CN113747426A

CN113747426A - Data auditing method and system, electronic equipment and storage medium

Info

Publication number: CN113747426A
Application number: CN202010406084.4A
Authority: CN
Inventors: 左海风; 黄甫升; 张劲; 饶波
Original assignee: BOE Technology Group Co Ltd; Hefei Xinsheng Optoelectronics Technology Co Ltd
Current assignee: BOE Technology Group Co Ltd; Hefei Xinsheng Optoelectronics Technology Co Ltd
Priority date: 2020-05-14
Filing date: 2020-05-14
Publication date: 2021-12-03
Anticipated expiration: 2040-05-14
Also published as: CN113747426B

Abstract

The disclosure provides a data auditing method and system, electronic equipment and a storage medium, and relates to the technical field of communication security. The method comprises the following steps: acquiring and registering the user according to the identity information of the user, and determining the registration information of the user; acquiring and registering an auditor according to identity information of the auditor to obtain registration information of the auditor; mutual authentication is carried out on the user according to the registration information of the user, and after the user is authenticated to be legal, the user uploads user data to a server; and mutually authenticating with the auditor according to the registration information of the auditor, and enabling the auditor to acquire user data from the server and audit the user data after the auditor is authenticated to be legal. The method and the device can effectively detect whether the user data is attacked or not, and improve the correctness of data audit.

Description

Data auditing method and system, electronic equipment and storage medium

Technical Field

The present disclosure relates to the field of communication security technologies, and in particular, to a data auditing method, a data auditing system, an electronic device, and a computer-readable storage medium.

Background

With the rapid development of wireless communication technology and sensing technology, wireless sensing networks are beginning to be widely applied to the fields of medical health and health, environmental monitoring, military reconnaissance, smart home and the like, and have wide commercial prospects and scientific research values. The wireless body area network is composed of a series of sensors and personal intelligent equipment, personal physiological information can be collected through the sensors deployed on or around a human body, then the collected physiological information is sent to a remote medical institution through the intelligent equipment, and the medical institution can process the physiological information on line and return diagnosis results.

Currently, a user can sign medical data and then upload the medical data to a server, and an auditor generates a medical data audit certificate and then obtains the data from the server and performs data audit. However, since the message communication is open in nature, the wireless body area network is subject to various security attacks, such as simulation attacks, and an attacker can impersonate a legitimate user to upload false medical data, thereby gaining violence or providing convenience to the attacker. Therefore, the confidentiality of the data cannot be guaranteed in the prior art, and the correctness of data audit is low.

It is to be noted that the information disclosed in the above background section is only for enhancement of understanding of the background of the present disclosure, and thus may include information that does not constitute prior art known to those of ordinary skill in the art.

Disclosure of Invention

The present disclosure is directed to a data auditing method, a data auditing system, an electronic device, and a computer-readable storage medium, which overcome the problems that the confidentiality of user data cannot be guaranteed and the correctness of data auditing is low due to the limitations and defects of the related art to some extent.

According to a first aspect of the present disclosure, there is provided a data auditing method, comprising:

acquiring and registering a user according to identity information of the user, and determining registration information of the user;

acquiring and registering an auditor according to identity information of the auditor to obtain registration information of the auditor;

mutually authenticating with the user according to the registration information of the user, and uploading user data to a server by the user after authenticating that the user is legal;

and mutually authenticating with the auditor according to the registration information of the auditor, and after the auditor is authenticated to be legal, enabling the auditor to acquire the user data from the server and audit the user data.

Optionally, the mutually authenticating the user according to the registration information of the user includes:

the user generates user side encryption information according to identification information of a trusted center and a first encryption key and first pseudonym information of the user in registration information of the user, and sends the user side encryption information to the server;

the server encrypts the user side encryption information according to a private key of the server to obtain and send server side encryption information to the trusted center;

the trusted center decrypts the encrypted information at the server side according to the private key of the server to obtain first decrypted information;

when the identification information contained in the first decryption information is the same as the identification information of the trusted center, decrypting the initial encryption information contained in the first decryption information according to the first encryption key to obtain second decryption information;

the trusted center generates an authentication code according to the second decryption information and a private key of the trusted center, encrypts the authentication code, the first pseudonym information and the identification information according to the private key of the trusted center, the first encryption key and a private key of the server, and obtains and sends encrypted information of the trusted center side to the server;

the server decrypts the encrypted information of the trusted center side according to a private key of the server and the first encryption key to obtain third decrypted information, and when identification information in the third decrypted information is the same as that of the trusted center, the third decrypted information is sent to the user;

and the user decrypts the third decryption information according to the public key of the trusted center to obtain fourth decryption information, and when the pseudonym information in the fourth decryption information is the same as the first pseudonym information in the registration information of the user, the user is determined to be legal.

Optionally, the generating, by the user, user-side encryption information according to the identification information of the trusted center and a first encryption key and first pseudonym information of the user in the registration information of the user includes:

the user carries out hash operation on a first encryption key and a random integer of the user to generate a first hash code, and first pseudonym information, the first hash code and the random integer in the registration information of the user are encrypted through the first encryption key to generate initial encryption information;

and generating user side encryption information according to the initial encryption information, the first pseudonym information and the identification information of the trusted center.

Optionally, the generating, by the trust center, an authentication code according to the second decryption information and a private key of the trust center includes:

the trusted center performs hash operation on the first encryption key and an integer in the second decryption information to generate a second hash code;

and when the second hash code is the same as the first hash code, the trusted center performs hash operation on the first hash code and the private key of the trusted center to obtain an authentication code.

Optionally, the auditing method of the embodiment of the present disclosure further includes:

the user determines a second encryption key and generates a third encryption key according to the public key of the trusted center, the second encryption key and the first timestamp;

encrypting the first encryption key and the first time stamp according to the third encryption key, and sending the obtained first encryption information, the second encryption key and the first time stamp to the trusted center;

after the trusted center determines that the first timestamp is valid, a fourth encryption key is generated according to the second encryption key, the public key of the trusted center and the first timestamp, and the first encryption information is decrypted through the fourth encryption key to obtain a fifth encryption key and a second timestamp;

after the second timestamp is determined to be valid, if the registration confidence of all the users contains target registration information and the validity period of the first pseudonym information in the target registration information is invalid, determining an updated validity period; the target registration information comprises an encryption key which is the same as the fifth encryption key;

determining second pseudonym information according to the identity information of the user and the updated validity period, and determining a sixth encryption key;

storing updated registration information determined according to the updated validity period, the second pseudonym information and the sixth encryption key to the local;

performing hash operation on the second pseudonym information, the sixth encryption key and the second timestamp to obtain a first message authentication code;

encrypting the second pseudonym information, the sixth encryption key, the second timestamp and the first message authentication code by using the fourth encryption key to obtain second encryption information, and sending the second encryption information and a seventh encryption key to the user;

the user decrypts the second encrypted information according to the seventh encryption key to obtain fifth decrypted information;

and when the timestamp and the message authentication code in the fifth decryption information are valid, respectively using the sixth encryption key and the second pseudonym information as the own encryption key and the own pseudonym information.

after the second timestamp is determined to be valid, if target registration information is contained in the registration confidence of all users and the validity period of the first pseudonym information in the target registration information is valid, determining an eighth encryption key;

storing updated registration information determined according to the first pseudonym information, the validity period of the first pseudonym information and the eighth encryption key to the local;

performing hash operation on the first pseudonym information, the eighth encryption key and the second timestamp to obtain a second message authentication code;

encrypting the first pseudonym information, the eighth encryption key, the second timestamp and the second message authentication code by using the third encryption key to obtain third encryption information, and sending the third encryption information and a ninth encryption key to the user;

the user decrypts the third encrypted information according to the ninth encryption key to obtain sixth decrypted information;

and when the time stamp and the message authentication code in the sixth decryption information are valid, taking the eighth encryption key as the own encryption key.

Optionally, after authenticating that the user is legitimate, the method further comprises:

and the user carries out digital signature on the user data to obtain the user data after digital signature, and uploads the user data after digital signature to the server.

According to a second aspect of the present disclosure, there is provided a data auditing system comprising:

the user side is used for sending the identity information of the user to the trusted center;

the auditing end is used for sending the identity information of an auditor to the trusted center;

the trusted center is used for registering the user according to the identity information of the user and determining the registration information of the user; registering an auditor according to identity information of the auditor to obtain registration information of the auditor; performing mutual authentication with the user according to the registration information of the user; performing mutual authentication with the auditor according to the registration information of the auditor;

the user side is also used for uploading user data to the server after the authentication is legal;

the server is used for receiving and storing the user data uploaded by the user side;

and the auditing end is also used for acquiring the user data from the server and auditing the user data after the user data is authenticated to be legal.

Optionally, the user side is further configured to generate user side encryption information according to the identification information of the trusted center and a first encryption key and first pseudonym information of the user in the registration information of the user, and send the user side encryption information to the server;

the server is used for encrypting the user side encryption information according to a private key of the server to obtain and send the server side encryption information to the trusted center;

the trusted center is used for decrypting the encrypted information of the server side according to the private key of the server to obtain first decrypted information; when the identification information contained in the first decryption information is the same as the identification information of the trusted center, decrypting the initial encryption information contained in the first decryption information according to the first encryption key to obtain second decryption information; generating an authentication code according to the second decryption information and a private key of the server, encrypting the authentication code, the first pseudonym information and the identification information according to the private key of the server, the first encryption key and a private key of the server, obtaining and sending encrypted information of a trusted center side to the server;

the server is used for decrypting the encrypted information of the trusted center side according to a private key of the server and the first encryption key to obtain third decrypted information, and when identification information in the third decrypted information is the same as the identification information of the trusted center, the third decrypted information is sent to the user side;

and the user side is used for decrypting the third decryption information according to the public key of the trusted center to obtain fourth decryption information, and when the pseudonym information in the fourth decryption information is the same as the first pseudonym information in the registration information of the user, the user is determined to be legal.

Optionally, the user side is specifically configured to perform a hash operation on a first encryption key and a random integer of the user side to generate a first hash code, and encrypt first pseudonym information, the first hash code, and the random integer in the registration information of the user by using the first encryption key to generate initial encryption information; and generating user side encryption information according to the initial encryption information, the first pseudonym information and the identification information of the trusted center.

Optionally, the trusted center is configured to perform a hash operation on the first encryption key and an integer in the second decryption information to generate a second hash code; and when the second hash code is the same as the first hash code, the trusted center performs hash operation on the first hash code and the private key of the trusted center to obtain an authentication code.

Optionally, the user side is further configured to determine a second encryption key, and generate a third encryption key according to the public key of the trusted center, the second encryption key, and the first timestamp; encrypting the first encryption key and the first time stamp according to the third encryption key, and sending the obtained first encryption information, the second encryption key and the first time stamp to the trusted center;

the trusted center is configured to generate a fourth encryption key according to the second encryption key, the public key of the trusted center, and the first timestamp after determining that the first timestamp is valid, and decrypt the first encrypted information by using the fourth encryption key to obtain a fifth encryption key and a second timestamp;

determining second pseudonym information according to the identity information of the user and the updated validity period, and determining a sixth encryption key; storing updated registration information determined according to the updated validity period, the second pseudonym information and the sixth encryption key to the local;

encrypting the second pseudonym information, the sixth encryption key, the second timestamp and the first message authentication code by using the fourth encryption key to obtain second encryption information, and sending the second encryption information and a seventh encryption key to the user side;

the user side is used for decrypting the second encrypted information according to the seventh encryption key to obtain fifth decrypted information; and when the timestamp and the message authentication code in the fifth decryption information are valid, respectively using the sixth encryption key and the second pseudonym information as the own encryption key and the own pseudonym information.

Optionally, the trusted center is further configured to, after determining that the second timestamp is valid, determine an eighth encryption key if target registration information is included in the registration credits of all users and the validity period of the first pseudonym information in the target registration information is valid;

encrypting the first pseudonym information, the eighth encryption key, the second timestamp and the second message authentication code by using the third encryption key to obtain third encryption information, and sending the third encryption information and a ninth encryption key to the user side;

the user side is used for decrypting the third encrypted information according to the ninth encryption key to obtain sixth decrypted information; and when the time stamp and the message authentication code in the sixth decryption information are valid, taking the eighth encryption key as the own encryption key.

Optionally, the user side is specifically configured to perform digital signature on the user data to obtain digitally signed user data, and upload the digitally signed user data to the server.

According to a third aspect of the present disclosure, there is provided an electronic device comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the method of any one of the above via execution of the executable instructions.

According to a fourth aspect of the present disclosure, there is provided a computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method of any one of the above.

Exemplary embodiments of the present disclosure may have at least some or all of the following benefits:

in the data auditing method provided by an example embodiment of the disclosure, before a user uploads data to a server and an auditor requests auditing data from the server, the user and the auditor can mutually authenticate with a trust center, and the user and the auditor can obtain the authority to use the server after the authentication is passed, so as to ensure that any attacker cannot imitate a legal user to upload false data and imitate auditor auditing data of the auditor, thereby ensuring the integrity and confidentiality of user data and improving the correctness of data auditing.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure. It is to be understood that the drawings in the following description are merely exemplary of the disclosure, and that other drawings may be derived from those drawings by one of ordinary skill in the art without the exercise of inventive faculty.

FIG. 1 shows a flow diagram of a data auditing method in an embodiment of the present disclosure;

FIG. 2 is a flow chart illustrating mutual authentication between a user and a trust center in an embodiment of the present disclosure;

FIG. 3 shows a flow diagram of digital signatures in an embodiment of the present disclosure;

FIG. 4 shows a flow chart of information updating in an embodiment of the present disclosure;

FIG. 5 shows a schematic diagram of a data auditing system in an embodiment of the present disclosure;

FIG. 6 shows a schematic structural diagram of an electronic device suitable for use in implementing embodiments of the present disclosure.

Detailed Description

Example embodiments will now be described more fully with reference to the accompanying drawings. Example embodiments may, however, be embodied in many different forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a thorough understanding of embodiments of the disclosure. One skilled in the relevant art will recognize, however, that the subject matter of the present disclosure can be practiced without one or more of the specific details, or with other methods, components, devices, steps, and the like. In other instances, well-known technical solutions have not been shown or described in detail to avoid obscuring aspects of the present disclosure.

Furthermore, the drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and thus their repetitive description will be omitted. Some of the block diagrams shown in the figures are functional entities and do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in the form of software, or in one or more hardware modules or integrated circuits, or in different networks and/or processor devices and/or microcontroller devices.

Currently, wireless sensor networks are receiving more and more extensive attention from academia and industry. The wireless body area network is taken as a branch of a wireless sensor network, and the important role is self-evident. A wireless body area network is composed of a series of resource-constrained embedded or wearable sensor nodes that are low-power, lightweight, and have wireless communication capabilities.

The sensing nodes in the wireless body area network can collect personal information of users in real time, wherein the personal information comprises physiological information, motion information, health information and the like. Because the user information contains a large amount of privacy information, if the information is attacked or tampered in the information transmission process, the privacy of the patient is revealed, the monitoring terminal can make wrong diagnosis, and the life safety of the patient is seriously damaged.

Therefore, the importance of the privacy of the medical data of the patient in the wireless body area network is particularly important for ensuring the integrity, confidentiality and privacy of the medical data in the transmission process. Also, it is necessary to address these security attacks. Therefore, the embodiment of the disclosure provides a data auditing method, which can ensure the confidentiality of data, effectively detect whether user data is attacked or not, and improve the correctness of data auditing.

Referring to fig. 1, fig. 1 shows a flowchart of a data auditing method in an embodiment of the present disclosure, which may include the following steps:

step S110, the user is registered according to the identity information of the user, and the registration information of the user is determined.

And step S120, registering the auditor according to the identity information of the auditor to obtain the registration information of the auditor.

Step S130, according to the registration information of the user, mutual authentication is carried out with the user, and after the user is authenticated to be legal, the user uploads the user data to the server.

And step S140, performing mutual authentication with the auditor according to the registration information of the auditor, and enabling the auditor to acquire the user data from the server and audit the user data after the auditor is authenticated to be legal.

According to the data auditing method, before the user uploads data to the server and the auditor requests the server for auditing data, the user and the auditor can mutually authenticate with the credible center, and the user and the auditor can obtain the authority of using the server after the authentication is passed, so that any attacker can not imitate the legal user to upload false data and imitate the auditor auditing data, the integrity and confidentiality of user data can be guaranteed, and the correctness of data auditing is improved.

The data auditing method of embodiments of the present disclosure is set forth in more detail below.

In the disclosed embodiment, the trusted center refers to a trusted third party in the wireless body area network, which has sufficient storage capacity and computing capacity and is considered impossible to compromise with the adversary. When an attacker is found to simulate a user or an auditor to send a false message, the credible center can recover the real identity of the sender.

Before step S110 is executed, the trust center and the auditing end may be initialized.

The initialization process of the trusted center may specifically be:

the trust center may select two large prime numbers P and q, a generator P of a group G of order q, and a nonsingular elliptic curve E (y)²＝x³+ ax + b (mod) p, where a, b ∈ F_pMod denotes the remainder operation, F_pRepresenting a finite field containing p data. Wherein the order q is the attribute of the group and represents the number of elements in the group, and the generator P of the group means that the elements in the group can be generated by the product of the minimum number of group elements. For example, when a group is {1,2,4,8}, the generator of the group is {1,2 }.

The trusted center may also select a random number

Calculating P as its own private key_pubS.p as its own public key;

representing a non-zero group of modulo q. Modulo q denotes an operation, for example, for modulo 3, 0, 1,2 can be obtained.

The initialization process of the audit end specifically may be:

generating hash function h, h: G → Z by audit end_qRepresenting the process of generating corresponding numbers from points on an elliptic curve by means of a hash operation, Z_qRepresenting the group of modes q, G is a point on the elliptic curve E.

And the audit end selects a lightweight encryption algorithm tau, and the symmetric key is sk. Audit end generation pseudo-random number generator

And a pseudo-random function SK_prf×I→Z_q. Wherein,

representing from SK_pr#In (1) generation

In the above-described manner, the process (a),

representing the m data in the modulo q group. SK_prf×I→Z_qRepresenting from SK_prfIn the formation of Z_qThe process of (1). SK_pr#Set of private keys being pseudo-random number generators, SK_prfThe method comprises the steps of I, collecting a private key of a pseudorandom function, and I, collecting the sequencing positions of user data blocks. Audit end selects symmetric key pair (k)_pr#，k_prf) Wherein k is_pr#∈SK_pr#，k_prf∈SK_prf。

In step S110, the user is registered according to the identity information of the user, and the registration information of the user is determined.

In step S120, the auditor is registered according to the identity information of the auditor, and registration information of the auditor is obtained.

The processes of registering the user and registering the auditor in steps S110 and S120 are similar, and the user is taken as an example for explanation.

The user can submit the identity information RID of the user to the trusted center through an offline mode. When a user connects to the wireless body area network, a tamper resistant device in the wireless body area network may be initialized. The trusted center calculates the intrinsic pseudonym information of the user

And the pseudonym information

Sent to the user, e.g. via an intelligent chip

And sending the data to the user. Wherein, VP_iIndicating the validity period of the intrinsic pseudonym information,

according to RID and VP_iPerforming a hash operation to obtain

Where i denotes the number of the user.

The user may then select a random number λ_iAs its own encryption key, among others,

will be lambda_i、

Stored in the tamper resistant device. At the same time, the tuples (RID, VP)_i，

λ_i) Stored in a member list of the trusted center. The registration information of the user may include: RID, VP_i、

λ_i. The RID can be stored at the user end,

And λ_iWithout storing the entire registration information.

In step S130, mutual authentication is performed with the user according to the registration information of the user, and after the user is authenticated to be legitimate, the user is made to upload user data to the server.

In this step, mutual authentication refers to mutual authentication between the trust center and the user. In the process, the interaction process of the server and the user and the interaction process of the server and the trusted center are also included. Referring to fig. 2, fig. 2 shows a flowchart of mutual authentication between a user and a trust center in the embodiment of the present disclosure, which may include the following steps:

step S210, the user generates user-side encrypted information according to the identification information of the trusted center and the first encryption key and the first pseudonym information of the user in the registration information of the user, and sends the user-side encrypted information to the server.

In this embodiment of the present disclosure, before performing this step, the user may input his or her fingerprint into the fingerprint verification device, and if the user fingerprint does not match the fingerprint information stored in the device, the user is not allowed to communicate with the trusted center, otherwise, the user is allowed to communicate with the trusted center, and then step S210 is performed.

In one implementation manner of the present disclosure, a user may perform a hash operation on a first encryption key and a random integer of the user to generate a first hash code, and encrypt first pseudonym information, the first hash code, and the random integer in registration information of the user through the first encryption key to generate initial encryption information; and generating user side encryption information according to the initial encryption information, the first pseudonym information and the identification information of the credible center. Of course, the method of generating the user-side encryption information by the user is not limited thereto.

For example, the user may randomly select an integer N, which is a random integer, and then let λ be an integer_iHash operation is carried out on the N to generate a first Hash code HC ═ h (lambda)_iN). Here, λ_iI.e. the first encryption key. Then, passing through λ_iFor intrinsic pseudonym information

The HC, N are encrypted and, if so,

indicating encrypted information, i.e., initial encryption information. And then, generating user side encryption information according to the initial encryption information, the first pseudonym information and the identification information of the credible center, and sending the user side encryption information to the server. Wherein the server may be a cloud server. The user side encryption information can be initial encryption information and time stamp T₁Pseudonym information

And identity ID of the trusted center_TACan be expressed as

T₁Indicating the validity period of the user.

And step S220, the server encrypts the user side encryption information according to the private key of the server to obtain and send the server side encryption information to the trusted center.

When the server receives the message from the user, the server attaches the ID of the server_CloudAnd adding a timestamp T₁Is worth obtaining T₂. Wherein, T₂Indicating the validity period of the server. The server then encrypts the message using its own private key rsk

And sends it to the trust center.

Step S230, the trusted center decrypts the encrypted information on the server side according to the private key of the server, so as to obtain first decrypted information. And when the identification information contained in the first decryption information is the same as the identification information of the credible center, decrypting the initial encryption information contained in the first decryption information according to the first encryption key to obtain second decryption information.

In the embodiment of the disclosure, after receiving the message, the trusted center can decrypt the message by using rsk

Obtaining first decryption information

After the trusted center verifies the identity of the trusted center, lambda can be used_iTo pair

And decrypting to obtain second decryption information, wherein the second decryption information comprises:

HC. And N is added. At this time, the values of the respective parameters in the second decryption information may be changed.

Step S240, the trusted center generates an authentication code according to the second decryption information and its own private key, and encrypts the authentication code, the first pseudonym information, and the identification information according to its own private key, the first encryption key, and the private key of the server, to obtain and send the encrypted information of the trusted center side to the server.

Specifically, the trusted center may perform a hash operation on the first encryption key and an integer in the second decryption information to generate a second hash code. And when the second hash code is the same as the first hash code, the trusted center performs hash operation on the first hash code and the private key of the trusted center to obtain the authentication code. I.e. the encryption key lambda_iAnd the hash is performed with N to generate a second hash code HC'. If HC', HC and its private key s hash to get the authentication code AC h (HC | | s).

Finally, the trusted center uses the private key s pair

T₃Live, AC encryption

Lifetime is the validity period of the authentication code AC. Trusted center uses λ_iThe rsk encrypts the information to obtain encrypted information of the trusted center side

And sending the encrypted information of the trusted center side to the server. Wherein, T₃Indicating the validity period of the trusted center.

Step S250, the server decrypts the encrypted information of the trusted center side according to the private key of the server and the first encryption key to obtain third decrypted information, and sends the third decrypted information to the user when the identification information in the third decrypted information is the same as the identification information of the trusted center.

In the embodiment of the disclosure, after receiving the encrypted information from the trusted center, the server decrypts the encrypted information by using its own private key and the first encryption key to obtain the third decrypted information

After verifying the identity of the trusted center, the server will

And sending the data to the user.

Step S260, the user decrypts the third decryption information according to the public key of the trusted center to obtain fourth decryption information, and when the pseudonym information in the fourth decryption information is the same as the first pseudonym information in the registration information of the user, it is determined that the user is legal.

Specifically, after receiving the third decryption information, the user may use the public key P of the trusted center_pubDecrypt it to obtain the inherent pseudonym information of the user

If the user data is equal to the user data, the user is regarded as a legal user, and the user data is allowed to be uploaded to the cloud server. The user data may include: medical data, and the like. Of course, the user may encrypt the data before uploading the data, and specifically, the user may encrypt the data by using the encryption algorithm τ and the symmetric key sk.

In an implementation manner of the present disclosure, to further improve data security, the user data may be digitally signed to obtain digitally signed user data, and the digitally signed user data may be uploaded to the server. Here, the encrypted data may be uploaded to a server together with the digitally signed user data.

Specifically, assume that the user data includes f_j，1，f_j，2，…，f_j，n，

J is more than or equal to 1 and less than or equal to J, J is a user data subscript, and J is the total amount of user data. m represents a data compression multiple by which the data is compressed,

representing an m x n dimensional vector on modulo q.

Each user data contains n data blocks. 1,2, …, n,

representing the m data in the modulo q group.

Referring to fig. 3, fig. 3 shows a flowchart of digital signature in the embodiment of the present disclosure, and first, through steps S310 to S330, a homomorphic message authentication code of a plurality of user data is generated.

In step S310, a random vector ξ generated by a pseudo-random number generator_j，ξ_j＝{ξ_j，1，ξ_j，2，…，ξ_j，m}。

In step S320, a random number ζ generated by a pseudo random function_j，l。

In step S330, a homomorphic message authentication code δ is generated by compressing a data block m times using a random vector and a random number_j，l。

δ_j，i∈Z_q，

Z_qThe data are modulo-q groups, and the data amount included varies.

Then, through steps S340 to S350, the digital signature of the homomorphic message authentication code is calculated by using the elliptic curve signature algorithm.

Step S340 generates a first component, a second component, and a third component of the digital signature.

In the embodiment of the present disclosure, a point on the elliptic curve may be taken as the first component of the digital signature, i.e. the first component V of the digital signature_j，l＝r_j，lP＝(α_j，l，β_j，l)，α_j，l、β_j，lRepresenting points on an elliptic curve, r_j，lIs a random number.

The second component of the digital signature may be tabulatedShown as follows: mu.s_j，l＝α_j，lmod q. Third component v of digital signature computed using homomorphic message authentication code and private key s_j，l，v_j，l＝(r_j，lμ_j，l+δ_j，ls)mod q。

Step S350, digitally signing the user data according to the first component, the second component and the third component of the digital signature to obtain the digitally signed user data, and sending the digitally signed user data to the server.

Specifically, the first, second and third components of the digital signature may be represented as ω_j，l＝(V_j，l，μ_j，l，v_j，l) The set of digital signatures is represented as

Can be according to omega_j，lFor user data f_j，lAnd carrying out data signature to obtain the user data after digital signature. The method and the device can send the digitally signed user data and the encrypted data aiming at the user data to the server together, and can delete the locally digitally signed user data and the encrypted data at the same time.

In step S140, the auditor is mutually authenticated according to the registration information of the auditor, and after the auditor is authenticated to be legal, the auditor is enabled to obtain the user data from the server and audit the user data.

It should be noted that, similar to the aforementioned registration process, the process of mutual authentication between the user auditor and the trusted center is the same as the process of mutual authentication between the user and the trusted center, and is not described herein again.

The auditor is allowed to obtain user data from the server only after the auditor is determined to be legitimate. The method specifically comprises the following steps:

and generating audit challenge information by the authorized auditor and sending the audit challenge information to the server, wherein the audit challenge information refers to the information of the service requested by the auditor. And the server generates the audit certification response information of the aggregation of the medical big data after receiving the challenge information, and sends the audit certification response information to the authorized auditor. And the auditor detects the validity of the aggregation audit certification response information by using the public key of the elliptic curve signature algorithm and the symmetric key of the lightweight encryption algorithm. After validation, the data may be retrieved from the server.

In the embodiment of the disclosure, the pending data set in the server can be represented as

k is 0, 1 …, I_q-1，A_k＝2^kP，A_kThe open point generated by P for the elliptic curve. Alternatively, the pending data set may also be represented as

For each 0<k<I_q-1，B_k＝2^kP_pubIs an elliptic curve composed of P_pubGenerated public points, I_qA binary number of bits that is a large prime number q.

In one implementation of the present disclosure, the user may also update the inherent pseudonym identity and encryption key. Therefore, the information is updated regularly, and even if the information stored in the anti-tampering device is leaked due to the bypass attack, the information obtained by an attacker can be effective only in a short time, so that the side channel attack is resisted, and the integrity and confidentiality of user data are ensured.

Referring to fig. 4, fig. 4 shows a flowchart of information update in the embodiment of the present disclosure, which may include the following steps:

step S410, the user determines a second encryption key and generates a third encryption key according to the public key of the trusted center, the second encryption key and the first timestamp; and encrypting the first encryption key and the first time stamp according to the third encryption key, and sending the obtained first encryption information, the second encryption key and the first time stamp to the trusted center.

In particular, useThe user can select a random number r,

and obtaining a second encryption key z according to the z ═ r · P. According to pi_1i＝H₃(z，P_pub，rP_pub，T_i) Generating a third encryption key pi_1i. Wherein H₃() Representing a hash operation.

According to

Calculating first encryption information p_iLet T be (z, T)_i，p_i) Sent to a trusted center, T_iIs a first timestamp representing the validity time of the identity information and key stored by the user in the trusted center.

In step S420, after determining that the first timestamp is valid, the trusted center generates a fourth encryption key according to the second encryption key, the public key of the trusted center, and the first timestamp, and decrypts the first encrypted information by using the fourth encryption key to obtain a fifth encryption key and the second timestamp.

Specifically, after the trusted center receives T, T can be checked_iIf not, then terminate, otherwise, according to pi_2i＝H₃(z，P_pub，x·z，T_i) Calculating a fourth encryption key pi_2iDecryption of

To give (lambda'_i，T′_i). x represents a random number, and x represents a random number,

representing a decryption operation.

Step S430, after the second timestamp is determined to be valid, if the registration confidence of all the users contains the target registration information, whether the validity period of the first pseudonym information in the target registration information is valid is judged, and if the validity period is invalid, step S440 is executed; if valid, step S470 is performed. The target registration information includes an encryption key identical to the fifth encryption key.

In the disclosed embodiment, T 'is checked'_iAnd if not, terminating. If yes, inquiring member list, if lambda is inquired_i＝λ′_iTuple of (RID, VP)_i，

λ_i) If the tuple does not exist, the process is terminated, and if the tuple exists, the information in the tuple is the target registration information.

Step S440, determining an updated validity period, determining second pseudonym information according to the identity information of the user and the updated validity period, and determining a sixth encryption key; and storing the updated registration information determined according to the updated validity period, the second pseudonym information and the sixth encryption key to the local.

If VP_iInvalid, then select a new VP'_iAccording to

Calculating to obtain second pseudonym information

And selects a new encryption key

Will (RID, VP'_i，

) As updated registration information and added to the member list.

Step S450, performing hash operation on the second pseudonym information, the sixth encryption key and the second timestamp to obtain a first message authentication code; and encrypting the second pseudonym information, the sixth encryption key, the second timestamp and the first message authentication code by using the fourth encryption key to obtain second encryption information, and sending the second encryption information and the seventh encryption key to the user.

In particular, the method comprises the following steps of,can be based on

Calculating to obtain a first message authentication code h_RTAThe first message authentication code may also be sent to the user. Wherein h is_RTAIs an HMAC (Hash-based Message Authentication Code, key dependent Hash Authentication Code),

the method is hash operation, and the message authentication codes of different cryptographic algorithms are calculated in different modes. According to

Second encryption information is obtained. Will (H)₃(z) as a seventh encryption key, adding (H)₃(z)，p′_i) And sending the data to the user.

In step S460, the user decrypts the second encrypted information according to the seventh encryption key to obtain fifth decrypted information. And when the time stamp and the message authentication code in the fifth decryption information are valid, respectively using the sixth encryption key and the second pseudonym information as the own encryption key and the own pseudonym information.

User receives (H)₃(z)，p′_i) Then, can calculate

To obtain (A)

λ′_i，T′_i，h_RTA') then verify T'_iAnd h_RTA' if effective, will: (

λ′_i) As new intrinsic pseudonym information and encryption keys.

Step S470, determining an eighth encryption key, and storing updated registration information determined according to the first pseudonym information, the validity period of the first pseudonym information, and the eighth encryption key to the local; and carrying out hash operation on the first pseudonym information, the eighth encryption key and the second timestamp to obtain a second message authentication code.

Unlike step S440, since the validity period is valid, the encryption key may not be updated, and only the encryption key may be updated. Other processing procedures may refer to the corresponding branch of step S440, and are not described herein again.

Step S480, encrypt the first pseudonym information, the eighth encryption key, the second timestamp, and the second message authentication code with the third encryption key to obtain third encryption information, and send the third encryption information and the ninth encryption key to the user.

Step S490, the user decrypts the third encrypted information according to the ninth encryption key to obtain sixth decrypted information; and when the time stamp and the message authentication code in the sixth decryption information are valid, the eighth encryption key is used as the own encryption key.

According to the data auditing method, before the user sends data to the server and the auditor requests the server for auditing the data, mutual authentication can be respectively carried out with the credible center, and the user and the auditor can obtain the authority of using the server after the authentication is passed, so that no attacker exists in the auditing process. In addition, before an attacker obtains the information stored in the tamper-resistant device through bypass attack, the pseudonym and the encryption key are updated, so that the method is beneficial to resisting side channel attack, the integrity and the confidentiality of user data can be ensured, the privacy of a user can be ensured, the method is also beneficial to batch audit of user data by a third party auditor, whether the user data is attacked or not can be effectively detected, and the correctness of data audit is improved. For example, when the user data is medical data, the misdiagnosis rate of the doctor can be reduced.

It should be noted that although the various steps of the methods of the present disclosure are depicted in the drawings in a particular order, this does not require or imply that these steps must be performed in this particular order, or that all of the depicted steps must be performed, to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step execution, and/or one step broken down into multiple step executions, etc.

Further, in the present exemplary embodiment, there is also provided a data auditing system 500, shown in fig. 5, including: a user terminal 510, an audit terminal 520, a trusted center 530 and a server 540;

a user terminal 510, configured to send identity information of a user to a trusted center;

the auditing end 520 is used for sending the identity information of the auditor to the trusted center;

the trusted center 530 is used for registering the user according to the identity information of the user and determining the registration information of the user; registering the auditor according to the identity information of the auditor to obtain registration information of the auditor; performing mutual authentication with the user according to the registration information of the user; performing mutual authentication with an auditor according to the registration information of the auditor;

the user terminal 510 is further configured to upload user data to the server after the authentication is legal;

the server 540 is configured to receive and store user data uploaded by a user side;

the auditing terminal 520 is further configured to obtain the user data from the server after the authentication is legal, and audit the user data.

In an exemplary embodiment of the disclosure, the user side is further configured to generate user side encryption information according to the identification information of the trusted center and a first encryption key and first pseudonym information of the user in the registration information of the user, and send the user side encryption information to the server;

the server is used for encrypting the user side encryption information according to a private key of the server to obtain and send the server side encryption information to the credible center;

the trusted center is used for decrypting the encrypted information of the server side according to the private key of the server to obtain first decrypted information; when the identification information contained in the first decryption information is the same as the identification information of the credible center, decrypting the initial encryption information contained in the first decryption information according to the first encryption key to obtain second decryption information; generating an authentication code according to the second decryption information and the private key of the server, encrypting the authentication code, the first pseudonym information and the identification information according to the private key of the server, the first encryption key and the private key of the server, and obtaining and sending encrypted information of the trusted center side to the server;

the server is used for decrypting the encrypted information of the trusted center side according to the private key of the server and the first encryption key to obtain third decrypted information, and when the identification information in the third decrypted information is the same as the identification information of the trusted center, the third decrypted information is sent to the user side;

In an exemplary embodiment of the present disclosure, the user side is specifically configured to perform a hash operation on a first encryption key and a random integer of the user side to generate a first hash code, and encrypt first pseudonym information, the first hash code, and the random integer in registration information of the user by using the first encryption key to generate initial encryption information; and generating user side encryption information according to the initial encryption information, the first pseudonym information and the identification information of the credible center.

In an exemplary embodiment of the disclosure, the trusted center is configured to perform a hash operation on the first encryption key and an integer in the second decryption information to generate a second hash code; and when the second hash code is the same as the first hash code, the trusted center performs hash operation on the first hash code and the private key of the trusted center to obtain the authentication code.

In an exemplary embodiment of the disclosure, the user side is further configured to determine a second encryption key, and generate a third encryption key according to the public key of the trusted center, the second encryption key, and the first timestamp; encrypting the first encryption key and the first time stamp according to the third encryption key, and sending the obtained first encryption information, the second encryption key and the first time stamp to the trusted center;

the trusted center is used for generating a fourth encryption key according to the second encryption key, the public key of the trusted center and the first timestamp after the first timestamp is determined to be valid, and decrypting the first encrypted information through the fourth encryption key to obtain a fifth encryption key and a second timestamp;

encrypting the second pseudonym information, the sixth encryption key, the second timestamp and the first message authentication code through the fourth encryption key to obtain second encryption information, and sending the second encryption information and the seventh encryption key to the user side;

the user side is used for decrypting the second encrypted information according to the seventh encryption key to obtain fifth decrypted information; and when the time stamp and the message authentication code in the fifth decryption information are valid, respectively using the sixth encryption key and the second pseudonym information as the own encryption key and the own pseudonym information.

In an exemplary embodiment of the disclosure, the trusted center is further configured to, after determining that the second timestamp is valid, determine an eighth encryption key if the target registration information is included in the registration credits of all the users and the validity period of the first pseudonym information in the target registration information is valid;

encrypting the first pseudonym information, the eighth encryption key, the second timestamp and the second message authentication code through the third encryption key to obtain third encryption information, and sending the third encryption information and the ninth encryption key to the user side;

the user side is used for decrypting the third encrypted information according to the ninth encryption key to obtain sixth decrypted information; and when the time stamp and the message authentication code in the sixth decryption information are valid, the eighth encryption key is used as the own encryption key.

In an exemplary embodiment of the present disclosure, the user side is further configured to perform digital signature on the user data to obtain the digitally signed user data, and upload the digitally signed user data to the server.

The specific details of each device in the system are already described in detail in the corresponding method, and therefore are not described herein again.

It should be noted that although in the above detailed description several modules or units of the device for action execution are mentioned, such a division is not mandatory. Indeed, the features and functionality of two or more modules or units described above may be embodied in one module or unit, according to embodiments of the present disclosure. Conversely, the features and functions of one module or unit described above may be further divided into embodiments by a plurality of modules or units.

In an exemplary embodiment of the present disclosure, there is also provided an electronic device including: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to perform all or part of the steps of the data auditing method in this example embodiment.

Fig. 6 shows a schematic structural diagram of an electronic device for implementing an embodiment of the present disclosure. It should be noted that the electronic device 600 shown in fig. 6 is only an example, and should not bring any limitation to the functions and the scope of the application of the embodiments of the present disclosure.

As shown in fig. 6, the electronic apparatus 600 includes a central processor 601, which can perform various appropriate actions and processes according to a program stored in a read only memory 602 or a program loaded from a storage section 608 into a random access memory 603. In the random access memory 603, a cpu 601, a rom 602, and a random access memory 603, which store various programs and data necessary for system operation, are connected to each other via a bus 604. An input/output interface 605 is also connected to bus 604.

The following components are connected to the input/output interface 605: an input portion 606 including a keyboard, a mouse, and the like; an output portion 607 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; a storage section 608 including a hard disk and the like; and a communication section 609 including a network interface card such as a Local Area Network (LAN) card, a modem, or the like. The communication section 609 performs communication processing via a network such as the internet. The driver 610 is also connected to the input/output interface 605 as necessary. A removable medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 610 as necessary, so that a computer program read out therefrom is mounted in the storage section 608 as necessary.

In particular, according to an embodiment of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network through the communication section 609, and/or installed from the removable medium 611. The computer program, when executed by the central processor 601, performs various functions defined in the system of the present application.

In an exemplary embodiment of the disclosure, there is also provided a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method of any one of the above.

It should be noted that the computer readable storage medium shown in the present disclosure can be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In contrast, in the present disclosure, a computer-readable signal medium may include a propagated data signal with computer-readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, radio frequency, etc., or any suitable combination of the foregoing.

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It will be understood that the present disclosure is not limited to the precise arrangements described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A method of data auditing, comprising:

2. The method of claim 1, wherein the mutually authenticating the user according to the registration information of the user comprises:

3. The method according to claim 2, wherein the user generates user-side encryption information according to the identification information of the trusted center and the first encryption key and the first pseudonym information of the user in the registration information of the user, and the method includes:

4. The method of claim 3, wherein the trusted center generates an authentication code according to the second decryption information and its own private key, and comprises:

5. The method of claim 1, further comprising:

6. The method of claim 5, further comprising:

7. The method of claim 1, wherein after authenticating the user is legitimate, the method further comprises:

8. A data auditing system, comprising: the system comprises a user side, an audit side, a trusted center and a server;

9. An electronic device, comprising:

a processor; and

a memory for storing executable instructions of the processor;

wherein the processor is configured to perform the method of any of claims 1-7 via execution of the executable instructions.

10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the method of any one of claims 1 to 7.