WO2010145162A1

WO2010145162A1 - File transfer method and system

Info

Publication number: WO2010145162A1
Application number: PCT/CN2009/075924
Authority: WO
Inventors: 康望星; 施元庆; 刘家兵
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-06-30
Filing date: 2009-12-24
Publication date: 2010-12-23
Also published as: CN101600204A; CN101600204B

Abstract

The present invention provides a file transfer method and system so as to enhance the security of the file transfer. The transfer method includes: a sender calculates the temporary public key PY₀ = g_o ^sy (mod P); a receiver calculates the temporary public key PX₀= g₀ ^sx (mod P); the sender and receiver exchange their temporary public keys and signatures; the sender calculates (PX₀) ^sy (mod P) and defines it as the key USK after verifying the signature value of the receiver; the receiver calculates (PY₀) ^sx (mod P) and defines it as the key USK after verifying the signature value of the sender; the sender uses the key USK to encrypt the file block of the file to be sent and sends it to the receiver; the receiver uses the key USK to decrypt the received encrypted file block.

Description

God file method and system

Wood field

This is related to (W eess oca Aea ewok, W A field especially involves God file methods and systems.

Background

Confidential (W eess oca ea ewok . . .

A h ,

e c o dP vacy as c e, W ) to ( s e oEec ca dEec o csE g ee s, and electronic engineering) 802.11

Meta security. W by part of WA (

A he ca o as c e, ) and ( A vacy as c e, confidentiality). Among them, WA is a security solution for identity and management. 1 is a security solution for use, including , , and so on.

The typical W system consists mainly of Hugh (he c o E ), A he c o S pp c E (A), and He c o Se VceE (A). Among them, Hugh is the rest of the operation before the connection, and the TA (TA o , ) (ie, the terminal) rests on the premise of the identity for the identity operation, and resides in ( ccess o , connect ) or TA

Each of the rest and rest is provided by the rest of the sheep ( hhe ca o Se Vce , A ) (also

Each).

Terminal connection, first need 802.11, terminal W identity and management, with the completion of the same terminal identity identity, terminal

, using the terminal provided by the 1 settlement each. Among them, file sharing is very important, but there are security vulnerabilities in existing files. The files are in plain text, and can be arbitrary and file content. On a terminal with WA connection capability, WA can only be connected to the part ( ) security, files, etc. and can not be used.

Content

This document provides the God document method and system, which solves the problem of improving the security of the document and overcoming the existing wood.

This document provides the God file method, including

File PY g mod ), file reception

PX g xmod ) , and the reception will be calculated as well

Calculated PX and received phase exchange

And received ,

PX)ymod ) , receiving PY)xmod ), making the calculated PX)ymod ) and PY)Xm d )

Receive the file of the file and

Receiving the received secret file line solution where sy and x are respectively generated by the sum and the received

, and receive the advance 9 , and receive the advance less than P .

In addition, the upper method includes a step-by-step update in the step of receiving the file in the direction, wherein

The updated steps include

The fascination and reception are used separately before the generation of new 9, respectively, new PY gymod ) and PX gxmo ) And the reception will calculate the PY as well

X and the phase exchange of the reception

And received, respectively PX) mod ) and PY) Xmo ), will calculate the PX) ymo ) and PY) xm )

Steps to update the line, the method includes

Generate a new S, the new S file receives the new file and receives the new new file. The line solution is where 9 is less than P.

In addition, in the above method, and receiving a secure W terminal

The method includes: the W terminal is generated in the following manner

The plain text of the church member W terminal

WA sheep plain or plain text, generated. In addition, the method includes the method of generating and receiving

Previously used to extract bit force for new g or

Pre-used generation,

Extracting bit force new 9

Where the bits are less than the bits. In the undocumented step of the new file, the method includes including encapsulating the

Received, the file contains new ones that have been used Secret

In the step of receiving the received file, the method includes the recipient's root using the file line solution encapsulated in the new file.

The present invention provides a second communication of the communication system and the processing of the force file,

The first communication includes a first generated sheep, a sheep, and a first communication sheep. The second communication includes a second generated sheep, a file sheep, and a second communication sheep.

The first generated sheep generates sy,

PY g mod ), will communicate with the value of the first communication, the second communication

The second generation sheep generates x,

), the value of the PX and the second communication is communicated to the second sheep communication

The first generation of the sheep in the first communication sheep receives the PX and the second communication , the second communication

, success, PX) mod ), will file sheep

The second generation of the sheep is received in the second communication sheep and the first communication

, success, PY)xmod ), will file sheep

File sheep file file, file of the first communication sheep second communication file sheep in the second communication sheep received the secret file, the dense file line solution

Where P, the first communication and the second communication are pre- 9, the first communication and the second communication are less than P in advance.

In addition, in the upper system, the first generation of the sheep is used to generate a new 9, new PY g mo ), and the value of PY and the first communication is communicated to the second communication.

The second generation sheep is used recently to generate a new 9, new X g mod ), the value of the X and the second communication is passed to the second communication sheep.

The first generation of the sheep in the first communication sheep receives the X and the second communication , the second communication

, success, new PX) mod ), file file

The second generating sheep is in the second communication sheep receiving the Y and the first communication , the first communication

, success, PY)xmod ), will file the file of the sheep file

Where 9 is less than P.

This, in the upper system, the first communication includes WA sheep.

Nearly including the second WA sheep in communication

The first generation of the sheep will be the plain WA sheep, and receive the WA sheep return

WA Sheep uses the private plaintext or plaintext of W's communication, generated

, will be generated back to the first sheep

a second generation sheep near the plain second WA sheep, and receiving the second WA sheep return

The second WA sheep uses the second communication of W Private plaintext or plaintext, generated

, will generate the second generation of sheep.

In addition, in the upper system, the first generation of the sheep and the second generation of the sheep are newly generated, wherein the new generation of 9

Before using the bit extraction force for the new 9 or before, the generated middle extraction bit force new 9

Where the bits are less than the bits.

In addition, in the above system, the file sheep receives the unfiled file of the new file, and encapsulates the file in the file. The communication sheep receives it, and the file contains the new secret that has been used.

The file sheep near the second communication sheep received the file, using the new packaged file line solution. On the above, the e-e ma algorithm is used in front of the file, and the line density is combined with the non-line density, which improves the security of the file, and in the other way, the security of the file is improved, and in the file, Update the row-critical update of the e-e ma algorithm to reduce the purpose of the update with a small amount.

1 is the process of the file method provided by this interface.

2 is the package description of the files provided by this interface and

3 is a schematic diagram of the file system provided by this mediation. Preferred way of the present

The idea is to use the e-e m algorithm in front of the file and combine it with the line density to improve the security of the file.

The following will be combined with this and .

1 is a file method provided by the present mode. The file (terminal A) and file receiving (terminal B) are both WA terminal, WA 1 stored in terminal A and terminal B, and the method is Including the next steps

100 terminal A terminal B line file

In this step, you can use the following file, file size, and so on. The file, terminal A and terminal B can be generated in the file.

101 terminal B terminal A pre-e-e m algorithm P and 9, and terminal B generated x, PX g xmo P)

Where P and g are, and P>g mod is expressed.

To improve security, P is usually large, so the P e- e m algorithm can be used instead of the 90 e- e m algorithm.

It should be noted that the P and 90 used in this step are confidential and can be in plain text.

Terminal B can generate the interface generated by the WA sheep of the terminal. 102 Terminal B to Terminal A

The text contains etc., as well as the terminal B PX and so on.

Terminal B can generate the generated interface provided by the WA sheep of the terminal, that is, the PX is used as the plaintext WA sheep, and the WA sheep uses the plaintext generation of the WAP of the terminal B (the terminal B). . However, W sheep can also get the plain text first, using the terminal B's.

103 received, terminal A terminal B, success, generate sy, PY g mod) get

Similarly, terminal A can also generate the interface sy of the generation interface provided by the terminal WA sheep.

Terminal A can provide the interface terminal B of the terminal WA sheep, that is, the plaintext contained in the text and

0 WA sheep, W sheep Use the terminal of the bus of the terminal B (the terminal B's public) to solve the result, and compare the plain text or the plain text.

104 terminal A direction

The text contains etc., as well as the terminal A PY and so on.

Terminal A can be generated by the generation interface provided by WA Sheep. 105 received, terminal B terminal A, success, get PY) xmo )

It should be noted that the rules can be

C PY)xm d )

5 That is, terminal A and terminal B get the same (below).

106 Terminal B to the terminal A file, to the terminal A has been generated, can be filed 107 Terminal A receives the file, divides the file into multiple files, and uses each file to encapsulate each confidential file in the file.

File encapsulation 2, including the file republic file section.

Enclosed files in the file section

File contains file, file length, file

The length of the file is the length of the file, the length of the file is fixed, 10 files may not be included, and the length can be from terminal A and terminal B.

Get

The file can be divided into files in the file, and terminal A can pre-position terminal B.

108 After receiving the file, terminal B uses the ciphertext 15 line solution contained in it to get the original text of the file.

Terminal A and terminal B can perform step 107 108 until the file. The security of the step-by-step file, the terminal A and the terminal B can be close to the next step.

109 ( > ) file, terminal A can stop file 20, extract bits (for example, bits with less than the first bit) force new (9g<P), regenerate PY g mod P), will be included in the update Terminal B

In addition to the PY in the update, the terminal A PY is included.

25 110 Terminal B receives the update, terminal A, , update in the same way, regenerate X gxmo ) and PY) xmodP)

11 Terminal B PX is included in the update terminal A The above update includes X, and includes the terminal BX and so on.

112 received update, terminal A terminal B, , using updated X re-PX) mo )

Thus, terminal A uses the new file, and terminal B also receives the new file line solution.

The basic principle of this, there can be more exchange methods, examples () in the above, and receive updates 9 updates

PY/X, and update In the other of this, you can also regenerate the PY/X update separately, but the recalculation of the PY/X is larger.

( ) In the upper part, the extraction of the bit in the pass generates a new 9 in the other, which can also be obtained, but the bit is extracted as the new 9th, the communication must be the same algorithm, and the same bit extraction method generates a new 9, so that the communication remains the same 9.

( ) In the upper part, it is updated by the terminal A, and before the update is completed, the file in the other part of the file is stopped, and the updated middle element stops the file, and only after the update is completed, the terminal A uses the new secret file to pass the terminal B new (Example, the file is new in the file)

In addition, it is also possible to update from the terminal B, and the generation can also be performed by the terminal B.

( ) In the above, P is pre-acquired by communication because the WA of the WA terminal (the e-em (-) exchange of the system) contains a fixed P. Therefore, if the communication is a WA terminal, the WA sheep of the terminal can be separately Extract P from C.

3 is a schematic diagram of the file system provided by this mediation. The first communication and the second communication in 3 are file and receive communication, respectively, and the second communication may be a WA-enabled terminal and/or a terminal, or a terminal and a terminal, or a respectively.

3, in the first communication, there is a first generation sheep, a file sheep, a communication sheep, a second generation sheep, a file sheep, a second communication sheep.

The first generation of sheep produces an easygoing sy, PY y

9 o ), the value of PY and the first communication is communicated to the second communication

The second generation sheep generates x, PX gs m ), PX and the value of the second communication pass the second communication sheep communication

The first generation of the sheep is close to the first communication in the first communication sheep receiving the PX and the second communication

PX) mod ), will file sheep

The second generation of the sheep is close to the second communication sheep receiving the PY and the first communication, the first communication, the success,

File sheep

File sheep in file file communication sheep second communication

The file sheep received the secret file in the second communication sheep.

Line solution. In addition, the first generated sheep is used near the root to generate a new 9, new PY g mod ), and the value of PY and the first communication is communicated to the second communication.

The second generation sheep is used near the root to generate new

9, the new X g mod ), will X and the second communication

Second communication sheep communication

The first generation of the sheep is close to the first communication in the communication sheep, the second communication, the success, the new

PX) mod ), will file the sheep line file The second generation of the sheep is close to the second communication sheep receiving the PY and the first communication, the first communication, the success,

Y) x mo ), the solution to the file sheep file.

y , the first communication has a WA sheep second communication near the second WA sheep

WA sheep uses the private plaintext or plaintext of the communication WA, generated, will return to the first generation sheep

The second generation of the sheep will be the second WA sheep in the plaintext, and receive the second WA sheep back.

The second WA sheep uses the second communication of the WA's private plaintext or plaintext, generated, and will return to the second generation sheep.

File Sheep In the file that receives the new file, the file is encapsulated in the file. The communication sheep receives the file containing the new secret.

File Sheep The second communication sheep receives the file and uses the new packaged file line solution.

Above, the strength of the power is better than the guarantee of the limit.

However, there are many other ways to do this, and the understanding of wood in this field can be made in the context of the sum of the various aspects, and not the spirit and the sum of the phases are included in the requirements of this warranty.

Usability This method provides the God file method and system. The e- em algorithm is used before the file, and the line density is combined with the non-line density. The security of the file is improved, and in addition, the security of the file is improved in the file. In the middle of the update, the e-em algorithm updates the line-density update, with a smaller amount of calculation for the purpose of the update.

Claims

Claim

1. God file method, which includes

File PY g mod ), file reception

PX g xmod ) , and receive will calculate the PY and

Calculated PX and received phase exchange

And received ,

(PPX symodP, receiving PY s

odP, the calculated PX symod P) and PY)xmod )

File file

Receiving and

, and the receiving advance 9 ,

And receive a pre-less than P.

2. The method of requirement 1,

The method includes a step-by-step update in the step of receiving the file of the file in the direction, wherein the updating step includes

And the receiving separately used to generate a new 9, respectively, a new PY gymo) and a PX gxmodP) and the receiving the calculated PY and the X and the receiving phase exchange and

And received, respectively PX) mod ) and PY) xmo ), will calculate the PX) ymo ) and PY) xmod )

Step-by-step update procedure

Generate new, new File not receiving and receiving new new secret file line solution

Where 9 is less than P.

3. The method of claim 1 or 2, wherein

And receiving a confidential W terminal

The method includes the following method:

The plain text of the church member W terminal

WA sheep

WA Sheep uses the private plaintext or plaintext of the W terminal's W, generated.

4. The method of requirement 2, which includes

Previously used in the extraction of bit force

g or

Before using the build, extracting the bit force, the new 9

Where the bits are less than the bits.

5. The method of claim 2, wherein

In the undocumented step of the new file, the method includes including encapsulating the file in the file.

Received, the file contains the new one that has been used.

Secret

In the step of receiving the received file, the method includes the recipient's root using the file line solution encapsulated in the new document.

6. The God file system, which includes the second communication of the communication and the force file of the force file, wherein

The first communication includes the first generation sheep, the file sheep, the communication sheep

The second communication includes the second generation sheep, the file sheep, the second communication sheep

The first generated sheep generates sy,

PY g mod ), the value of PY and the first communication is communicated to the second communication

The second generation sheep generates x,

PX gsxmod ), passing the value of PX and the second communication to the second communication

, success, PX) m P, will be calculated

File sheep

The second generation sheep is in the second communication sheep receiving the PY and the first communication

, success, PY)xm P, will be calculated

File sheep

File sheep file file, file of the first communication sheep second communication file sheep in the second communication sheep received the secret file, the secret file line solution

Wherein, P, the first communication and the second communication are in advance of 9, the first communication and the second communication are less than P in advance.

7, the requirements of the system 6, where The first generation of the sheep used to generate a new 9, new PY g mod), the PY and the first communication value of the communication communication sheep second communication

, success, new PX) mod ), will

Sheep file

, success, PY)xmod ), will file the file of the sheep file

Where 9 is less than P.

8. Requires a system of 6 or 7, where

The first communication includes WA sheep, the second communication, including the second WA sheep.

The first generation of the sheep will be the plain text of the WA sheep, and receive the WA sheep return

, will be generated back to the first sheep

The second generation of the sheep will be the second WA sheep, and receive the second WA sheep.

The second WA sheep uses the second communication of W's private plaintext or plaintext to generate

, will generate the second generation of sheep.

9. The system of requirement 7, where

The first generation of the sheep and the second generation of the sheep form a new 9

Where the bits are smaller than the S bits.

10. The system described in claim 7, wherein

The file sheep is not receiving the new file, and the file is encapsulated in the file. The communication sheep receives it, and the file contains the new secret.

The file sheep near the second communication sheep received the file, using the new packaged file line solution.