WO2024114205A1

WO2024114205A1 - Key negotiation method and apparatus

Info

Publication number: WO2024114205A1
Application number: PCT/CN2023/127472
Authority: WO
Inventors: 包施晗; 徐晖; 梁亚从
Original assignee: 大唐移动通信设备有限公司
Priority date: 2022-11-30
Filing date: 2023-10-30
Publication date: 2024-06-06
Also published as: CN118118163A

Abstract

Provided in the present disclosure are a key negotiation method and apparatus. The method of the present disclosure comprises: a first terminal device sending first key negotiation authentication information to a blockchain network, and acquiring from the blockchain network second key negotiation authentication information, which is sent by a second terminal device, wherein the first key negotiation authentication information comprises a first identity identifier, a first temporary public key and a first temporary private key of the first terminal device, and the second key negotiation authentication information comprises a second identity identifier, a second temporary public key and a second temporary private key of the second terminal device; the first terminal device generating a first session key, wherein the first session key is related to at least two of the second identity identifier, the second temporary public key, the second temporary private key, a first private key and a first random number; and when the first session key is the same as a second session key, determining that key negotiation between the first terminal device and the second terminal device is successful.

Description

Key negotiation method and device

CROSS-REFERENCE TO RELATED APPLICATIONS

This disclosure claims priority to the Chinese patent application filed with the China Patent Office on November 30, 2022, with application number 202211523295.1 and application name “Key Negotiation Method and Device”, the entire contents of which are incorporated by reference in this disclosure.

Technical Field

The present disclosure relates to the field of communication technology, and in particular to a key negotiation method and device.

Background technique

Ubiquitous network devices have a large number of terminal devices. In order to ensure network security, mutual authentication between devices requires an appropriate authentication system. The traditional authentication system public key infrastructure relies on a trusted third party. However, due to the large scale and large number of nodes in the ubiquitous network, once the trusted third party is attacked, the reliability of network authentication cannot be guaranteed.

Summary of the invention

The purpose of the present disclosure is to provide a key negotiation method and apparatus to solve the problem in the related art that authentication between devices depends on a trusted third party, and the reliability of network authentication cannot be guaranteed when the trusted third party is attacked.

In order to achieve the above object, the present disclosure provides a key negotiation method, comprising:

The first terminal device sends first key agreement authentication information to the blockchain network, and obtains second key agreement authentication information sent by the second terminal device from the blockchain network; wherein the first key agreement authentication information includes the first identity identifier, the first temporary public key and the first temporary private key of the first terminal device, and the second key agreement authentication information includes the second identity identifier, the second temporary public key and the second temporary private key of the second terminal device;

The first terminal device generates a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and a first random number, and the first private key is generated by a key generation center and is related to the first identity The first random number is a random number used to generate the first temporary public key;

When the first session key and the second session key are the same, it is determined that the key negotiation between the first terminal device and the second terminal device is successful, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.

Optionally, the first terminal device generates a first session key, including:

The first terminal device generates at least one shared key, where the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

A first session key is generated according to the at least one shared key, the first identity, the second identity and the first hash function.

Optionally, the first terminal device generates at least one shared key, including at least one of the following:

Generate a first shared key according to the first private key, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a second shared key according to the first random number, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a third shared key according to the first private key and the second temporary public key;

Generate a fourth shared key according to the first random number and the second temporary public key;

Wherein, the root public key is generated by a key generation center.

Optionally, the first shared key satisfies the following formula:
_Za1 = [S _ID1 ] (R _ID2 + [H ₂ (ID2||R _ID2 )] P _pub ];

Among them, _Za1 represents the first shared key, S _ID1 represents the first private key, R _ID2 represents the second temporary private key, H ₂ represents the second hash function, P _pub represents the root public key, and ID2 represents the identity of the second terminal device.

Optionally, the second shared key satisfies the following formula:
_Za2 = [ _r1 ] ( _RID2 + [ _H2 (ID2|| _RID2 )] _Ppub ];

Wherein, _Za2 represents the second shared key, _r1 represents the first random number, and _RID2 represents the second temporary private key. key, H ₂ represents the second hash function, ID2 represents the identity of the second terminal device, and P _pub represents the root public key.

Optionally, the third shared key satisfies the following formula:
_Za3 = [S _ID1 ] T _ID2 ;

Wherein, _Za3 represents the third shared key, S _ID1 represents the first private key, and T _ID2 represents the second temporary public key.

Optionally, the fourth shared key satisfies the following formula:
_Za4 = [ _r1 ] _TID2 ;

Wherein, _Za4 represents the fourth shared key, _r1 represents the first random number, and _TID2 represents the second temporary public key.

The disclosed embodiment also provides a key negotiation device, including a memory, a transceiver, and a processor;

A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

Sending first key agreement authentication information to the blockchain network, and obtaining second key agreement authentication information sent by the second terminal device from the blockchain network; wherein the first key agreement authentication information includes a first identity identifier, a first temporary public key, and a first temporary private key of the first terminal device, and the second key agreement authentication information includes a second identity identifier, a second temporary public key, and a second temporary private key of the second terminal device;

Generate a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, a first private key, and a first random number, where the first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key;

Optionally, when executing the program, the processor further implements the following steps:

Generate at least one shared key, where the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

Wherein, the root public key is generated by a key generation center.

The present disclosure also provides a key negotiation device, including:

A first transceiver unit is used to send first key negotiation authentication information to a blockchain network, and obtain second key negotiation authentication information sent by a second terminal device from the blockchain network; wherein the first key negotiation authentication information includes a first identity identifier, a first temporary public key, and a first temporary private key of the first terminal device, and the second key negotiation authentication information includes a second identity identifier, a second temporary public key, and a second temporary private key of the second terminal device;

a first generating unit, configured to generate a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, a first private key, and a first random number, where the first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key;

A first determination unit is used to determine that the key negotiation between the first terminal device and the second terminal device is successful when the first session key is the same as the second session key, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.

An embodiment of the present disclosure further provides a processor-readable storage medium, wherein the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the steps of the key negotiation method as described above.

The above technical solution disclosed in the present invention has at least the following beneficial effects:

In the disclosed embodiment, the first terminal device and the second terminal device exchange corresponding key negotiation authentication information through the blockchain network, and then the two terminal devices generate corresponding session keys based on the key negotiation authentication information obtained from the blockchain network. If the session keys generated by the first terminal device and the second terminal device are consistent, it is determined that the key negotiation between the first terminal device and the second terminal device is successful. In the disclosed embodiment, the key negotiation authentication information is exchanged through the blockchain network, and there is no need to authenticate through a third-party authentication system, thereby effectively avoiding the risk of information leakage due to attacks on the third-party authentication system, and enhancing the security of bilateral authentication (that is, the key negotiation is successful only when the session keys generated by the two terminal devices are the same), thereby effectively improving the reliability of authentication.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a structural diagram of a network system to which the embodiments of the present disclosure can be applied;

FIG2 is a schematic diagram showing a flow chart of a key negotiation method according to an embodiment of the present disclosure;

FIG3 is a system architecture diagram of a key negotiation method according to an embodiment of the present disclosure;

FIG4 is a block diagram showing a key agreement device according to an embodiment of the present disclosure;

FIG5 is a schematic diagram showing modules of a key negotiation device according to an embodiment of the present disclosure.

Detailed ways

The technical solution provided by the embodiments of the present disclosure can be applicable to a variety of systems. For example, the applicable systems may be the Global System of Mobile communication (GSM) system, the Code Division Multiple Access (CDMA) system, the Wideband Code Division Multiple Access (WCDMA) system, the Time Division Synchronous Code Division Multiple Access (TD-SCDMA) system, the General Packet Radio Service (GPRS) system, the Long Term Evolution (LTE) system (including Time Division Duplex LTE (TTD-LTE) and Frequency Division Duplex LTE (FDD LTE)), Advanced Long Term Evolution Advanced (LTE-A) system, Universal Mobile Telecommunication System (UMTS), Worldwide Interoperability For Microwave Access (WiMAX) system, 5G New Radio (NR) system, etc. These systems include terminal equipment and network equipment. The system can also include core network parts, such as Evolved Packet System (EPS), 5G system (5GS/5GC), etc.

FIG1 shows a block diagram of a wireless communication system applicable to the embodiment of the present disclosure. The wireless communication system includes a terminal 11 and a network device 12. The terminal 11 may also be referred to as a terminal device or a user equipment (UE, also referred to as a terminal). The terminal 11 may be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer) or a notebook computer, a personal digital assistant (Personal Digital Assistant, PDA), a handheld computer, a netbook, an ultra-mobile personal computer (Ultra-Mobile Personal Computer, UMPC), a mobile Internet device (Mobile Internet Device, MID), a wearable device (Wearable Device) or a vehicle-mounted device (VUE), a pedestrian terminal (Pedestrian User Equipment, PUE) and other terminal side devices. The wearable device includes: a bracelet, a headset, glasses, etc. It should be noted that the specific type of the terminal 11 is not limited in the embodiment of the present disclosure. The network device 12 can be a base station or a core network, wherein the base station can be referred to as a node B, an evolved node B, an access point, a base transceiver station (Base Transceiver Station, BTS), a radio base station, a radio transceiver, a basic service set (Basic Service Set, BSS), an extended service set (Extended Service Set, ESS), a B node, an evolved B node (eNB), a home B node, a home evolved B node, a wireless local area network (Wireless Local Area Network, WLAN) access point, a WiFi node, a transmitting and receiving point (Transmitting Receiving Point, TRP) or some other appropriate term in the field. As long as the same technical effect is achieved, the base station is not limited to specific technical vocabulary. It should be noted that in the embodiments of the present disclosure, only the base station in the NR system is taken as an example, but the specific type of the base station is not limited.

In order to enable those skilled in the art to better understand the embodiments of the present invention, the following description is first given.

Ubiquitous network is the ability to provide network services and communications for various types of applications or services at any time, anywhere, in any service and in any way. The development of ubiquitous network is accompanied by the development of various network technologies. Various complex network systems need to be integrated into the same network. How to reasonably allocate network resources to terminals in the case of different network terminal users and different network operators is a challenge that 6G network needs to face. The problem.

Blockchain technology is a chain data structure that combines data in the form of blocks in chronological order through a hash algorithm, and uses cryptography to form a distributed digital ledger that is extremely difficult to tamper with and cannot be forged, which can store data and information with a sequential relationship. The implementation of blockchain is based on the combination of cryptography, distributed storage, consensus algorithms, and peer-to-peer networks, making it decentralized, distributed, traceable, difficult to tamper with, and open and transparent.

The following will be combined with the drawings in the embodiments of the present disclosure to clearly and completely describe the technical solutions in the embodiments of the present disclosure. Obviously, the described embodiments are only part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure.

As shown in FIG2 , the present disclosure provides a key negotiation method, including:

Step 201: The first terminal device sends first key negotiation authentication information to the blockchain network, and obtains second key negotiation authentication information sent by the second terminal device from the blockchain network; wherein the first key negotiation authentication information includes the first identity identifier, the first temporary public key and the first temporary private key of the first terminal device, and the second key negotiation authentication information includes the second identity identifier, the second temporary public key and the second temporary private key of the second terminal device.

The system architecture of the key negotiation method of the embodiment of the present disclosure is shown in FIG3 and is divided into three layers, namely, the terminal layer, the edge layer, and the central computing layer. Among them, the terminal layer includes ubiquitous network terminal devices, such as UE, Internet of Things (IoT) and other terminal devices, which are characterized by limited computing power and network capabilities. The edge layer includes edge nodes or edge servers, which have certain computing power and network capabilities, and are used to collect and process data from terminal devices, and transmit data to the central computing layer. At the same time, the edge layer also plays the role of a blockchain node, which is used to maintain the operation of the blockchain and the distributed storage of electronic ledgers. The central computing layer includes cloud servers, which include a key generation center.

In the disclosed embodiment, the system is first initialized, and the key generation center generates system parameters, root private key and root public key. Specifically, the key generation center selects a security parameter k∈Z ⁺ as an input parameter to generate {p, F _p ,G,P,H ₁ ,H ₂ }, where p is a prime number of k bits, F _p is a finite field with p elements, G is an elliptic curve group with prime order q over the finite field F _p , P is a generator of G, and H ₂ is any The hash function maps a bit string of arbitrary length to the elliptic curve group G, where _H1 is the hash function of a bit string of arbitrary length. Then a random number x is selected from _Zn∈ [1,…,q-1] as the root private key, and _Ppub is obtained by calculating _Ppub ＝[x]P. The key generation center determines {p,q, _Fp ,G,P, _H1 , _H2 , _Ppub } as the system parameters and stores the root key x separately and securely.

After the system is initialized, the key generation center takes the terminal device (or user device)'s identifier (ID) as input and generates the user's private key pair and returns it to the user. Specifically, a random number r is selected from _Zn , and _RID = [r]P is calculated; _SID = r + _H2 (ID|| _RID ) x mod q is calculated; the key generation center transmits the user's private key pair ( _RID , _SID ) to the user through a secure channel; the user can verify the authenticity of the private key pair by comparing the calculations. Assuming that the first identifier of the first terminal device is ID1, and the second identifier of the second terminal device is ID2, the private key pair of the first terminal device obtained by the key generation center is ( _RID1 , _SID1 ), and the private key pair of the second terminal device is ( _RID2 , _SID2 ).

Optionally, the first temporary public key may be a random number r ₁ (i.e., a first random number) selected by the first terminal device from Z _q and calculated by the formula T _ID1 = [r ₁ ]P, where T _ID1 represents the first temporary public key. The second temporary public key may be a random number r ₂ (i.e., a second random number) selected by the second terminal device from Z _q and calculated by the formula T _ID2 = [r ₂ ]P, where T _ID2 represents the second temporary public key;

Optionally, the first temporary private key may be specifically R _ID1 . The second temporary private key may be specifically R _ID2 .

That is, in the above step 201, the first terminal device sends (ID1, R _ID1 , T _ID1 ) to the blockchain network, the second terminal device sends (ID2, R _ID2 , T _ID2 ) to the blockchain network, and the first terminal device obtains (ID2, R _ID2 , T _ID2 ) from the blockchain network, and the second terminal device obtains (ID1, R _ID1 , T _ID1 ) from the blockchain network. Subsequently, the first terminal device and the second terminal device negotiate a key based on the information obtained from the blockchain network.

Step 202: The first terminal device generates a first session key, which is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key and the first random number. The first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key.

Optionally, the first private key may specifically be S _ID1 in the private key pair of the first terminal device.

Step 203: If the first session key is the same as the second session key, determine The key negotiation between the first terminal device and the second terminal device is successful, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.

Optionally, the second private key may specifically be S _ID2 in the private key pair of the second terminal device.

Optionally, the first terminal device generates a first session key, including:

Optionally, the first Hash function may specifically be the above-mentioned H ₁ .

In the disclosed embodiment, the first terminal device generates at least one shared key through the parameters in the first key negotiation authentication information and the parameters in the second key negotiation authentication information, and performs encryption processing through the first hash function to obtain a first session key. The generation process of the first session key does not require heavy calculations, which reduces the calculation cost, and does not require multiple rounds of communication verification between the two devices (the communication channel between the devices is a public channel, which has security risks and side channel attacks), which can effectively ensure security.

According to the first private key, the second temporary private key, the second identity, the root public key and the second Hash function, generating a first shared key;

Wherein, the root public key is generated by a key generation center.

Among them, _Za2 represents the second shared key, _r1 represents the first random number, _RID2 represents the second temporary private key, _H2 represents the second hash function, ID2 represents the identity of the second terminal device, and _Ppub represents the root public key.

As an optional implementation, the first session key satisfies the following formula:
K ₁ =H ₁ (ID1, ID2, _Za1 , _Za2 , _Za3 , _Za4 );

Wherein, _H1 represents the above-mentioned first hash function, and _K1 represents the first session key.

In the embodiment of the present disclosure, the second session key satisfies the following formula:
K ₂ =H ₁ (ID1, ID2, Z _b1 , Z _b2 , Z _b3 , Z _b4 );

Wherein, _H1 represents the above-mentioned first hash function, _K2 represents the second session key, _Zb1 is the first shared key generated by the second terminal device, _Zb2 is the second shared key generated by the second terminal device, _Zb3 is the third shared key generated by the second terminal device, and _Zb4 is the fourth shared key generated by the second terminal device.

Optionally, Z _b1 satisfies the following formula:
Z _b1 =[S _ID2 ](R _ID1 +[H ₂ ( ID1 || R _ID1 )]P _pub ];

Among them, S _ID2 represents the second private key, R _ID1 represents the first temporary private key, H ₂ represents the second hash function, P _pub represents the root public key, and ID1 represents the identity of the first terminal device.

Optionally, the Z _b2 satisfies the following formula:
Z _b2 = [r ₂ ](R _ID1 + [H ₂ ( ID1 || R _ID1 )] P _pub ;

Among them, r ₂ represents a first random number, R _ID1 represents a first temporary private key, H ₂ represents a second hash function, ID1 represents an identity identifier of the first terminal device, and P _pub represents a root public key.

Optionally, the Z _b3 satisfies the following formula:
Z _b3 = [S _ID2 ] T _ID1 ;

Among them, S _ID2 represents the second private key, and T _ID1 represents the first temporary public key.

Optionally, the Z _b4 satisfies the following formula:
Z _b4 = [r ₂ ] T _ID1 ;

Optionally, r ₂ represents a first random number, and T _ID1 represents a first temporary public key.

When _K1 and _K2 are consistent, it is determined that the key negotiation between the first terminal device and the second terminal device is successful, and a session is established between the first terminal device and the second terminal device; otherwise, it is determined that the key negotiation between the first terminal device and the second terminal device is unsuccessful, and the session establishment between the first terminal device and the second terminal device is abandoned.

The present disclosure is described below in conjunction with an embodiment.

Assuming that the first terminal device is device 1 and the second terminal device is device 2, the key negotiation method disclosed in the present invention includes:

1) System parameter creation:

The key generation center generates security parameters {p, F _p , G, P, H ₁ , H ₂ } according to the identity-based algorithm;

The key generation center generates a root private key and obtains the root public key P _pub through calculation;

The system security parameters output by the key generation center include {p, q, F _p , G, P, H ₁ , H ₂ , P _pub }.

The generation method of the system security parameters, root private key and root public key has been described in detail above. Description, no further elaboration is given here.

2) User private key extraction: The unique identifiers of device 1 and device 2 are recorded as ID1 and ID2 respectively.

Device 1 sends the unique identification ID1 to the key generation center through a secure private channel; Device 2 sends the unique identification ID2 to the key generation center through a secure private channel;

The key generation center generates a private key pair (R _ID1 , s _ID1 ) of device 1 using the received unique identifier ID1 as input, and returns it to device 1 through a secure private channel; the key generation center generates a private key pair (R _ID2 , s _ID2 ) of device 2 using the received unique identifier ID2 as input, and returns it to device 2 through a secure private channel;

Device 1 and Device 2 receive and verify the correctness of the private key pair. If the confirmation is correct, the private key pair is retained and the corresponding public key is generated through the identification; if the confirmation fails, the private key is abandoned;

3) Authentication key negotiation:

Device 1 generates a first temporary private key R _ID1 and a first temporary public key T _ID1 , and sends (ID1, R _ID1 , T _ID1 ) to the blockchain network, and device 2 obtains device 1 related information (ID1, R _ID1 , T _ID1 ) from the blockchain; Device 2 generates a second temporary private key R _ID2 and a second temporary public key T _ID2 , and sends (ID2, R _ID2 , T _ID2 ) to the blockchain network, and device 1 obtains device 2 related information (ID2, R _ID2 , T _ID2 ) from the blockchain network;

Device 1 generates shared keys, such as _Za1 , _Za2 , _Za3 and _Za4 , according to the acquired relevant information of device 2, and obtains the first session key _K1 based on the shared keys.

If _K1 is consistent with _K2 , it is determined that the key negotiation between the first terminal device and the second terminal device is successful.

The key negotiation scheme of the disclosed embodiment has the characteristics of being lightweight and preventing information leakage, and can be applied to ubiquitous network architectures. In ubiquitous network architectures, there are a large number of terminal devices, and the computing power and power are limited. The distributed edge server can effectively process and store the requests and data services of terminal devices and users within the coverage area through the management of edge nodes. And the blockchain, as a decentralized distributed electronic ledger, can be introduced into the ubiquitous network to realize a trusted network architecture and effectively avoid single point failures, thereby improving the reliability and security of the network. It can provide authentication and authorization for all devices in the network, solving the problem of difficult authentication management caused by the large number of terminal devices in the ubiquitous network. In addition, the key negotiation authentication scheme of the disclosed embodiment achieves the purpose of certificateless authentication with low overhead, low cost and high security with the help of the blockchain network, and has better scalability and portability.

As shown in FIG4 , the embodiment of the present disclosure further provides a key negotiation device, including a memory 420 , a transceiver 400 , and a processor 410 ;

The memory 420 is used to store computer programs; the transceiver 400 is used to send and receive data under the control of the processor 410; the processor 410 is used to read the computer program in the memory and perform the following operations:

Among them, in Figure 4, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 410 and various circuits of memory represented by memory 420 are linked together. The bus architecture can also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are all well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 400 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, and these transmission media include wireless channels, wired channels, optical cables and other transmission media. For different user devices, the user interface 430 may also be an interface that can be connected to external or internal devices, and the connected devices include but are not limited to a keypad, a display, a speaker, a microphone, a joystick, etc. wait.

The processor 410 is responsible for managing the bus architecture and general processing, and the memory 420 can store data used by the processor 410 when performing operations.

Optionally, processor 410 can be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD), and the processor can also adopt a multi-core architecture.

The processor calls the computer program stored in the memory to execute any of the methods provided by the embodiments of the present disclosure according to the obtained executable instructions. The processor and the memory can also be arranged physically separately.

Optionally, when executing the program, the processor 410 further implements the following steps:

Optionally, when executing the program, the processor 410 further implements at least one of the following steps:

Wherein, the root public key is generated by a key generation center.

It should be noted here that the above-mentioned device provided in the embodiment of the present disclosure can implement all the method steps implemented in the above-mentioned key negotiation method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as those in the method embodiment will not be described in detail here.

As shown in FIG5 , the embodiment of the present disclosure further provides a key negotiation device, including:

The first transceiver unit 501 is used to send first key negotiation authentication information to the blockchain network, and obtain second key negotiation authentication information sent by the second terminal device from the blockchain network; wherein the first key negotiation authentication information includes a first identity identifier, a first temporary public key and a first temporary private key of the first terminal device, and the second key negotiation authentication information includes a second identity identifier, a second temporary public key and a second temporary private key of the second terminal device;

A first generating unit 502 is configured to generate a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, a first private key, and a first random number, where the first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key;

The first determination unit 503 is used to determine that the key negotiation between the first terminal device and the second terminal device is successful when the first session key is the same as the second session key, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, and the second private key is a key generation key. The center generates a private key related to the second identity identifier, and the second random number is a random number used to generate the second temporary public key.

Optionally, the first generating unit 502 includes:

A first generating subunit, configured to generate at least one shared key, wherein the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

The second generating subunit is used to generate a first session key according to the at least one shared key, the first identity, the second identity and the first Hash function.

Optionally, the first generating subunit is used to perform at least one of the following:

Wherein, the root public key is generated by a key generation center.

Wherein, _Za3 represents the third shared key, S _ID1 represents the first private key, T _ID2 represents the second temporary public key, key.

It should be noted that the division of units in the embodiments of the present disclosure is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional unit in each embodiment of the present disclosure may be integrated into a processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present disclosure. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

In some embodiments of the present disclosure, a processor-readable storage medium is further provided, wherein the processor-readable storage medium stores program instructions, and the program instructions are used to enable the processor to execute the following steps:

Sending first key negotiation authentication information to the blockchain network, and obtaining second key negotiation authentication information sent by the second terminal device from the blockchain network; wherein the first key negotiation authentication information includes a first identity identifier, a first temporary public key and a first temporary private key of the first terminal device, and the second key negotiation authentication information includes a second identity identifier, a second temporary public key and a first temporary private key of the second terminal device Second temporary private key;

The terminal device involved in the embodiments of the present disclosure may be a device that provides voice and/or data connectivity to a user, a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. In different systems, the name of the terminal device may also be different. For example, in a 5G system, the terminal device may be called a user equipment (UE). A wireless terminal device may communicate with one or more core networks (CN) via a radio access network (RAN). The wireless terminal device may be a mobile terminal device, such as a mobile phone (or a "cellular" phone) and a computer with a mobile terminal device. For example, it may be a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges language and/or data with a radio access network. For example, personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDA) and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal device, an access terminal device, a user terminal device, a user agent, and a user device, but is not limited to these in the embodiments of the present disclosure.

The network device involved in the embodiments of the present disclosure may be a base station, which may include multiple cells providing services for terminals. Depending on the specific application scenario, a base station may also be called an access point, or It can be a device in the access network that communicates with the wireless terminal device over the air interface through one or more sectors, or other names. The network device can be used to convert received air frames into Internet Protocol (IP) packets and act as a router between the wireless terminal device and the rest of the access network, where the rest of the access network may include an Internet Protocol (IP) communication network. The network device can also coordinate the attribute management of the air interface. For example, the network device involved in the embodiments of the present disclosure may be a network device (Base Transceiver Station, BTS) in the Global System for Mobile communications (Global System for Mobile communications, GSM) or Code Division Multiple Access (Code Division Multiple Access, CDMA), or a network device (NodeB) in Wide-band Code Division Multiple Access (WCDMA), or an evolutionary network device (evolutional Node B, eNB or e-NodeB) in the Long Term Evolution (Long Term Evolution, LTE) system, a 5G base station (gNB) in the 5G network architecture (next generation system), or a Home evolved Node B (Home evolved Node B, HeNB), a relay node, a femto, a pico, etc., which is not limited in the embodiments of the present disclosure. In some network structures, the network device may include a Centralized Unit (CU) node and a Distributed Unit (DU) node, and the Centralized Unit and the Distributed Unit may also be arranged geographically separately.

Network devices and terminal devices can each use one or more antennas for multiple input multiple output (MIMO) transmission. MIMO transmission can be single user MIMO (SU-MIMO) or multi-user MIMO (MU-MIMO). Depending on the form and number of antenna combinations, MIMO transmission can be two-dimensional MIMO (2D-MIMO), three-dimensional MIMO (3D-MIMO), full-dimensional MIMO (FD-MIMO) or massive MIMO, or it can be diversity transmission, precoded transmission or beamforming transmission, etc.

Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) containing computer-usable program code.

The present disclosure is described with reference to the flowchart and/or block diagram of the method, device (system), and computer program product according to the embodiment of the present disclosure. It should be understood that each process and/or box in the flowchart and/or block diagram, as well as the combination of the process and/or box in the flowchart and/or block diagram can be implemented by computer executable instructions. These computer executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one process or multiple processes in the flowchart and/or one box or multiple boxes in the block diagram.

These processor-executable instructions may also be stored in a processor-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more flows in the flowchart and/or one or more blocks in the block diagram.

Obviously, those skilled in the art can make various changes and modifications to the present disclosure without departing from the spirit and scope of the present disclosure. Thus, if these modifications and variations of the present disclosure fall within the scope of the claims of the present disclosure and their equivalents, the present disclosure is also intended to include these modifications and variations.

Claims

A key negotiation method, comprising:

The first terminal device sends first key agreement authentication information to the blockchain network, and obtains second key agreement authentication information sent by the second terminal device from the blockchain network; wherein the first key agreement authentication information includes the first identity identifier, the first temporary public key and the first temporary private key of the first terminal device, and the second key agreement authentication information includes the second identity identifier, the second temporary public key and the second temporary private key of the second terminal device;

The first terminal device generates a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, a first private key, and a first random number, where the first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key;

When the first session key and the second session key are the same, it is determined that the key negotiation between the first terminal device and the second terminal device is successful, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.
The method according to claim 1, wherein the first terminal device generates a first session key, comprising:

The first terminal device generates at least one shared key, where the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

A first session key is generated according to the at least one shared key, the first identity, the second identity and the first hash function.
The method according to claim 2, wherein the first terminal device generates at least one shared key, including at least one of the following:

Generate a first shared key according to the first private key, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a second shared key according to the first random number, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a third shared key according to the first private key and the second temporary public key;

Generate a fourth shared key according to the first random number and the second temporary public key;

Wherein, the root public key is generated by a key generation center.
The method according to claim 3, wherein the first shared key satisfies the following formula:
Za1 = [S ID1 ] (R ID2 + [H 2 (ID2 || R ID2 )] P pub ];

Among them, Za1 represents the first shared key, S ID1 represents the first private key, R ID2 represents the second temporary private key, H 2 represents the second hash function, P pub represents the root public key, and ID2 represents the identity of the second terminal device.
The method according to claim 3, wherein the second shared key satisfies the following formula:
Za2 = [ r1 ] ( RID2 + [ H2 (ID2|| RID2 )] Ppub ];

Among them, Za2 represents the second shared key, r1 represents the first random number, RID2 represents the second temporary private key, H2 represents the second hash function, ID2 represents the identity of the second terminal device, and Ppub represents the root public key.
The method according to claim 3, wherein the third shared key satisfies the following formula:
Za3 = [S ID1 ] T ID2 ;

Wherein, Za3 represents the third shared key, S ID1 represents the first private key, and T ID2 represents the second temporary public key.
The method according to claim 3, wherein the fourth shared key satisfies the following formula:
Za4 = [ r1 ] TID2 ;

Wherein, Za4 represents the fourth shared key, r1 represents the first random number, and TID2 represents the second temporary public key.
A key negotiation device includes a memory, a transceiver, and a processor;

A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

Sending first key negotiation authentication information to the blockchain network, and obtaining second key negotiation authentication information sent by the second terminal device from the blockchain network; wherein the first key negotiation authentication information includes a first identity identifier, a first temporary public key, and a first temporary private key of the first terminal device, The second key negotiation authentication information includes a second identity identifier of the second terminal device, a second temporary public key, and a second temporary private key;

Generate a first session key, where the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, a first private key, and a first random number, where the first private key is a private key generated by a key generation center and related to the first identity, and the first random number is a random number used to generate the first temporary public key;

When the first session key and the second session key are the same, it is determined that the key negotiation between the first terminal device and the second terminal device is successful, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.
The device according to claim 8, wherein when the processor executes the program, the processor further implements the following steps:

Generate at least one shared key, where the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

A first session key is generated according to the at least one shared key, the first identity, the second identity and the first hash function.
The apparatus according to claim 9, wherein when the processor executes the program, it further implements at least one of the following steps:

Generate a first shared key according to the first private key, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a second shared key according to the first random number, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a third shared key according to the first private key and the second temporary public key;

Generate a fourth shared key according to the first random number and the second temporary public key;

Wherein, the root public key is generated by a key generation center.
The apparatus according to claim 10, wherein the first shared key satisfies the following formula:
Za1 = [S ID1 ] (R ID2 + [H 2 (ID2||R ID2 )] P pub ];

Among them, Za1 represents the first shared key, S ID1 represents the first private key, R ID2 represents the second temporary private key, H 2 represents the second hash function, P pub represents the root public key, and ID2 represents the identity of the second terminal device.
The apparatus according to claim 10, wherein the second shared key satisfies the following formula:
Za2 = [ r1 ] ( RID2 + [ H2 (ID2|| RID2 )] Ppub ];

Among them, Za2 represents the second shared key, r1 represents the first random number, RID2 represents the second temporary private key, H2 represents the second hash function, ID2 represents the identity of the second terminal device, and Ppub represents the root public key.
The apparatus according to claim 10, wherein the third shared key satisfies the following formula:
Za3 = [S ID1 ] T ID2 ;

Wherein, Za3 represents the third shared key, S ID1 represents the first private key, and T ID2 represents the second temporary public key.
The apparatus according to claim 10, wherein the fourth shared key satisfies the following formula:
Za4 = [ r1 ] TID2 ;

Wherein, Za4 represents the fourth shared key, r1 represents the first random number, and TID2 represents the second temporary public key.
A key negotiation device, comprising:

A first transceiver unit is used to send first key negotiation authentication information to a blockchain network, and obtain second key negotiation authentication information sent by a second terminal device from the blockchain network; wherein the first key negotiation authentication information includes a first identity identifier, a first temporary public key, and a first temporary private key of the first terminal device, and the second key negotiation authentication information includes a second identity identifier, a second temporary public key, and a second temporary private key of the second terminal device;

a first generating unit, configured to generate a first session key, wherein the first session key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and a first random number, and the first private key is generated by a key generation center and is related to the first identity The first random number is a random number used to generate the first temporary public key;

A first determination unit is used to determine that the key negotiation between the first terminal device and the second terminal device is successful when the first session key is the same as the second session key, wherein the second session key is related to at least two of the first identity, the first temporary public key, the first temporary private key, the second private key, and the second random number, the second private key is a private key generated by a key generation center and related to the second identity, and the second random number is a random number used to generate the second temporary public key.
The apparatus according to claim 15, wherein the first generating unit comprises:

A first generating subunit, configured to generate at least one shared key, wherein the shared key is related to at least two of the second identity, the second temporary public key, the second temporary private key, the first private key, and the first random number;

The second generating subunit is used to generate a first session key according to the at least one shared key, the first identity identifier, the second identity identifier and the first Hash function.
The apparatus according to claim 16, wherein the first generating subunit is configured to perform at least one of the following:

Generate a first shared key according to the first private key, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a second shared key according to the first random number, the second temporary private key, the second identity, the root public key, and the second Hash function;

Generate a third shared key according to the first private key and the second temporary public key;

Generate a fourth shared key according to the first random number and the second temporary public key;

Wherein, the root public key is generated by a key generation center.
The apparatus according to claim 17, wherein the first shared key satisfies the following formula:
Za1 = [S ID1 ] (R ID2 + [H 2 (ID2||R ID2 )] P pub ];

Among them, Za1 represents the first shared key, S ID1 represents the first private key, R ID2 represents the second temporary private key, H 2 represents the second hash function, P pub represents the root public key, and ID2 represents the identity of the second terminal device.
The apparatus according to claim 17, wherein the second shared key satisfies the following formula: Mode:
Za2 = [ r1 ] ( RID2 + [ H2 (ID2|| RID2 )] Ppub ];

Among them, Za2 represents the second shared key, r1 represents the first random number, RID2 represents the second temporary private key, H2 represents the second hash function, ID2 represents the identity of the second terminal device, and Ppub represents the root public key.
The apparatus according to claim 17, wherein the third shared key satisfies the following formula:
Za3 = [S ID1 ] T ID2 ;

Wherein, Za3 represents the third shared key, S ID1 represents the first private key, and T ID2 represents the second temporary public key.
The apparatus according to claim 17, wherein the fourth shared key satisfies the following formula:
Za4 = [ r1 ] TID2 ;

Wherein, Za4 represents the fourth shared key, r1 represents the first random number, and TID2 represents the second temporary public key.
A processor-readable storage medium stores a computer program, wherein the computer program is used to enable the processor to execute the steps of the key negotiation method according to any one of claims 1 to 7.