CN111835506A

CN111835506A - Information safety digital encryption method based on one-time-use cipher book

Info

Publication number: CN111835506A
Application number: CN201910321141.6A
Authority: CN
Inventors: 王强; 林云侯; 刘星
Original assignee: Guangzhou Jiaxin Future Technology Co ltd
Current assignee: Guangzhou Jiaxin Future Technology Co ltd
Priority date: 2019-04-18
Filing date: 2019-04-18
Publication date: 2020-10-27
Anticipated expiration: 2039-04-18
Also published as: CN111835506B

Abstract

The invention discloses an information security digital encryption method based on a one-time-use codebook, which comprises the following steps: the host characteristic information of the file and the information specific to the communication equipment used by the file are utilized to form front and back background information, so that a double-track double-block K grouping digital vector association structure is formed, partial characteristic information in the background information is extracted to be used as a digital key for encrypting plaintext information, a functional dynamic encryption algorithm is adopted to encrypt and modulate a symbol dictionary, a one-time-use digital cipher book with the background information is generated, and a public digital cipher of the plaintext information is generated. The information security digital encryption method based on the one-time-use codebook provided by the invention is organically combined with a third-party transmission SSL/TLS communication protocol password system, thereby effectively ensuring the security of big data and information in the Internet environment. The method is suitable for completing the encryption task of the plaintext information by utilizing the characteristic that the private confidential information and the public information are asymmetric under the condition that the background information of the internet environment is not completely transparent.

Description

Information safety digital encryption method based on one-time-use cipher book

Technical Field

The invention relates to an information security digital encryption method based on a one-time-use codebook.

Background

The technologies related to passwords are various, namely invisible and visible, and digital and non-digital. However, they all have a common feature that: digital cryptography is generated around multiple keys generated from a fixed codebook, and there is a close relationship between each cryptography.

The general cryptosystem is an information host a of information (message) W, and performs public key encryption processing on W to be encrypted by using an encryption algorithm of a symmetric key Q or an asymmetric private key PW and a public key GW to generate a public password MW, and transmits the password MW to a third party C.

And after receiving the encrypted password MW, the access receiver B decrypts the MW by using the private key and a decryption algorithm to restore the information W. (transmitting side C: radio transmission/Internet transmission).

The most important core method is the generation technology of the fixed codebook which is used for multiple times and a series of encryption technologies generated by the generation technology. There are three current types of development:

Password-Based (PBE-Password-Based Encryption) technology

In order to ensure the flexibility and the safety intensity of the fixed codebook. A Password-Based Password (PBE-passed Based Encryption) is generated. And generating a symmetric key (KEK), and encrypting the information (W) by the sender (A) to form a ciphertext (MW). And after receiving the ciphertext MW, the receiving party B decrypts the MW by using the symmetric key KEK and restores the information W.

Two, asymmetric cipher based (PGP-Pretty Good Privacy) cipher system

Since symmetric cipher KEK is easily stolen and compromised by third party, cipher software written by Philips Queenmann (PhilipZimmermann) in 1990 was improved to asymmetric cipher based (PGP-Pretty Good Privacy) cipher system.

PGP is currently the best and most secure way of encryption. The representative software in this regard is the PGP encryption software in the united states. The core idea of such software is to protect files using logical partitions, e.g., logical partition E: the hard disk partition protected by the PGP needs to be opened by inputting a password each time the partition is opened, and files in the partition are absolutely safe. When the partition is no longer needed, it can be closed and removed from the desktop, and when opened again, a password needs to be entered. Without password, the software developer himself cannot decrypt! PGP is the most popular file encryption software worldwide. Its source code is open, withstands the cracking challenge of thousands of top hackers, and the fact proves that PGP is the most secure encryption software in the world at present. Its only disadvantage is that PGP currently has no official chinese version and the legal version is extremely expensive. Since PGP technology is a technology that the U.S. national security agency prohibits export.

Third, based on asymmetric cipher (SSL/TLS- -Secure Socket Layer/Transport Layer security) internet cipher system

SSL/TLS is a cryptographic communication protocol method widely used in Web servers, and is a communication between a client and a server. They all follow a Protocol called HTTP (HyperText Transfer Protocol) for communication. The Web browser is called an HTTP client, and the Web server is called an HTTP server. SSL/TLS is a secure communication technology which is realized by combining technologies such as a symmetric key, a public key password, a one-way hash function, a message authentication code, a pseudo-random generator, a digital signature and the like in the communication between a Web server and a Web browser. Furthermore, SSL/TLS can also switch cipher suites to use more robust cryptographic algorithms.

The most important TLS protocol in the SSL/TLS system is the TLS protocol, which is divided into two parts: the TLS recording protocol is in conjunction with the TLS handshake protocol.

TLS recording protocol: and the system is responsible for compression, encryption and data authentication of the message.

TLS handshake protocol: it has 4 subprotocols: handshake protocol, cipher specification change protocol, warning protocol and application data protocol. Handshake protocol: and the system is responsible for negotiating and deciding a cryptographic algorithm and a shared secret key between the client and the server. Cipher specification change protocol: and is responsible for transmitting a signal for changing the encryption mode to the communication object. Warning protocol: and is responsible for communicating the error to the other party when the error occurs. Application data protocol: a protocol to convey application data carried over TLS to a communicating object. The handshake protocol is the focus: after the information exchange between the client and the server is completed, the application data protocol is switched to.

The client obtains the legal public key of the server, and server authentication is completed.

The server obtains the legal public key of the client and completes the client authentication.

The client and server generate a shared key for use in cryptographic communications.

The client and server generate a shared key for use in the message authentication code.

SSL/TLS is a cryptographic communication method that is used frequently throughout the world under the current internet.

With the rapid development of computer technology and digital technology, digital cryptography is also advancing. The main technical direction of the development of the current information data security technology is as follows: the development of the one-way hash function computing technology is directed to a new encryption algorithm with high-strength one-way hash function values.

1. Series of MD

MD4 is a one-way hash function designed by Rivet in 1990, capable of producing a 128-bit hash value (RFC1186, revised RFC 1320).

MD5 is a one-way hash function designed by Rivet in 1991 that can produce a 128-bit hash value (RFC 1321). The strong impact resistance of MD5 has been compromised and is currently unsafe.

2、RIPEMD-160

RiPEMD-160 was a one-way hash function designed in 1996 by HansDobbertin, AntonoBosselaers, and BartPrenee that was able to produce a 160-bit hash value.

RIPEMD-160 is also a revision of the RIPEMD one-way hash function designed by the EU RIPE project. Which comprises the following steps: RIPEMD-128, RIPEMD-256, RIPEMD-320, and the like. The strong impact resistance of RIPEMD has been overcome in 2004, but RIPEMD-160 has not yet been overcome. The digital encryption system currently used in bitcoin is ripemm-160.

3. SHA series

SHA-1 was designed by NIST (National Institute of Standards and Technology, U.S. National Standards and Technology) in 1993 to produce a 160-bit hash value one-way hash function. It was released as SHA as a Federal information processing Standard Specification (FIPS PUB 180) in the United states, and a revised version (FIPS PUB180-1) released in 1995 was called SHA-1. The NIST then designed a series of SHAs as follows:

SHA-256 is capable of generating 256-bit hash values to produce one-way hash functions

SHA-384 is capable of generating a 384-bit hash value one-way hash function

SHA-512 is capable of generating 512-bit hash values to produce one-way hash functions

SHA-2(SHA-256, SHA-384, SHA-512) these one-way hash functions were published in 2002 as a new edition (FIPSPUB 180-2) concurrently with SHA-1. The strong impact resistance of SHA-1 has been overcome in 2005, but SHA-2 has not yet been overcome. SHA-3 is the next generation one-way hash function SHA-3 that was set out in 2005 by NIST (National Institute of Standards and Technology ) to replace SHA-1. A one-way hash function algorithm of Keccak is employed. At present, the Internet (SSL/TLS- -Secure Socket Layer/Transport Layer Security cryptosystem mainly adopts the SHA-2 standard.

All the above cryptographic techniques can be referred to as traditional digital cryptographic techniques, and the main problems are:

1. conventional digital cryptography uses fixed codebooks multiple times.

Defects and deficiencies: the security is limited, and once the fixed codebook is revealed, the security is invalid. The actual requirements of large information amount and quick change in modern times cannot be met.

2. Traditional digital cryptography uses a professional-specific one-way hash function, and the hash value uses binary bits of fixed length, such as 128 bits and 256 bits of SHA-2, and the maximum length is 512 bits, and only SHA-3 can be unlimited in length. Defects and deficiencies: is controlled by international export and has high cost.

3. The above conventional digital cryptographic methods all adopt a single structure of a single digital unit.

Defects and deficiencies: the encryption key is generated independently of the background information of the information W to be encrypted.

There are secondary problems:

1. the traditional cryptographic methods all adopt:

the information W is directly encrypted, and the encryption method is only related to W and is not related to technical parameters of a Client browser end and a Server end of the transmission communication equipment.

2. The traditional cryptographic methods all adopt:

the information W is directly encrypted, and the encryption method is only related to W and is not related to the background information of the information host A and the information access receiver B.

Disclosure of Invention

The invention provides an information security digital encryption method based on a one-time-use codebook, which is organically combined with a third-party transmission SSL/TLS communication protocol password system to completely solve the problems of big data and information security in the Internet environment. In order to achieve the purpose, the invention adopts the following technical scheme:

the invention discloses an information security digital encryption method based on a one-time-use codebook, which comprises the following steps: the host characteristic information of the file and the information specific to the communication equipment used by the file are utilized to form front and back background information, so that a double-track double-block K grouping digital vector association structure is formed, partial characteristic information in the background information is extracted to be used as a digital key for encrypting plaintext information, a functional dynamic encryption algorithm is adopted to encrypt and modulate a symbol dictionary, a one-time-use digital cipher book with the background information is generated, and a public digital cipher of the plaintext information is generated.

The information security digital encryption method based on the one-time-use codebook provided by the invention is organically combined with a third-party transmission SSL/TLS communication protocol password system, thereby effectively ensuring the security of big data and information in the Internet environment. The method is suitable for completing the encryption task of the plaintext information by utilizing the characteristic that the private confidential information and the public information are asymmetric under the condition that the background information of the internet environment is not completely transparent.

Drawings

The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the principles of the invention:

FIG. 1 shows a dual-rail dual-block K-block grouped random feature number vector correlator according to an embodiment of the present invention

Working principle diagram of (1).

FIG. 2 is a diagram of a private secret digital key of an embodiment of the present invention

Modulation schematic diagram.

FIG. 3 shows a private public digital key according to an embodiment of the present invention

Modulation schematic diagram.

FIG. 4 is a diagram of an embodiment of the present invention with a foreground

Public numeric code of characteristic KeyW (x)/PassW (x)

Modulation schematic diagram.

Detailed Description

The present invention will now be described in detail with reference to the drawings and specific embodiments, wherein the exemplary embodiments and descriptions of the present invention are provided to explain the present invention without limiting the invention thereto.

Example (b):

basic concept and mathematical principle of digital encryption modulation algorithm

One-rail K-block digital vector unit:

suppose that

The vector is an L-dimensional positive integer digital vector group with the digital length of M bits and the unit of a measurement system of L, and the vector can be divided into K block groups.

When the K is greater than 1, the composition,

namely an L-dimensional digital vector unit of the monorail K-block set:

is a group of digital vectors consisting of positive integer digital information.

Can be written as:

when the K is equal to 1,

ghosting into a common single-rail L-dimensional vector

Is a positive integer number set.

Two-rail K-block digital vector correlation body:

suppose that

The length of the number is M bits, the unit of a measurement system is L, and the number can be divided into two L-dimensional positive integer number vector groups of K block:

is composed of

Double-rail K-block digital vector correlation body:

three, double track single block digit vector correlation body

Suppose that

The vector is a two L-dimension positive integer number vector group which has the number length of M bits and the unit of a measurement system of L and can be divided into K block groups. In particular, when K is 1, in

In (1),

wherein,

are common L-dimensional positive integer number vectors.

Balance

Is an L-dimensional double-rail single-block digital vector correlation body.

Fourthly, the double-track single-block digital vector correlation body without parameters:

order:

is taken as the origin point of the image,

is a moving point.

Then

Is two double-track single-block digital vector correlation bodies, and forms a plane in the L-dimensional digital vector space, which is called a digital cipher plane MMS. In MMS surfaceIn the method, a concomitant L-dimensional double-rail single-region digital vector association body exists

A is called companion matrix, and

called B a derivative matrix, and

hence, call

Is composed of

Associated digital vector correlation without parameters

Balance

Is composed of

Of a parameterless derived digital vector correlator

By derived transformation

Namely:

the encryption function of the digital password is realized.

Fifthly, grouping the double-track double-block K into a digital vector correlation body:

suppose that

The vector is a two L-dimension positive integer number vector group which has the number length of M bits and the unit of a measurement system of L and can be divided into K block groups. Unless otherwise specified, it is assumed that M.ltoreq.13, l.ltoreq.10, 1 < L < + ∞ and L is a positive integer. When K is 2, is prepared from

The formed association is used as follows:

to indicate. Here:

suppose that:

for the (foreground) first digital vector,

is (background) second digital vector, and w (x) is information plaintext.

For the sake of simplicity, it is preferred that,

definition 1:

by using

Representing a set of digital vectors of background parametric information representing the foreground.

Definition 2:

by using

A set of digitally encoded vectors representing a character set of information w (x) to be encrypted.

Definition 3:

by using

Representing a background parametric information digital vector set representing a background.

Definition 4:

by using

The digital code vector group represents a character set of a background keyword keyw (x)/passw (x) subjected to encryption control processing.

Therefore, the temperature of the molten metal is controlled,

in that

When background B changes and continues to be subdivided into K-1 groups, then

While the changes constitute a K-1 sub-group. At this time, from

The formed association can be used

To indicate. Thus, there are:

and scale

Is a double-track double-block K grouping digital vector correlation body,

for brevity, this is:

wherein

Is the Kth group.

Encryption modulation algorithm of information plaintext W (x)

Functional digital cipher book

Modulation of

Suppose that

The vector is two L-dimensional positive integer number vector groups, wherein the number length is M bits, the unit of a measurement system is L, and the vector can be divided into two K-block groups. At this time, from

And (3) forming a digital vector correlation body:

definition 5: v is a vector consisting of 2 digits

The dimension of the formed measurement space is L. V can be divided into independent subspaces V₁，V₂，…V_i，…V_K，V_iIs the ith subspace of V (i ═ 1, 2, …, K).

Definition 6: represented by t is a vector

Forming a subscript value of the metric space V, and using B₁，B₂，B₃，…，B_k-1，B_kRepresenting each subspace V_iOf subscriptsMaximum value (i ═ 1, 2, …, K, L ═ B_K)。

Definition 7: by m_i＝B_i-B_i-1(i ═ 1, 2, …, K) denotes the subspace V_iDimension (d) of (a). And in t e (B)_i-1，B_i]On each subspace, there is m₁＝B₁，m₂＝B₂-B₁，...，m_K＝B_K-B_K-1，(B_K＝L，1≤t≤L)。

When M is less than or equal to 13 and l is 10, the compound is prepared from

The formed double-rail double-block K grouping digital vector correlator comprises:

and comprises the following components: t is more than or equal to 1 and less than or equal to L

Deriving the cryptographic transformation: v (t) ═ p (t) + q (t)

Deriving a numerical vector:

functional derivative encryption transformation:

functional-derived numerical vector:

in particular: in the last vector subspace V_KIn the above, order: m is_K＝N，τ∈(B_K-1，B_K]And (τ ═ 0, 1, 2, …, N) and

performing linear transformation: p_WZ(B_K-1+1+τ)＝MB(τ)(t＝B_K-1+1+ τ) then a new dual-rail doublet group K grouped digital vector association is generated:

DMAC (c) character encoding dictionary by adopting high-dimensional one-way hash functional power algorithm

Concocting to obtain

The functional derivation of (1) to (1) correspondence transform. Thus, a new character-number code mapping relationship is generated:

thus, a new digital code dictionary is created:

therefore, it is called a functional digital codebook:

note 1: code dictionary with MB (tau) as character

UTF-8/16 Unicode of the # character Z (τ) in (1);

note 2: DMAC (DMAC) is a special one-way hash functional power calculation method;

note 3: v_WZRTMB (τ) as a correlator

The value at point τ.

Random functional digital cipher book

In newly generated functional digital cipher books

In the modulation process of (3), the correlation body

Background conditions of (2):

is stationary. But when taking local digital vectors

For pseudo-random number subspaces

Then, generating a double-track double-block K grouping random number vector correlation body:

digital cipher book

A digital codebook with random parameters R is modulated:

hence, it is called a random functional digital codebook

Note 4:

RND (x) is a pseudo-random function for a pseudo-random number vector.

Disposable digital cipher book

The first party (information host A) encrypts the information plaintext W (x) needing to be kept secret, and then generates a digital password file MW (x) for storage. When the second party (information accessing person B) needs to access information, the numeric code mw (x) is transmitted by the third party (intermediary C) to the second party (information accessing recipient B). A series of associated information comprising A, B, C and environment D where ABC is located constitutes a context:

plus a pseudorandom number space

The encryption conditions that are uniquely determined and are only relevant to ABCD are constituted:

under the condition, the communication characteristic authentication information of the third party C/S is added

Forming a double-rail double-block K grouped random number vector correlation body:

DMAC (c) pair symbol dictionary by functional power algorithm

Modulation is performed, thereby producing a random functional digital codebook with third party authentication:

the method is called as follows: disposable digital cipher book

Note 5: r represents a band random parameter;

note 6: t represents a band communication authentication parameter.

Working principle diagram of (1).

Definition 8: (digital password) in a one-time-use digital codebook:

after generation. Plaintext W (x) in digital cipher

In (1), the corresponding value

A digital cipher referred to as plaintext w (x).

Definition 9: (private digital code) when

When the private information is obtained, the private digital cipher book is:

plaintext W (x) in digital cipher

In (1), the corresponding value

A private digital cipher referred to as plaintext w (x).

Definition 10: (public digital code) is

In the case of public information, the public digital codebook is:

plaintext W (x)In public digital cipher books

In (1), the corresponding value

A public digital cipher referred to as plaintext w (x).

Private secret digital key

With private public digital keys

In the digital codebook:

in the modulation process, the correlation condition of the double-track double-block K-1 grouping digital vector is utilized:

composing a universal digital association

Adopting functional power algorithm DMAC (c) to make first modulation to produce general digital cipher book

Constructing a digital vector with foreground by using foreground conditions and according to special rules

Special text keyw (x) of key words, using numeric cipher book

Generating a key digital vector private digital cipher corresponding to KeyW (x)

Definition 11: here, the

Equivalent to PW (x), called private secret digital key, noted

FIG. 2 is a diagram of a private confidential digital key of an embodiment of the present invention

Modulation scheme of

Will be provided with

As background conditional digit vectors

Another part of the information

Thus, a new vector with foreground digits is generated

Double-track double-block K grouping digital vector correlation body of keyword features:

DMAC (c) pair symbol dictionary by functional power algorithm

And carrying out secondary modulation again. Obtaining new one-time-use vector with foreground digits

Digital codebook of key feature information:

thus, in the cipher book

With foreground digital vector of the password pass W (x)

Private public digital cryptography of features

Definition 12: here, the

Equivalent to GW (x), called private public digital key, noted

Therefore, the temperature of the molten metal is controlled,

becomes the key digital vector encryption information (private confidential digital key) that is most important to the completion of the encryption task for the password pass w (x). Then is connected to

Becomes the private public digital key of w (x).

Modulation scheme of

Private public digital key

With public digital code

Associated modulation of

Definition 13: when in use

As public foreground digital vectors

When the temperature of the water is higher than the set temperature,

when in use

The keyword KeyW (x) is composed of

When the key word KeyW (x) and the password pass W (x) are combined to form the public digital password

With

The privacy feature of (1). It is called a public digital code and is noted as:

from the above definition alone:

and

there is no relationship of association. Only foreground conditions

And

have different values. But in the actual encryption modulation process, the background condition is adopted

To change the personality of

And

the association relationship of (2). Thereby implementing the modulation function of the (private/public) associated encryption. The specific implementation process is as follows:

grouping private digital vector associations with a dual-rail dual-group K:

adopting functional power algorithm DMAC (c) to character dictionary

The first modulation is performed. Generating a private universal digital codebook:

in the foreground condition

A set of keywords keyw (x) is extracted. Using private digital codebooks

Modulate W (x) private secret digital key

Reuse of

Calculated as a parameter, partially replacing the association

In (1)

Namely:

using functional power algorithm DMAC (c) for character dictionary

A second modulation is performed to create a new one-time-use private digital codebook with foreground features

Whereby the private public key of the password passw (x) can be modulated out

In public digital code

In the modulation process of (2), the digital key is disclosed as a private public key

Calculated as a common parameter, partially replacing a common double-track double-block K-block grouped digital vector association

In (1)

Namely:

using functional power algorithm DMAC (c) for character dictionary

A third modulation is performed, thereby generating a new one-time use with prospect

Public digital codebook of key word KeyW (x) and password pass W (x)

Thereby modulating the image with foreground

Public digital code of plaintext information W (x) of characteristic KeyW (x)/PassW (x)

FIG. 4 shows a public digital cipher according to an embodiment of the present invention

Modulation scheme of

Due to the fact that

And

use the foreground vector

Key keyw (x) and password passw (x). Then the public digital code

With the proprietary features of the plaintext w (x). Thereby realizing a private public digital key

With public digital code

The associated modulation of (2).

Digital cipher decryption algorithm for digital secret information MW (x)

When the information host A needs to decrypt the digital secret message MW (x) in different places or at different times, the public digital password is firstly obtained

Then, the private secret digital key is generated by A itself

Modulating a private public digital key with a private key word and a password KeyW (x)/PassW (x)

To be provided with

In (1)

Namely:

thereby generating a one-time-use digital cipher with a private key

Public digital cipher book with key features

Then the received public digital code

Using character dictionaries

Carry out digital comparison calculation to obtain

The corresponding UTF-8/16 is uniformly encoded. Therefore, the information plaintext W (x) is restored, and the public password is realized

Decryption to W (x).

The technical solutions provided by the embodiments of the present invention are described in detail above, and the principles and embodiments of the present invention are explained herein by using specific single examples, and the descriptions of the embodiments above are only used to help understanding the principles of the embodiments of the present invention; meanwhile, for a person skilled in the art, according to the embodiments of the present invention, there may be variations in the specific implementation manners and application ranges, and in summary, the content of the present description should not be construed as a limitation to the present invention.

Claims

1. An information security digital encryption method based on a one-time-use cipher book is characterized by comprising the following steps:

suppose that

by

Forming a double-rail K-block digital vector correlation body:

the foreground condition is formed by the digital information of the information host A:

the information receiver B transmits the digital information of the third party C/S and the communication network environment D, and the background condition is constructed according to a certain rule:

plus pseudo-random number vector quantum space

Composing federated encryption conditions

Communication characteristic authentication digital information added with third party C/S

Forming double-track double-block K grouped random number vector association body

DMAC (c) pair symbol dictionary by functional power algorithm

Modulating, thereby producing a random digital codebook with third party authentication,

i.e. one-time-use digital codebooks:

wherein the information plaintext W (x) is in the digital codebook

Corresponding value of

A digital cipher of information plaintext W (x).

2. The information security digital encryption method based on the one-time-use codebook of claim 1, characterized in that:

using a dual-rail double-block K-1 grouping digital vector correlation condition:

and (3) forming a random number vector correlation body:

adopting functional power algorithm DMAC (c) to modulate for the first time to generate a random universal digital cipher book:

using the foreground conditions:

constructing a vector with foreground digits according to a specific rule

Special text keyw (x) of keywords, using universal numeric codebook

Generating a key number corresponding to KeyW (x)Word vector private digital key

Will be provided with

As background conditional digit vectors

Is transmitted to the other part of the information,

thereby generating a new digital vector with foreground

DMAC (c) pair symbol dictionary by functional power algorithm

Modulating for the second time to obtain new one-time-use digital vector with foreground

Digital codebook of key information:

thereby modulating the private public digital key of the password pass W (x)

3. The information security digital encryption method based on the one-time-use codebook of claim 2, characterized in that:

in the foreground condition

Extract a group of keywords KeyW (x), and use the private digital cipher book

Modulating out the private public digital key of the password passW (x)

To be provided with

In (1)

Namely:

using functional power algorithm DMAC (c) for character dictionary

A third modulation is performed to generate a new one-time-use private public digital key

Public digital cipher book

Public digital cipher for generating plaintext information W (x)