KR20210085647A - A method for Secure Data Transmission based on Delegated Proof of Node - Google Patents

Abstract

The present invention relates to a secure data transmission method based on a delegated node authentication method to transmit data safely and efficiently. According to the present invention, the secure data transmission method comprises: an IoT network zone having various types of IoT nodes and performing mutual communication between the nodes; an aggregation zone in which nodes collecting data of the IoT nodes, such as a sink node and the like, are gathered in an IoT environment; a mining zone having a genesis block generated by a miner node to build a blockchain and a plurality of miner nodes; and a management zone including a management node, such as a server node, a server node group, and a cloud, to manage the delegated node authentication method.

Description

{A method for Secure Data Transmission based on Delegated Proof of Node}

The present invention relates to a secure data transmission method for a new type of service such as blockchain and IoT. In particular, the delegated node verification method of the present invention is similar to blockchain technology, and delegation operates by dividing four areas It relates to a secure data transmission method based on the node authentication method.

Recently, the fourth industrial revolution based on various intelligent information technologies such as IoT, cloud, big data, mobile, and security is an inevitable phenomenon. These technologies have been widely distributed to provide various services, and have become one of the important elements in the infrastructure of various industries, especially the future Internet. Among them, IoT technology and its devices are the main opportunity to lead a new paradigm, because most data in the future Internet environment will be replaced by IoT devices. The widely known IoT-related services are already influencing related businesses, creating new global markets.

Although IoT technology has developed rapidly over the past few years, there are still many technical challenges to be solved. In particular, the network architecture of the IoT environment has several important problems in terms of centralization and layering. Since the general IoT network architecture has evolved as an extension of the existing architecture, it is very similar to the existing Internet architecture, as well as in terms of data transmission plan. However, since most IoT devices with various constraints are different from the existing Internet in computing power, power consumption, etc., the existing network architecture and data transmission system are not suitable for the IoT environment. To solve these problems, the network architecture and data transmission scheme support decentralized and decentralized accessibility in the IoT environment. The distributed architecture and data transmission scheme make it easier to accommodate a large number of IoT devices with various limitations.

Korea Patent Publication No. 10-1727525 (2017.04.11.) Korea Patent Publication No. 10-2018-0014534 (2018.02.09.) Korean Patent Publication No. 10-2017-0137388 (2017.12.13.) Korea Patent Publication No. 10-1628007 (2016.06.03.)

The task to be achieved by the present invention is to safely transmit data in an IoT environment based on the delegated node proof method and provide efficient data delivery using accurate synchronization within the synchronization area, through which distributed access and control, distributed information and It is about delivering data that is privileged, secure and efficient.

The Delegated Proof of Node (DPoN)-based secure data transmission method according to the present invention is largely divided into four areas, an IoT network area for mutual communication between IoT nodes, and a sink node in an IoT environment. An aggregation zone where nodes that collect data of the IoT nodes such as a sync node are gathered, a genesis block generated by a miner node to build a block chain, and A management node such as a server node and a group of server nodes or a cloud to manage a mining zone having a plurality of the miner nodes, a delegated node verification method. It is characterized in that it includes a management zone including a (management node).

The IoT node transmits an authentication message to the miner node through the aggregation area unit, and the miner node returns an authentication_reply message to the authentication_message (authentication_request) to the IoT node. do it with

The aggregation area unit aggregates and manages the delegation permission of the IoT node, and transmits the delegation information of the IoT node to the miner node.

The mining node of the mining area performs an authentication process of the IoT node whenever it receives an authentication_request message (authentication_request) from the IoT node, and the miner node receiving the authentication_request message (authentication_request) receives the received It is characterized by comparing the information with the existing blockchain content and node list.

The block chain content has various contents including the ID, MAC address, duration, etc. of the node collected by the node that collects the data of the aggregation area part, and has registered node information in the node list characterized.

The management node of the management area cross-checks the block chain through the node list, designates the mining node for generation block generation, and resets the block chain.

The secure data transmission method is controlled in a Pub/Sub (Publish/Subscribe) method, and synchronization is performed after data transmission is started. The synchronization initiation message (SIM) for the synchronization is characterized by the following equation.

Here, R _n denotes the number of half-speeds, SCM _i denotes a synchronization calculation message (SCM) _{of node i, ET i} denotes an error tolerance value of _{node i, and TI i} denotes a time interval value of node i. Also, _{node_delay app-all} means approximate delay time for all nodes from the source to the destination.

The secure data transmission method based on the delegated node authentication method according to the present invention can transmit data using accurate data synchronization, and through this, it transmits data safely and efficiently using distributed access and control, and distributed information and authority. has the effect of

The effects obtainable in the present invention are not limited to the above-mentioned effects, and other effects not mentioned will be clearly understood by those of ordinary skill in the art to which the present invention belongs from the following description. .

The following drawings attached to this specification illustrate preferred embodiments of the present invention, and serve to further understand the technical spirit of the present invention together with specific contents for carrying out the invention, so the present invention is in such drawings It should not be construed as being limited only to the items listed.
1 shows the overall structure of a delegated node proof method according to the present invention.
2 is a machine learning-based classification algorithm for predicting the state of a network according to the present invention.

The above-described objects, features and advantages will become more apparent through the following detailed description in relation to the accompanying drawings, and accordingly, those of ordinary skill in the art to which the present invention pertains can easily implement the technical idea of the present invention. There will be. In addition, in the description of the present invention, if it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, a low-node authentication method-based secure data transmission method according to the present invention will be described in detail with reference to the accompanying drawings.

Since most IoT applications are determined based on data from IoT devices, authority and auditability are very important in IoT services. In addition, it is possible to make decisions when performing various learning algorithms by using aggregated data from IoT nodes as raw data. Therefore, the data transmission system for IoT service must provide a safe and efficient path from the information publisher node to the information subscriber node. As mentioned above, safe and efficient data transmission is very important regardless of the existing Internet and future Internet environments including various IoT services.

To this end, the present invention uses a delegated node verification method. As shown in FIGS. 1 and 2 , the IoT network area unit 101 , the aggregation area unit 102 , the mining area unit 103 , and management The sales unit 104 is divided into four areas, and each area unit includes an IoT node 201 , an aggregation node 202 , a miner node 203 , and a management node 204 .

The IoT network area unit 101 is a kind of networking area in which various IoT devices 105 are located. The role and function of the IoT network area unit 101 in the delegated node proof method (DPoN) is the same as that of a general IoT network, and the IoT It can be easily joined or detached from the network. However, various IoT devices 105 must pass an authentication process to communicate with other devices using the Delegated Node Proof Method (DPoN), and must perform the authentication process each time they join or disconnect from an IoT network. The IoT device 105 sends an authentication_request message to the miner 107 through the aggregation device 106, and the miner 107 authenticates to the IoT device 105 along with the authentication result. A response (authentication_reply) message is returned to the miner 107 . According to the authentication result, the IoT device 105 may start communication. In the present invention, communication between the IoT device and the aggregation device 106 uses a CoAP (Constructed Application Protocol) protocol.

The aggregation area unit 102 is an area where nodes collecting data of the IoT devices 105 such as sink nodes in the IoT network environment gather. In FIG. 1 of the present invention, only one type of aggregation device 106 is shown. However, the type of the aggregation device 106 varies depending on the IoT device to be managed by the aggregation device 106 . In the above area, the aggregation device 106 not only serves as an anchor node of various IoT devices 105, but also performs aggregation and management of delegation authority in the IoT device 105, and The delegation information is transmitted to the miner 107 . However, the aggregation device 106 with low computing power does not perform a management role in order to provide efficient transmission performance, but performs the same delivery role as an existing anchor node, and the management role is processed by the upper mining node 203 .

In the present invention, a genesis block and additional blocks are required to create a block chain such as a common block chain technology, and the genesis block is generated by one of the miner nodes 203 designated by the management node 204 . In the mining area section 103, there are many miner nodes 203 with sufficient computing power to create a blockchain. The miner node 203 of the mining area unit 103 performs an authentication process of the IoT node 201 whenever it receives an authentication_request message from the IoT node 201 .

Upon receiving the authentication_request message, the miner node 203 compares the received information with the existing block chain contents and the node list. The blockchain content has various node information including node ID, MAC address, period, etc., and the node list contains registered node information collected by the aggregation device 106. After that, the miner node 203 creates a new block in the block chain, sends an authentication_reply message to the IoT node 201 if the request information is valid, and sends a block chain_renew_request to the management node 204 ( blockchain_update_request) message. However, the miner node 203 sends a reset message to the IoT node 201 when the request information is not valid. In the delegated node proof method of the present invention, a hash function is used to create a new block, and the formula is as shown in Equation 2.

Here, Block _prev represents the previous block, A is an address, TS is a timestamp, D _node STA(A) is the delegated stake of address A, and Max and D are maximum difficulty and difficulty.

The management area unit 104 includes a management node 204 to manage the delegated node authentication method, and the management node 204 is a kind of server node, a group of server nodes. ) or cloud. The management node 204 cross-checks the block chain through the node list, designates the mining node 203 for generating blocks, and resets the block chain. The management node 204 of the present invention sets information for supporting a data transmission technique synchronized with a Pub/Sub (Publish/Subscribe) technique for efficient data transmission.

In Figure 2, the message process of the delegated node proof method (DPoN) of the present invention is shown. As described above, in the delegated node proof method (DPoN), the authentication process is performed based on a block chain, and the authentication process is an IoT node (201) includes the delegation process. The IoT node 201 transmits an authentication_request message together with the delegation information of the IoT node 201 to the aggregation node 202 . Thereafter, the aggregation node 202 sends an SC_confirmation_request message to the miner node 203 , and the miner node 203 performs verification on the smart contract 205 . The smart contract (SC) is supervised by the management node 204 and is synchronized between the miner node 203 and the management node 204 to create and update new blocks. To this end, the miner node 203 sends an SC_confirmation_reply message to the aggregation node 202 and sends a blockchain_update_request message to the management node 204 . The rest of the message process for updating the blockchain and smart contract information and data transmission of the IoT node 201 is the same as the general message process.

For the efficiency and auditability of the delegated node verification method of the present invention, a secure data transmission technique is used, which is similar to the general synchronous data transmission method, but supports Pub/Sub operation, which is an asynchronous data transmission method. That is, the start point of data transmission is controlled according to the Pub/Sub technique, and synchronization is performed after the start of data transmission.

In the present invention, the delay time (Node_Delay) for all nodes using the Pub/Sub method can be calculated through Equation 3 below.

where e _n is the electrical delay of the node n, p _n is the processing delay of the node n, s _n is the serialization delay _{of the node n, t n} is the transmission delay of the node n, and finally TI _n is the node using the Pub/Sub method Represents a time interval of n.

According to Equation 3, the delay of any node i and the source-to-destination delay for all nodes can be expressed as Equations 4 and 5.

A synchronization initiation message (SIM) value can be obtained using Equations 3, 4, and 5, which is characterized by Equation 6 below.

Here, R _n denotes the number of half-speeds, SCM _i denotes a synchronization calculation message (SCM) _{of node i, ET i} denotes an error tolerance value of _{node i, and TI i} denotes a time interval value of node i. Also, _{node_delay app-all} means approximate delay time for all nodes from the source to the destination.

Although preferred embodiments of the present invention have been described above, the present invention is not limited thereto, and various modifications can be made within the scope of the claims, the detailed description of the invention, and the accompanying drawings, and this is also the present invention. It is natural to fall within the scope of

101: IoT network area unit 102: aggregation area unit
103: mining area part 104: management area part
105: IoT device 106: aggregation device
107: miner 201: IoT node
202: aggregation node 203: mining node
204: managed node 205: smart contract

Claims (7)

an IoT network area unit having various types of IoT nodes and performing mutual communication between the nodes;
an aggregation area unit in which nodes collecting data of the IoT nodes, such as a sink node, are gathered in an IoT environment;
a mining area unit having a genesis block generated by a miner node to build a blockchain and a plurality of said miner nodes;
Delegated node authentication method-based security data transmission method comprising a; a management area unit including a server node and a server node group or management node such as a cloud to manage the delegated node authentication method. The method according to claim 1, wherein the IoT node transmits an authentication message to the miner node through the aggregation area unit, and the miner node returns an authentication_response message to the authentication_message to the IoT node. A secure data transmission method based on the delegated node proof method. [3] The security of claim 2, wherein the aggregation area unit aggregates and manages the delegation permission of the IoT node, and transmits the delegation information of the IoT node to the miner node. Data transmission method. The method according to claim 3, wherein the mining node of the mining area performs an authentication process of the IoT node whenever it receives an authentication_request message from the IoT node, and the miner node receiving the authentication_request message receives Delegated node verification method-based secure data transmission method, characterized in that the information is compared with the existing block chain contents and node list The method according to claim 4, wherein the block chain content has various contents including the ID, MAC address, duration, etc. of the node collected by the node that collects the data of the aggregation area part, and is registered in the node list. Delegated node authentication method-based secure data transmission method, characterized in that it has node information. The delegated node proof according to claim 5, wherein the management node of the management area cross-checks the block chain through the node list, designates the mining node for generation block generation, and resets the block chain. Method-based secure data transmission method. The delegated node according to claim 1, wherein the secure data transmission method is controlled in a Pub/Sub method, and synchronization is performed after data transmission is started, and the initiation message (SIM) for synchronization is the following equation. A method of transmitting secure data based on proof method.

SIM _SET

Here, R _n denotes the number of half-speeds, SCM _i denotes a synchronization calculation message (SCM) _{of node i, ET i} denotes an error tolerance value of _{node i, and TI i} denotes a time interval value of node i. Also, _{node_delay app-all} means approximate delay time for all nodes from the source to the destination.

Images