WO2018076242A1

WO2018076242A1 - Information transmition method and device

Info

Publication number: WO2018076242A1
Application number: PCT/CN2016/103592
Authority: WO
Inventors: 熊晓春; 黄正安
Original assignee: 华为技术有限公司
Priority date: 2016-10-27
Filing date: 2016-10-27
Publication date: 2018-05-03

Abstract

Provided in an embodiment of the present invention are a method and device for transmitting information, relating to the field of communication technology and intended to solve the problem that in the prior art, the security of a played message cannot be protected. The method comprises: a sender determines a transmission message according to a preset data format, the transmission message comprising transmitted data and information of the sender, and the information of the sender being used by a receiver to verify the security of the transition message; and the sender transmits the transmission message to at least one receiver using the preset data format. Therefore, when the receiver receives the transmission message, the receiver verifies the security of the transmission message according to the information of the sender comprised in the transmission message.

Description

Information transmission method and device

Technical field

The present invention relates to the field of communications technologies, and in particular, to an information transmission method and device.

Background technique

The information exchange between the vehicle and the outside world (English: vehicle-to-X, referred to as V2X) refers to vehicles and vehicles (English: vehicle-to-vehicle, referred to as V2V), vehicles and infrastructure (English: vehicle-to- Infrastructure, referred to as V2I), and communication between vehicles and pedestrians (English: vehicle-to-pedestrian, V2P). V2X communication can achieve road safety, improve traffic efficiency, and provide users with rich streaming services.

At present, in the V2X communication service, broadcast-related services occupy the vast majority, for example, forward collision warnings between vehicles and vehicles. The security requirements of V2X communication require that the recipient of the broadcast message be able to verify the legitimacy of the source. The third generation partnership project (English: 3rd generation partnership project, 3GPP for short) proposes two methods to protect the security of V2X broadcast messages: one is based on identity-based signature (IBS). The other is a method based on digital certificates. However, no specific solution has been given for how to use these two methods to secure the broadcast messages sent.

Summary of the invention

The embodiment of the invention provides an information transmission method and device, which solves the problem that the broadcast message cannot be securely protected in the prior art.

In order to achieve the above object, embodiments of the present invention adopt the following technical solutions:

In a first aspect, an information transmission method is provided, the method comprising: a sender determining a transmission message according to a preset data format; wherein the transmission message includes the transmitted data and the sender information; and the sender information is used to enable the receiver Information for performing security verification on the transmitted message; the sender transmits the transmitted message to at least one recipient using a preset data format. In the foregoing technical solution, the sender determines the transmission message according to the preset data format, and sends the transmission message to the at least one receiver by using the preset data format, so that the preset data format can be guaranteed. The security of the sender when sending a broadcast message.

In a possible implementation manner, the sender's information includes the sender's identity information and a signature; wherein the signature is a signature of the sender to the information other than the signature included in the transmission message. In the above optional technical solution, information for a sender for authenticating a transmission message is provided.

In a possible implementation manner, if the preset data format is an identity signature-based data format, the identity information of the sender includes an identifier ID of the sender, where the sender ID, the transmitted data, and the signature are both For the plain text. In the foregoing optional technical solution, the sender sends the transmission message through the identity signature-based data format, so that the receiver can perform integrity verification and sender identity authentication on the transmission message according to the information of the sender, thereby ensuring security of the transmission to be transmitted. Sex.

Further, if the receiver supports using at least one set of user signature systems, the transmission message further includes a public parameter or a public parameter index of the user signature system used by the sender, so that when the transmission message includes a public parameter of the user signature system used by the sender or When the public parameter index is used, the time for the receiver to determine the corresponding public parameter can be saved, and the efficiency of the security verification is improved.

In a possible implementation manner, if the preset data format is an identity-based signature and an identity-based encryption-based data format, the sender's identity information includes the sender's identity identification number ID, where the sender's ID is plaintext or The ciphertext, the transmitted data, and the signature are all ciphertext. In the foregoing optional technical solution, the sender sends the transmission message by using the identity signature and the identity-based encryption data format, so that the receiver can decrypt the transmission message according to the private key of the receiver, and obtain the information of the plaintext, based on the sender. The information is used to securely verify the transmitted message, thereby ensuring the integrity and confidentiality of the transmitted message.

Further, if both the sender and the receiver support the use of at least one set of user signature systems and at least one set of user encryption systems, the transport message further includes: a public parameter or a public parameter index of the user signature system used by the sender, and/or a transmission The public parameter or public parameter index of the recipient's user encryption system used by the party to encrypt. In the above optional technical solution, the public parameter or the public parameter index of the user encryption system of the receiver used by the sender to be encrypted is sent to the receiver, which can improve the efficiency of the receiver to decrypt the transmission message; of The public parameter or the public parameter index of the user signature system is sent to the receiver, which can save the time for the receiver to determine the corresponding public parameter, and improve the efficiency of the security verification.

In a possible implementation manner, if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate. Optionally, if the receiver supports using a set of digital certificates, the transmission message may include the sender's digital certificate or may not include the sender's digital certificate. In the above optional technical solution, the sender sends the transmission message through the digital certificate-based data format, so that the receiver can perform security verification and identity authentication on the transmission message according to the sender's digital certificate, thereby ensuring the transmission sent by the sender. The security of the message.

Further, if the receiver supports using at least one set of digital certificates, the transmission message further includes a public key or a public key index of the receiver used by the sender to encrypt the transmission message, so that the receiver can receive the transmission message according to the The public key or public key index quickly determines the decrypted private key and improves the efficiency of decrypting the transmitted message.

In a possible implementation manner, the sender's digital certificate, the transmitted data, and the signature are plaintext; or the sender's digital certificate, the transmitted data, and the signature are all ciphertext; or, the sender's digital certificate is In plain text, the transmitted data and signature are both ciphertext. In the above optional technical solution, when the sender's digital certificate, the transmitted data, and the signature are both plaintext, the receiver may perform integrity verification and identity authentication on the transmitted message; when the sender's digital certificate is plaintext or ciphertext When the transmitted data and the signature are both ciphertext, the receiver can decrypt the received message, and then perform integrity verification and identity authentication on the transmitted message, thereby ensuring the integrity and confidentiality of the transmitted message. The security of the transmitted message is guaranteed.

In a possible implementation manner, the transmission message further includes at least one of: a validity period of the sender's ID, a key management center identifier used by the sender, and a time stamp of the transmission message. In the above optional technical solution, the freshness of the ID of the sender can be ensured, the transmission message is prevented from being tracked, and the attack is replayed, thereby ensuring the security of the transmitted message.

In a possible implementation, the transmission message further includes a timestamp of transmitting the message. In the foregoing optional technical solution, when the transmission message is received, the replay attack check is performed according to the timestamp of the transmission message to ensure the security of the transmission message.

In a second aspect, an information transmission method is provided, the method comprising: receiving a receiving The transmission message sent by the sender using the preset data format; wherein the transmission message includes the transmitted data and the information of the sender; the receiver performs security verification on the transmission message according to the information of the sender.

In a possible implementation manner, the sender's information includes the sender's identity information and a signature; wherein the signature is a signature of the sender to the information other than the signature included in the transmission message; the receiver is based on the sender's The information is used to perform security verification on the transmitted message, including: the receiving party performs verification calculation according to the identity information, signature and transmitted data of the sender, and obtains verification information; if the verification information is preset information, determines security verification of the transmitted message. Pass, otherwise it is determined that the security verification of the transmitted message does not pass.

In a possible implementation manner, if the preset data format is an identity signature-based data format, the identity information of the sender includes an identifier ID of the sender, where the sender ID, the transmitted data, and the signature are both For the plain text. Further, if the receiver supports using at least one set of user signature systems, the transport message further includes a public parameter or a public parameter index of the user signature system used by the sender.

In a possible implementation manner, if the preset data format is an identity-based signature and an identity-based encryption-based data format, the sender's identity information includes the sender's identity identification number ID, where the sender's ID is plaintext or The ciphertext, the transmitted data, and the signature are all ciphertexts; before the recipient performs security verification on the transmitted data according to the information of the sender, the method further includes: if the transmitted message includes the transmitted data and the signature are all ciphertexts The receiving party decrypts the transmission message according to the first preset private key, and obtains the plaintext of the transmitted data and the plaintext of the signature; if the sender's ID, the transmitted data, and the signature included in the transmission message are all ciphertext, the receiver is based on the The first preset private key decrypts the transmission message, and obtains the plaintext of the sender's ID, the plaintext of the transmitted data, and the plaintext of the signature. Further, if both the sender and the receiver support the use of at least one set of user signature systems and at least one set of user encryption systems, the transport message further includes: a public parameter or a public parameter index of the user signature system used by the sender, and/or a transmission The public parameter or public parameter index of the recipient's user encryption system used by the party to encrypt.

In a possible implementation manner, if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate. Optionally, if the receiver supports the use of a set of digital certificates, the sender's digits may be included in the transmitted message. The certificate may or may not include the sender's digital certificate. Further, if the receiver supports using at least one set of digital certificates, the transport message further includes a public key or a public key index of the receiver used by the sender to encrypt the transmitted message.

In a possible implementation manner, the sender's digital certificate, the transmitted data, and the signature are plaintext; or the sender's digital certificate, the transmitted data, and the signature are all ciphertext; and the receiver is based on the sender's information. Before performing security verification on the transmitted data, the method further includes: the receiver decrypts the transmission message according to the second preset private key, and obtains the plaintext of the sender's digital certificate, the plaintext of the transmitted data, and the plaintext of the signature; or The sender's digital certificate is plaintext, and the transmitted data and the signature are both ciphertext; before the recipient performs security verification on the transmitted data according to the sender's information, the method further includes: the receiver according to the second preset private The key decrypts the transmitted message to obtain the plaintext of the transmitted data and the plaintext of the signature.

In a possible implementation manner, the transmission message further includes at least one of: a validity period of the sender's ID, a key management center identifier used by the sender, and a time stamp of the transmission message.

In a possible implementation, the transmission message further includes a timestamp of transmitting the message.

In a third aspect, a sender device is provided, where the sender device includes: a determining unit, configured to determine, according to a preset data format, a transport message, where the transport message includes the sent data and the sender information; the sender information is used by And a sending unit, configured to send, by using a preset data format, a transmission message to the at least one receiving party.

In a possible implementation manner, the sender's information includes the sender's identity information and a signature; wherein the signature is a signature of the sender to the information other than the signature included in the transmission message.

In a possible implementation, if the preset data format is based on identity signature and base In the data format of the identity encryption, the identity information of the sender includes the identity number of the sender, where the sender's ID is plaintext or ciphertext, and the transmitted data and signature are ciphertext. Further, if both the sender and the receiver support the use of at least one set of user signature systems and at least one set of user encryption systems, the transport message further includes: a public parameter or a public parameter index of the user signature system used by the sender, and/or a transmission The public parameter or public parameter index of the recipient's user encryption system used by the party to encrypt.

In a possible implementation manner, if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate.

In a possible implementation manner, the sender's digital certificate, the transmitted data, and the signature are plaintext; or the sender's digital certificate, the transmitted data, and the signature are all ciphertext; or, the sender's digital certificate is In plain text, the transmitted data and signature are both ciphertext. Optionally, if the receiver supports using a set of digital certificates, the transmission message may include the sender's digital certificate or may not include the sender's digital certificate. Further, if the receiver supports using at least one set of digital certificates, the transport message further includes a public key or a public key index of the receiver used by the sender to encrypt the transmitted message.

The fourth aspect provides a receiving device, where the receiving device includes: a receiving unit, configured to receive a transmission message sent by the sender using a preset data format, where the transmission message includes the transmitted data and the sender information; the verification unit Used to perform security verification on the transmitted message according to the sender's information.

In a possible implementation manner, the information of the sender includes the identity information and the signature of the sender, where the signature is a signature of the sender to the information other than the signature included in the transmission message, and the verification unit is specifically configured to: The verification information is obtained according to the identity information, the signature and the transmission message of the sender, and the verification information is obtained. If the verification information is the preset information, it is determined that the security verification of the transmission message passes, otherwise the security verification of the transmission message is determined to fail.

In a possible implementation, if the preset data format is based on the number of identity signatures According to the format, the sender's identity information includes the sender's identity number ID; wherein the sender's ID, the transmitted data, and the signature are plaintext. Further, if the receiver supports using at least one set of user signature systems, the transport message further includes a public parameter or a public parameter index of the user signature system used by the sender.

In a possible implementation manner, if the preset data format is an identity-based signature and an identity-based encryption-based data format, the sender's identity information includes the sender's identity identification number ID, where the sender's ID is plaintext or The ciphertext, the transmitted data, and the signature are all ciphertext; the receiving device further includes: a decrypting unit, configured to: if the transmitted data and the signature included in the transmission message are all ciphertext, perform the transmission message according to the first preset private key Decrypting, obtaining the plaintext of the transmitted data and the plaintext of the signature; if the sender's ID, the transmitted data, and the signature included in the transmission message are all ciphertext, the transmission message is decrypted according to the first preset private key, and the sender is obtained. The plain text of the ID, the plaintext of the transmitted data, and the plaintext of the signature. Further, if both the sender and the receiver support the use of at least one set of user signature systems and at least one set of user encryption systems, the transport message further includes: a public parameter or a public parameter index of the user signature system used by the sender, and/or a transmission The public parameter or public parameter index of the recipient's user encryption system used by the party to encrypt.

In a possible implementation manner, if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate. Optionally, if the receiver supports using a set of digital certificates, the transmission message may include the sender's digital certificate or may not include the sender's digital certificate. Further, if the receiver supports using at least one set of digital certificates, the transport message further includes a public key or a public key index of the receiver used by the sender to encrypt the transmitted message.

In a possible implementation manner, the sender's digital certificate, the transmitted data, and the signature are plaintext; or the sender's digital certificate, the transmitted data, and the signature are all ciphertext; and the verification unit is based on the sender's information. Before performing the security verification on the transmission message, the decryption unit is further configured to: decrypt the transmission message according to the second preset private key, obtain the plaintext of the sender's digital certificate, the plaintext of the transmitted data, and the plaintext of the signature; or, send The digital certificate of the party is in plain text, and the transmitted data and the signature are both ciphertext; before the security verification of the transmission message by the verification unit according to the information of the sender, the decryption unit is further configured to: transmit the message according to the second preset private key pair Decrypt and get the data to be sent Plain text and signed plain text.

In a fifth aspect, a sender device is provided. The sender device includes a memory, a processor, a bus, and a communication interface. The memory stores code and data, the processor and the memory are connected by a bus, and the processor runs the code in the memory to enable the sender. The apparatus performs the information transmission method provided by any one of the above first aspect or any one of the possible implementations of the first aspect.

In a sixth aspect, a receiver device is provided. The receiver device includes a memory, a processor, a bus, and a communication interface. The memory stores code and data, the processor and the memory are connected by a bus, and the processor runs the code in the memory to enable the sender. The apparatus performs the information transmission method provided by any one of the above second aspect or any one of the possible implementations of the second aspect.

In a seventh aspect, a communication system is provided, the communication system comprising a sender device and a receiver device, wherein the sender device is the third aspect, or any possible implementation manner of the third aspect, or the fifth aspect The provided sender device, and/or the receiver device is the fourth aspect, or any possible implementation of the fourth aspect, or the receiver device provided by the sixth aspect.

According to an eighth aspect, a computer readable storage medium is provided, where computer executed instructions are stored, and when the at least one processor of the device executes the computer to execute an instruction, the device performs the first aspect or the first aspect. The information transmission method provided by any one of the possible implementation manners, or the information transmission method provided by the foregoing second aspect or any possible implementation manner of the second aspect.

In a ninth aspect, a computer program product is provided, the computer program product comprising computer executable instructions stored in a computer readable storage medium; at least one processor of the device can read the computer from a computer readable storage medium Executing an instruction, the at least one processor executing the computer to execute the instruction, causing the device to implement the information transmission method provided by the first aspect or any one of the possible implementation manners of the first aspect, or performing the second aspect Or the information transmission method provided by any of the possible implementations of the second aspect.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic structural diagram of a communication system according to an embodiment of the present invention;

2 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart diagram of an information transmission method according to an embodiment of the present disclosure;

4 is a schematic diagram of a first preset data format according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a second preset data format according to an embodiment of the present disclosure;

FIG. 6 is a schematic diagram of a third preset data format according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a fourth preset data format according to an embodiment of the present disclosure;

FIG. 8 is a schematic flowchart diagram of another information transmission method according to an embodiment of the present disclosure;

FIG. 9 is a schematic diagram of a fifth preset data format according to an embodiment of the present disclosure;

FIG. 10 is a schematic diagram of a sixth preset data format according to an embodiment of the present disclosure;

FIG. 11 is a schematic diagram of a seventh preset data format according to an embodiment of the present invention;

FIG. 12 is a schematic diagram of an eighth preset data format according to an embodiment of the present disclosure;

FIG. 13 is a schematic flowchart diagram of still another information transmission method according to an embodiment of the present invention;

FIG. 14 is a schematic diagram of a ninth preset data format according to an embodiment of the present disclosure;

FIG. 15 is a schematic diagram of a tenth preset data format according to an embodiment of the present invention;

FIG. 16 is a schematic structural diagram of a sender device according to an embodiment of the present disclosure;

FIG. 17 is a schematic structural diagram of another sender device according to an embodiment of the present disclosure;

FIG. 18 is a schematic structural diagram of still another sender device according to an embodiment of the present disclosure;

FIG. 19 is a schematic structural diagram of a receiver device according to an embodiment of the present disclosure;

FIG. 20 is a schematic structural diagram of another receiver device according to an embodiment of the present disclosure;

FIG. 21 is a schematic structural diagram of still another receiver device according to an embodiment of the present invention.

detailed description

The technical solution in the embodiment of the present invention will be further described below with reference to the accompanying drawings in the embodiments of the present invention. The invention is described in a clear and complete manner, and it is obvious that the described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a schematic structural diagram of a communication system according to an embodiment of the present invention. Referring to FIG. 1, the communication system includes a base station 101 and a terminal device 102. The base station 101 can communicate with the terminal device 102, and the terminal device 102 can be a vehicle, a user's handheld device, a smart wearable device, or the like.

In the embodiment of the present invention, a plurality of terminal devices 102 can also communicate with each other, and can perform direct communication through a device-to-device (D2D) mode, or through a device to a base station, and then to a device. The way to communicate indirectly. When communication is performed between a plurality of terminal devices 102, one terminal device may transmit information to other plurality of terminal devices 102 by means of broadcast, or may transmit information to one of the terminal devices 102 via a link.

FIG. 2 is a schematic structural diagram of a terminal device according to an embodiment of the present invention. The terminal device includes a bus, a processor, a memory, an input/output interface, and a communication interface.

A bus is a circuit that connects the elements described and implements transmission between these elements. For example, the processor receives commands from other elements over the bus, decrypts the received commands, and performs calculations or data processing based on the decrypted commands.

The processor is a control center of the terminal device, and connects various parts of the entire terminal device by using various interfaces and lines, performs various functions by running or executing a software program module stored in the memory, and calling data stored in the memory. The data is processed to perform overall monitoring of the terminal device. Optionally, the processor may include one or more processors; preferably, the processor may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, etc., and modulates The demodulation processor primarily handles wireless communications.

The memory may include program modules such as a kernel, a middleware, an application program interface (API), and an application. The program module may be composed of software, firmware or hardware, or at least two of them. The memory may mainly include a storage program area and an storage data area, wherein the storage program area may store an operating system, an application required for at least one function, and the like; the storage data area may store data created according to usage of the terminal device, and the like. In addition, the memory may include a high speed random access memory, and may also include non-volatile memory. Storage, etc.

The input and output interfaces provide an interface between the processor and the peripheral interface module to forward commands or data entered by the user through the peripheral interface module. The above peripheral interface module may be a sensor, a keyboard, a click wheel, a button, or the like. These buttons may include, but are not limited to, a home button, a volume button, a start button, and a lock button.

The communication interface connects the terminal device with other terminal devices and base stations. Optionally, the communication interface may be a radio frequency circuit including, but not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier, a duplexer, and the like. The communication interface can be connected to other external terminal devices or base stations by wirelessly connecting to the network, so that communication between the terminal device and other terminal devices and the base station can be realized through the network. In an exemplary embodiment, the communication interface receives broadcast signals or broadcast associated information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication interface further includes a WiFi module, a Bluetooth module, an infrared module, etc. to facilitate short range communication.

Although not shown, the terminal device may further include a display device, a sensor module, an audio module, and the like, and details are not described herein again.

The term "and/or" in this context is merely an association describing the associated object, indicating that there may be three relationships, for example, A and / or B, which may indicate that A exists separately, and both A and B exist, respectively. B these three situations. In addition, the character "/" in this article generally indicates that the contextual object is an "or" relationship. A plurality in this document refers to two or more.

FIG. 3 is a schematic flowchart of an information transmission method according to an embodiment of the present invention. Referring to FIG. 3, the method includes the following steps.

Step 201: The sender determines the transmission message according to the preset data format. The transmission message includes the transmitted data and the information of the sender, and the information of the sender is information for causing the receiver to perform security verification on the transmission message.

The sender may be the terminal device 102 in the communication system shown in FIG. 1 above, and may be a vehicle. The receiving party may also be the terminal device 102 in the communication system shown in FIG. 1 above, and may be a vehicle, or a handheld device such as a user's mobile phone, tablet computer, smart watch, or smart wearable device.

Optionally, the transmitted data may include one or more of the following information: sender speed information, location information, and alarm information, and the like.

In addition, the sender's information may include the sender's identity information and signature. For different preset data formats, the sender's identity information may include different information. For example, for different preset data formats, the sender's identity information may include the sender's identity number (English: identity, referred to as: ID), or the sender's digital certificate, etc. A signature is a signature of a sender other than the signature included in the transmission message.

Step 202: The sender sends a transmission message to at least one receiver by using a preset data format.

When the sender determines to transmit the message, the sender can send the transmission message to the at least one recipient through the preset data format, so that each of the at least one receiver can receive the transmission message.

Optionally, when the sender is the terminal device shown in FIG. 1 , the sender may directly send the transmission message to the at least one receiver by using the broadcast mode, or may forward the transmission message to the base station, and the base station directly transmits the message to the base station. At least one recipient sends the transmission message.

Step 203: When the receiver receives the transmission message sent by the sender using the preset data format, the receiver performs security verification on the transmission message according to the information of the sender.

The receiving party performs security verification on the transmission message according to the information of the sender, and may include: Step 203a: The receiving party may perform verification calculation according to the identity information of the sender, the signature, and the transmitted data, to obtain verification information. Step 203b: If the verification information is preset information, it is determined that the security verification of the transmission message passes, otherwise it is determined that the security verification of the transmission message does not pass.

In the embodiment of the present invention, the sender determines the transmission message according to the preset data format, where the transmission message includes the transmitted data and the information of the sender, and then the sender sends the transmission message to the at least one receiver by using the preset data format, so that the receiving When receiving the transmission message, the party can perform security verification on the transmission message according to the information of the sender, thereby ensuring the security of the transmission message sent by the sender.

Further, in the foregoing step 201, the preset data format may be different preset data formats, and in different preset data formats, the identity information of the sender may also include different information. In addition, the transmission message determined by the sender according to different preset data formats is different, and the following is the identity information of the sender under different preset data formats, and according to The transmission message determined by the same preset data format is elaborated. The different preset data formats may mainly include the following three different preset data formats.

The first type, as shown in FIG. 4, if the preset data format is a data format based on identity-based signature (IBS), the identity information of the sender includes the ID of the sender. The sender's ID, the transmitted data, and the signature included in the transmission message are all plaintext.

It should be noted that, in the preset data format shown in FIG. 4, among the preset data formats indicated by the parameters D/C, R, and PDCP SN, the parameter D/C (English: data/control, data/control) is used. The parameter R is a reserved bit. As shown in FIG. 4, the preset data format includes three reserved bits R as an example. The parameter PDCP SN (where PDCP is a packet data convergence layer protocol, English: packet data convergence protocol; SN is the serial number, English: serial number) can be used to indicate the serial number of the message. The parameters D/C, R, and PDCP SN shown in the figure are the same as the parameters D/C, R, and PDCP SN included in the PDCP PDU (the protocol data unit, English: protocol data unit). For details, refer to the PDCP PDU. It is to be noted that the embodiments of the present invention are not described in detail herein. Oct1, Oct2, ..., OctN in Fig. 4 are used to indicate the first 1, 2, ..., N bytes, and each byte may include 8 bit bits.

In addition, in the preset data format shown in FIG. 4, the length of any information included in the transmission message may be one or more lines, and the length (cont) is determined by the length of the information itself. Oct3 to OctN ₁ in FIG. 4 are used to indicate the byte corresponding to the ID of the sender, OctN ₁ +1 to OctN _{2 are} used to indicate the byte corresponding to the transmitted data, and OctN ₂ +1 to OctN are used to represent the signature. The corresponding byte.

Optionally, as shown in FIG. 5, if the receiver supports using at least one set of user signature systems, the transmission message further includes a public parameter or a public parameter index of the user signature system used by the sender, and the pp is represented by the sender in FIG. The public parameter of the user's signature system used by the sender. Oct3 to OctN ₁ in FIG. 5 are used to indicate the byte corresponding to the ID of the sender, and OctN ₁ +1 to OctN _{2 are} used to indicate the byte corresponding to the pp or pp index of the sender, OctN ₂ +1 to OctN. _{3 is} used to indicate the byte corresponding to the transmitted data, and OctN ₃ +1 to OctN are used to indicate the byte corresponding to the signature.

The public parameter index is an identifier of a public parameter, and can be used to uniquely identify one The public parameter of the user signature system, for example, the public parameter index may be a serial number of a common parameter or the like. When the transport message includes a public parameter index of the user signature system used by the sender, the receiver may determine the corresponding public parameter according to the common parameter index.

In the first preset data format, the receiving party performs the verification calculation according to the identity information, the signature, and the transmitted data of the sender in step 203a, and obtains the verification information, specifically: the receiver according to the sender's ID, signature, and transmission. The public parameters of the user signature system used by the party are verified and calculated, thereby obtaining verification information.

It should be noted that if the sender and the receiver simultaneously support the use of a set of user signature systems, the public parameters or common parameter indexes of the set of user signature systems may not be included in the transmission message, and the specific preset data format is as shown in FIG. When the public parameter or the public parameter index is not included, the sender and the receiver may agree in advance; when the transmission message includes the public parameter or the public parameter index of the user signature system, the specific preset data format is as shown in the figure. 5 is shown. If the receiver supports multiple sets of user signature systems, the transmission message includes the public parameter or the public parameter index of the user signature system used by the sender. The specific preset data format is shown in FIG. 5.

In the embodiment of the present invention, the sender sends the transmission message to the at least one receiver by using the data format of the identity signature IBS, so that the receiver can perform security verification on the transmission message according to the sender ID, the signature, and the sent data. Guaranteed transmission of message integrity. In addition, when the public parameter or the public parameter index of the user signature system used by the sender is sent to the receiver together, the time for the receiver to determine the corresponding public parameter can be saved, and the efficiency of the security verification is improved.

Second, as shown in FIG. 6, if the preset data format is a data format based on IBS and identity-based encryption (IBE), the identity information of the sender includes the ID of the sender. The sender's ID is plain text or cipher text, and the transmitted data and signature are both ciphertext.

Specifically, when the sender ID for the plaintext, and a signature of data to be transmitted are encrypted, predetermined data format shown in Figure 6 (a) shown in FIG. 6 (a) of Oct3 to OctN ₁ denotes a transmission for The byte corresponding to the ID of the party, OctN ₁ +1 to OctN, is used to represent the byte corresponding to the ciphertext. When the sender's ID, the transmitted data, and the signature are both ciphertext, the preset data format is as shown in Figure 6(b), and OctN ₁ +1 to OctN in Figure 6(b) are used to indicate the ciphertext. Bytes. c in Fig. 6 represents ciphertext.

Optionally, as shown in FIG. 7, if both the sender and the receiver support using at least one user signature system and at least one user encryption system, the transmission message further includes: a public parameter or a public of the user signature system used by the sender. The parameter index, and/or the public parameter or common parameter index of the recipient's user encryption system used by the sender to encrypt. In the preset data format shown in FIG. 7, the transmission message further includes: a public parameter or a common parameter index of the user signature system used by the sender, and a public parameter of the user encryption system of the receiver used by the sender to encrypt. Or the public parameter index is taken as an example for explanation. In FIG. 7, the public parameter of the user signature system used by the sender is represented by pp of the sender, and the public parameter of the user encryption system of the receiver used by the sender when the sender encrypts is represented by pp of the sender, and the ID of the sender is The plain text is taken as an example for explanation. Oct2 to OctN ₁ in FIG. 7 are used to indicate the byte corresponding to the pp or pp index of the sender, and OctN ₁ +1 to OctN _{2 are} used to indicate the byte corresponding to the pp or pp index of the receiver, OctN ₂ + 1 to OctN _{3 are} used to indicate the byte corresponding to the sender's ID, and OctN ₃ +1 to OctN are used to indicate the byte corresponding to the ciphertext.

Wherein, the transmission message includes a public parameter or a public parameter index of the user signature system used by the sender, and/or a public parameter or a public parameter index of the user encryption system used by the sender to encrypt, here the user signature system As an example, the user encryption system is similar to the user signature system. For details, refer to the description of the user signature system. Specifically, if the sender and the receiver support the use of a set of user signature systems, the transport message may include or exclude a public parameter or a public parameter index of the user signature system used by the sender, and may be agreed in advance when not included; If both the sender and the receiver support the use of multiple sets of user signature systems, the transport message also includes the public parameter or public parameter index of the user signature system used by the sender.

Further, as shown in FIG. 8, in the second preset data format, the receiver may further include step 202a before performing security verification on the transmission message according to the information of the sender in step 203.

Step 202a: If the transmitted data and the signature included in the transmission message are both ciphertext, the receiver decrypts the transmission message according to the first preset private key, and obtains the plaintext of the transmitted data and the plaintext of the signature. If the sender's ID, the transmitted data, and the signature included in the transmission message are all ciphertext, the receiver decrypts the transmission message according to the first preset private key, and obtains The plaintext of the sender's ID, the plaintext of the transmitted data, and the plaintext of the signature.

The first preset private key is a private key of the recipient corresponding to a public parameter or a common parameter index of the user encryption system used by the sender when encrypting. When the preset data format is as shown in FIG. 6, the first preset private key may be pre-agreed. When the preset data format is as shown in FIG. 7, the first preset private key may be a receiver determined by the receiver according to a public parameter or a common parameter index of the user encryption system used by the sender when the transmission message is encrypted. Private key.

Correspondingly, in step 203a, the receiving party performs verification calculation according to the identity information, the signature and the transmitted data of the sender, and obtains verification information, which is specifically: the receiver according to the sender's ID, the signature, and the user signature system used by the sender. The public parameters are verified and calculated to obtain verification information.

In the embodiment of the present invention, when at least one receiver sends a transmission message in the sending direction, the sender's ID of the transmission message is plaintext or ciphertext, the transmitted data and the signature are all ciphertext, so that the receiver receives the transmission. In the case of a message, the transmitted message can be decrypted, and then the transmitted message is verified for security, thereby ensuring the integrity and confidentiality of the transmitted message. In addition, the public parameter or the public parameter index of the user encryption system of the receiver used by the sender to be encrypted is transmitted to the receiver, which can improve the efficiency of the receiver to decrypt the transmission message; the public of the user signature system used by the sender The parameter or the public parameter index is sent to the receiver, which can save the time for the receiver to determine the corresponding public parameter, and improve the efficiency of the security verification.

Third, as shown in FIG. 9-11, if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate. The digital certificate, the transmitted data, and the signature of the sender included in the transmission message are all plaintext; or the digital certificate, the transmitted data, and the signature of the sender included in the transmission message are all ciphertext; or the transmission of the transmission message includes The party's digital certificate is in plain text, and the transmitted data and signature are both ciphertext.

Specifically, when the sender's digital certificate, and the signature is sent both plaintext data, preset data format shown in Figure 9, in FIG. 9 of Oct3 to OctN ₁ is used to represent the word digital certificate corresponding to the sender In the section, OctN ₁ +1 to OctN _{2 are} used to indicate the byte corresponding to the transmitted data, and OctN ₂ +1 to OctN are used to indicate the byte corresponding to the signature. When the digital certificate, the transmitted data, and the signature of the sender are both ciphertext, the preset data format is as shown in FIG. 10, and Oct3 to OctN in FIG. 10 are used to represent the byte corresponding to the ciphertext. When the sender's digital certificate is plaintext data to be transmitted and the signature are encrypted, predetermined data format shown in Figure 11, in FIG. 11 of Oct3 to OctN ₁ indicates that the word for a digital certificate corresponding to the sender Section, OctN ₁ +1 to OctN is used to represent the byte corresponding to the ciphertext. c in Figures 9-11 shows ciphertext.

Optionally, as shown in FIG. 12, if the receiver supports using at least one set of digital certificates, the transport message further includes a public key or a public key index of the receiver used by the sender to encrypt and transmit the message. The public key index is an identifier of the public key, and can be used to uniquely identify a public key of a set of digital certificates. For example, the public key index can be a serial number of the public key, or if the identity information of the sender does not need to be encrypted. The public key index may also be the sender's ID or the like. FIG. 12 illustrates an example in which the sender's digital certificate, the transmitted data, and the signature are both ciphertexts. FIG OctN ₁ to 12 Oct3 for indicating the recipient's public key or public key corresponding to the byte index, OctN ₁ +1 is used to represent OCTN corresponding ciphertext bytes.

Further, as shown in FIG. 13, in the third preset data format, if the transmission message includes information represented by cipher text, the receiver performs security on the transmission message according to the information of the sender in step 203. Step 202b may also be included prior to verification.

Step 202b: If the digital certificate, the transmitted data, and the signature of the sender are both ciphertext, the receiver decrypts the transmission message according to the second preset private key, and obtains the plaintext of the sender's digital certificate, the plaintext of the transmitted data, and The plain text of the signature. If the sender's digital certificate is plaintext, the transmitted data and the signature are both ciphertext, and the receiver decrypts the transmission message according to the second preset private key to obtain the plaintext of the transmitted data and the plaintext of the signature.

Optionally, if the receiver supports using a set of digital certificates, the transmission message may include the sender's digital certificate or may not include the sender's digital certificate. When the digital certificate of the sender is not included in the transmission message, the preset data format may be a part of deleting the digital certificate of the sender in the preset data format shown in FIG. 9-11 or FIG. 12 described above.

The second preset private key is a private key corresponding to the digital certificate of the recipient used when the sender encrypts. When the preset data format is as shown in FIG. 9-11, the second preset private key may be pre-agreed. When the preset data format is as shown in FIG. 12, the second preset private key may be the receiver determined by the receiver according to the public parameter or the public parameter index of the user encryption system used by the sender when the transmission message is encrypted. Private key.

Correspondingly, in step 203a, the receiver is based on the sender's identity information, signature, and The data is sent for verification calculation, and the verification information is obtained. Specifically, the receiver performs verification calculation according to the digital certificate, signature, and transmitted data of the sender, thereby obtaining verification information.

In the embodiment of the present invention, the sender sends the transmission message to the at least one receiver by using the digital certificate-based data format, and the transmission message can be guaranteed when the digital certificate, the transmitted data, and the signature of the sender included in the transmission message are both plaintext. Integrity; when the digital certificate of the sender included in the transmission message is plaintext or ciphertext, and the transmitted data and signature are both ciphertext, the confidentiality of the transmitted message can be guaranteed.

Further, when the preset data format is an IBS-based data format, the transport message further includes at least one of: a validity period of the sender's ID, a key management center identifier used by the sender, and a time stamp of the transmitted message. The specific preset data format is as shown in FIG. 14. In FIG. 14, the preset data format includes an expiration date of the ID of the sender, a key management center identifier used by the sender, and a timestamp of the transmitted message as an example. FIG OctN ₁ to 14, Oct3 sender ID is used to indicate the corresponding byte, OctN ₁ +1 to OctN ₂ for indicating the validity of the sender corresponding to the ID byte, OctN ₂ +1 to OctN ₃ with In the byte corresponding to the key management center identifier used by the sender, OctN ₃ +1 to OctN _{4 are} used to indicate the byte corresponding to the time stamp of the transmitted message, and OctN ₄ +1 to OctN _{5 are} used to indicate the transmission message. The corresponding byte, OctN ₅ +1 to OctN, is used to represent the byte corresponding to the signature.

In the embodiment of the present invention, when the transmission message includes the validity period of the sender's ID, the freshness of the sender's ID can be ensured, and the transmission message is prevented from being tracked. When the transmission message includes the key management center identifier used by the sender, the receiver can be conveniently determined to quickly determine the network public key to verify the signature. When the transmission message includes the timestamp of the transmission message, the receiver can perform a replay attack check on the transmission message to further improve the security of the transmission message.

When the preset data format is a digital certificate based data format, the transport message also includes a time stamp for transmitting the message. The specific preset data format is shown in Figure 15. Oct3 to OctN ₁ in FIG. 15 are used to indicate the byte corresponding to the sender's digital certificate, and OctN ₁ +1 to OctN _{2 are} used to indicate the byte corresponding to the time stamp of the transmitted message, OctN ₂ +1 to OctN ₃ Used to indicate the byte corresponding to the transmitted data, OctN ₃ +1 to OctN are used to indicate the byte corresponding to the signature.

In the embodiment of the present invention, when the transmission message further includes a timestamp of the transmission message, the receiver may check the replay attack of the transmission message, thereby further ensuring the security of the transmission message.

The embodiment of the present invention further provides a data format based on an identity-encrypted IBE. The sender determines that the transport message includes the transmitted data according to the IBE-based data format, and the transmitted data is a ciphertext. After the sender sends the transmission message to the receiver using the IBE-based data format, the receiver can decrypt the transmission message according to the corresponding private key to obtain the transmitted data, thereby ensuring the confidentiality of the transmitted message. Further, if the receiver supports and uses multiple sets of IBE systems at the same time, the IBE-based data format may further include a public parameter or a common parameter index of the receiver's IBE system used by the sender to encrypt the transmission message, so as to receive The party quickly determines the corresponding private key according to the public parameter or the public parameter index, thereby improving the efficiency of the receiver to decrypt the transmitted message.

The solution provided by the embodiment of the present invention is mainly introduced from the perspective of interaction between the network elements. It can be understood that each network element, such as a sender device and a receiver device, etc., in order to implement the above functions, includes hardware structures and/or software modules corresponding to each function. Those skilled in the art will readily appreciate that the present invention can be implemented in a combination of hardware or hardware and computer software in conjunction with the network elements and algorithm steps of the various examples described in the embodiments disclosed herein. Whether a function is implemented in hardware or computer software to drive hardware depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

The embodiment of the present invention may divide the function module by the sender device and the receiver device according to the foregoing method example. For example, each function module may be divided according to each function, or two or more functions may be integrated into one process. In the module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of the module in the embodiment of the present invention is schematic, and is only a logical function division, and the actual implementation may have another division manner.

FIG. 16 is a schematic diagram showing a possible structure of a sender device involved in the foregoing embodiment. The sender device 300 includes a determining unit 301 and a sending unit 302. The determining unit 301 is configured to execute FIG. 3, Step 201 in FIG. 8 or FIG. 13; the transmitting unit 302 is configured to perform step 202 in FIG. 3, FIG. 8, or FIG. All the related content of the steps involved in the foregoing method embodiments may be referred to the functional description of the corresponding functional modules, and details are not described herein again.

In the case of employing an integrated unit, FIG. 17 shows a possible logical structure diagram of the sender device 310 involved in the above embodiment. The sender device 310 includes a processing module 312 and a communication module 313. The processing module 312 is configured to control management of the actions of the sender device, for example, the processing module 312 is configured to perform step 201 of FIG. 3, FIG. 8, or FIG. 13, and/or other processes for the techniques described herein. The communication module 313 is for communication with a base station or a recipient device. The sender device 310 can also include a storage module 311 for transmitting program code and data of the party device.

The processing module 312 can be a processor or a controller, such as a central processing unit, a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, Hardware components or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure. The processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, combinations of digital signal processors and microprocessors, and the like. The communication module 313 can be a transceiver, a transceiver circuit, a communication interface, or the like. The storage module 311 can be a memory.

When the processing module 312 is a processor, the communication module 313 is a communication interface, and the storage module 311 is a memory, the sender device according to the embodiment of the present invention may be the device shown in FIG. 18.

Referring to FIG. 18, for a hardware configuration example of a sender device, the sender device 320 includes a processor 322, a communication interface 323, a memory 321, and a bus 324. The communication interface 323, the processor 322, and the memory 321 are connected to each other through a bus 324. The bus 324 may be a peripheral component interconnect standard (English: peripheral component interconnect, PCI for short) or an extended industry standard structure (English: extended industry) Standard architecture, referred to as: EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 18, but it does not mean that there is only one bus or one type of bus.

FIG. 19 is a schematic diagram showing a possible structure of the receiver device involved in the foregoing embodiment. The receiver device 400 includes a receiving unit 401 and a verification unit 402. The receiving unit 401 is configured to execute FIG. 3, The step of receiving the transmission message transmitted by the sender device through step 202 in FIG. 8 or FIG. 13; the verification unit 402 is configured to perform step 203 in FIG. 3, FIG. 8, or FIG. Further, the recipient device further includes a decryption unit 403. The decryption unit 403 is configured to perform step 202a in FIG. 8 or step 202b in FIG. All the related content of the steps involved in the foregoing method embodiments may be referred to the functional description of the corresponding functional modules, and details are not described herein again.

In the case of employing an integrated unit, FIG. 20 shows a possible logical structure diagram of the receiver device 410 involved in the above embodiment. The recipient device 410 includes a processing module 412 and a communication module 413. The processing module 412 is configured to perform control management on the action of the receiver device. For example, the processing module 412 is configured to perform step 203 in FIG. 3, FIG. 8, or FIG. 13, and step 202a in FIG. 8 or step 202b in FIG. And/or other processes for the techniques described herein. The communication module 413 is used for communication with a base station or a sender device. The recipient device 410 can also include a storage module 411 for storing program codes and data of the recipient device.

The processing module 412 can be a processor or a controller, such as a central processing unit, a general purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, Hardware components or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure. The processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, combinations of digital signal processors and microprocessors, and the like. The communication module 413 can be a transceiver, a transceiver circuit, a communication interface, or the like. The storage module 411 can be a memory.

When the processing module 412 is a processor, the communication module 413 is a communication interface, and the storage module 411 is a memory, the receiving device according to the embodiment of the present invention may be the device shown in FIG.

Referring to FIG. 21, for a hardware configuration example of a receiver device, the receiver device 420 includes a processor 422, a communication interface 423, a memory 421, and a bus 424. The communication interface 423, the processor 422, and the memory 421 are connected to each other through a bus 424. The bus 424 may be a PCI bus or an EISA bus. The bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in FIG. 21, but it does not mean that there is only one bus or one type of bus.

In another embodiment of the present invention, a computer readable storage medium is stored, where computer execution instructions are stored, and when at least one processor of the device executes the computer to execute an instruction, the device executes the above figure. 3. The information transmission side shown in Figure 8 or Figure 13 The step of the sender or the step of the receiver.

In another embodiment of the present invention, a computer program product is provided, the computer program product comprising computer executable instructions stored in a computer readable storage medium; at least one processor of the device may be Reading the storage medium reads the computer execution instructions, and the at least one processor executing the computer execution instructions causes the apparatus to perform the steps of the sender or the receiving side in the information transmission method shown in FIG. 3, FIG. 8, or FIG.

In another embodiment of the present invention, there is also provided a communication system including a sender device and a receiver device. The sender device is the sender device shown in any of Figures 16-18, and/or the receiver device is the receiver device shown in any of Figures 19-21. The sender device is configured to perform the steps of the sender in the information transmission method shown in FIG. 3, FIG. 8 or FIG. 13; the receiver device is configured to execute the information transmission method shown in FIG. 3, FIG. 8 or FIG. The steps in the receiver.

In the communication system provided by the embodiment of the present invention, the sender device determines a transmission message according to a preset data format, where the transmission message includes the transmitted data and the information of the sender, and then the sender device uses the preset data format to the at least one receiver. The device sends a transmission message, so that when receiving the transmission message, the receiver device can perform security verification on the transmission message according to the information of the sender, thereby ensuring the security of the sender device to send the transmission message.

It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and are not limited thereto; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that The technical solutions described in the foregoing embodiments are modified, or the equivalents of the technical features are replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

An information transmission method, characterized in that the method comprises:

The sender determines the transmission message according to the preset data format, where the transmission message includes the transmitted data and the information of the sender; the information of the sender is used for the receiver to perform security verification on the transmission message. Information;

The sender sends the transmission message to at least one of the recipients using the preset data format.
The method according to claim 1, wherein the information of the sender includes identity information and a signature of the sender; wherein the signature is a division included in the transmission message by the sender The signature of other information than the signature.
The method according to claim 2, wherein if the preset data format is an identity signature based data format, the identity information of the sender includes an identity identification number ID of the sender; The ID of the sender, the transmitted data, and the signature are all plaintext.
The method according to claim 2, wherein if the preset data format is an identity-based signature and an identity-based encryption-based data format, the sender's identity information includes the sender's identity identification number ID. Wherein the sender's ID is plaintext or ciphertext, the transmitted data, and the signature are both ciphertext.
The method according to claim 2, wherein if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate.
The method of claim 5 wherein:

The sender's digital certificate, the transmitted data, and the signature are all plaintext;

Or the digital certificate of the sender, the sent data, and the signature are all ciphertext;

Alternatively, the sender's digital certificate is plaintext, and the transmitted data and the signature are both ciphertext.
The method according to claim 3 or 4, wherein the transmission message further comprises at least one of: an expiration date of the sender's ID, a key management center identifier used by the sender, the transmission message Timestamp.
The method according to claim 5 or 6, wherein the transmission message further comprises a time stamp of the transmission message.
An information transmission method, characterized in that the method comprises:

Receiving, by the receiving party, a transmission message sent by the sender using a preset data format, where the transmission message includes the transmitted data and the information of the sender;

The receiving party performs security verification on the transmission message according to the information of the sender.
The method according to claim 9, wherein the information of the sender includes identity information and a signature of the sender; wherein the signature is a division included in the transmission message by the sender The signature of other information than the signature;

The receiving party performs security verification on the transmission message according to the information of the sender, including:

The receiving party performs verification calculation according to the identity information of the sender, the signature, and the transmitted data, to obtain verification information;

If the verification information is preset information, it is determined that the security verification of the transmission message passes, otherwise it is determined that the security verification of the transmission message does not pass.
The method according to claim 10, wherein if the preset data format is an identity signature based data format, the identity information of the sender includes an identity identification number ID of the sender; The ID of the sender, the transmitted data, and the signature are all plaintext.
The method according to claim 10, wherein if the preset data format is an identity-based signature and an identity-based encryption-based data format, the sender's identity information includes the sender's identity identification number ID. Wherein the sender's ID is plaintext or ciphertext, the transmitted data, and the signature are both ciphertext;

Before the receiving party performs security verification on the sent data according to the information of the sender, the method further includes:

And if the transmitted data and the signature included in the transmission message are both ciphertext, the receiver decrypts the transmission message according to the first preset private key, to obtain a plaintext and a text of the sent data. The plain text of the signature;

If the transmission message includes the ID of the sender, the transmitted data, and the The signature is a ciphertext, and the receiver decrypts the transmission message according to the first preset private key, and obtains the plaintext of the sender's ID, the plaintext of the sent data, and the signature. Clear text.
The method according to claim 10, wherein if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate.
The method of claim 13 wherein:

The sender's digital certificate, the transmitted data, and the signature are all plaintext;

Or the digital certificate of the sender, the transmitted data, and the signature are all ciphertext; before the receiving party performs security verification on the transmitted data according to the information of the sender, The method further includes: the receiving party decrypting the transmission message according to the second preset private key, obtaining a plaintext of the sender's digital certificate, a plaintext of the transmitted data, and a plaintext of the signature;

Or the digital certificate of the sender is a plaintext, and the transmitted data and the signature are both ciphertext; before the receiver performs security verification on the sent data according to the information of the sender, The method further includes: the receiving party decrypting the transmission message according to the second preset private key, to obtain a plaintext of the transmitted data and a plaintext of the signature.
The method according to claim 11 or 12, wherein the transmission message further comprises at least one of: an expiration date of the sender's ID, a key management center identifier used by the sender, the transmission message Timestamp.
The method according to claim 13 or 14, wherein the transmission message further comprises a time stamp of the transmission message.
A sender device, wherein the sender device includes:

a determining unit, configured to determine, according to a preset data format, the transmission message, where the transmission message includes the transmitted data and the information of the sender; the information of the sender is used to enable the receiver to perform security on the transmission message Verified information;

And a sending unit, configured to send the transmission message to at least one of the receivers by using the preset data format.
The sender device according to claim 17, wherein said transmitting The party information includes the identity information and the signature of the sender; wherein the signature is a signature of the sender to other information than the signature included in the transmission message.
The sender device according to claim 18, wherein if the preset data format is an identity signature based data format, the sender identity information includes the sender identity number ID; The ID of the sender, the transmitted data, and the signature are all plaintext.
The sender device according to claim 18, wherein if the preset data format is an identity-based signature and an identity-based encryption-based data format, the identity information of the sender includes the identity of the sender a number ID; wherein the sender's ID is plaintext or ciphertext, the transmitted data, and the signature are both ciphertext.
The sender device according to claim 18, wherein if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate.
The sender device according to claim 21, wherein

The sender's digital certificate, the transmitted data, and the signature are all plaintext;

Or the digital certificate of the sender, the sent data, and the signature are all ciphertext;

Alternatively, the sender's digital certificate is plaintext, and the transmitted data and the signature are both ciphertext.
The sender device according to claim 19 or 20, wherein the transmission message further comprises at least one of: an expiration date of the sender's ID, a key management center identifier used by the sender, the The timestamp of the transmitted message.
The sender device according to claim 21 or 22, wherein the transmission message further comprises a time stamp of the transmission message.
A receiver device, wherein the receiver device comprises:

a receiving unit, configured to receive a transmission message sent by the sender using a preset data format, where the transmission message includes the transmitted data and the information of the sender;

And a verification unit, configured to perform security verification on the transmission message according to the information of the sender.
The receiver device of claim 25, wherein said transmitting The information of the sender includes the identity information and the signature of the sender; wherein the signature is a signature of the sender to other information except the signature included in the transmission message;

The verification unit is specifically configured to:

Performing verification calculation according to the identity information of the sender, the signature, and the transmission message, to obtain verification information;

If the verification information is preset information, it is determined that the security verification of the transmission message passes, otherwise it is determined that the security verification of the transmission message does not pass.
The receiver device according to claim 26, wherein if the preset data format is an identity signature based data format, the sender identity information includes the sender identity number ID; The ID of the sender, the transmitted data, and the signature are all plaintext.
The receiver device according to claim 26, wherein if the preset data format is an identity-based signature and an identity-based encryption-based data format, the identity information of the sender includes the identity of the sender a number ID; wherein the sender's ID is plaintext or ciphertext, the transmitted data, and the signature are both ciphertext;

The receiver device further includes:

a decryption unit, configured to: if the transmitted data and the signature included in the transmission message are both ciphertext, decrypt the transmission message according to the first preset private key, to obtain a plaintext of the sent data The plaintext of the signature; if the ID of the sender, the transmitted data, and the signature are all ciphertext, the transport message is decrypted according to the first preset private key Obtaining a plaintext of the sender's ID, a plaintext of the transmitted data, and a plaintext of the signature.
The receiver device according to claim 26, wherein if the preset data format is a digital certificate-based data format, the sender's identity information includes the sender's digital certificate.
A receiver device according to claim 29, wherein

The sender's digital certificate, the transmitted data, and the signature are all plaintext;

Or the digital certificate of the sender, the sent data, and the signature are all ciphertext; the verification unit performs the transmission message according to the information of the sender. The decryption unit is further configured to: decrypt the transmission message according to the second preset private key, obtain the plaintext of the sender's digital certificate, the plaintext of the transmitted data, and the signature. Clear text

Or the digital certificate of the sender is a plaintext, and the transmitted data and the signature are both ciphertext; and the verification unit performs security verification on the transmission message according to the information of the sender. The decryption unit is further configured to: decrypt the transmission message according to the second preset private key, to obtain a plaintext of the transmitted data and a plaintext of the signature.