WO2018046008A1

WO2018046008A1 - Storage design method of blockchain encrypted radio frequency chip

Info

Publication number: WO2018046008A1
Application number: PCT/CN2017/101304
Authority: WO
Inventors: 陆杨
Original assignee: 上海鼎利信息科技有限公司
Priority date: 2016-09-12
Filing date: 2017-09-11
Publication date: 2018-03-15
Also published as: TW201812630A; TW201812638A; WO2018046009A1; TWI749061B; TWI750223B

Abstract

A storage design method of a blockchain encrypted radio frequency chip, comprising: step 1, designing the data structure of a blockchain encrypted radio frequency chip; step 2, designing the form in which data of the blockchain encrypted radio frequency chip is organized and stored in a user memory; and step 3, designing encryption and decryption processes for the blockchain encrypted radio frequency chip. By means of studying the encryption principle of blockchain, the storage design method of a blockchain encrypted radio frequency chip improves information security, satisfies the principle of one card for multiple uses, enhances the degree of information protection, and improves use security and convenience.

Description

Blockchain encryption radio frequency chip storage design method

Cross-reference to related applications

This application claims to be filed on September 12, 2016, with the application number 201610815590.2, titled "A Storage Design Method of Blockchain Encrypted Radio Frequency Chip" Priority of application. The present application also claims priority from the prior Chinese application filed on September 12, 2016, with the application number 201610818053.3 entitled "A Blockchain Identity System". This application also requires the priority of the prior Chinese application submitted on September 12, 2016, with the application number 201610818054.8, titled "A Blockchain Real-time Polling Cloud System" right. The three prior Chinese applications mentioned above are incorporated herein by reference in their entirety.

Technical field

The invention relates to the field of Internet technology, and relates to a blockchain encryption radio frequency chip storage design method.

Background technique

With the rapid development of blockchain technology, the application of blockchain has become more widespread. The blockchain encryption RF chip is increasingly important as a link between the user and the blockchain network. Blockchain encryption RF chip storage methods are constantly threatened by hackers and viruses. Security incidents have occurred many times in recent years. In order to make the use of the blockchain more convenient and improve the security, it is necessary to use the blockchain with convenient use, high security, good expansibility and strong applicability. A dense RF chip is used as a tool. The storage and operation of the blockchain encryption RF chip is the foundation and core. It is necessary not only to take into account the technology of the blockchain, but also to consider security, application and scalability. Therefore, there is a need for a storage design method for a blockchain encrypted radio frequency chip that solves the above problems.

Summary of the invention

In view of this, the technical problem to be solved by the present invention is to provide a storage design method for a blockchain encryption radio frequency chip which is widely used, high in security, good in scalability, and highly applicable.

In order to achieve the effects of the foregoing technical solutions, the technical solution of the present invention is: a storage design method for a blockchain encryption radio frequency chip, comprising the following steps:

The first step is to design the blockchain to encrypt the data structure of the RF chip;

In the second step, the data in the blockchain encryption radio frequency chip is designed to be organized and stored in the user memory;

The third step is to design the encryption and decryption process of the blockchain encryption radio frequency chip;

The data structure of the blockchain encryption radio frequency chip includes user data, authentication data and account data;

The user data includes read control data A, a user name, a user phone, and a user ID;

The read control data A is used to store information for controlling user data reading, the user name is used to store the user's name information, the user phone is used to store the user's phone information, and the user ID stores the internal user number;

The authentication data includes: read control data B, user password hash value, authentication key, account master public key;

The read control data B is used to authenticate the information read by the data, and the information of the authentication data is extracted, and the local time stamp is added to obtain the user anti-counterfeit mark to prevent tampering, and finally the value of the user anti-counterfeiting mark and the user are The value of the password is converted into a hash value of the length required for the actual security authentication by the hash encryption algorithm, and the process of extracting the information of the authentication data reading is:

First, the information read by the authentication data of any length is divided to generate sub-information segments of length 4n bytes, where n is an arbitrary integer value determined according to the system in advance, and then a Hash function transform is used to generate a 4n-length hash. The value is obtained by adding the local timestamp to obtain the user security flag. In the case that the blockchain encryption radio chip is lost, the illegal user is effectively prevented from violently cracking the user password. Finally, the authentication key is used to read the control data B and the Secure authentication between user password hash values, account public key decryption is used to decrypt user security tokens for querying the balance of each account;

The account data includes: read control data C, master key ciphertext, and master private key ciphertext;

The read control data C is used to store the information read by the account data, and the master key ciphertext is used to associate the user password with the account private key, improve the encryption parameter of the account public key, improve the difficulty of cracking, and make the account more Safety;

The data in the blockchain encryption radio frequency chip is organized in the user memory as a tree file structure, and has a multi-level file structure. The tree file structure is divided into three levels: the first level is the total control file, which is more The root of the application file structure is the root directory of the tree file structure, which is used to store the public information file of the blockchain encryption RF chip and serves all applications; the second level is the application file, which is in the total control file. Next, as a subdirectory of the tree file structure, a plurality of application files are respectively created according to the usage, and the application file is used to implement various application functions of the blockchain encryption radio frequency chip; the third level is an atom file, which is used to store the actual The application data and the corresponding system management information, the data information in the data structure of the blockchain encryption radio frequency chip is stored in the atom file, and the corresponding atom file can be called when the application file needs;

The encryption and decryption process of the blockchain encryption radio frequency chip is:

(1) Encryption: The system randomly generates a 32-byte master key, reads the user's password at the same time, and stores it in the array matrix, where the user uses the password as the row vector and the master key as the column vector. The encryption algorithm encrypts to obtain the master key ciphertext;

(2) Decryption: Read the master key ciphertext from the account data, and read the user password, and store it in the array matrix, where the user uses the password as the row vector and the master key ciphertext as the column vector, through the decryption algorithm. The master key ciphertext is restored to the master key, and then the master private key ciphertext is read from the blockchain encrypted radio frequency chip, and the master private key ciphertext is restored by the verification of the user security mark and the master key. Become the master private key.

The blockchain encryption radio frequency chip storage design method of the invention studies the principle of the blockchain, considers the information security degree, designs the data structure of the blockchain encryption radio frequency chip, and considers the process of encryption and decryption, in order to To meet the principle of multi-purpose card, we have designed a multi-level file structure, increased the degree of information protection, and improved the security and ease of use.

DRAWINGS

FIG. 1 is a specific step of a blockchain encryption radio frequency chip storage design method.

detailed description

The present invention will be described in detail below with reference to the accompanying drawings and embodiments. It should be noted that the specific embodiments described herein are only intended to explain the present invention, and are not intended to limit the invention, and that the products that can achieve the same function are equivalents and modifications, and are included in the scope of the present invention. The specific method is as follows:

Embodiment 1: Hash function construction of user password

The user-used password required for the verification card is transformed into a hash value of a desired length by a hash function. The specific process is to first fill and divide the user-used password of any length to generate a sub-information segment of length 4n bytes, and then pass Chaotic iteration, function transformation, substitution, and function lookup tables generate a 4n length hash value. The specific algorithm is as follows:

a) The user is represented by a password into a format. The initial format is K=(α, x ₀ , m), where α is the parameter of the chaotic map, x ₀ is the initial value of the chaotic map, here is the user's password. m is the initial number of iterations. Initialize each register with a 0-1 chaotic sequence as:

A=(b ₀ , b ₁ ,...,b _n-1 ), B=(b _8n , b _8n+1 ,...,b _2*(8n-1) ),

C=(b _2*8n , b _2*(8n+1) ,...,b _3*(8n-1) ), D=(b _3*8n , b _3*(8n+1) ,...,b _{4 *(8n-1)} )

b) A user of any length is padded and divided using a password to generate a sub-information segment having a length of 4 n bytes.

c) Recalculate A, B, C, D using the function f(*).

d) according to the last bits of the generated A, B, C and D, determine the replacement order of A, B, C and D in the chaotic dynamic s-box, ie, A, B, C and D respectively with the labels 1, 2 3 and 4 one-to-one correspondence, according to the sub-function subscript order of the function F (*) as the chaotic replacement order.

e) Find and calculate f(*) from the last bit of A, B, C, D.

f) Determine whether the original data is processed or not, and output a 4n-byte hash value A, B, C, D, otherwise go to step b).

Embodiment 2: Definition and application of application files under the system total control file

Establish a system total control file on the root of the file system on the blockchain encryption radio chip. The blockchain encrypts the public information files of the RF chip and serves all applications. Create multiple application catalog files according to the usage conditions on the total control file, for example, the blockchain financial environment including key information, personal information, etc., and then define the financial contact application environment, and encrypt the radio frequency chip according to the Chinese financial blockchain. The specification defines the file name for this application as 1PAY.SYS.DDF01. The financial contactless system environment can also be defined and defined as 2PAY.SYS.DDF01. The financial contact application environment and the financial contact application environment are different application files under the system total control file, and the application file realizes various application selections by using the file name to realize various applications of the radio frequency chip.

Embodiment 3: Specific Planning of Key Structure

Key management is a comprehensive technology involving the generation, inspection, distribution, transmission, use, storage and destruction of keys, and is closely related to the key management system and the quality of personnel. At present, the ISO has developed a key management standard. However, due to the actual use of the encryption system, the specific system has specific practical requirements, so it is difficult to unify in standardization.

The current key system generally adopts a hierarchical structure and is designed using the basic idea of a key protection key. The key design for the (i+1)th layer is protected by the key of the i-th layer, and is itself protected by the key of the previous layer. The key is a hierarchical protection mechanism, and the key of the next layer is protected by the key of the above hierarchy.

In actual use, the hierarchical structure of the key system is often determined according to the functional structure of the encryption system. If the system function is relatively simple, the key hierarchy can be correspondingly reduced. If the function is relatively complicated, it is necessary to increase the number of key structure layers as appropriate. The security of the key management system can be greatly improved by the design of the layered mode. Since the new protocol can be used to change and manage in each layer, the entire key system is a dynamic feature, not just a static storage mechanism. With each layer of keys, there is a corresponding protocol. .

A layer 3 key management system is used in the blockchain encryption radio chip system, which is a master key layer, a subkey layer and a session key layer, respectively. The same system master key exists in the intelligent blockchain encryption radio chip and the card reader. According to the actual situation of the system, some smart cards or card readers have one or more master keys to improve the system. Security. Only one master key is used in this system. The subkey is obtained by encrypting the master key using a variable master key parameter, and the third layer session key is obtained by encrypting the subkey with another variable master key parameter. The data transmitted between the reader and the chip is encrypted using a session key. Normally, the session key can only be used once, so that even if the session key is deciphered by the attacker, only the data is transmitted once. Also, the system master key cannot be derived from the session key.

The session key generation method includes: a state-of-the-art manufacturing identification code is used in the blockchain encryption radio frequency chip, and the serial number or the blockchain is used to encrypt the radio frequency chip serial number, wherein the serial number of the radio frequency chip is encrypted according to the blockchain. only. In addition, the system usually records the time of the transaction at the time of the transaction, and there are corresponding counters in some cards to control the number of readings and writes. The counter is automatically incremented when the card is executed with an instruction. This ensures that the value of the counter and the trading time are inconsistent each time a transaction is made. Therefore, the manufacturer's identification code of the card is used by the master key, and the serial number of the card is encrypted to generate a subkey. Although the same master key is used, since the serial numbers are different, the subkeys generated by each card are also different. To ensure that the session key on each card is used only once, the transaction time and counter values are encrypted using a subkey to generate a session key. Thus, for the same card, the session key used for each transaction is different. For a multi-purpose chip, different applications often use different master keys, so this makes the deciphering system a lot of work, and the meaning of deciphering is not great.

The master key can be presented by a plurality of trusted persons independently of each other and then organically synthesized into a key, and then added by a secure random number encryption operation. Therefore, the generation and change of the master key are difficult to predict. Department If the master key is not careful during the loading process, the key will be leaked. Therefore, the master key must be loaded in a secure environment. Since the system master key needs to be manually loaded into the radio frequency chip and the card reader, it is ensured that the loading process must be performed on the dedicated device, and the environment at the time of downloading must be secure, and the information cannot be lost when the radio frequency card is in contact. The in-card operating system ensures that the master key cannot be read again after it has been loaded. It is very troublesome to load the key in the card reader, and a security module is often added to store the key to implement the encryption and decryption algorithm.

The encryption and decryption algorithm uses a digital chaotic sequence, which can improve the digital chaotic iterative process without increasing the amount of computation, so that the pseudo-random sequence generated by the whole system is more similar to noise, and the proportion of weak keys is reduced and expanded. The space of the available keys makes the selection of keys more random. The pseudo-chaotic sequence period generated by the iteration of the digital chaotic system is unpredictable, difficult to accurately analyze, and far less than 2 ^N (N is the implementation accuracy). Although the accuracy of the implementation is improved, the average period of the pseudo-chaotic sequence is still not greatly improved, and there is still a case where the sequence is attracted to a certain fixed value. In order to improve the periodic characteristics of pseudo-chaotic sequences, extend and control the sequence period, the m-sequence is used to perturb the chaotic iterative system.

Claims

A storage design method for a blockchain encryption radio frequency chip, characterized in that the method comprises the following steps:

The first step is to design the blockchain to encrypt the data structure of the RF chip;

In the second step, the data in the blockchain encryption radio frequency chip is designed to be organized and stored in the user memory;

The third step is to design the encryption and decryption process of the blockchain encryption radio frequency chip;

The data structure of the blockchain encryption radio frequency chip includes user data, authentication data, and account data;

The user data includes read control data A, a user name, a user phone, a user ID, and a user password;

The read control data A is used to store the information read by the user data, the user name is used to store the name information of the user, the user phone is used to store the phone information of the user, and the user ID is stored. An internal user number, the user password is used to store a user-set password;

The authentication data includes: read control data B, a user password hash value, an authentication key, and an account master public key;

The read control data B is used to store the information read by the authentication data, and extracts and marks the information read by the authentication data, and adds a local time stamp to obtain a user anti-counterfeit flag to prevent tampering, and finally And the process of extracting the information of the authentication data by extracting the value of the user security token and the value of the user password into a user password hash value of a length required for actual security authentication by a hash encryption algorithm is :

First, the information read by the authentication data of any length is divided to generate a sub-information segment of length 8 bytes, and then the sub-information segment is converted into a hash value of 8 bytes by a hash function, and is added by adding The local timestamp obtains the user anti-counterfeiting flag, and can prevent the illegal user from violently cracking the user password in the case that the blockchain encryption radio frequency chip is lost, and finally the authentication key is used for the read control data. Security authentication between B and the user password hash value, the account master public key is used to decrypt the user security token for querying the balance of each account;

The account data includes: read control data C, a master key ciphertext, and a master private key ciphertext;

The read control data C is used to store information read by the account data, the primary key The key ciphertext is used to associate the user password with the master key, improve the encryption parameter of the account master public key, improve the difficulty of cracking, and make the account more secure; the master private key ciphertext is used to enlarge the block. The complexity of the encryption and decryption process of the chain encryption radio frequency chip further improves the security of the blockchain encryption radio frequency chip;

The data in the blockchain encryption radio frequency chip is organized into a tree file structure in the user memory, and has a multi-level file structure, and the tree file structure is divided into three levels: a first level Is a total control file, is the root of the tree file structure, as the root directory of the tree file structure, is used to store the public information file of the blockchain encryption radio frequency chip, and serves all applications; The second level is an application file, and under the total control file, as a subdirectory of the tree file structure, a plurality of the application files are respectively created according to usage, and the application file is used to implement the area. The blockchain encrypts multiple application functions of the radio frequency chip; the third level is an atomic file for storing actual application data and corresponding system management information, and the user data, the authentication data, and the account data are stored in the In the atomic file, the corresponding atom file may be called when the application file needs it;

The encryption and decryption process of the blockchain encryption radio frequency chip is:

(1) Encryption: the blockchain encryption radio frequency chip randomly generates a 32-byte master key, reads the user password at the same time, and stores it in an array matrix, wherein the user password is used as a row vector in the array matrix The master key is used as a column vector, and is encrypted by an encryption algorithm to obtain the master key ciphertext; the master key is generated by the user anti-counterfeiting mark, and the blockchain encryption radio frequency chip is generated by an encryption algorithm. Master private key

(2) decryption: reading the master key ciphertext from the account data, simultaneously reading the user password, and storing to another array matrix, wherein the user password is used as a row vector, the primary secret The key ciphertext is used as a column vector, and the master key ciphertext is restored to the master key by a decryption algorithm, and then the master private key ciphertext is read from the blockchain encrypted radio frequency chip, Verification of the user security token, and the primary private key ciphertext is restored to the primary private key in conjunction with the master key.