TWI644554B - Probabilistic multiple software encryption communication system and method - Google Patents

Abstract

The invention provides a probability multi-software encryption communication system and method capable of tolerating attacks and quickly repairing an original encryption system. The reliability and security thereof are based on a mathematical theory of a random graph, and the system of the present invention is attacked or software-based. If the key is leaked and then the license key of a software is to be logged out, the message that the key is logged off is sent to each software to request the logout. At this time, all the keys or legal communication paths are used. If the software that makes the key will not use the key again, the legal communication path will also be invalid. To change the content of a key, repeat the previous logout action and transfer the new key to all software that uses the key. The legal encrypted communication path of the key is not changed, only the old gold is replaced. The key is the new key.

Description

Probabilistic multiple software encryption communication system and method

The invention relates to a probability multi-software encryption communication system and method, wherein a system and method for randomly encrypting communication are established by using a mathematical theory of a random graph.

The existing software encryption communication system often encounters serious malicious attacks. For example, the internal users of the system have spy serialized external attackers to steal confidential information, or the software system authorization key is leaked. At this time, it is often impossible to quickly respond to and repair the original. Software-encrypted communication systems that even control the range of systems affected.

Therefore, how to solve the above problems in the simplest and most rapid way is the subject of research and discussion.

In view of the above-mentioned problems of the prior art, the present invention provides a probability multi-software encryption communication system and method that can tolerate attacks and quickly repair the original encryption system, and the reliability and security thereof are based on the mathematical theory of Random Graph.

Attack-tolerant probability multi-software encryption communication system provided by the present invention The system includes a key generation and management center, which establishes a pool of candidate keys, and for each software, a group of keys are randomly selected from the candidate key pool and written into the software, wherein the key can be symmetric gold Key, or asymmetric key; and multiple software, which accept key generation and management center write key, and may be paired software between any two software, or there may be a legal encrypted communication path connection Two softwares, when two softwares are to communicate encryptedly, encrypt communication through paired software or legally encrypted communication paths.

The definition of the paired software and its legal encrypted communication path is as follows: If the key system used in the current system is a symmetric key, the paired software has the same set of keys between the two softwares ( This key is the pairwise key); if the key system used in the current system is an asymmetric key, the paired software has a set of keys between the two softwares, which are paired public and private keys. That is, when the software encrypts any content with one of the keys, the result can be decrypted by another key, and the decrypted result is the same as the original content (this group of public and private key pairs is the paired key); If there are multiple sets of software as described above, and each group has a common software member, thereby connecting one path, this is a legal encrypted communication path.

The invention provides an attack-tolerant probability multi-software encryption communication method and quickly repairs the probabilistic multi-software encryption communication method of the original encryption system as follows: First, in the initialization phase, the system will establish a large candidate key pool, each using Before the software of this system is officially distributed, the system will randomly select a group of keys from the candidate key pool and write to the software. Before the two softwares enter the encrypted communication phase, they will first check the key group that was written in advance. If there is exactly one set of keys, they are paired: the same symmetric key, or a relative asymmetric public and private key. Yes, use the group key to encrypt communication; if not If any set of keys is paired with each other, notify other software to find out whether a legal encrypted communication path may occur: whether there are multiple sets of software that satisfy the pairwise keys, and the paths formed by the series are connected in series. There are two softwares mentioned above. If there is such a legal encrypted communication path, the encrypted communication after the foregoing two softwares is: pick one from the two softwares, and select one key from the key group. Transfer to the other party through this path, or use the paired public and private keys of each software in the path and use the re-encryption method to transfer data. In addition, when the system is discovered by the attack or the software key is leaked, and then the license key of a software is to be logged out, the message that the key is logged off is transmitted to each software to request to cancel the key. All software used on the key or legal communication path will cause the software to the key to be used again, and the legal communication path will also be invalid. To change the content of a key, repeat the previous logout action and transfer the new key to all software that uses the key. The legal encrypted communication path of the key is not changed, only the old gold is replaced. The key is the new key.

The reliability of the communication of the attack-tolerant probability multi-software encryption communication system provided by the present invention is in accordance with the mathematical theory of random graph, when the number of softwares in the system network constructed by using the foregoing method exceeds 10,000, any The probability of interoperability between the two points exceeds 0.99999. The security of the attack-tolerant probability multi-software encryption communication system of the present invention can only affect a certain software key even if it is leaked or controlled by a spy. Network communication, in other words, the attack-tolerant probability multi-software encryption communication system and method of the present invention uses a dynamic random network communication path, and the communication path of each point and each point is not The same, and with the addition of new nodes. Or the key on it will change the original communication path, so the attacker can not predict the communication path between the two points (two software).

100‧‧‧Key Generation and Management Center

200‧‧‧Software

110‧‧‧Candidate Key Pool

300‧‧‧ legal encrypted communication path

S201~S209‧‧‧Step procedure

1 is a block diagram of an attack-tolerant probability multi-software encryption communication system of the present invention.

2 is a flow chart of the attack-tolerant probability multi-software encryption communication method of the present invention.

In order to understand the technical characteristics, content and advantages of the creation and the effects that can be achieved, the authors will use the creation of the drawings in detail with reference to the drawings, and the drawings used therein, The subject matter is only for the purpose of illustration and supplementary instructions. It is not necessarily the true proportion and precise configuration after the implementation of the original creation. Therefore, the proportions and configuration relationships of the attached drawings should not be interpreted or limited in the actual implementation scope. First described.

Please refer to FIG. 1 , which is a structural diagram of an attack-tolerant probability multi-software encryption communication system of the present invention, which includes a key generation and management center 100, and establishes a candidate key pool 110 in the key generation and management center 100. And for each software 200, a group of keys are randomly selected from the candidate key pool 110 and written into the software 200, wherein the key may be a symmetric key or an asymmetric key.

The definition of the paired software and the legal encrypted communication path 300 associated therewith is that if the key is a symmetric key, the paired software has the same set of keys between any two softwares 200; For an asymmetric key, the paired software is a pair of two keys. A set of keys is a pair of public and private keys, that is, when the software 200 uses one of the keys. A content is encrypted, the result can be decrypted by another key, and the decryption result is the same as the original content (this group of public and private key pairs is a pair of keys), and finally, when multiple groups of software such as the aforementioned paired software And a path formed by the respective components connecting the softwares, that is, the legal encrypted communication path 300.

2 is a flowchart of an attack-tolerant probability multi-software encryption communication method according to the present invention. The steps are as follows: S201: a key generation and management center generates a candidate key pool; S202: a key generation and management center Randomly selecting a group of keys from the candidate key pool in the initialization phase of the software, and then writing the keys to the software; S203: Before any two softwares enter the encrypted communication phase, first check whether each pair is a paired software; S204 : If yes, use each pair of keys to encrypt communication; S205: If no (the two softwares are not paired software), check whether there is a legal encrypted communication path between each other; S206: If yes, use The legal encrypted communication path performs encrypted communication; S207: If not, it indicates that the two softwares do not have a legal encrypted communication path except for the paired software, and the key generation and management center is required to perform a random local new key operation; S208: Then check whether the two softwares have a legal encrypted communication path again; S209: If yes, end the check and use the legal encrypted communication The path is encrypted communication. If not, the key generation and management center is again required to perform a random local addition key operation (step S207), and the operation is repeated until the check is performed, and a legal encrypted communication path can be used for encryption. Until now.

Wherein, the foregoing two softwares check whether each other is a pair of software As follows: If the currently used key system is a symmetric key, the method of checking whether two softwares are paired software is to check whether a set of keys exists between two softwares, and if so, the two are The software is a pair of software. If it is not, it means that it is not a pair of software. If the currently used key system is an asymmetric key, the method of checking whether two softwares are paired software is to check when a software uses one. After the key encrypts a content, whether the result of the encryption can be decrypted by one of the keys of the other software, and the decrypted result is the same as the original content.

The foregoing two softwares check whether there is a legal encrypted communication path with each other as follows: the two softwares respectively send a request to the other software to check whether each other is a paired software through the network, and if the software accepts, use the foregoing verification to The software method, and then the verification result is replied to the software that originally issued the request; the software that originally issued the request sends a request to the other software on the network to check the paired software to all the software that passes the verification result; if there is software acceptance And using the foregoing method for verifying the paired software, and then replying the verification result to the two softwares that originally issued the request, and then the two softwares that originally issued the request request the other party to the software that passes the verification result to the other software on the network. Issue a request to check the paired software; repeat the above process until the software serial that passes the paired software is connected to the other software.

The foregoing key generation and management center performs a random local addition key operation, and the steps include the following: the key generation and the management center randomly select a part of the software; The key generation and management center randomly selects a group of keys from the candidate key pool for these softwares, and finally writes the key to the software.

The foregoing key generation and management center performs a random local addition key operation, and the steps may be replaced by: the key generation and management center randomly selects one from the candidate key pool directly for the two softwares currently being processed. The key is then written to the two softwares separately.

The foregoing two softwares use the pairwise keys of each other to perform encrypted communication as follows: if the currently used key system is a symmetric key, according to the above two software bodies, there will be a set of the same symmetric gold. Key, so the two softwares use the same key to encrypt and decrypt the message to complete the encrypted communication; if the currently used key system is an asymmetric key, there will be a set between the two softwares. The key is a pair of public and private keys. Therefore, one of the two softwares uses its key to encrypt the message, and the result can be decrypted by the key of another software, thereby completing the encrypted communication.

The two softwares use the legal encrypted communication path for encrypted communication as follows: the software to send the message first selects a key on the software that does not belong to any pair of keys, and uses the key to encrypt the message; The encrypted message is transmitted to the software paired with the software in the legal encrypted communication path according to the foregoing encrypted communication method; the paired software repeats the method to transmit the encrypted message to the paired software on the legal encrypted communication path; Then repeat the above steps until the message is sent to the other end of the encrypted communication path, that is, another software in the original two software.

In addition, the present invention provides a method for canceling one of the keys of a software as follows: the key generation and management center transmits the message of the key to the software for the software to be logged off. : and require the cancellation of this key, in which all software that forms a pairwise software relationship due to the key will no longer be a paired software, and all legitimate communication paths formed using the key will also be invalid.

In addition, the method for modifying a key content of a software in the present invention is as follows: the key generation and management center repeats the foregoing method step of canceling one of the keys of the software for the software to change the content. , the key is logged off; the new key is transmitted to all software that uses the key, and all software that forms a pairwise software relationship due to the key, and all legal communication paths formed using the key No change, only replace the old key as a new key.

In summary, this creation is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. The bureau approved the application for the invention patent, in order to invent the invention, to the sense of virtue.

Claims (8)

A probability multi-software encryption communication system, comprising: a key generation and management center, wherein the key generation and management center is provided with a key pool, the key pool includes a plurality of keys, wherein the key generation And the management center randomly selects a group of keys in the key pool, and writes the group key into each software of the plurality of softwares, wherein, before the message is transmitted, one of the soft systems starts to check any other one. Whether the software has a corresponding key, if yes, the software starts to transmit the message, if not, the software starts to determine whether there is a legal encrypted communication path between the starting software and any other software. If yes, the software is started to use the legal encrypted communication path for encrypted communication. If not, the software is started to request the key generation and management center to perform a random local addition key operation, and the software is started and judged. Whether the software has the legal encrypted communication path between any other software, if yes, the software is started to use the legal encrypted communication path for encrypted communication, if not, the software is required to start the software. And a key management center generates the new local random key operations, repeat the previous step, when the starting of the software to the target after one messaging software stopped. The probability multi-software encryption communication system according to claim 1, wherein the key comprises a symmetric key and an asymmetric key. The probability multi-software encryption communication system described in claim 2, wherein when the key is a symmetric key, one of the software and the other one of the softwares In the case of the same key, any of the software is paired with any other soft system. For example, the probability multi-software encryption communication system described in claim 2, wherein when the key is an asymmetric key, any one of the softwares has a public key, and the other one of the softwares When there is a private key corresponding to one of the public keys, then any of the software and the other soft system are paired software. A probability multi-software encryption communication method, the method comprising: a key generation and management center generating a key pool, the key pool comprising a plurality of keys; the key generation and management center is attached to the key A group of keys are randomly selected in the pool, and the group key is written into each software of the plurality of software; before the message is transmitted, the first soft system checks whether any other software has a corresponding key, if If yes, determine whether there is a legal encrypted communication path between the starting software and any other software, and if so, use the legal encrypted communication path for encrypted communication. If not, the request is required. The key generation and management center performs a random local addition key operation, and determines whether the software and the other software have the legal encrypted communication path between the software, and if so, uses the legal encrypted communication path for encrypted communication. If not, the key generation and management center is required to perform a random local addition key operation; and the previous steps are repeated, and the message is transmitted to the target software and then stopped. . The method of claim 2, wherein the key comprises a symmetric key and an asymmetric key. The method of claim multi-software encryption communication according to claim 6 of the patent application scope, wherein When the key is a symmetric key, if any one of the softwares has the same set of keys as the other software, then any one of the softwares is paired with the other soft system. The method of claim 2, wherein the key is an asymmetric key, and any one of the softwares has a public key, and the other one of the softwares is included in the software. When there is a private key corresponding to one of the public keys, then any of the software and the other soft system are paired software.