device is verified by the verification node, and the blockchain is queried for the consistency between the encrypted device information supported by the first communication device and the encrypted device information stored in the blockchain. The encryption device information of the supported encryption devices of the first communication device is recorded in the blockchain.

In an embodiment of the present disclosure, the encrypted device information includes a user identifier of the first communication device, a user identifier of the encrypted device, and public parameters.

In the embodiment of the present disclosure, the first data calculated according to the encrypted device information supported by the first communication device includes at least one of the following:

An encrypted message calculated according to the user identity and public parameters of the first communication device, wherein the encrypted message includes the user identity, public parameters and ciphertext of the first communication device;

The signed message calculated based on the private key and public parameters of the second communication device, the signed message includes the user identification of the second communication device, the original message, the signature, and the user identification and public parameters of the encryption device.

In this embodiment of the present disclosure, the processing module 730 is specifically configured to:

When the first communication device receives the encrypted message, decrypt the encrypted message by using the private key of the first communication device;

When the first communication device receives the signed message, the signed message is verified using the user identification and public parameters of the second communication device.

In the embodiment of the present disclosure, the encryption device is a private key generator in an identity-based cryptographic system.

In an embodiment of the present disclosure, the encrypted device information further includes a Uniform Resource Locator URL message of the encrypted device.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

As shown in FIG. 8, an embodiment of the present invention provides a second communication device 80, including:

The query module 810 queries the blockchain for encryption device information of the encryption device supported by the first communication device;

A calculation module 820, calculating the first data to be sent based on the encrypted device information supported by the first communication device;

The second sending module 830 sends the first data to the first communication device.

In an embodiment of the present disclosure, the encrypted device information includes a user identifier of the first communication device, a user identifier of the encrypted device, and public parameters.

In the embodiment of the present disclosure, the computing module 820 is specifically used for:

The encrypted message is calculated and obtained according to the user identification and public parameters of the first communication device, wherein the encrypted message includes the user identification, public parameters and ciphertext of the first communication device;

Obtain the private key of the second communication device, and calculate signature information based on the private key of the second communication device and the public parameters, where the signature information includes the user ID of the second communication device, the original message, the signature, the user ID of the encryption device and the disclosure parameter.

In this embodiment of the present disclosure, the second sending module 830 is specifically configured to:

sending the encrypted message to the first communication device; or

The signature information is sent to the first communication device.

In an embodiment of the present disclosure, sending the encrypted message to the first communication device includes:

sending the encrypted message to a security gateway;

The security gateway verifies whether the encrypted device information carried in the encrypted message is consistent with the encrypted device information of the encrypted device supported by the first communication device on the blockchain, and if so, sends the encrypted message to the first communication device; otherwise, deletes the encrypted message.

In the embodiment of the present disclosure, the encryption device is a private key generator in an identity-based cryptographic system.

In an embodiment of the present disclosure, the encrypted device information further includes a URL message of the encrypted device.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

As shown in FIG. 9, an embodiment of the present invention provides an encryption device, including:

generating module 910, generating at least one public parameter;

The third sending module 920 sends the user identification of the encryption device and the at least one public parameter to the verification node of the blockchain,

The recording module 930 records the user ID and at least one public parameter passed by the verification node of the blockchain to the blockchain.

In an embodiment of the present disclosure, when an encryption device issues a public parameter update request, the generating module 910 uses the private key of the encryption device to sign the public parameters to be updated to generate signature information; the third sending module 920 sends The signature information is sent to the verification node of the blockchain; the verification node of the blockchain queries the blockchain for the public parameters of the encryption device, and uses the user ID of the encryption device and the public parameters to verify the signature information. After the verification is passed, the recording module 930 Upload the public parameters to be updated to the blockchain.

In the embodiment of the present disclosure, the encryption device is a private key generator in an identity-based cryptographic system.

In the above solution of the present invention, in the IBC system, a legal PKG needs to register and register its public parameters on the blockchain; when the sender tries to send a message, it can check the identity and the validity of the public parameters through the on-chain query. sex before sending confidential data. Registering PKG information through the blockchain avoids the forgery of PKG information. In addition, the receiver of the message declares the PKG information it supports based on the blockchain, which can avoid malicious PKG attacks.

An embodiment of the present invention also provides a communication device, comprising: a processor and a memory storing a computer program, the computer program executing the above method when the processor is run. All implementation manners in the foregoing method embodiment are applicable to this embodiment, and the same technical effect can also be achieved.

Embodiments of the present invention also provide a computer-readable storage medium comprising instructions that, when executed on a computer, cause the computer to perform the method as described above. All implementation manners in the foregoing method embodiment are applicable to this embodiment, and the same technical effect can also be achieved.

Those of ordinary skill in the art can realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of the present invention.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the above-described systems, devices and units may refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

In the embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the apparatus embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit.

The functions, if implemented in the form of software functional units and sold or used as independent products, may be stored in a computer-readable storage medium. Based on such understanding, the technical solution of the present invention can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: a U disk, a removable hard disk, a ROM, a RAM, a magnetic disk, or an optical disk and other mediums that can store program codes.

In addition, it should be pointed out that, in the apparatus and method of the present invention, obviously, each component or each step can be decomposed and/or recombined. These disaggregations and/or recombinations should be considered as equivalents of the present invention. Also, the steps of performing the above-mentioned series of processes can naturally be performed in chronological order in the order described, but need not necessarily be performed in chronological order, and some steps can be performed in parallel or independently of each other. Those of ordinary skill in the art can understand that all or any steps or components of the method and device of the present invention can be implemented in any computing device (including a processor, storage medium, etc.) or a network of computing devices in hardware, firmware, etc. , software or a combination thereof, which can be realized by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

Accordingly, the objects of the present invention can also be achieved by running a program or set of programs on any computing device. The computing device may be a known general purpose device. Therefore, the object of the present invention can also be achieved only by providing a program product containing program code for implementing the method or apparatus. That is, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any known storage medium or any storage medium developed in the future. It should also be pointed out that, in the device and method of the present invention, obviously, each component or each step can be decomposed and/or recombined. These disaggregations and/or recombinations should be considered as equivalents of the present invention. Also, the steps of executing the above-described series of processes can naturally be executed in chronological order in the order described, but need not necessarily be executed in chronological order. Certain steps may be performed in parallel or independently of each other.

The above are the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, several improvements and modifications can be made. It should be regarded as the protection scope of the present invention.

Claims (22)

1. An information processing method applied to a first communication device, comprising:

sending encryption equipment information of encryption equipment supported by the first communication equipment to the block chain;

receiving first data sent by second communication equipment, wherein the first data is obtained by calculation based on encryption equipment information supported by the first communication equipment;

and processing the received first data.

2. The method of claim 1, wherein sending encryption device information for encryption devices supported by the first communication device to the blockchain comprises:

sending the encrypted device information supported by the first communication device to a verification node of the blockchain;

and verifying the user identification of the first communication equipment through the verification node, inquiring the block chain about the consistency of the encryption equipment information supported by the first communication equipment and the encryption equipment information stored in the block chain, and recording the encryption equipment information of the encryption equipment supported by the first communication equipment into the block chain if the verification is passed.

3. The method of claim 2, wherein the encrypted device information comprises a user identification of the first communication device, a user identification of the encrypted device, and a public parameter.

4. The method according to claim 3, wherein the first data calculated according to the encryption device information supported by the first communication device comprises at least one of:

the method comprises the steps that an encrypted message is obtained through calculation according to a user identifier and a public parameter of first communication equipment, wherein the encrypted message comprises the user identifier, the public parameter and a ciphertext of the first communication equipment;

and calculating a signature message based on a private key and public parameters of the second communication equipment, wherein the signature message comprises a user identifier, a message original text, a signature of the second communication equipment and a user identifier and public parameters of the encryption equipment.

5. The method of claim 4, wherein processing the received first data comprises at least one of:

when the first communication device receives the encrypted message, decrypting the encrypted message by using a private key of the first communication device;

when the first communication device receives the signed message, the signed message is verified using the user identification and the public parameters of the second communication device.

6. The method of any one of claims 1-4, wherein the encryption device is a private key generator in an identity-based cryptographic system.

7. The method of claim 3, wherein the encrypted device information further comprises a Uniform Resource Locator (URL) message for the encrypted device.

8. An information processing method applied to a second communication device, the method comprising:

inquiring the encryption device information of the encryption device supported by the first communication device from the block chain;

calculating first data to be transmitted based on encrypted device information supported by the first communication device;

the first data is transmitted to the first communication device.

9. The method of claim 8,

the encryption device information includes a user identifier of the first communication device, a user identifier of the encryption device, and a public parameter.

10. The method of claim 9, wherein calculating the first data to be transmitted based on the encryption device information supported by the first communication device comprises at least one of:

calculating to obtain an encrypted message according to the user identifier and the public parameter of the first communication device, wherein the encrypted message comprises the user identifier, the public parameter and the ciphertext of the first communication device;

and acquiring a private key of the second communication equipment, and calculating signature information based on the private key and the public parameters of the second communication equipment, wherein the signature information comprises a user identifier of the second communication equipment, a message original text, a signature, a user identifier of the encryption equipment and the public parameters.

11. The method of claim 10, wherein transmitting the first data to the first communication device comprises at least one of:

sending the encrypted message to the first communication device;

the signature information is sent to the first communication device.

12. The method of claim 11, wherein sending the encrypted message to the first communication device comprises:

sending the encrypted message to a secure gateway;

the security gateway verifies whether the encryption equipment information carried in the encryption message is consistent with the encryption equipment information of the encryption equipment supported by the first communication equipment in the block chain, and if so, the encryption message is sent to the first communication equipment; otherwise, the encrypted message is deleted.

13. The method of any one of claims 8-12, wherein the encryption device is a private key generator in an identity-based cryptographic system.

14. The method of claim 9, wherein the encrypted device information further comprises a URL message of the encrypted device.

15. A method for reporting information of encrypted equipment is applied to the encrypted equipment and comprises the following steps:

generating at least one public parameter;

sending the user identification of the cryptographic device and the at least one public parameter to an authentication node of the blockchain,

and recording the user identification and at least one public parameter which are verified by the verification node of the block chain to the block chain.

16. The method of claim 15, further comprising:

the encryption equipment issues a public parameter updating request;

signing the public parameter to be updated by using a private key of the encryption equipment to generate signature information;

sending the signature information to a verification node of the block chain;

and the verification node of the block chain inquires the public parameter of the encryption equipment from the block chain, verifies the signature information by using the user identifier of the encryption equipment and the public parameter, and uploads the public parameter to be updated to the block chain after the verification is passed.

17. The method of claim 15 or 16, wherein the encryption device is a private key generator in an identity based cryptographic system.

18. A first communications device, comprising:

the first sending module is used for sending the encryption equipment information of the encryption equipment supported by the first communication equipment to the block chain;

the receiving module is used for receiving first data sent by second communication equipment, and the first data is obtained by calculation based on encryption equipment information supported by the first communication equipment;

and the processing module is used for processing the received first data.

19. A second communications device, comprising:

the query module is used for querying the encryption equipment information of the encryption equipment supported by the first communication equipment from the block chain;

the computing module is used for computing first data to be sent based on the encrypted equipment information supported by the first communication equipment;

and the second sending module is used for sending the first data to the first communication equipment.

20. An encryption device, comprising:

a generation module that generates at least one public parameter;

a third sending module that sends the user identification of the encryption device and the at least one public parameter to a verification node of the blockchain,

and the recording module is used for recording the user identification and at least one public parameter which are verified by the verification node of the block chain to the block chain.

21. A communication device, comprising: a processor, a memory storing a computer program which, when executed by the processor, performs the method of any of claims 1 to 7 or the method of any of claims 8 to 14 or the method of any of claims 15 to 17.

22. A computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the method of any one of claims 1 to 7 or the method of any one of claims 8 to 14 or the method of any one of claims 15 to 17.

Images