WO2022021992A1

WO2022021992A1 - Data transmission method and system based on nb-iot communication, and medium

Info

Publication number: WO2022021992A1
Application number: PCT/CN2021/092462
Authority: WO
Inventors: 安成名; 杨光; 王文想; 张静; 孟伟; 许超
Original assignee: 深圳市燃气集团股份有限公司; 深圳市深燃燃气技术研究院
Priority date: 2020-07-31
Filing date: 2021-05-08
Publication date: 2022-02-03
Also published as: CN111935712A

Abstract

The present application discloses a data transmission method and system based on NB-IoT communication, and a medium. In the present application, narrowband Internet of things is used to simplify a cryptographic key exchange algorithm, and a data encryption algorithm and a data integrity testing algorithm that are based on a Chinese-made commercial cryptographic algorithm, allowing a client and a server to achieve bidirectional authentication and determine a session key by means of simple exchange of three messages, establish a secure pathway, and prevent data from being eavesdropped on, distorted, destroyed, or affected by replay attack insertion during the transfer process, thereby guaranteeing secure data transfer.

Description

A data transmission method, system and medium based on NB-IoT communication

technical field

The present application relates to the technical field of session processing, and in particular to a data transmission method, system and medium based on NB-IoT communication.

Background technique

SSL protocol: Secure Socket Layer, developed by Netscape, is used to ensure the security of data transmission on the Internet. Using data encryption technology, it can ensure that data will not be intercepted and eavesdropped during the transmission process on the network. It has been widely used for authentication and encrypted data transmission between web browsers and servers.

Since the SSL protocol is based on Web browsers, it can support B/S applications well, but it is not perfect for C/S applications. And the current SSL protocols that support domestic commercial cryptographic algorithms all use the Diffie-Hellman key exchange protocol-based scheme in the key negotiation process. The interaction process is more complicated, usually requiring 9 packets to exchange to complete the two-way authentication, which cannot be adapted to NB-IoT. (Narrowband Internet of Things) network characteristics of narrowband communication.

Therefore, the existing technology needs to be improved and developed.

SUMMARY OF THE INVENTION

Based on this, it is necessary to provide a data transmission method, system and medium based on NB-IoT communication in order to solve the technical problem that the interaction process for obtaining the session key is complex and does not support narrowband communication in the prior art.

In order to achieve the above purpose, the application adopts the following technical solutions:

In a first aspect, the present application provides a data transmission method based on NB-IoT communication, which is applied to an NB-IoT network, and the data transmission method based on NB-IoT communication includes the following steps:

The client sends a session key negotiation request message to the server, wherein the session key negotiation request message carries the first random number of the client;

The client decrypts the session key response message fed back by the server, obtains the second random number and the second signature of the server, and verifies the second signature of the session key response message;

When verifying the second signature of the session key response message is successful, the client generates a first session key according to the first random number and the second random number, and sends a session key confirmation to the server message; wherein, the session key confirmation message carries the first digest of the first session key;

When the first digest is the same as the second digest of the second session key of the server, the client performs encrypted data communication with the server through the first session key; wherein the second session key is The server generates according to the first random number and the second random number.

Optionally, the generation of the session key negotiation request message specifically includes:

Encrypt the first random number with the public key of the server to obtain the first ciphertext;

Adopt the SM3 digest algorithm to calculate the third digest of the first random number;

Encrypt the third digest with the private key of the client to obtain the first signature; wherein the private key of the client is paired with the public key of the server;

Based on the first ciphertext and the first signature, a session key agreement request message is generated.

Optionally, the verifying the second signature of the session key response message specifically includes:

Decrypt the second signature by using the public key of the server to obtain a fourth digest;

Using the SM3 digest algorithm, recalculate the sixth digest of the second random number of the server;

When the fourth digest is the same as the sixth digest, verifying that the second signature of the session key response message succeeds;

When the fourth digest is different from the sixth digest, verifying the second signature of the session key response message is unsuccessful.

Optionally, both the first session key and the second session key are generated based on the XOR operation of the first random number and the second random number.

Optionally, the data transmission method based on NB-IoT communication further includes:

Before the client and the server complete the session key negotiation, if there is non-key negotiated data information transmission between the client and the server, the client disconnects the initial connection with the server.

In a second aspect, the present application also provides a data transmission method based on NB-IoT communication, which is applied to an NB-IoT network, and the data transmission method based on NB-IoT communication includes the following steps:

The server decrypts the session key negotiation request message of the client, obtains the first random number and the first signature of the client, and verifies the first signature of the session key negotiation request message;

When verifying that the first signature of the session key negotiation request message is successful, the server generates a second session key, and sends a session key response message to the client, where the session key response message carries the The second random number of the server;

Receive the first digest of the first session key in the session key confirmation message sent by the client, and obtain the second digest of the second session key; generating the first random number and the second random number;

When the first digest is the same as the second digest, the server performs encrypted data communication with the client through the second session key.

Optionally, the verifying the first signature of the session key agreement request message specifically includes:

Decrypt the first signature by using the public key of the client to obtain a third digest;

Using the SM3 digest algorithm, recalculate the fifth digest of the first random number;

When the third digest is the same as the fifth digest, verify that the first signature of the session key negotiation request message succeeds;

When the third digest is different from the fifth digest, verifying the first signature of the session key negotiation request message is unsuccessful.

Optionally, the generation of the session key response message specifically includes:

Encrypt the second random number with the public key of the client to obtain a second ciphertext;

Adopt the SM3 digest algorithm to calculate the fourth digest of the second random number;

Encrypt the fourth digest with the private key of the server to obtain a second signature; wherein the private key of the server is paired with the public key of the client;

Based on the second ciphertext and the second signature, a session key response message is generated.

In a third aspect, the present application also provides a data transmission system based on NB-IoT communication, where the data transmission system based on NB-IoT communication includes a client and a server;

The client is configured to send a session key negotiation request message to the server, wherein the session key negotiation request message carries the first random number of the client; the client decrypts the session key response message fed back by the server message, obtain the second random number of the server, and verify the second signature of the session key response message; when verifying the second signature of the session key response message is successful, the client A random number and the second random number generate a first session key, and send a session key confirmation message to the server; wherein the session key confirmation message carries the first session key of the first session key Digest; when the first digest is the same as the second digest of the second session key of the server, the client performs encrypted data communication with the server through the first session key; wherein the second session key The key is generated by the server according to the first random number and the second random number;

The server is used to decrypt the session key negotiation request message of the client, obtain the first random number of the client, and verify the first signature of the session key negotiation request message; when verifying the session key negotiation request message When the first signature of the document is successful, the server generates a second session key, and sends a session key response message to the client, wherein the session key response message carries the server's second random number; receiving the client The sent session key confirmation message contains the first digest of the first session key, and obtains the second digest of the second session key; A random number and the second random number are generated; when the first digest is the same as the second digest, the server performs data encrypted communication with the client through the second session key.

In a fourth aspect, the present application further provides a non-transitory computer-readable storage medium, when the instructions in the storage medium are executed by the processor of the electronic device, the electronic device can execute the NB-IoT communication-based storage medium. Steps in the data transfer method.

Beneficial effects:

Compared with the prior art, the present application provides a data transmission method, system and medium based on NB-IoT communication. The data transmission method based on NB-IoT communication includes the following steps: a client sends a session key negotiation to a server. request message, wherein the session key negotiation request message carries the first random number of the client; the client decrypts the session key response message fed back by the server, obtains the second random number of the server, and verifies all the second signature of the session key response message; when verifying the second signature of the session key response message is successful, the client generates a first random number according to the first random number and the second random number session key, and send a session key confirmation message to the server; wherein, the session key confirmation message carries the first digest of the first session key; when the first digest and the server's second When the second digest of the session key is the same, the client performs data encrypted communication with the server by using the first session key; wherein, the second session key is obtained by the server according to the first random number and the A second random number is generated. This application uses the narrowband Internet of Things to simplify the key exchange algorithm and the data encryption algorithm and data integrity check algorithm based on the domestic commercial encryption algorithm, so that the client and the server can realize two-way authentication and determine the session encryption through simple three message interaction. key, establish a secure channel, prevent data from being eavesdropped, tampered with, destroyed, insert and replay attacks during the transmission process, and ensure the security of data transmission.

Description of drawings

FIG. 1 is a flowchart of a data transmission method based on NB-IoT communication provided by the present application.

FIG. 2 is a structural block diagram of a data transmission system based on NB-IoT communication provided by the present application.

FIG. 3 is a structural block diagram of an electronic device provided by the present application.

detailed description

The present application provides a data transmission method, system and medium based on NB-IoT communication. In order to make the purpose, technical solution and effect of the present application clearer and clearer, the present application will be further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

It will be understood by those skilled in the art that the singular forms "a", "an", "the" and "the" as used herein can include the plural forms as well, unless expressly stated otherwise. It should be further understood that the word "comprising" used in the specification of this application refers to the presence of the stated features, integers, steps, operations, elements and/or components, but does not preclude the presence or addition of one or more other features, Integers, steps, operations, elements, components and/or groups thereof. It will be understood that when we refer to an element as being "connected" or "coupled" to another element, it can be directly connected or coupled to the other element or intervening elements may also be present. Furthermore, "connected" or "coupled" as used herein may include wirelessly connected or wirelessly coupled. As used herein, the term "and/or" includes all or any element and all combination of one or more of the associated listed items.

It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. It should also be understood that terms, such as those defined in a general dictionary, should be understood to have meanings consistent with their meanings in the context of the prior art and, unless specifically defined as herein, should not be interpreted in idealistic or overly formal meaning to explain.

Please refer to FIG. 1, which is a flowchart of a data transmission method based on NB-IoT communication. It should be noted that the drug screening method of the embodiment of the present invention is not limited to the steps and sequence in the flowchart shown in FIG. 1 , and steps in the flowchart may be added, removed or changed in sequence according to different requirements. As shown in Figure 1, the data transmission method based on NB-IoT communication includes:

S10, the client establishes an initial connection to the server.

In this embodiment of the present application, the client acts as a session initiator and the server acts as a session receiver. Before the client and the server perform data communication in an encrypted form, a session key for encrypted data communication needs to be negotiated. The session key is negotiated between the client and the server to obtain the negotiated session key. Before the client establishes session key negotiation, the client needs to establish an initial connection. The initialized connection refers to a network connection, and in this application, the connection is performed based on the form of narrowband Internet of Things, such as dial-up Internet access.

When the client initiates the connection successfully, it starts to establish session key negotiation, so as to determine the session key for subsequent encrypted data communication. Of course, it should be noted that, before the session key negotiation is completed, if there is data information transmission that is not key negotiated, the client-side initialization connection will be closed. Therefore, in the session key negotiation process, in order to ensure the accuracy of the session key, no non-key negotiation data information transmission is performed until the session key negotiation is completed.

S20. After the client initializes the connection successfully, the client sends a session key negotiation request message to the server, wherein the session key negotiation request message carries the first random number of the client.

In the embodiment of the present application, the client sends a session key negotiation request to the server, and at this time, a random function of the client itself is triggered to generate a first random number r1, and then a session key negotiation request message is generated according to the first random number r1 Text A. Specifically, the generating the session key negotiation request message based on the first random number specifically includes: using the public key of the server to perform asymmetric encryption on the first random number r1 by using the SM2 algorithm to obtain the first ciphertext ECert2(r1); use the SM3 digest algorithm to calculate the third digest H ₃ (r1) of the first random number r1, that is, use the SM3 digest algorithm to calculate the hash value of the first random number r1; use the client's private key to pair all The third digest H ₃ (r1) adopts the SM3 algorithm to perform asymmetric encryption to obtain the first signature ESkey1 (H ₃ (r1)); wherein, the private key of the client is paired with the public key of the server; based on the The first ciphertext ECert2(r1) and the first signature ESkey1(H ₃ (r1)) generate a session key negotiation request message A=ECert2(r1)∥ESkey1(H ₃ (r1)). Then, the session key negotiation request message is sent to the server.

S30. The server decrypts the session key negotiation request message of the client, obtains the first random number of the client, and verifies the first signature of the session key negotiation request message.

In the embodiment of the present application, the server receives the session key negotiation request message A sent by the client and parses the session key negotiation request message A, and obtains the first ciphertext ECert2(r1) and the first signature ESkey1 (H ₃ (r1)), since the private key of the server and the public key of the client are paired, the first ciphertext ECert2 (r1) is decrypted by using the SM2 algorithm by using the private key of the server to obtain the first random number r1. Then, the first signature of the session key negotiation request message is verified to ensure the integrity of the data information and the legitimacy of the client connected to the server. Specifically, the verifying the first signature of the session key negotiation request message specifically includes: since the client's public key is paired with the server's private key, using the client's public key to sign the first signature ESkey1(H ₃ (r1)) decryption to obtain the third digest H ₃ (r1); at this time, adopt the SM3 digest algorithm to recalculate the hash value of the first random number r1 to obtain the fifth digest H of the first random number r1 ₅ (r1); compare whether the third abstract H ₃ (r1) and the fifth abstract H ₅ (r1) are the same, when the third abstract H ₃ (r1) and the fifth abstract H ₅ ( When r1) is the same, verify that the first signature of the session key negotiation request message is successful, that is, the first signature of the client is correct, the client is legal, and the data is not attacked or damaged during the transmission process, ensuring data integrity ; When the third digest H ₃ (r1) is different from the fifth digest H ₅ (r1), verify that the first signature of the session key negotiation request message is unsuccessful, at this time, the server sends the client Feedback the message that the session key negotiation failed, and prompt the client to re-establish the session key negotiation request.

S40. When the server verifies that the first signature of the session key negotiation request message is successful, the server generates a second session key, and sends a session key response message to the client, wherein the session key response message The file carries the server's second random number.

In this embodiment of the present application, when the server verifies that the first signature ESkey1 (H ₃ (r1)) of the client is correct, the server generates a second random number r2 through its own random function, and responds to the session key negotiation request sent by the client message, at this time, based on the second random number r2, a session key response message B is generated and sent to the client. During specific implementation, the generation of the session key response message specifically includes: using the public key of the client to perform asymmetric encryption on the second random number r2 using the SM2 algorithm to obtain the second ciphertext ECert1(r2); using SM3 Digest algorithm, calculate the hash value of the second random number r2 to obtain the fourth digest H ₄ (r2) of the second random number r2; then encrypt the fourth digest H ₄ (r2) with the private key of the server , obtain the second signature ESkey2 (H ₄ (r2)); then based on the second ciphertext ECert1 (r2) and the second signature ESkey2 (H ₄ (r2)), generate a session key response message B= ECert1(r2)∥ESkey2(H ₄ (r2)), and send the session key response message B to the client.

At the same time, the server performs an XOR operation according to the second random number r2 and the first random number r1 to generate a second session key

and then stored in the database.

S50. The client decrypts the session key response message fed back by the server, obtains the second random number of the server, and verifies the second signature of the session key response message.

In the embodiment of the present application, the client receives the session key response message B, and parses the session key response message B to obtain the second ciphertext ECert1(r2) and the second signature ESkey2(H ₄ (r2)), Then use the client's own private key to decrypt the second ciphertext ECert1(r2) by using the SM2 algorithm to obtain the second random number r2 of the server. During specific implementation, the verifying the second signature of the session key response message specifically includes: using the server's public key to decrypt the second signature ESkey2 (H ₄ (r2)) by using the SM2 algorithm, to obtain a fourth digest H ₄ (r2); using the SM3 digest algorithm, recalculate the hash value of the second random number r2 to obtain the sixth digest H ₆ (r2) of the second random number r2; then compare the fourth digest H ₄ (r2) and the sixth digest H ₆ (r2) are the same, when the fourth digest H ₄ (r2) and the sixth digest H ₆ (r2) are the same, verify the session key response message. The second signature is successful, indicating that the second signature of the server is correct, the server connected to the client is legal, and the transmitted data is complete, not damaged or stolen, etc.; when the fourth digest H ₄ (r2) and the sixth digest H ₆ (r2), the verification of the second signature of the session key response message is unsuccessful, that is, the second signature of the server is incorrect, indicating that the transmitted message B has been destroyed or stolen. At this time, the session Key negotiation fails, prompting to re-run session key negotiation.

S60. When the client verifies that the second signature of the session key response message is successful, the client generates a first session key according to the first random number and the second random number, and sends the key to the server. A session key confirmation message, wherein the session key confirmation message carries a first digest of the first session key.

In this embodiment of the present application, when the client verifies that the second signature of the server is correct, the first session key is obtained by performing an XOR operation according to the first random number r1 and the second random number r2

The first session key is stored in the database of the client and used for subsequent data communication encryption and decryption. It should be noted that the first session key DK1 of the client and the second session key DK2 of the server are the same.

After the client and the server both generate and store the same session key, the client needs to send a session key confirmation message C to the server to inform the server that the identity verification of the other party is successful. At this point, the client uses the SM3 algorithm to hash the first session key DK1 to obtain the first digest of the session key

the first abstract

Send the confirmation message C to the server by generating the session key.

S70. The server receives the first digest of the first session key of the client, regenerates the second digest of the second session key, and sends the session negotiation successful to the client when the first digest is the same as the second digest information.

In this embodiment of the present application, the server receives and parses the session key confirmation message C to obtain the first digest

Then the server uses the SM3 algorithm to re-hash the stored second session key to obtain the second digest of the second session key DK2

Compare the first abstract

with the second abstract

Whether they are the same, to indicate whether the client and the server successfully authenticate each other's identities and whether they hold the corresponding session key. when the first abstract

with the second abstract

If they are the same, it indicates that both the client and the server have successfully verified the identity of the other party and both hold the corresponding session key. At this time, the server sends a session key negotiation success message to the client. Of course, when the first summary

with the second abstract

If they are different, it indicates that the client and the server have not successfully verified the identity of the other party or that one party does not hold the session key. At this time, the server sends a session key negotiation failure message to the client to inform the client to re-initiate the session key negotiation.

S80. The client performs encrypted data communication with the server by using the first session key.

In the embodiment of the present application, the client receives the message that the session key negotiation is successful fed back by the server, indicating that the client and the server have successfully completed the session negotiation, not only the client and the server have successfully completed two-way authentication and identity authentication, but also hold the corresponding session The key is used to facilitate the encrypted use of subsequent data communication and ensure the security and integrity of the data.

During the whole session key negotiation process in the above steps S10-S80, the first random number r1 of the client and the second random number r2 of the server are both randomly generated. The key negotiation function of the key algorithm realizes the functions of dynamic key negotiation, key replacement, and key destruction. That is to say, the first random number r1 and the second random number r2 of each session key negotiation are different. , the generated session key changes with each session key negotiation, which further ensures data security.

Further, after the client of the secure communication protocol establishes key negotiation with the server, it will collect client device information and digital certificates, etc., encrypt it with the SM4 algorithm and send it to the server; the server decrypts the received data and communicates with it. The client information in the database is compared to complete the process of identity authentication. Therefore, after negotiating the session key in the communication protocol, when conducting data communication, both parties will use the SM4 algorithm to encrypt and decrypt the data packets of the application layer, and implement the data encryption function of the application layer based on the hardware encryption algorithm for the data.

To sum up, the data transmission method based on NB-IoT communication disclosed in this application simplifies the key exchange algorithm and the data encryption algorithm and data integrity check algorithm based on the domestic commercial cryptographic algorithm based on the use of the narrowband Internet of Things, so that the client and the server can It can realize two-way authentication and determine the session key through simple three-packet interaction, establish a secure channel, prevent data from being eavesdropped, tampered with, destroyed, insert and replay attacks during the transmission process, and ensure the security of data transmission.

In addition, the implementation of the present application does not need to change the network structure, and does not need to modify the configuration of the firewall and the configuration of the client user.

Based on the above data transmission method based on NB-IoT communication, the present application also provides a data transmission system based on NB-IoT communication. Please refer to FIG. 2 , which illustrates a schematic structural diagram of a data transmission system based on NB-IoT communication in the present application. The system 100 may include a client 101 and a server 102. FIG. 2 only shows some components of the system 100, but it should be understood that it is not required to implement all the shown components, and more or less may be implemented instead. components.

The client 101 is configured to send a session key negotiation request message to the server 102, wherein the session key negotiation request message carries the first random number of the client; decrypt the session key response message fed back by the server 102 , obtain the second random number of the server 102, and verify the second signature of the session key response message; when the second signature is the same as the signature of the server 102, according to the first random number and the first Two random numbers are used to generate a first session key, and a session key confirmation message is sent to the server 102; wherein, the session key confirmation message carries the first digest of the first session key; When a digest is the same as the second digest of the second session key of the server 102, data encrypted communication is performed with the server 102 through the first session key; A random number and the second random number are generated; specifically, the steps are as in the above-mentioned data transmission method based on NB-IoT communication of the client.

The server 102 is used to decrypt the session key negotiation request message of the client 101, obtain the first random number of the client 101, and verify the first signature of the session key negotiation request message; When the signature is the same as the signature of the client terminal 101, a second session key is generated, and a session key response message is sent to the client terminal 101, wherein the session key response message carries the second random number of the server; receiving The first digest of the first session key in the session key confirmation message sent by the client 101, and obtains the second digest of the second session key; The first random number and the second random number are generated; when the first digest is the same as the second digest, data encryption communication is performed with the client 101 through the second session key; specifically, the server The steps in the above-mentioned data transmission method based on NB-IoT communication.

The present application also provides an electronic device. As shown in FIG. 3 , the electronic device 1 includes a processor 11 and a memory 22 connected to the processor 11 . FIG. 3 only shows some components of the electronic device 1 , but it should be understood that However, implementation of all illustrated components is not required, and more or fewer components may be implemented instead.

The memory 22 may be an internal storage unit of the electronic device 1 , such as the memory of the system 100 , in some embodiments. In other embodiments, the memory 22 may also be an external storage device of the system 100, such as a plug-in U disk equipped on the electronic device 1, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, flash memory card (Flash Card), etc. Further, the memory 22 may also include both an internal storage unit of the electronic device 1 and an external storage device. The memory 22 is used to store application software and various types of data installed in the electronic device 1 , such as the data transmission program code based on NB-IoT communication, and the like. The memory 22 can also be used to temporarily store data that has been output or is to be output. In one embodiment, a data transmission program based on NB-IoT communication is stored on the memory 22, and the data transmission program based on NB-IoT communication can be executed by the processor 11, thereby realizing the NB-IoT communication-based data transmission program in this application. The data transmission method is specifically as described in the above method.

In some embodiments, the processor 11 may be a central processing unit (Central Processing Unit, CPU), a microprocessor, a mobile phone baseband processor or other data processing chips, for running the program codes stored in the memory 22 Or process data, for example, execute the data transmission method based on NB-IoT communication.

The present invention also provides a non-transitory computer-readable storage medium, where the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors (in this embodiment: The processor) executes the steps to implement the data transmission method based on NB-IoT communication, which is specifically as described in the above method.

Of course, those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware (such as processors, controllers, etc.) through a computer program, and the programs can be stored in a In the computer-readable storage medium, when the program is executed, the processes of the above-mentioned method embodiments may be included. The storage medium may be a memory, a magnetic disk, an optical disk, or the like.

It should be understood that the application of the present application is not limited to the above examples. For those of ordinary skill in the art, improvements or transformations can be made according to the above descriptions, and all these improvements and transformations should belong to the protection scope of the appended claims of the present application.

Claims

A data transmission method based on NB-IoT communication, characterized in that it is applied to an NB-IoT network, and the data transmission method based on NB-IoT communication comprises the following steps:

The client sends a session key negotiation request message to the server, wherein the session key negotiation request message carries the first random number of the client;

The client decrypts the session key response message fed back by the server, obtains the second random number and the second signature of the server, and verifies the second signature of the session key response message;

When verifying the second signature of the session key response message is successful, the client generates a first session key according to the first random number and the second random number, and sends a session key confirmation to the server message; wherein, the session key confirmation message carries the first digest of the first session key;

When the first digest is the same as the second digest of the second session key of the server, the client performs encrypted data communication with the server through the first session key; wherein the second session key is The server generates according to the first random number and the second random number.
The data transmission method based on NB-IoT communication according to claim 1, wherein the generation of the session key negotiation request message specifically includes:

Encrypt the first random number with the public key of the server to obtain the first ciphertext;

Adopt the SM3 digest algorithm to calculate the third digest of the first random number;

Encrypt the third digest with the private key of the client to obtain the first signature; wherein the private key of the client is paired with the public key of the server;

Based on the first ciphertext and the first signature, a session key agreement request message is generated.
The data transmission method based on NB-IoT communication according to claim 1, wherein the verifying the second signature of the session key response message specifically comprises:

Decrypt the second signature by using the public key of the server to obtain a fourth digest;

Using the SM3 digest algorithm, recalculate the sixth digest of the second random number of the server;

When the fourth digest is the same as the sixth digest, verifying that the second signature of the session key response message succeeds;

When the fourth digest is different from the sixth digest, verifying the second signature of the session key response message is unsuccessful.
The data transmission method based on NB-IoT communication according to claim 1, wherein the first session key and the second session key are both based on the first random number and the second Random number XOR operation is generated.
The data transmission method based on NB-IoT communication according to claim 1, wherein the data transmission method based on NB-IoT communication further comprises:

Before the client and the server complete the session key negotiation, if there is non-key negotiated data information transmission between the client and the server, the client disconnects the initial connection with the server.
A data transmission method based on NB-IoT communication, characterized in that it is applied to an NB-IoT network, and the data transmission method based on NB-IoT communication comprises the following steps:

The server decrypts the session key negotiation request message of the client, obtains the first random number and the first signature of the client, and verifies the first signature of the session key negotiation request message;

When verifying that the first signature of the session key negotiation request packet is successful, the server generates a second session key, and sends a session key response packet to the client, where the session key response packet carries the The second random number of the server;

Receive the first digest of the first session key in the session key confirmation message sent by the client, and obtain the second digest of the second session key; generating the first random number and the second random number;

When the first digest is the same as the second digest, the server performs encrypted data communication with the client through the second session key.
The data transmission method based on NB-IoT communication according to claim 6, wherein the verifying the first signature of the session key agreement request message specifically comprises:

Decrypt the first signature by using the public key of the client to obtain a third digest;

Using the SM3 digest algorithm, recalculate the fifth digest of the first random number;

When the third digest is the same as the fifth digest, verifying that the first signature of the session key negotiation request message succeeds;

When the third digest is different from the fifth digest, verifying the first signature of the session key negotiation request message is unsuccessful.
The data transmission method based on NB-IoT communication according to claim 6, wherein the generation of the session key response message specifically includes:

Encrypt the second random number with the public key of the client to obtain a second ciphertext;

Adopt the SM3 digest algorithm to calculate the fourth digest of the second random number;

Encrypt the fourth digest with the private key of the server to obtain a second signature; wherein the private key of the server is paired with the public key of the client;

Based on the second ciphertext and the second signature, a session key response message is generated.
A data transmission system based on NB-IoT communication, characterized in that the data transmission system based on NB-IoT communication includes a client and a server;

The client is configured to send a session key negotiation request message to the server, wherein the session key negotiation request message carries the first random number of the client; the client decrypts the session key response message fed back by the server message, obtain the second random number of the server, and verify the second signature of the session key response message; when verifying the second signature of the session key response message is successful, the client A random number and the second random number generate a first session key, and send a session key confirmation message to the server; wherein the session key confirmation message carries the first session key of the first session key Digest; when the first digest is the same as the second digest of the second session key of the server, the client performs encrypted data communication with the server through the first session key; wherein the second session key The key is generated by the server according to the first random number and the second random number;

The server is used to decrypt the session key negotiation request message of the client, obtain the first random number of the client, and verify the first signature of the session key negotiation request message; when verifying the session key negotiation request message When the first signature of the document is successful, the server generates a second session key, and sends a session key response message to the client, wherein the session key response message carries the server's second random number; receiving the client The sent session key confirmation message contains the first digest of the first session key, and obtains the second digest of the second session key; A random number and the second random number are generated; when the first digest is the same as the second digest, the server performs data encrypted communication with the client through the second session key.
A non-transitory computer-readable storage medium, characterized in that, when the instructions in the storage medium are executed by a processor of an electronic device, the electronic device can execute the method described in any one of claims 1-5. The steps in the data transmission method based on NB-IoT communication, and/or the steps in the data transmission method based on NB-IoT communication described in any one of claims 6-8.