CN114286331B - Identity authentication method and system suitable for electric power Internet of things 5G data terminal - Google Patents

Abstract

The present invention discloses an identity authentication method and system suitable for 5G data terminals in the power Internet of Things, which includes the following steps: S1. The management terminal and several 5G data terminals establish network connections in sequence through the principle of mutual identity recognition; S2. The 5G data terminal communicates with the management terminal Send the request information; S3, after the management terminal verifies the identity credibility of the 5G data terminal, it sends the response information to the 5G data terminal; the 5G data terminal identity authentication system includes a management terminal and several 5G data terminals connected to the management terminal; The management terminal includes an attribute management module, a random number distribution module, a first encryption module, a first decryption module, an attribute expansion module and an instruction response module; the 5G data terminal includes a second encryption module and a second decryption module. Establish a secure network connection with the management terminal through identity authentication of the 5G data terminal, and ensure the security and confidentiality of data interaction through encryption and decryption algorithms.

Description

Identity authentication method and system suitable for 5G data terminals in the power Internet of Things

Technical field

The present invention relates to the technical field of information secure transmission, and specifically, to an identity authentication method and system suitable for 5G data terminals in the power Internet of Things.

Background technique

At present, the smart mobile terminals widely used in various business systems such as safety production, marketing, emergency command, material management, and mobile office of State Grid Corporation of China are mainly notebooks and PDAs. It itself mainly faces multiple security threats such as physical security, operating system security, storage security, and application security. Once the smart mobile terminal that is accessing the information intranet is invaded, lost or used illegally, it will not only leak a large amount of sensitive data stored on the terminal, but also pose a huge threat to the security of the information network. Traditional access authentication systems generally use the username/password method for authentication. This method has low security strength. Once an account is stolen, a large amount of sensitive information will be completely exposed to illegal access. Therefore, a complete authentication system needs to be designed to Ensure the legitimacy and security of terminal identity. At the same time, due to the complexity of the terminal and the terminal usage environment, real-time monitoring and real-time auditing of the terminal status must be carried out to ensure the legal use of the terminal. When smart terminals access the intranet to access business systems, they interact with the intranet machine for a large amount of business data information. If malicious intrusions and sabotage events occur during the interaction process, key information may be leaked, or even wrong business information may be sent and received. , so it is necessary to monitor the security of smart terminals after access in real time to ensure that terminals connected to the intranet are safe and legal at all times. The information network security access of mobile terminals in the power system uses public mobile communication networks, which can be divided into GSM/GPRS/EDGE/TD.SCDMA, GSM/GPRS/EDGE/WCDMA, CDMAlx/CDMA2000, etc. according to operators. These public mobile communication networks are physically connected to the Internet externally and lack high-strength data encryption protection. Data transmission through public relations networks faces serious risks of being eavesdropped and stolen. After the mobile terminal is connected to the State Grid Corporation's information network, it needs to interact with various information systems in the information network. Most of this information is sensitive information and requires high-strength encryption protection. After the information system is damaged, it will cause serious damage to social order and public interests, or damage to national security, and should be protected in strict accordance with relevant national management regulations and technical standards. Therefore, it is urgent to design a 5G data terminal identity verification method and system to ensure the security of information interaction between 5G data terminals and management terminals.

Contents of the invention

The purpose of the present invention is to design an identity authentication method and system suitable for 5G data terminals in the power Internet of Things. Through the identity authentication of the 5G data terminal, a secure network connection with the management terminal is established, and a proprietary key is used to encrypt the request information. The latter is sent to the management terminal through a network security channel. The management terminal generates corresponding response information, which is encrypted and sent to the 5G data terminal for decryption. This ensures the security and confidentiality of data interaction between the 5G data terminal and the management terminal in the management domain.

In order to achieve the above technical objectives, the present invention provides a technical solution that is an identity authentication method suitable for power Internet of Things 5G data terminals, including the following steps:

S1. The management terminal and several 5G data terminals establish network connections in sequence through the principle of mutual identity recognition;

S2, 5G data terminal sends request information to the management terminal;

S3. After the management terminal verifies the identity credibility of the 5G data terminal, it sends the response information to the 5G data terminal.

Preferably, S1 includes the following steps:

S11. The management terminal includes an attribute management module. An attribute retrieval table is established in the attribute management module. The attribute retrieval table contains attribute information of all 5G data terminals in the management domain. The attribute information includes some public key information. , ID information and network connection protocol; the random number distribution module allocates binary random codes to the corresponding attribute bits in the attribute retrieval table;

S12. The 5G data terminal sends network connection request information through the public channel management terminal, and the management terminal obtains the ID information of the corresponding 5G data terminal;

S13. Query whether the corresponding ID information in the attribute retrieval table exists. If it exists, call the corresponding network connection protocol for network connection; if it does not exist, obtain the attribute information of the corresponding 5G data terminal through the attribute expansion module, and perform the attribute retrieval table. renew;

S14. According to S11-S13, realize the network connection between the management terminal and all 5G data terminals in the entire management domain.

As an option, in S13, the attribute information corresponding to the 5G data terminal is obtained through the attribute expansion module, and updating the attribute retrieval table includes the following steps:

S131. When the ID information of the corresponding 5G data terminal is not retrieved in the attribute retrieval table, the random number distribution module generates a binary random code as the first key and sends it to the corresponding 5G data terminal through the public channel. Synchronously, the first key is stored to the first decryption module;

S132. The corresponding 5G data terminal obtains the first key, and the second encryption module in the 5G data terminal uses the first key to encrypt its attribute information and then sends it to the management terminal through the public channel;

S133. After the first decryption module in the management terminal decrypts the attribute information, it stores it in the attribute expansion module;

S133. The attribute expansion module applies to the attribute management module for attribute expansion bits, adds the newly acquired attribute information and the corresponding binary random code to the attribute expansion bits, and updates the attribute retrieval table synchronously.

Preferably, S2 includes the following steps:

S21. After the 5G data terminal establishes network security communication with the management terminal, the 5G data terminal generates a pseudo request information block, signs the pseudo request information with its own private key and sends it to the management terminal;

S22. The management terminal obtains the pseudo request information and verifies it. After successful verification, obtains the attribute storage bit of the corresponding 5G data terminal, and sends the binary random code on the attribute storage bit to the corresponding 5G data terminal;

S23. The 5G data terminal generates a request information block, encrypts the request information block with the obtained binary random code, signs it with its own private key, and sends it to the management terminal.

Preferably, S3 includes the following steps:

S31. The management terminal performs signature authentication on the obtained request information block, finds the corresponding attribute storage bit, and the decryption module retrieves the binary code on the corresponding attribute storage bit to decrypt the request information block to obtain the request information;

S32. The management terminal generates response information according to the request information, encrypts the response information using the public key of the corresponding 5G data terminal, and sends it to the corresponding 5G data terminal;

S33. The corresponding 5G data terminal decrypts the obtained response information according to its own private key and executes relevant instructions.

A 5G data terminal identity authentication system, including a management terminal and several 5G data terminals communicating with the management terminal; the management terminal includes an attribute management module, a random number distribution module, a first encryption module, a first decryption module, Attribute expansion module and instruction response module; an attribute retrieval table is established in the attribute management module. The attribute retrieval table contains attribute information of all 5G data terminals in the management domain. The random number distribution module assigns the corresponding attribute bits of the attribute retrieval table to Distribute a binary random code; the binary random code is distributed as a first key to the 5G data terminal for encrypting its attribute information; the first encryption module is used to use the public key of the corresponding 5G data terminal to encrypt the first key After being encrypted, it is sent to the corresponding 5G data terminal; the first decryption module is used to decrypt the attribute information encrypted by the first key; the attribute expansion module is used to update the attribute retrieval table; the instruction response module is used to Generate corresponding response information according to the request information; the 5G data terminal includes a second encryption module and a second decryption module; the second encryption module uses the first key to encrypt its attribute information and then sends it to the management terminal. The second decryption module uses its own private key to decrypt the obtained response information.

Preferably, the attribute information includes certain public key information, ID information and network connection protocol.

Beneficial effects of the present invention: The present invention designs an identity authentication method and system suitable for 5G data terminals in the power Internet of Things. First, the identity of the 5G data terminal is authenticated. After the authentication is completed, a network security connection with the management terminal is established. Obtain the key from the management terminal to encrypt the request information, and send it to the management terminal through the network security channel for decryption. The management terminal generates the corresponding response information after encryption and sends it to the 5G data terminal for decryption, which can ensure that the 5G data terminal in the management domain is connected to the management Security and confidentiality of data exchange between terminals.

Description of drawings

Figure 1 is a flow chart of the identity authentication method of the present invention applicable to 5G data terminals of the power Internet of Things.

Figure 2 is a schematic structural diagram of a 5G data terminal identity authentication system of the present invention.

Marking instructions in the figure: 1-5G data terminal, 2-management terminal, 11-second encryption module, 12-second decryption module, 21-attribute management module, 22-random number distribution module, 23-first encryption module, 24-First decryption module, 25-Attribute expansion module, 26-Instruction response module.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the accompanying drawings and examples. It should be understood that the specific implementation described here is only one of the best embodiments of the present invention. The embodiments are only used to explain the present invention and do not limit the scope of protection of the present invention. All other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present invention.

Example:

As shown in Figure 2, a 5G data terminal identity authentication system consists of a management terminal 2 and several 5G data terminals 1 connected to the management terminal; the management terminal includes an attribute management module 21, a random number distribution module 22, and a first encryption module. Module 23, first decryption module 24, attribute expansion module 25 and instruction response module 26; an attribute retrieval table is established in the attribute management module, and the attribute retrieval table contains attribute information of all 5G data terminals in the management domain, and random numbers are distributed The module assigns a binary random code to the corresponding attribute bit in the attribute retrieval table; the binary random code is distributed to the 5G data terminal as the first key to encrypt its attribute information; the first encryption module is used to use the public key of the corresponding 5G data terminal The first key is encrypted and sent to the corresponding 5G data terminal; the first decryption module is used to decrypt the attribute information encrypted by the first key; the attribute expansion module is used to update the attribute retrieval table; the attribute information includes some public Key information, ID information and network connection protocol; the instruction response module is used to generate corresponding response information according to the request information; the 5G data terminal includes a second encryption module 11 and a second decryption module 12; the second encryption module uses the first key pair The attribute information is encrypted and sent to the management terminal, and the second decryption module uses its own private key to decrypt the obtained response information.

As shown in Figure 1, the identity authentication method suitable for 5G data terminals in the power Internet of Things includes the following steps:

S1. The management terminal and several 5G data terminals establish network connections in sequence through the principle of mutual identity recognition.

S1 includes the following sub-steps:

S11. The management terminal includes an attribute management module. An attribute retrieval table is established in the attribute management module. The attribute retrieval table contains attribute information of all 5G data terminals in the management domain. The attribute information includes some public key information. , ID information and network connection protocol; the random number distribution module allocates binary random codes to the corresponding attribute bits in the attribute retrieval table;

S12. The 5G data terminal sends network connection request information through the public channel management terminal, and the management terminal obtains the ID information of the corresponding 5G data terminal;

S13. Query whether the corresponding ID information in the attribute retrieval table exists. If it exists, call the corresponding network connection protocol for network connection; if it does not exist, obtain the attribute information of the corresponding 5G data terminal through the attribute expansion module, and perform the attribute retrieval table. renew;

Among them, obtaining the attribute information corresponding to the 5G data terminal through the attribute expansion module, and updating the attribute retrieval table includes the following sub-steps:

S131. When the ID information of the corresponding 5G data terminal is not retrieved in the attribute retrieval table, the random number distribution module generates a binary random code as the first key and sends it to the corresponding 5G data terminal through the public channel. Synchronously, the first key is stored to the first decryption module;

S132. The corresponding 5G data terminal obtains the first key, and the second encryption module in the 5G data terminal uses the first key to encrypt its attribute information and then sends it to the management terminal through the public channel;

S133. After the first decryption module in the management terminal decrypts the attribute information, it stores it in the attribute expansion module;

S133. The attribute expansion module applies to the attribute management module for attribute expansion bits, adds the newly obtained attribute information and the corresponding binary random code to the attribute expansion bits, and updates the attribute retrieval table synchronously;

S14. According to S11-S13, realize the network connection between the management terminal and all 5G data terminals in the entire management domain.

S2 and 5G data terminal send request information to the management terminal.

S2 includes the following sub-steps:

S21. After the 5G data terminal establishes network security communication with the management terminal, the 5G data terminal generates a pseudo request information block, signs the pseudo request information with its own private key and sends it to the management terminal;

S22. The management terminal obtains the pseudo request information and verifies it. After successful verification, obtains the attribute storage bit of the corresponding 5G data terminal, and sends the binary random code on the attribute storage bit to the corresponding 5G data terminal;

S23. The 5G data terminal generates a request information block, encrypts the request information block with the obtained binary random code, signs it with its own private key, and sends it to the management terminal.

S3. After the management terminal verifies the identity credibility of the 5G data terminal, it sends the response information to the 5G data terminal.

S3 includes the following sub-steps:

S31. The management terminal performs signature authentication on the obtained request information block, finds the corresponding attribute storage bit, and the decryption module retrieves the binary code on the corresponding attribute storage bit to decrypt the request information block to obtain the request information;

S32. The management terminal generates response information according to the request information, encrypts the response information using the public key of the corresponding 5G data terminal, and sends it to the corresponding 5G data terminal;

S33. The corresponding 5G data terminal decrypts the obtained response information according to its own private key and executes relevant instructions.

The specific implementations described above are preferred implementations of the identity authentication method and system of the power Internet of Things 5G data terminals of the present invention, and are not intended to limit the specific implementation scope of the present invention. The scope of the present invention includes, but is not limited to, the present invention. Specific embodiments, all equivalent changes made in accordance with the shape and structure of the present invention are within the protection scope of the present invention.

Claims (4)

1. The identity authentication method suitable for the 5G data terminal of the electric power Internet of things is characterized by comprising the following steps of:

s1, sequentially establishing network connection between a management terminal and a plurality of 5G data terminals through an identity mutual recognition principle;

s2, the 5G data terminal sends request information to the management terminal;

s3, after the management terminal verifies the identity credibility of the 5G data terminal, sending response information to the 5G data terminal;

s1 comprises the following steps:

s11, the management terminal comprises an attribute management module, wherein an attribute retrieval table is established in the attribute management module, the attribute retrieval table comprises attribute information of all 5G data terminals in a management domain, and the attribute information comprises public key information, ID information and a network connection protocol; the random number distribution module distributes binary random codes to the corresponding attribute storage bits of the attribute retrieval table;

s12, the 5G data terminal sends network connection request information to the management terminal through a public channel, and the management terminal acquires ID information of the corresponding 5G data terminal;

s13, according to whether corresponding ID information exists in the query attribute retrieval table, if so, a corresponding network connection protocol is called to carry out network connection; if the attribute information does not exist, acquiring the attribute information corresponding to the 5G data terminal through an attribute expansion module, and updating an attribute retrieval table;

s14, according to S11-S13, network connection between the management terminal and all the 5G data terminals in the whole management domain is realized;

in S13, attribute information corresponding to the 5G data terminal is obtained through the attribute expansion module, and updating the attribute retrieval table includes the following steps:

s131, when ID information of a corresponding 5G data terminal is not searched in the attribute search table, the random number distribution module generates a binary random code as a first key, the binary random code is sent to the corresponding 5G data terminal through a common channel, and the first key is synchronously stored in the first decryption module;

s132, a corresponding 5G data terminal acquires a first key, and a second encryption module in the 5G data terminal encrypts attribute information of the first key and sends the encrypted attribute information to a management terminal through a common channel;

s133, a first decryption module in the management terminal decrypts the attribute information and stores the attribute information into an attribute expansion module;

s133, applying an attribute expansion bit from an attribute management module by an attribute expansion module, adding newly acquired attribute information and a corresponding binary random code on the attribute expansion bit, and synchronously updating an attribute retrieval table;

s2 comprises the following steps:

s21, after establishing network security communication between the 5G data terminal and the management terminal, the 5G data terminal generates a pseudo request information block, signs the pseudo request information through a private key of the 5G data terminal and sends the pseudo request information to the management terminal;

s22, the management terminal verifies the pseudo request information after obtaining the pseudo request information, and after verification is successful, an attribute storage bit corresponding to the 5G data terminal is obtained, and a binary random code on the attribute storage bit is sent to the corresponding 5G data terminal;

s23, the 5G data terminal generates a request information block, encrypts the request information block through the acquired binary random code, signs the request information block through a private key of the request information block, and sends the request information block to the management terminal.

2. The identity authentication method suitable for the 5G data terminal of the electric power internet of things according to claim 1, wherein S3 comprises the following steps:

s31, the management terminal performs signature authentication on the acquired request information block, finds out a corresponding attribute storage bit, and the decryption module invokes a binary code on the corresponding attribute storage bit to decrypt the request information block to obtain request information;

s32, the management terminal generates response information according to the request information, encrypts the response information through the public key of the corresponding 5G data terminal and sends the response information to the corresponding 5G data terminal;

s33, the corresponding 5G data terminal decrypts the acquired response information according to the private key of the corresponding 5G data terminal, and executes the related instruction.

3. The identity authentication system of the 5G data terminal, which is applicable to the identity authentication method of the 5G data terminal of the electric power internet of things according to any one of claims 1-2, and is characterized by comprising a management terminal and a plurality of 5G data terminals in communication connection with the management terminal; the management terminal comprises an attribute management module, a random number distribution module, a first encryption module, a first decryption module, an attribute expansion module and an instruction response module; the attribute management module is internally provided with an attribute retrieval table, and the attribute retrieval table contains attribute information of all 5G data terminals in a management domain; the random number distribution module distributes binary random codes to the corresponding attribute storage bits of the attribute retrieval table; the binary random code is used as a first key to be distributed to the 5G data terminal for encrypting attribute information of the binary random code; the first encryption module is used for encrypting the first key by adopting the public key of the corresponding 5G data terminal and then sending the first key to the corresponding 5G data terminal; the first decryption module is used for decrypting the attribute information encrypted by the first key; the attribute expansion module is used for updating the attribute retrieval table; the instruction response module is used for generating corresponding response information according to the request information; the 5G data terminal comprises a second encryption module and a second decryption module; the second encryption module encrypts the attribute information by adopting the first key and then sends the encrypted attribute information to the management terminal, and the second decryption module decrypts the acquired response information by adopting the private key of the second decryption module.

4. A 5G data terminal identity authentication system according to claim 3, wherein the attribute information includes public key information, ID information, and a network connection protocol.