CN108777678B - A network key exchange system, device and method - Google Patents

Abstract

The present application provides a network key interaction system, device and method. The system includes a first device and a second device; the first device sends the generated first interaction information to the second device; the receiving second device receives the first The second interaction information sent after exchanging information; the temporary transmission key is generated based on the first-round information carried in the first interaction information and the second-round information carried in the second interaction information; using the temporary transmission key pair randomly generated network After the key is encrypted, it is carried in the third interaction information and sent to the second device; after the second device receives the third interaction information, it is based on the first round of information carried in the first interaction information and the locally generated second The round information generates a temporary transmission key, and the generated temporary transmission key is used to obtain the network key carried in the third interaction information. The system can negotiate the network key through multiple handshakes, can change the network key in time when the network key is stolen, and improve the security of wireless network communication.

Description

A network key exchange system, device and method

technical field

The present application relates to the field of data security, and in particular, to a network key interaction system, device and method.

Background technique

With the continuous development of the Internet of Things technology, the application of the Internet of Things has become more and more extensive, and the scale has become larger and larger. IoT devices generally use wireless network communication protocols such as ZigBee to communicate.

In the Internet of Things, in order to ensure the efficiency of communication, the existing wireless network communication protocol mainly adopts the measures of no encryption or less encryption of the transmitted data; This makes communication information easy to be stolen and damages the interests of multiple parties; the less encrypted data transmission method mainly uses the factory-set predefined key for data encryption transmission; although data security is guaranteed to a certain extent , but the predefined key cannot be changed. Once stolen, it will also cause information leakage.

Therefore, the poor security of wireless network communication has become an urgent problem to be solved at present.

SUMMARY OF THE INVENTION

In view of this, the purpose of the present application is to provide a network key agreement system, device and method, which can realize encrypted transmission of keys and improve the security of wireless network communication.

In a first aspect, an embodiment of the present application provides a network key agreement system, including: a first device for data communication and a second device;

the first device, configured to generate first interaction information, and send the first interaction information to the second device; the first interaction information carries: the first round of information encrypted with a security key; receiving second interaction information sent by the second device after receiving the first interaction information; generating a temporary transmission key based on the first round information and the second round information carried in the second interaction information; Use the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information; carry the network key encryption information in the third interaction information, and send it to the second device; receive the network key encryption information; The second device verifies the fourth interaction information based on the fourth interaction information sent by the third interaction information and based on the randomly generated network key, and if the verification is passed, the communication with the second device is completed. Negotiation of network keys;

The second device is configured to generate second interaction information after receiving the first interaction information, and send the second interaction information to the first device; the second interaction information carries: using the the second round of information encrypted by the security key; receive the third interaction information sent by the first device according to the second interaction information; based on the first round of information and the second round of information carried in the first interaction information , generate a temporary transmission key, and decrypt the network key encryption information based on the temporary transmission key to obtain the network key; generate the fourth interaction information based on the network key, and report it to the third A device sends the fourth interaction information.

In a second aspect, an embodiment of the present application further provides a network key agreement apparatus, which is used in a network key agreement system composed of a first device and a second device; the first device is installed with a first interaction module ; a second interaction module is installed in the second device;

The first interaction module is configured to: generate first interaction information, and send the first interaction information to the second interaction module; the first interaction information carries: the first interaction information encrypted with a security key round information; receiving second interaction information fed back by the second device according to the first interaction information; generating a temporary transmission based on the first round information and the second round information carried in the second interaction information encryption key; use the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information; carry the network key encryption information and the device key encrypted with the security key In the third interaction information, send it to the second interaction module; receive fourth interaction information sent by the second interaction module based on the third interaction information, and pair the randomly generated network key with the The fourth interaction information is verified, and if the verification is passed, the negotiation of the network key with the second interaction module is completed;

The second interaction module is configured to generate second interaction information after receiving the first interaction information, and send the second interaction information to the first interaction module; the second interaction information carries: using the second round of information encrypted by the security key; receiving the third interaction information sent by the first interaction module according to the second interaction information; based on the first round of information and the first round of information carried in the first interaction information Second-round information, generate a temporary transmission key, decrypt the network key encryption information based on the temporary transmission key, and obtain the network key; generate the fourth interaction information based on the network key, and send it to the network key. The first interaction module sends fourth interaction information.

In a third aspect, a network key negotiation method is provided, the method is applied to a first device performing network key negotiation, and the method includes:

generating first interaction information, and sending the first interaction information to the second device; the first interaction information carries: the first round of information encrypted with a security key;

Receive second interaction information sent by the second device after receiving the first interaction information; the second interaction information carries: the second round of information encrypted with a security key;

generating a temporary transmission key based on the first-round information and the second-round information carried in the second interaction information;

Using the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information;

carrying the network key encryption information in the third interaction information, and sending it to the second device;

receiving fourth interaction information sent by the second device based on the third interaction information; the fourth interaction information is generated based on the network key;

The fourth interaction information is verified based on the network key, and if the verification is passed, the network key negotiation with the second device is completed.

In a fourth aspect, a network key negotiation method is provided, the method is applied to a second device performing network key negotiation, and the method includes:

receiving first interaction information sent by the first device, and after receiving the first interaction information, generating second interaction information;

sending the second interaction information to the first device; the second interaction information carries: the second round of information encrypted with the security key;

receiving third interaction information sent by the first device according to the second interaction information;

generating a temporary transmission key based on the first-round information and the second-round information carried in the first interaction information, and decrypting the network key encryption information based on the temporary transmission key to obtain the network key;

The fourth interaction information is generated based on the network key, and the fourth interaction information is sent to the first device.

The network key interaction system provided by the embodiments of the present application adopts the hash chain mechanism to transmit network keys and authenticate identity information, which can be compared with the non-encrypted data transmission methods and the less encrypted data transmission methods in the prior art. It realizes the encrypted transmission of keys and improves the security of wireless network communication.

In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the preferred embodiments are exemplified below, and are described in detail as follows in conjunction with the accompanying drawings.

Description of drawings

In order to illustrate the technical solutions of the embodiments of the present application more clearly, the following drawings will briefly introduce the drawings that need to be used in the embodiments. It should be understood that the following drawings only show some embodiments of the present application, and therefore do not It should be regarded as a limitation of the scope, and for those of ordinary skill in the art, other related drawings can also be obtained according to these drawings without any creative effort.

1 shows a schematic structural diagram of a network key agreement system provided by an embodiment of the present application;

FIG. 2 shows a flowchart of generating a temporary transmission key provided by an embodiment of the present application;

3 shows another flowchart of generating a temporary transmission key provided by an embodiment of the present application;

FIG. 4 shows a flowchart of a network key agreement method provided by an embodiment of the present application;

5 shows a flowchart of another network key negotiation method provided by an embodiment of the present application;

FIG. 6a shows a flowchart of a device discovery process provided by an embodiment of the present application;

FIG. 6b shows a flowchart of the first process of key negotiation provided by an embodiment of the present application;

FIG. 6c shows a flowchart of the first process of key negotiation provided by an embodiment of the present application;

FIG. 6d shows a flowchart of the second process of key negotiation provided by an embodiment of the present application;

FIG. 6e shows a flowchart of a third process of key negotiation provided by an embodiment of the present application;

FIG. 6f shows a flowchart of a fourth process of key negotiation provided by an embodiment of the present application;

7 shows a flowchart of a network key agreement system provided by an embodiment of the present application;

FIG. 8 shows a schematic structural diagram of a computer device provided by an embodiment of the present application.

Detailed ways

Different from the prior art, the embodiment of the present application provides a network key negotiation system, which can negotiate a network key between a first device and a second device through multiple handshakes, and then use the network key to negotiate a network key for the first device. The communication data between the device and the second device is encrypted, and the network key negotiation process can be repeated when necessary to negotiate a new network key, so that even if the network key obtained by a certain negotiation is leaked during use, the first The first device and the second device can also negotiate a new network key to replace the original network key, so that the network key can be replaced in time when the network key is stolen, thereby improving the security of wireless network communication.

In order to make the above objects, features and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and specific embodiments. In this embodiment of the present application, the system can be used not only in the Internet of Things, but also in other wireless network devices. The system will be described below.

Referring to FIG. 1 , an embodiment of the present application provides a network key agreement system, including: a first device for data communication and a second device;

The first device is configured to generate the first interaction information and send the first interaction information to the second device; the first interaction information carries: the first round of information encrypted by using the security key; the receiving second device receives the first The second interaction information sent after the information is exchanged; based on the first round of information and the second round of information carried in the second interaction information, a temporary transmission key is generated; the randomly generated network key is encrypted with the temporary transmission key to generate network key encryption information; carrying the network key encryption information in the third interaction information and sending it to the second device; receiving the fourth interaction information sent by the second device based on the third interaction information, and based on the randomly generated network key Verifying the fourth interaction information, and if the verification passes, completing the negotiation of the network key with the second device;

The second device is configured to generate the second interaction information after receiving the first interaction information, and send the second interaction information to the first device; the second interaction information carries: the second round of information encrypted by using the security key; receiving The third interaction information sent by the first device according to the second interaction information; based on the first-round information and the second-round information carried in the first interaction information, generate a temporary transmission key, and encrypt the network key based on the temporary transmission key The information is decrypted to obtain a network key; fourth interaction information is generated based on the network key, and the fourth interaction information is sent to the first device.

In a specific implementation, the first device and the second device are two parties used for wireless data communication; for example, in the Internet of Things, the first device may be a trust center server of the Internet of Things; the second device may be added to the Internet of Things devices, such as smart lamps, smart door locks, etc.; in other wireless networks, the first device and the second device are terminals that need to perform data interaction, respectively. In addition, the initiator of the network key negotiation can be any party that performs data communication, that is, any one of the two parties performing data communication can act as the first device in this application to initiate the process of network key negotiation.

The network key agreement system provided by this application includes several processes:

(1) When the first device initiates the network key negotiation process, it will generate first interaction information, and send the first interaction information to the second device. The first interaction information carries the first round of information TrID encrypted with the security key ks; wherein, the security key ks is a pre-agreed key between the first device and the second device, and is only used for network key negotiation. Except for the network key negotiation process, the data exchange between the first device and the second device uses the network key negotiated in the previous negotiated key exchange process. The first round of information TrID is randomly generated by the first device.

The generated first interaction information α satisfies the formula: α=(TrID)ks.

(2) The second device receives the first interaction information sent by the first device, generates second interaction information, and sends the second interaction information to the first device.

Specifically, the second interaction information carries the second round of information RsID encrypted with the security key ks; the security key ks is the same as the security key ks used in the first interaction information. The second round of information RsID is randomly generated by the second device.

The generated second interaction information β satisfies the formula: β=(RsID)ks.

Here, after receiving the first interaction information sent by the first device, the second device will also use the security key ks to decrypt the encrypted first-round information TrID, and decrypt the first-round information TrID obtained after decryption. save.

(3) The first device receives the second interaction information sent by the second device, and uses the security key ks to decrypt the encrypted second-round information RsID carried in the second interaction information to obtain the second-round information RsID.

After obtaining the second-round information RsID, the first device generates a temporary transmission key Ktrans using the first-round information TrID generated by the first device and the second-round information RsID obtained from the second interaction information.

Specifically, this embodiment of the present application further provides a specific method for the first device to generate a temporary transmission key Ktrans. In this method, a key bit mask encrypted with the security key ks is carried in the second interaction information. code KBM, the key bit mask KBM is pre-stored in the second device, and different devices correspond to different key bit masks KBM. The key bit mask KBM is actually a comparison table of a key index and a device key. The key bit mask KBM includes at least three key indices KI, and each key index KI corresponds to a device key K. At this time, the second interaction information β satisfies the formula: β=(RsID)ks||(KBM)ks

After the first device receives the second interaction information sent by the second device, it decrypts the encrypted key bit mask KBM using the security key ks, obtains the key bit mask KBM, and then specifies a key index from it. KI.

After receiving the second interaction information, the first device generates a temporary transmission key Ktrans according to the following steps as shown in Figure 2:

S201: Connect the first round of information and the second round of information carried in the second interaction information to form a string.

In specific implementation, connecting the first round of information TrID and the second round of information RsID is actually splicing the first round of information TrID and the second round of information RsID, and the splicing method can be specifically set according to actual needs.

For example, the first round of information TrID is 32 bits; the second round of information RsID is 32 bits. To concatenate the first round of information TrID and the second round of information RsID into a 128-bit string, any of the following methods can be used To splice:

TrID||TrID||RsID||RsID, TrID||RsID||RsID||TrID, TrID||RsID||TrID||RsID, RsID||RsID||TrID||TrID, RsID||TrID|| RsID||TrID, RsID||TrID||TrID||RsID, TrID||RsID||RsID||RsID... etc., where "‖" means splicing.

That is, when the first round of information TrID and the second round of information RsID are connected to form a string, the number is at least 1, and the position can be arbitrarily set as required.

S202: Using the device key k corresponding to the key index KI specified by the first device as an encryption key, encrypt the character string to generate a temporary transmission key Ktrans.

The preset encryption algorithm can be set according to actual use requirements. Generally, a symmetric key encryption algorithm can be used. The encryption process and the decryption process use the same device key k. The preset encryption algorithm can be: Advanced Encryption Standard (Advanced Encryption Standard (Advanced Encryption Standard) Advanced Encryption Standard, AES) encryption algorithm, data encryption standard (Data Encryption Standard, DES) and so on.

For example, connect the 32-bit first-round information TrID and the 32-bit second-round information RsID in the manner of TrID||TrID||RsID||RsID to generate a 128-bit string, and then use the AES algorithm to The device key k corresponding to the key index KI specified by the first device is used as the encryption key to encrypt the character string, and the generated temporary transmission key Ktrans satisfies the following formula: Ktrans=AES _k (TrID||TrID||RsID ||RsID).

After generating the temporary transmission key Ktrans, the first device uses the temporary transmission key Ktrans to encrypt the randomly generated network key K _NWK , and generates network key encryption information Kit, wherein the network key encryption information Kit satisfies the following formula : Kit=AES _Ktrans K _NWK ).

In this example, the AES algorithm is used to encrypt the network key K _NWK ; in other embodiments, other encryption algorithms may also be used to encrypt the network key K _NWK based on the temporary transmission key Ktrans to generate the network key Encrypted Information Kit.

After generating the network key encryption information Kit, the first device also uses the security key ks to encrypt the key index KI specified by the first device, and then encrypts the network key encryption information Kit and the encrypted key index KI. It is carried in the third interaction information and sent to the second device. Wherein, the third interaction information γ satisfies the formula: γ=(KI)ks||Kit.

In addition, in another embodiment of the present application, after receiving the second interaction message sent by the second device, the first device further sends an indication message to the second device, where the indication message carries the first round of information TrID and Define the time length identify time; the first round information TrID and the defined time length identify time are encrypted using the security key ks, and the indication message δ satisfies the formula: δ=(TrID||identify time)ks.

When the second device receives the indication message δ sent by the first device, it decrypts the indication message δ using the security key ks to obtain the first-round information TrID and the defined time length identify time, and indicates the first-round information carried in the message The TrID is consistent with the first-round information TrID carried in the first interaction information, then the second device is also used to send a prompt message to the operator of the second device that the network key is being exchanged, and the execution time of this prompt message is the same as the defined time length identifytime is the same.

(4) The second device receives the third interaction information γ sent by the first device. After receiving the third interaction information γ, a temporary transmission key Ktrans will be generated according to the first round information carried in the first interaction information α and the locally generated second round information, and the generated temporary transmission key Ktrans will be used to pair The network key encrypted information Kit is decrypted to obtain K _NWK .

Specifically, as shown in FIG. 3 , an embodiment of the present application further provides a specific method for the second device to generate the temporary transmission key Ktrans according to the first-round information carried in the first interaction information α and the locally-generated second-round information In this method, after receiving the third interaction information γ, the second device first decrypts the key index KI specified by the encrypted first device using the security key ks, and obtains the key index KI specified by the first device. , and obtain the device secret k corresponding to the key index KI specified by the first device from the key bit mask KBM stored in the second device. The temporary transport key Ktrans is then generated by the following steps:

S301: Connect the first-round information and the second-round information carried in the first interaction information to form a string.

S302: using a preset encryption algorithm, using the device key k corresponding to the key index KI specified by the first device carried in the third interaction information as the encryption key, encrypting the character string, and generating a temporary transmission key Ktrans .

Here, the method that the second device generates the character string using the first-round information and the second-round information is exactly the same as the method that the first device generates the character string, and the second device generates the temporary transmission key Ktrans and the first device generates the temporary transmission The method of the key Ktrans is also completely the same. For details, please refer to the description of the embodiment corresponding to FIG. 2 above, which will not be repeated here.

After generating the temporary transmission key Ktrans, the second device will use the temporary transmission key Ktrans to decrypt the network key encryption information Kit to obtain the network key K _NWK . After obtaining the network key K _NWK , the second device generates fourth interaction information based on the network key K _NWK , and sends the fourth interaction information to the first device.

Here, this embodiment of the present application further provides another specific implementation manner in which the second device sends fourth interaction information to the first device:

In the above process (1), the first interaction information also carries the first timestamp T _i1 encrypted with the security key ks.

In the process (2), the second device will use the security key ks to decrypt the encrypted first timestamp T _i1 to obtain and save T _i1 .

In the process (4), the second device is further configured to use the network key K _NWK to encrypt the first time stamp T _i1 to generate time stamp encryption information; carry the time stamp encryption information in the fourth interaction information ω, and The fourth interaction information ω is sent to the first device.

Wherein, the fourth interaction information ω satisfies the following formula: ω=(T _i1 )K _NWK .

In addition, the fourth interaction information ω may also be generated based on other information exchanged by the first device and the second device in the foregoing interaction process, such as first-round information, second-round information, and the like. For example, the first round of information TrID is encrypted using the network key K _NWK to generate fourth interaction information and send it to the first device. After receiving the fourth interaction information, the first device will use the network key K _NWK to decrypt the fourth interaction information, obtain the first round of information TrID, and combine the obtained first round of information TrID with the first round of information generated by the first device itself. A round of information TrID is compared; if the two are consistent, it means that the network key K _NWK generated by the second device and the network key K _NWK generated by the first device are the same, then it is considered that the network of the first device and the second device are the same. Key negotiation succeeded.

(5) After receiving the fourth interaction information ω sent by the second device, the first device uses the network key K _NWK generated by the first device to decrypt the time stamp encryption information carried in the fourth interaction information ω, and obtain the first time stamp T _i1 ; then compare the first time stamp T i1 obtained with the first time stamp T _i1 generated by the first device itself in process (1); at the first time stamp T _i1 obtained and the first time stamp T _i1 When the generated first timestamp T _i1 is consistent, the verification is passed. The network key negotiation between the first device and the second device is successful.

In addition, in another embodiment of the present application, the following process may also be included:

(6) After passing the verification of the fourth interaction information ω, the first device will also send a verification pass notification to the second device to inform the second device that the network key negotiation is successful. After receiving the verification pass notification sent by the first device, the second device encrypts the interaction information by using the successfully negotiated network key K _NWK during subsequent data exchange with the first device.

In this embodiment of the present application, after multiple handshakes between the first device and the second device, the first-round information and the second-round information are firstly exchanged in an encrypted manner; the first-round information and the second-round information are obtained at the first device After that, based on the first round information and the second round information, the encrypted network key to be negotiated will be encrypted and passed to the second device; the second device can use the same method as the first device, based on the first round information, the second round of information and the device key obtained from the first device, after decrypting the encrypted network key, the network key is obtained, so that the network key obtained by a certain negotiation is leaked even during use , the first device and the second device can also negotiate a new network key to replace the original network key, so that the network key can be replaced in time when the network key is stolen, thereby improving the security of wireless network communication.

The embodiment of the present application also provides another network key negotiation system, in which the first device and the second device need to authenticate each other's identities during the key negotiation process between the first device and the second device. specific,

The first interaction information also carries first identity authentication information generated based on the first secret seed; the first identity authentication information is obtained by performing m-1 hash operations on the first secret seed;

The second device is further configured to perform a hash operation on the first identity authentication information before generating the second interaction information, and detect the first identity authentication information that has undergone one hash operation and the pre-acquired first device Whether the identity information of the first device is consistent; after detecting that the first identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the first device, the second interaction information is generated;

Wherein, the identity information of the first device is obtained by the first device performing m hash operations on the first secret seed;

as well as,

The second interaction information also carries the second identity authentication information generated based on the second secret seed and the key bit mask KBM, and the second identity authentication information is that the second device performs s-1 hash operations on the second secret seed obtain; the key bit mask is the encryption algorithm preset by the second device;

The first device is further configured to perform a hash operation on the second identity authentication information before generating the third interaction information, and detect the second identity authentication information that has undergone one hash operation and the pre-acquired second device Whether the identity information is consistent; after detecting that the second identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the second device, generate third interaction information;

The identity information of the second device is obtained by the second device performing s hash operations on the second secret seed.

In a specific implementation, before the first device and the second device perform network key negotiation, they will also exchange each other's identity information during the device discovery process, so that the first device obtains the identity information of the second device, and the second device obtains the first device's identity information. Identity information of a device.

Specifically, the identity information of the first device is obtained by the first device performing m hash operations on the randomly generated first secret seed. The identity information of the first device is represented as: (ID, h ^m (Si)).

The identity information of the second device is obtained by the second device performing s hash operations on the randomly generated second secret seed. The identity information of the second device is represented as: (ID, h ^s (St)).

After the first device generates its identity information, it will broadcast its identity information to the outside world, so that the second device can obtain the identity information of the first device according to the broadcast information of the first device, and save the identity information of the first device; And after the second device generates its identity information, it will also send its identity information to the first device, so that the first device can obtain the identity information of the second device according to the information sent by the second device, and send the identity information of the second device. Information is saved.

In addition, the first device and the second device may not exchange each other's identity information through the device discovery process, but store each other's identity information in advance; when performing key exchange, they will directly use the stored identity information.

During network key negotiation:

A: In the above process (1), the first device is also used to generate the first identity authentication information, carry the first identity authentication information in the first interaction information α, and then store the first identity authentication information carrying the first identity authentication information in the first interaction information α. An interaction information α is sent to the second device.

When the first device generates the first identity authentication information, it is obtained by performing m-1 hash operations using the first secret seed. The generated first identity authentication information may be represented as h ^m-1 (Si).

Then, after the first identity authentication information is carried in the first interaction information, the first interaction information α satisfies the following formula: α=(TrID)ks||h ^m-1 (Si).

B: In the above process (2), after receiving the first interaction information α that carries the first identity authentication information sent by the first device, the second device needs to use the acquired identity information of the first device and the first The first identity authentication information carried in the interaction information authenticates the identity of the first device, and only after the authentication is passed, the second interaction information β is generated.

Specifically, the second device performs one hash operation on the first identity authentication information carried by the first interaction information α, and combines the first identity authentication information after one hash operation with the first device's information stored in the second device. The identity information is compared, and if the two are consistent, the identity authentication of the first device is passed.

After passing the identity authentication of the first device, the second device uses the first identity authentication information to update the identity information of the first device, that is, changes the original identity information (ID, h ^m (Si)) to is: (ID, h ^m-1 (Si)).

The second device, before sending the second interaction information to the first device, further generates second identity authentication information, and carries the second identity authentication information in the second interaction information.

When the second device generates the second identity authentication information, it is obtained by performing s-1 hash operations using the second secret seed. The generated second identity authentication information may be represented as h ^s-1 (St).

Then, after the second identity authentication information is carried in the second interaction information, the second interaction information β satisfies the following formula: β=(RsID)ks||(KBM)ks||h ^s-1 (St).

C: In the above process (3), after the first device receives the second interaction information β that carries the second identity authentication information, it needs to be based on the acquired identity information of the second device and the second interaction information carried in the second interaction information. The second identity authentication information is used to authenticate the identity of the second device, and only after the authentication is passed, the third interaction information γ is generated.

Specifically, the first device performs one hash operation on the second identity authentication information carried by the second interaction information β, and combines the second identity authentication information after one hash operation with the second device's information stored in the first device. The identity information is compared, and if the two are consistent, the identity authentication is passed. After the identity authentication is passed, the step of generating the temporary transmission key Ktrans based on the first-round information and the second-round information carried in the second interaction information is performed.

After passing the identity authentication of the second device, the first device uses the second identity authentication information to update the identity information of the second device, that is, changes the original identity information (ID, h ^s (St)) to is: (ID, h ^s-1 (St)).

After passing the authentication of the second device, the first device will also perform m-2 hash operations on the first secret seed to generate third identity authentication information, and send the third interaction information γ carrying the third identity authentication information. sent to the second device.

Wherein, the third identity authentication information is: h ^m-2 (Si);

The third interaction information γ at this time satisfies the following formula: γ=(KI)ks||Kit||h ^m-2 (Si).

D: In the above process (4), after the second device receives the third interaction information γ that carries the third identity authentication information, it needs to base on the current identity information of the first device and the third interaction information carried in the third interaction information. The identity authentication information h ^m-2 (Si) is used to re-authenticate the identity of the first device. After the authentication is passed, the fourth interaction information ω is generated.

Specifically, the second device performs one hash calculation on the third identity authentication information h ^m-2 (Si) carried by the third interaction information γ, and combines the third identity authentication information after one hash operation with the third identity authentication information using the first hash operation. The identity information of the first device whose identity authentication information is updated is compared, and if the two are consistent, the identity authentication is passed.

After passing the identity authentication of the first device, the second device will perform s-2 hash operations on the second secret seed to generate fourth identity authentication information, and carry the fourth identity authentication information in the fourth interaction information ω, and send the fourth interaction information ω carrying the fourth identity authentication information to the first device. Wherein, the generated fourth identity authentication information is: h ^s-2 (St);

After the fourth identity authentication information is carried in the fourth interaction information ω, the fourth interaction information ω satisfies the following formula: ω=(T _i1 )K _NWK ||h ^s-2 (St).

E: In the above process (5), after the first device receives the fourth interaction information γ carrying the fourth identity authentication information, based on the fourth identity authentication information carried in the fourth interaction information ω, and uses the second identity The identity information of the second device updated by the authentication information is used to authenticate the identity of the first device. After the identity authentication is passed, the fourth interaction information is verified based on the randomly generated network key K _NWK .

Specifically, the first device performs one hash calculation on the fourth identity authentication information carried by the fourth interaction information ω, and compares the fourth identity authentication information that has undergone one hash operation with the fourth identity authentication information updated by using the second identity authentication information. The identity information of the two devices is compared, and if the two are consistent, the identity authentication is passed. After the identity authentication is passed, the fourth interaction information is verified based on the randomly generated network key K _NWK , and after the verification is passed, it is considered that the negotiation of the network key K _NWK of the first device and the second device is successful.

In this embodiment of the present application, after multiple handshakes between the first device and the second device, not only the first round of information and the second round of information are exchanged in an encrypted manner, but also during the multiple handshakes, a hash chain is used to The identities of the first device and the second device are authenticated, and after the authentication is passed, the subsequent corresponding operations will be performed, thereby preventing attackers from impersonating the first device and the second device during the process of network key negotiation between the first device and the second device. The identity of the device or the second device is added to the network key negotiation process to steal the network key negotiated between the first device and the second device, thereby improving the security of wireless network communication.

The embodiment of the present application also provides another network key negotiation system. In the negotiation system, in the multiple handshake process of the key negotiation between the first device and the second device, not only network key negotiation is performed, but also network key negotiation is performed. The identity of each other is verified, and the network key agreement channel is closed and the integrity of the data is verified during multiple handshakes, where:

The first device is further configured to generate the first channel information based on the first secret seed and the first timestamp, and carry the first channel information and the first timestamp encrypted with the security key in the first interaction information;

After receiving the second interaction information, generate the third channel information based on the network key and the third timestamp; and carry the third channel information and the third timestamp encrypted with the security key in the third interaction information ;

The second device is further configured to, before generating the fourth interaction information, be further configured to:

Using the first timestamp carried in the first interaction information and based on the third identity authentication information, generate the first channel verification information, and detect whether the calculated first channel verification information and the first channel information carried in the first interaction information are Consistent; after detecting that the first channel verification information and the first channel information carried in the first interaction information are consistent, confirm that the network key negotiation channel is not interrupted;

After confirming that the network key negotiation channel is not interrupted, the second device is further configured to: use the security key to decrypt the encrypted third timestamp carried in the third interaction information to obtain the third timestamp; Three timestamps, and network keys, calculate and generate the third channel verification information; check whether the third channel verification information generated by the calculation and the third channel information carried in the third interaction information are consistent; after detecting that the two are consistent, the network The data in the key negotiation process is complete, and the fourth interaction information is generated.

In specific implementation:

I: In the above process (1) or process A, before generating the first interaction information α, the first device will generate the first channel information MAC _i1 based on the first secret seed and the first timestamp, and convert the first channel information It is carried in the first interaction information and sent to the second device.

Here, an embodiment of the present application provides a specific method for generating first channel information MAC _i1 based on a first secret seed and a first timestamp, including:

The first device performs m-2 hash operations on the first secret seed, splices the first secret seed that has undergone m-2 hash operations with the first timestamp T _i1 , and performs 1 on the spliced result. Hash operations are performed for the first time to obtain the first channel information MAC _i1 .

Here, the first time stamp T _i1 is a time stamp of the current time obtained at the current time of the process of generating the first interaction information.

The first secret seed that has undergone m-2 hash operations is spliced with the first timestamp T _i1 , and the splicing method can be specifically set according to actual needs.

For example, use any of the following methods to splicing the first secret seed that has been hashed for m-2 times with the first timestamp T _i1 : a: h ^m-2 (Si)||T _i1 ; b: T _i1 ||h ^m-2 (Si);

“‖” represents splicing. Here, when splicing the first secret seed that has undergone m-2 hash operations with the first timestamp T _i1 , the position and number can be set as required.

Taking the above a as an example, after performing one hash operation on the spliced result, the first channel information MAC _i1 is obtained and satisfies the following formula: MAC _i1 =h(h ^m-2 (Si)||T _i1 ).

In addition, in order to implement subsequent verification of the channel, the first time stamp encrypted with the security key ks is also carried in the first interaction information.

At this time, the first interaction information α satisfies the following formula:

α=(TrID)ks||h ^m-1 (Si)||MAC _i1 ||(T _i1 )ks.

II: In the above process (2) or process B, after receiving the first interaction information α, the second device uses the security key ks to decrypt the encrypted first time stamp T _i1 carried by the first interaction information α, and obtains: and save the first timestamp T _i1 .

III: In the above process (3) or process C, after receiving the second interaction information, the first device generates the third channel information MAC _i2 based on the network key K _NWK and the third time stamp, and sends the third The channel information and the third timestamp encrypted with the security key ks are carried in the third interaction information.

The embodiment of the present application also provides a specific method for generating the third channel information MAC _i2 , the method includes: the first device splices the network key K _NWK and the third time stamp T _i2 , and splices the spliced network key K _NWK and the third timestamp T _i2 perform a hash operation to generate the third channel information MAC _i2 .

It should be noted here that the network key K _NWK and the third timestamp T _i2 are spliced, and the splicing method can be specifically set according to actual needs.

For example, the network key K _NWK and the third timestamp T _i2 may be spliced in any of the following manners: a: K _NWK ||T _i2 ; b: T _i2 ||K _NWK .

“‖” represents splicing, and here, when splicing the network key K _NWK and the third time stamp T _i2 , both the position and the number can be set as required.

Taking the above b as an example, after performing one hash operation on the spliced result, the third channel information MAC _i2 is obtained, which satisfies the following formula: MAC _i2 =h(T _i2 ||K _NWK ).

In addition, in order to facilitate the verification process implemented, the third time stamp encrypted with the security key ks is also carried in the third interaction information.

The generated third interaction information γ satisfies the following formula:

γ=(KI)ks||Kit||h ^m-2 (Si)||MAC _i2 ||(T _i2 )ks.

IV: In the above process (4) or the above process D, after the second device receives the third interaction information sent by the first device, and before generating the fourth interaction information The first time stamp T _i1 and the third identity authentication information h ^m-2 (Si) carried in the third interaction information generate the first channel authentication information NAC _i1 . and compare the generated first channel verification information NAC _i1 with the first channel information MAC _i1 carried in the first interaction information; if the two are consistent, the second device verifies from the above process (1) to process (4) , the network key agreement channel is not interrupted.

If the two are inconsistent, the second device verifies that the network key negotiation channel is interrupted from the above process (1) to process (4), and terminates this network key negotiation process.

In the case that the network key negotiation channel is not interrupted, the second device will also generate the third channel verification information NAC _i2 according to the third time stamp T _i2 carried in the third interaction information and the network key K _NWK , and use the The third channel authentication information NAC _i2 is compared with the third channel information MAC _i2 carried in the third interaction information. interactive information.

If the two are inconsistent, it is confirmed that the data in the network key negotiation process is incomplete, and the current network key negotiation process is terminated.

In addition, in order to implement subsequent verification, the fourth time stamp encrypted by using the security key ks is also carried in the fourth interaction information.

The generated fourth interaction information ω satisfies the following formula:

ω=(T _i1 )K _NWK ||h ^s-2 (St)||(T _t2 )ks.

Through the above embodiment, the second device can determine that the key negotiation channel is not interrupted during the key negotiation process, and the data exchanged during the key negotiation process is complete, and only when the network key negotiation channel is not interrupted , and the data exchanged during the key negotiation process is complete, the subsequent network key negotiation process will be performed.

In addition, in another embodiment of the present application, the first device also verifies whether the network key negotiation channel is interrupted during the network key negotiation process.

Specifically, the second device is further configured to, before sending the second interaction information to the first device, generate the second channel information based on the second secret seed, the second timestamp and the first channel verification information, and send the second channel information to the second device. The channel information and the second timestamp encrypted with the security key are carried in the second interaction information;

The first device is further configured to, after receiving the fourth interaction information, based on the fourth identity authentication information carried in the fourth interaction information, the second timestamp carried in the second interaction information, and the first time stamp generated by the first device. channel information, calculate and generate the second channel verification information; detect whether the second channel verification information generated by the calculation and the second channel information carried in the second interaction information are consistent; detect and calculate the generated second channel verification information and the second interaction information After the second channel information carried in the data is consistent, the fourth interaction information is verified.

In concrete implementation:

①: In the above process (1), process A or process I, when the first device sends the first interaction information to the second device, it will carry the first channel information MAC _i1 in the first interaction information, and send it to the second device. second device.

②: In the above process (2), process B or process II, after receiving the first interaction information sent by the first device, the second device will use the second secret seed, the second timestamp and the first channel information MAC _i1 , the second channel information MAC _t1 is generated.

The embodiment of the present application also provides a specific method for generating the second channel information MAC _t1 :

The second device performs s-2 hash operations on the second secret seed, and performs s-2 hash operations on the second secret seed, the second timestamp T _t1 , and the first hash carried in the first interaction information α. The channel information MAC _i1 is spliced, and a hash operation is performed on the spliced result to generate the second channel information MAC _t1 .

It should be noted here that the second secret seed that has undergone s-2 hash operations, the second timestamp T _t1 and the first channel information MAC _i1 are spliced, and the splicing method can be specifically set according to actual needs. .

For example, splicing can be performed in any of the following ways:

a: h ^s-2 (St)||T _t1 ||MAC _i1 ; b: T _t1 ||h ^s-2 (St)||MAC _i1 ; c: MAC _i1 ||T _t1 ||h ^s-2 (St)... etc., where "‖" represents splicing; here: when splicing the second secret seed, the second timestamp T _t1 and the first channel information MAC _i1 that have undergone s-2 hash operations , the location and quantity can be set as required.

Taking the above a as an example, after performing one hash operation on the spliced result, the second channel information MAC _t1 is obtained, which satisfies the following formula: MAC _t1 =h(h ^s-2 (St)||T _t1 ||MAC _i1 ).

At this time, the second interaction information β satisfies the following formula:

β=(RsID)ks||(KBM)ks||h ^s-1 (St)||(T _t1 )ks||MAC _t1 .

③: In the above process (3), process C or process III, after receiving the second interaction information β, the first device uses the security key ks to perform encryption on the encrypted second time stamp T _t1 carried by the second interaction information β. Decrypt, obtain and save the decrypted second timestamp T _t1 . and storing the second channel information MAC _t1 carried in the second interaction information.

④: In the above process (4), process D or process IV, the second device will generate the fourth identity authentication information h ^s-2 (St) and carry it in the fourth interaction information, and send the fourth interaction information to the a device.

⑤: In the above-mentioned process (5) or process E, after receiving the fourth interaction information, the first device will also, based on the fourth identity authentication information h ^s-2 (St) carried in the fourth interaction information, the above The second time stamp T _t1 obtained in ③, and the first channel information MAC _i1 currently generated by the first device, generate the second channel verification information NAC _t1 . Here, the generation process of the second channel verification information NAC _t1 is the same as the generation process of the second channel information MAC _i1 , and details are not repeated here.

The first device also compares the second channel verification information NAC _t1 with the second channel information MAC _t1 obtained in the above ③. If the two are consistent, it is confirmed that the network key negotiation channel is normal, and then the fourth interaction information is verified. If the two are inconsistent, the network key negotiation process is interrupted.

In the embodiment of the present application, in the multiple handshake process, the continuity of the channel is verified through the first channel information and the second channel verification information, and the integrity of the data in the network key negotiation process is verified. Checking whether the network key negotiation channel is closed ensures that the information and data are in the interaction between the first device and the second device during the network key negotiation process, and there is no interruption, and the verification of data integrity ensures that the data is not interrupted during the interaction process. Incorrect exchange information occurs, and then the negotiation of the network key is completed.

In another embodiment of the present application, in the process of network key negotiation, the validity of the exchanged data is also verified in each handshake process, so as to ensure the continuity and security of verification.

In this embodiment: the first interaction information also carries a first timestamp encrypted with a security key;

The second device is further configured to decrypt the encrypted first time stamp by using the security key, obtain the first time stamp, and detect whether the time difference between the first time stamp and the current time is less than a preset time difference threshold; After the time difference between the first timestamp and the current time is less than a preset time difference threshold, the second interaction information is generated;

as well as,

The third interaction information also carries a third timestamp encrypted with the security key;

The second device is further configured to decrypt the encrypted third time stamp T _i2 using the security key, obtain the third time stamp, and detect whether the time difference between the third time stamp and the current time is less than a preset time difference threshold; After detecting whether the time difference between the third timestamp and the current time is less than a preset time difference threshold, generating fourth interaction information;

as well as,

The second interaction information also carries a second timestamp encrypted with the security key;

The first device is further configured to decrypt the encrypted second time stamp T _t1 by using the security key, obtain the second time stamp, and detect whether the time difference between the second time stamp and the current time is less than a preset time difference threshold; After detecting whether the time difference between the second timestamp and the current time is less than a preset time difference threshold, generating a temporary transmission key;

The fourth interaction information also carries a fourth timestamp encrypted with the security key;

The first device is further configured to decrypt the encrypted fourth time stamp by using the security key, obtain the fourth time stamp, and detect whether the time difference between the fourth time stamp and the current time is less than a preset time difference threshold; After the time difference between the fourth timestamp and the current time is less than a preset time difference threshold, the fourth interaction information is verified.

In specific implementation:

1. In the above process (1), process A, process I, or process ①, when the first device generates the first interaction information, it will also use the security key to encrypt the first timestamp T _i1 , and carry the In the first interaction information, the first interaction information is sent to the second device.

2. In the above process (2), process B, process II, or process ②, after receiving the first interaction information α carrying the first time stamp T _i1 , the second device uses the security key ks to perform the first interaction The encrypted first time stamp T _i1 carried by the information α is decrypted to obtain the decrypted first time stamp T _i1 , and it is detected whether the time difference between the first time stamp T _i1 and the current time is less than a preset time difference threshold. If it is detected that the time difference between the first timestamp T _i1 and the current time is smaller than the preset time difference threshold, the second device receives that the first interaction information α is valid, and executes the subsequent identity authentication process or executes the subsequent generation of the first interaction information α. The process of exchanging information. If it is detected that the time difference between the first timestamp T _i1 and the current time is greater than the preset time difference threshold, the second device receives that the first interaction information α is invalid, and ends the current network key negotiation process.

When generating the second interaction information, the second device will also use the security key ks to encrypt the second timestamp T _t1 , generate an encrypted second timestamp, and carry the encrypted second timestamp in the first timestamp. Two interactive information β.

3. In the above process (3), process C, process III, or process ③, after receiving the second interaction information β carrying the encrypted second time stamp T _t1 , the first device uses the security key ks to encrypt The second time stamp T _t1 is obtained, and the decrypted second time stamp T _t1 is obtained, and whether the time difference between the second time stamp T _t1 and the current time is less than the preset time difference threshold is detected; if the second time stamp T _t1 is detected After the time difference from the current time is smaller than the preset time difference threshold, a temporary transmission key is generated, and a subsequent process of generating third interaction information is performed. If it is detected that the time difference between the second time stamp T _t1 and the current time is greater than the preset time difference threshold, the negotiation process of the current network key is ended.

When generating the third interactive information, the first device will also use the security key ks to encrypt the third time stamp T _i2 , generate an encrypted third time stamp, and carry the encrypted third time stamp in the third time stamp. Three interactive information γ.

Fourth, in the above process (4), process D, process IV, or process ④, after receiving the third interaction information γ carrying the encrypted third time stamp T _i2 , the second device uses the security key ks to encrypt The third time stamp T _i2 is obtained, the decrypted third time stamp T _i2 is obtained, and it is detected whether the time difference between the third time stamp T _i2 and the current time is less than the preset time difference threshold; if the third time stamp T _i2 is detected After the time difference from the current time is smaller than the preset time difference threshold, the fourth interaction information is generated. If it is detected that the time difference between the third time stamp T _i2 and the current time is greater than the preset time difference threshold, the negotiation process of the current network key is ended.

When generating the fourth interaction information, the second device will also use the security key ks to encrypt the fourth timestamp T _t2 , generate an encrypted fourth timestamp, and carry the encrypted fourth timestamp in the third timestamp. Four interactive information ω.

Fifth, in the above process (5), process E or process ⑤, after receiving the fourth interaction information ω carrying the encrypted fourth time stamp T _t2 , the first device uses the security key ks to encrypt the fourth time stamp T t2. Stamp T _t2 to obtain the decrypted fourth time stamp T _t2 , and detect whether the time difference between the fourth time stamp T _t2 and the current time is less than the preset time difference threshold; if the difference between the fourth time stamp T _t2 and the current time is detected After the time difference between them is smaller than the preset time difference threshold, the fourth step of verifying the interactive information is performed. If it is detected that the time difference between the fourth time stamp T _t2 and the current time is greater than the preset time difference threshold, the negotiation process of the current network key is ended.

In this embodiment of the present application, in the process of network key negotiation, the time stamp is encrypted with a security key and sent out. The detection of the time stamp avoids the information exchange time-out, and the attacker intercepts a piece of information sent after the exchange information within this period, thereby further ensuring the security of wireless network communication.

Based on the same inventive concept, the embodiments of the present application also provide a network key agreement method corresponding to the network key agreement system. Similar, so the implementation of the method can refer to the implementation of the system, and the repetition will not be repeated.

Referring to FIG. 4 , a network key negotiation method provided by an embodiment of the present application is used for a first device for performing network key negotiation, and the method includes:

S401: Generate first interaction information, and send the first interaction information to a second device; the first interaction information carries: first-round information encrypted with a security key;

S402: Receive second interaction information sent by the second device after receiving the first interaction information; the second interaction information carries: the second round of information encrypted with a security key;

S403: Generate a temporary transmission key based on the first-round information and the second-round information carried in the second interaction information;

S404: Use the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information;

S405: Carry the network key encryption information in the third interaction information, and send it to the second device;

S406: Receive fourth interaction information sent by the second device based on the third interaction information; the fourth interaction information is generated based on the network key;

S407: Verify the fourth interaction information based on the network key, and if the verification passes, complete the network key negotiation with the second device.

In this embodiment of the present application, the first device first sends the first round of information to the second device in an encrypted manner. After the first device obtains the first-round information and the second-round information, it encrypts the encrypted network key to be negotiated based on the first-round information and the second-round information, and transmits it to the second device; the first device encrypts the encrypted network key to be negotiated. The network key and the second device can also replace the original network key by negotiating a new network key, so that the network key can be replaced in time when the network key is stolen, thereby improving the security of wireless network communication.

Optionally, in another embodiment of the present application, the second interaction information further carries a key bit mask encrypted with a security key; the key bit mask includes at least three key indices; The key index corresponds to a device key;

Decrypt the key bitmask using the security key and specify a key index from the obtained decrypted key bitmask;

The network key agreement method also includes:

Based on the first-round information and the second-round information carried in the second interaction information, a temporary transmission key is generated, which specifically includes:

Connect the first round of information and the second round of information carried in the second interactive information to form a string;

Using a preset encryption algorithm, using the device key corresponding to the key index specified by the first device as the encryption key, the character string is encrypted to generate a temporary transmission key.

The network key agreement method also includes:

Encrypting the key index specified by the first device using the security key, and carrying the encrypted key index in the third interaction information;

Optionally, in another embodiment of the present application, the first device is specifically configured to verify the fourth interaction information based on a randomly generated network key through the following steps:

Decrypt the timestamp encrypted information using the network key generated by the first device to obtain the first timestamp;

comparing the first time stamp obtained by decrypting the time stamp encryption information with the first time stamp generated by the first device;

The verification is passed when the first timestamp obtained by decrypting the timestamp encrypted information is consistent with the first timestamp generated by the first device.

Optionally, in another embodiment of the present application, the second interaction information also carries second identity authentication information generated based on the second secret seed, and the second identity authentication information is that the second device performs s on the second secret seed. -1 hash operation is obtained;

The network key agreement method also includes:

Before generating the third interaction information, perform a hash operation on the second identity authentication information;

Detecting whether the second identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the second device;

After detecting that the second identity authentication information subjected to one hash operation is consistent with the pre-acquired identity information of the second device, third interaction information is generated;

The identity information of the second device is obtained by the second device performing s hash operations on the second secret seed.

Optionally, in another embodiment of the present application, the network key negotiation method further includes:

After detecting that the second identity authentication information subjected to one hash operation is consistent with the pre-acquired identity information of the second device, use the second identity authentication information to update the identity information of the second device;

The fourth interaction information also carries fourth identity authentication information generated based on the second secret seed; the fourth identity authentication information is obtained by performing s-2 hash operations on the second secret seed;

Before verifying the fourth interaction information, the network key negotiation method further includes:

Perform 1 hash operation on the fourth identity authentication information;

Detecting whether the fourth identity authentication information that has undergone one hash operation is consistent with the identity information of the second device updated by using the second identity authentication information;

After it is detected that the fourth identity authentication information subjected to one hash operation is consistent with the identity information of the second device updated by using the second identity authentication information, the fourth interaction information is verified.

Optionally, in another embodiment of the present application, the network key negotiation method further includes:

generating the first channel information based on the first secret seed and the first timestamp, and carrying the first channel information and the first timestamp encrypted with the security key in the first interaction information;

After receiving the second interaction information, generating third channel information based on the network key and the third timestamp;

The third channel information and the third time stamp encrypted with the security key are carried in the third interaction information.

Optionally, in another embodiment of the present application, generating the first channel verification information based on the first secret seed and the first timestamp specifically includes:

Perform m-2 hash operations on the first secret seed;

After splicing the first secret seed that has undergone m-2 hash operations with the first timestamp, one hash operation is performed to generate the first channel verification information.

Based on the network key and the third timestamp, the third channel verification information is generated, which specifically includes:

After splicing the third timestamp and the network key, a hash operation is performed to generate the third channel verification information.

Optionally, in another embodiment of the present application, the network key negotiation method further includes:

After receiving the fourth interaction information, based on the fourth identity authentication information carried in the fourth interaction information, the second timestamp carried in the second interaction information, and the first channel information generated by the first device, calculate and generate the second Channel verification information;

Detecting whether the second channel verification information generated by the calculation and the second channel verification information carried in the second interaction information are consistent;

After detecting that the second channel verification information generated by the calculation and the second channel verification information carried in the second interaction information are consistent, the fourth interaction information is verified.

Optionally, in another embodiment of the present application, the second interaction information further carries a second timestamp encrypted with a security key;

The network key agreement method also includes:

Decrypt the encrypted second timestamp using the security key to obtain the second timestamp;

Detecting whether the time difference between the second timestamp and the current time is less than a preset time difference threshold;

After detecting whether the time difference between the second timestamp and the current time is less than a preset time difference threshold, generating a temporary transmission key;

The fourth interaction information also carries a fourth timestamp encrypted with the security key;

The network key agreement method also includes:

Decrypt the encrypted fourth timestamp using the security key to obtain the fourth timestamp;

Detecting whether the time difference between the fourth timestamp and the current time is less than a preset time difference threshold;

After detecting whether the time difference between the fourth timestamp and the current time is less than a preset time difference threshold, the fourth interaction information is verified.

Referring to FIG. 5 , a network key negotiation method provided by an embodiment of the present application is used for a second device for performing network key negotiation, and the method includes:

S501: Receive first interaction information sent by a first device, and after receiving the first interaction information, generate second interaction information;

S502: Send the second interaction information to the first device; the second interaction information carries: the second round of information encrypted with the security key;

S503: Receive third interaction information sent by the first device according to the second interaction information;

S504: Generate a temporary transmission key based on the first-round information and the second-round information carried in the first interaction information, and decrypt the network key encryption information based on the temporary transmission key to obtain a network key;

S505: Generate fourth interaction information based on the network key, and send the fourth interaction information to the first device.

In this embodiment of the present application, the second device sends the second round of information to the first device in an encrypted manner. In the same way as the first device, the second device can decrypt the encrypted network key based on the first round information, the second round information and the device key obtained from the first device to obtain the network key, In this way, even if the network key obtained by a certain negotiation is leaked during use, the first device and the second device can negotiate a new network key to replace the original network key, so that the network key can be replaced by the network key. When stolen, it can be replaced in time to improve the security of wireless network communication.

Optionally, in another embodiment of the present application, the second device pre-stores a key bitmask; the key bitmask includes at least three key indices; each key index corresponds to a device key;

The second interaction information also carries a key bit mask encrypted with the security key;

The network key agreement method also includes:

After receiving the third interaction information, use the security key to decrypt the key index specified by the encrypted first device carried in the third interaction information to obtain the key index specified by the first device; and generate the following steps: Temporary transfer key:

connecting the first round of information and the second round of information carried in the first interaction information to form a string;

It is used for encrypting the character string by using the preset encryption algorithm and using the device key corresponding to the key index specified by the first device carried in the third interaction information as the encryption key to generate a temporary transmission key.

Optionally, in another embodiment of the present application, the first interaction information further carries a first timestamp encrypted with a security key;

Generate and send fourth interaction information based on the network key to the first device, specifically including:

Encrypting the first timestamp using the network key to generate timestamp encryption information;

The time stamp encryption information is carried in the fourth interaction information, and the fourth interaction information is sent to the first device.

Optionally, in another embodiment of the present application, the first interaction information also carries first identity authentication information generated based on the first secret seed; the first identity authentication information is that the first device performs an m operation on the first secret seed. -1 hash operation is obtained;

The network key agreement method also includes:

Before generating the second interaction information, perform a hash operation on the first identity authentication information;

Detecting whether the first identity authentication information subjected to one hash operation is consistent with the pre-acquired identity information of the first device;

After detecting that the first identity authentication information subjected to one hash operation is consistent with the pre-acquired identity information of the first device, the second interaction information is generated;

The identity information of the first device is obtained by the first device performing m hash operations on the first secret seed.

Optionally, in another embodiment of the present application, the network key negotiation method further includes:

After detecting that the first identity authentication information subjected to one hash operation is consistent with the pre-acquired identity information of the first device, use the first identity authentication information to update the identity information of the first device;

The third interaction information also carries third identity authentication information generated based on the first secret seed; the third identity authentication information is obtained by performing m-2 hash operations on the first secret seed.

The method further includes: before generating the fourth interaction information, performing a hash operation on the third identity authentication information;

Detecting whether the third identity authentication information that has undergone one hash operation is consistent with the identity information of the first device updated by using the first identity authentication information;

After it is detected that the first identity authentication information subjected to one hash operation is consistent with the identity information of the first device updated by using the first identity authentication information, the fourth interaction information is generated.

Optionally, in another embodiment of the present application, before generating the fourth interaction information, the network key negotiation method further includes:

generating first channel verification information based on the third identity authentication information using the first timestamp carried in the first interaction information;

Detecting whether the calculated first channel verification information and the first channel information carried in the first interaction information are consistent;

After detecting that the first channel verification information and the first channel information carried in the first interaction information are consistent, confirming that the network key negotiation channel is not interrupted;

After confirming that the network key negotiation channel is not interrupted, the network key negotiation method further includes:

Decrypting the encrypted third timestamp carried in the third interaction information by using the security key to obtain the third timestamp;

Calculate and generate the third channel verification information according to the obtained third timestamp and the network key;

Detecting whether the third channel verification information generated by the calculation and the third channel information carried in the third interaction information are consistent;

After it is detected that the two are consistent, the data in the network key negotiation process is complete, and fourth interaction information is generated.

Optionally, in another embodiment of the present application, before sending the second interaction information to the first device, the network key negotiation method further includes:

generating second channel information based on the second secret seed, the second timestamp, and the first channel information;

The second channel information and the second time stamp encrypted with the security key are carried in the second interaction information.

Optionally, in another embodiment of the present application, generating the second channel information based on the second secret seed, the second timestamp, and the first channel information specifically includes:

Perform s-2 hash operations on the second secret seed;

After splicing the second secret seed, the second timestamp, and the first channel information that have undergone s-2 hash operations, one hash operation is performed to generate the second channel information.

Optionally, in another embodiment of the present application, the first interaction information further carries a first timestamp encrypted with a security key;

The network key agreement method also includes:

Decrypt the encrypted first timestamp T _i1 using the security key to obtain the first timestamp;

Detecting whether the time difference between the first timestamp and the current time is less than a preset time difference threshold;

After detecting that the time difference between the first timestamp and the current time is less than a preset time difference threshold, generating second interaction information;

The third interaction information also carries a third timestamp encrypted with the security key;

The network key agreement method also includes:

Decrypt the encrypted third timestamp using the security key to obtain the third timestamp;

and detecting whether the time difference between the third timestamp and the current time is less than a preset time difference threshold;

After detecting whether the time difference between the third timestamp and the current time is less than a preset time difference threshold, fourth interaction information is generated.

The present application also provides a specific example of a network key agreement system: see FIG. 6a-FIG. 6f and FIG. 7 .

The device discovery process, as shown in Figure 6a and Figure 7:

S601: The first device uses the first secret seed to perform m hash operations to obtain the identity information (ID, h ^m (Si)) of the first device. Execute S603.

S602: The second device uses the second secret seed to perform s hash operations to obtain the identity information (ID, h ^s (St)) of the second device. Execute S604.

S603: The first device broadcasts its identity information (ID, h ^m (Si)) to the outside world.

S604: The second device sends its identity information (ID, h ^s (St)) to the first device.

S605: The second device obtains the first device identity information (ID, h ^m (Si)) according to the information broadcasted by the first device.

S606: The first device obtains the second device identity information (ID, h ^s (St)) according to the information sent by the second device.

The first process of key negotiation is shown in Figure 6b and Figure 7:

S607: The first device uses the first secret seed to perform m-2 hash operations, splices the operation result with the first timestamp, and performs 1 hash operation on the spliced result to generate the first channel information MAC _i1 ; Jump to S611.

Wherein, MAC _i1 satisfies: MAC _i1 =h(h ^m-2 (Si)||T _i1 )

S608: The first device uses the first secret seed to perform m-1 hash operations to generate first identity authentication information h ^m-1 (Si) of the first device. Jump to S611.

S609: The first device encrypts the first round of information TrID by using the preset security key ks to obtain encrypted first round of information: (TrID)ks. Jump to S611.

S610: The first device uses the security key ks to encrypt the current first timestamp T _i1 to obtain an encrypted first timestamp (T _i1 )ks. Jump to S611.

S611: Combine the encrypted first timestamp (TrID)ks with the first channel authentication information MAC _i1 , the first identity authentication information h ^k-1 (Si), and the encrypted first timestamp (T _i1 )ks spliced together to generate the first interaction information α;

Wherein, the first interaction information α satisfies: α=(TrID)ks||h ^m-1 (Si)||MAC _i1 ||(T _i1 )ks.

Here, S611 will be executed only after S607-S610 are all executed, and the above steps S607 to S610 have no order of execution.

S612: Send the first interaction information α to the second device.

The second process of key negotiation is shown in Figure 6c and Figure 7:

S614: The second device receives the first interaction information α sent by the first device.

S615: Decrypt the encrypted first timestamp (T _i1 )ks in the first interaction information α using the security key ks to obtain the decrypted first timestamp T _i1 .

S616: Detect whether the difference between the first timestamp T _i1 and the current time is less than a preset time difference threshold; if not, skip to S617, and if so, skip to S618.

S617: End the current network key negotiation process.

S618: Perform a hash operation on the first identity authentication information h ^m-1 (Si) carried in the first interaction information α to obtain h ^m (Si);

S619: Check whether the h ^m (Si) obtained by the operation is consistent with the identity information of the first device saved in the device discovery process; if not, jump to S617; if so, jump to S620 and S621, S622, S623, S624 , S625.

S620: The second device updates the identity information of the first device to (ID, h ^m-1 (Si)). Jump to S626.

S621: The second device performs s-2 hash operations on the second secret seed, and performs s-2 hash operations on the second secret seed, the second time stamp T _t1 , and the th One channel information MAC _i1 is spliced, and a hash operation is performed on the spliced result to generate the second channel information MAC _t1 .

Wherein, MAC _t1 satisfies: MAC _t1 =h(h ^s-2 (St)||T _t1 ||MAC _i1 ).

Jump to S626.

S622: The second device uses the second secret seed to perform s-1 hash operations to generate the second identity authentication information h ^s-1 (St) of the second device. Jump to S626.

S623: The second device encrypts the second-round information RsID by using the preset security key ks, to obtain the encrypted second-round information: (RsID)ks. Jump to S626.

S624: The second device uses the preset security key ks to encrypt the key bit mask KBM preset in the second device to obtain an encrypted key bit mask: (KBM) ks. Jump to S626.

S625: The second device uses the preset security key ks to encrypt the second timestamp T _t1 to obtain an encrypted second timestamp (T _t1 )ks. Jump to S626.

S626: Encrypt the second round of information to obtain (RsID)ks, which are combined with the second channel verification information MAC _t1 , the second identity verification information h ^s-1 (St), the encrypted key bit mask (KBM) ks and The second timestamp T _t1 encrypted by using the security key ks is spliced together to generate second interaction information β and send to the first device.

Among them, the second interaction information β satisfies:

β=(RsID)ks||(KBM)ks||h ^s-1 (St)||(T _t1 )ks||MAC _t1 .

Here, S626 will be executed only after S620-S625 are all executed, and the above steps S620 to S625 have no order of execution.

The third process of key negotiation is shown in Figure 6d and Figure 7:

S627: The first device receives the second interaction information sent by the second device.

S628: The first device uses the security key ks to decrypt the encrypted second timestamp (T _t1 )ks carried in the second interaction information β to obtain the second timestamp T _t1 .

S629: The first device will detect whether the difference between the second time stamp T _t1 and the current time is less than the preset time difference threshold; if not, jump to S630; if so, jump to S631.

S630: End the network key negotiation process.

S631: The first device performs a hash operation on the second identity authentication information in the second interaction information β to obtain h ^s (St). Jump to S632.

S632: Detect whether the h ^s (St) obtained by the operation is consistent with the identity information of the second device. If no, go to S630; if yes, go to S633, S638, S639 and S641.

S633: The first device updates the identity information of the second device to (ID, h ^s-1 (St)).

S634: The first device uses the security key ks to decrypt the second time stamp T _t1 and the second round information RsID in the second interaction information β, and saves the second round information RsID.

S635: The first device uses the security key ks to decrypt the encrypted key bit mask (KBM) ks in the second mutual information β to obtain the key bit mask KBM, and specifies a key bit mask KBM from the key bit mask KBM. Key index KI. Jump to S636 and S640.

S636: Concatenate the second-round information RsID and the first-round information TrID into a 128-bit string, and use the AES algorithm to encrypt the string based on the device key k as an encryption key to generate a temporary transmission key Ktrans.

Wherein, the temporary transmission key Ktrans satisfies: Ktrans=AES _k (TrID||TrID||RsID||RsID).

Jump to S637.

S637: The first device uses the temporary transmission key Ktrans to encrypt the randomly generated network key K _NWK to generate network key encryption information Kit.

Wherein, the network key encryption information Kit satisfies: Kit=AES _Ktrans (K _NWK ).

Jump to S642.

S638: Combine the network key K _NWK and the third timestamp T _i2 to generate the third channel information MAC _i2 .

Wherein, the third channel information MAC _i2 satisfies: MAC _i2 =h(T _i2 ||K _NWK )

Jump to S642.

S639: Use the first secret seed to perform m-2 hash operations to generate third identity authentication information h ^m-2 (Si) of the first device. Jump to S642.

S640: Encrypt the key exponent KI using the security key ks. Jump to S642.

S641: Use the security key ks to encrypt the third time stamp T _i2 to obtain an encrypted third time stamp (T _i2 )ks. Jump to S642.

S642: Splicing together the network key encryption information Kit, the third channel information MAC _i2 , the third time stamp T _i2 encrypted with the security key ks, the key index KI encrypted with the security key ks, and the third identity authentication information , and obtain the third interaction information γ.

The third interaction information γ satisfies: γ=(KI)ks||Kit||h ^m-2 (Si)||MAC _i2 ||(T _i2 )ks.

Here, S642 will be executed only after S637-S641 are all executed, and the above-mentioned steps S637-S641 have no order of execution.

The fourth process of key negotiation, as shown in Figure 6e and Figure 7:

S643: The second device receives the third interaction information sent by the first device.

S644: The second device uses the security key ks to decrypt the encrypted third timestamp (T _i2 )ks in the third interaction information γ to obtain the decrypted third timestamp T _i2 .

S645: Detect whether the difference between the third time stamp T _i2 and the current time is less than a preset time difference threshold; if not, jump to S646, and if so, jump to S647.

S646: End the current network key negotiation process.

S647: Based on the first timestamp T _i1 carried in the first interaction information and the third identity authentication information h ^m-2 (Si) carried in the third interaction information, generate first channel verification information NAC _i1 .

S648: Detect whether the first channel verification information NAC _i1 is consistent with the first channel information MAC _i1 carried in the first interaction information: if not, go to S646; if so, go to S649.

S649: Based on the third time stamp T _i2 carried in the third interaction information and the network key K _NWK , generate the third channel verification information NAC _i2 .

S650: Detect whether the third channel authentication information NAC _i2 is consistent with the third channel information MAC _i2 carried in the third interaction information; if not, go to S646; if so, go to S651.

S651: Perform one hash operation on the third identity authentication information h ^m-2 (Si) carried in the third interaction information γ to obtain h ^m-1 (Si).

S652: Detect whether the h ^m-1 (Si) obtained by the operation is consistent with the updated identity information of the first device in the key negotiation process; if not, jump to S646; if so, jump to S653, S654, S655 and S656.

S653: Use the second secret seed to perform s-2 hash operations to generate fourth identity authentication information h ^s-2 (St). Jump to S655.

S654: Encrypt the first timestamp T _i1 using the network key K _NWK to generate timestamp encryption information (T _i1 )K _NWK . Jump to S655.

S655: Use the security key ks to encrypt the fourth time stamp T _t2 to obtain an encrypted fourth time stamp (T _t2 )ks. Jump to S656.

S656: Combine the fourth identity authentication information h ^s-2 (St), the timestamp encryption information (T _i1 )K _NWK and the encrypted fourth timestamp (T _t2 )ks to obtain fourth interaction information ω.

Wherein, the fourth mutual information ω satisfies: ω=(T _i1 )K _NWK ||h ^s-2 (St)||(T _t2 )ks.

Here, S656 will be executed only after S653-S655 are all executed, and the above-mentioned steps S653-S655 have no order of execution.

In another embodiment, S650 may be performed first, and when the detection result of S650 is yes, then S648 is performed. In addition, S650 and S648 can also be executed in no particular order.

The fifth process of key negotiation, as shown in Figure 6f and Figure 7:

S657: The first device receives the fourth interaction information sent by the second device.

S658: The first device decrypts the encrypted fourth timestamp (T _t2 )ks in the fourth interaction information ω by using the security key ks, and obtains the decrypted fourth timestamp T _t2 .

S659: Detect whether the difference between the fourth time stamp T _t2 and the current time is less than a preset time difference threshold; if not, jump to S662, and if so, jump to S660.

S660: The first device uses the network key K _NWK generated by the local end to decrypt the encrypted timestamp information (T _i1 )K _NWK to obtain the first timestamp T _i1 .

S661: The first device will detect whether the first timestamp T _i1 obtained in S660 is consistent with the first timestamp T _i1 generated by the first process of key negotiation; if not, skip to S662; if so, skip to S663.

S662: End the network key negotiation process.

S663: Based on the fourth identity authentication information h ^s-2 (St), the second timestamp T _t1 obtained by the third key negotiation process, and the first channel information MAC _i1 currently generated by the first device, the first device generates The second channel authentication information NAC _t1 .

S664: Detect whether the second channel verification information NAC _t1 is consistent with the second channel verification information obtained in the third process of key negotiation; if not, go to S662. If so, jump to S665.

S665: Feed back key negotiation success information to the second device.

S666: The network key negotiation ends.

Corresponding to the network key agreement method in FIG. 4 , an embodiment of the present application further provides a computer device 800, as shown in FIG. A computer program running on the processor 82, wherein, when the processor 82 executes the computer program, the steps of the network key agreement method are implemented.

Specifically, the above-mentioned memory 81 and processor 82 can be general-purpose memory 81 and processor 82, which are not specifically limited here. When the processor 82 runs the computer program stored in the memory 81, it can execute the above-mentioned network key negotiation method. The hash chain mechanism performs the transmission of network keys and the authentication of identity information. Compared with the unencrypted data transmission method and the less encrypted data transmission method in the prior art, it can realize the encrypted transmission of the key and improve the wireless network communication. security.

Corresponding to the network key agreement method in FIG. 4 , an embodiment of the present application further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and the computer program is executed by the processor when the above-mentioned network is executed. The steps of the key agreement method.

Specifically, the storage medium can be a general storage medium, such as a removable disk, a hard disk, etc., when the computer program on the storage medium is run, the above-mentioned network key agreement method can be executed, and a hash chain mechanism is used to perform network key negotiation. Compared with the non-encrypted data transmission mode and the less encrypted data transmission mode in the prior art, the transmission and authentication of the identity information can realize the encrypted transmission of the key and improve the security of wireless network communication.

The computer program product of the network key interaction system and device provided by the embodiments of the present application includes a computer-readable storage medium storing program codes, and the instructions included in the program codes can be used to execute the methods described in the foregoing method embodiments. , and the specific implementation can refer to the method embodiment, which is not repeated here.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, for the specific working process of the system and device described above, reference may be made to the corresponding process in the foregoing method embodiments, which will not be repeated here.

The functions, if implemented in the form of software functional units and sold or used as independent products, may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution, and the computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes .

The above are only specific embodiments of the present application, but the protection scope of the present application is not limited to this. should be covered within the scope of protection of this application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims (12)

1. A network key agreement system, comprising: a first device and a second device for data communication; the first device, configured to generate first interaction information, and send the first interaction information to the second device; the first interaction information carries: the first round of information encrypted with a security key; receiving second interaction information sent by the second device after receiving the first interaction information; generating a temporary transmission key based on the first round information and the second round information carried in the second interaction information; Use the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information; carry the network key encryption information in the third interaction information, and send it to the second device; receive the network key encryption information; The second device verifies the fourth interaction information based on the fourth interaction information sent by the third interaction information and based on the randomly generated network key, and if the verification is passed, the communication with the second device is completed. Negotiation of network keys; The second device is configured to generate second interaction information after receiving the first interaction information, and send the second interaction information to the first device; the second interaction information carries: using the the second round of information encrypted by the security key; receive the third interaction information sent by the first device according to the second interaction information; based on the first round of information and the second round of information carried in the first interaction information , generate a temporary transmission key, and decrypt the network key encryption information based on the temporary transmission key to obtain the network key; generate the fourth interaction information based on the network key, and report it to the third A device sends the fourth interaction information; The second device is pre-stored with a key bit mask; the key bit mask includes at least three key indices; each of the key indices corresponds to a device key; The second interaction information also carries a key bitmask encrypted with the security key; The first device is further configured to decrypt the key bit mask using a security key after receiving the second interaction information, and specify a key bit mask from the obtained decrypted key bit mask. key index; and generating a temporary transport key by: connecting the first round of information and the second round of information carried in the second interactive information to form a string; Using a preset encryption algorithm, using the device key corresponding to the key index specified by the first device as an encryption key, encrypting the character string to generate the temporary transmission key; And, use the security key to encrypt the key index specified by the first device, and carry the encrypted key index in the third interaction information; The second device is further configured to decrypt the key index specified by the encrypted first device by using the security key after receiving the third interaction information, and obtain the key index specified by the first device; and , generate the temporary transport key through the following steps: connecting the first round of information and the second round of information carried in the first interaction information to form a string; It is used for encrypting the character string using the preset encryption algorithm, using the device key corresponding to the key index specified by the first device carried in the third interaction information as the encryption key, and generating the encryption key. the temporary transport key. 2. The system according to claim 1, wherein the first interaction information further carries a first timestamp encrypted with the security key; The second device is specifically configured to generate and send fourth interaction information to the first device based on the network key through the following steps; encrypting the first timestamp using the network key to generate timestamp encryption information; carrying the timestamp encryption information in the fourth interaction information, and sending the fourth interaction information to the first device; The first device is specifically configured to verify the fourth interaction information based on the randomly generated network key through the following steps: Decrypting the timestamp encrypted information using the network key generated by the first device to obtain the first timestamp; comparing the first timestamp obtained by decrypting the timestamp encryption information with the first timestamp generated by the first device; When the first timestamp obtained by decrypting the timestamp encryption information is consistent with the first timestamp generated by the first device, the verification is passed. 3. The system according to claim 1, wherein the first interaction information further carries first identity authentication information generated based on a first secret seed; the first identity authentication information is the first identity authentication information. The device performs m-1 hash operations on the first secret seed to obtain; The second device is further configured to perform a hash operation on the first identity authentication information before generating the second interaction information, and detect the first identity authentication information that has undergone one hash operation and the pre-acquired first identity authentication information. Whether the identity information of the first device is consistent; after detecting that the first identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the first device, generate the second interaction information ; Wherein, the identity information of the first device is obtained by performing m hash operations on the first secret seed by the first device; as well as, The second interaction information also carries second identity authentication information generated based on the second secret seed, and the second identity authentication information is that the second device hashes the second secret seed s-1 times obtained by operation; The first device is further configured to perform a hash operation on the second identity authentication information before generating the third interaction information, and detect the second identity authentication information subjected to one hash operation and the pre-acquired second identity authentication information. Whether the identity information of the second device is consistent; after detecting that the second identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the second device, generate the third interaction information ; Wherein, the identity information of the second device is obtained by the second device performing s hash operations on the second secret seed. 4 . The system according to claim 3 , wherein the second device is further configured to detect that the first identity authentication information that has undergone one hash operation and the pre-acquired identification of the first device. 5 . After the identity information is consistent, use the first identity authentication information to update the identity information of the first device; The third interaction information also carries third identity authentication information generated based on the first secret seed; the third identity authentication information is obtained by performing m-2 hash operations on the first secret seed; The second device is further configured to perform a hash operation on the third identity authentication information before generating the fourth interaction information, and detect that the third identity authentication information that has undergone one hash operation is different from the third identity authentication information. Whether the identity information of the first device updated by using the first identity authentication information is consistent; when it is detected that the first identity authentication information that has undergone one hash operation and the first identity authentication information updated by using the first identity authentication information are consistent; After the identity information of the device is consistent, the fourth interaction information is generated; as well as, The first device is further configured to, after detecting that the second identity authentication information that has undergone one hash operation is consistent with the pre-acquired identity information of the second device, use the second identity authentication information to update the identity authentication information. the identity information of the second device; The fourth interaction information also carries fourth identity authentication information generated based on the second secret seed; the fourth identity authentication information is obtained by performing s-2 hash operations on the second secret seed; The first device is further configured to perform one hash operation on the fourth identity authentication information before verifying the fourth interaction information, and detect the fourth identity authentication information that has undergone one hash operation Whether it is consistent with the identity information of the second device obtained by using the second identity authentication information update; when it is detected that the fourth identity authentication information that has undergone one hash operation and the second identity authentication information updated using the second identity authentication information are detected. After the identity information of the two devices is consistent, the fourth interaction information is verified. 5. The system of claim 4, wherein: The first device is further configured to generate first channel information based on the first secret seed and the first timestamp, and carry the first channel information and the first timestamp encrypted by using the security key in the In the first interactive information; After receiving the second interaction information, generate third channel information based on the network key and the third timestamp; and carry the third channel information and the third timestamp encrypted with the security key in the third interaction information; The second device is further configured to, before generating the fourth interaction information, be further configured to: Using the first timestamp carried in the first interaction information and based on the third identity authentication information, generate first channel verification information, and detect the calculated first channel verification information and the first channel verification information carried in the first interaction information. Whether the first channel information is consistent; after detecting that the first channel verification information and the first channel information carried in the first interaction information are consistent, confirm that the network key negotiation channel is not interrupted; After confirming that the network key negotiation channel is not interrupted, the second device is further configured to: use the security key to decrypt the encrypted third timestamp carried in the third interaction information to obtain the third timestamp; according to the obtained The third time stamp, and the network key, calculate and generate the third channel verification information; check whether the third channel verification information generated by the calculation and the third channel information carried in the third interaction information are consistent; After that, the data in the network key negotiation process is complete, and the fourth interaction information is generated. 6. The system according to claim 5, wherein the first device is specifically configured to generate the first channel information based on the first secret seed and the first timestamp according to the following steps: performing m-2 hash operations on the first secret seed; After splicing the first secret seed that has undergone m-2 hash operations with the first timestamp, perform 1 hash operation to generate the first channel information; The first device is specifically configured to generate third channel information based on the network key and the third timestamp according to the following steps: After splicing the third timestamp and the network key, one hash operation is performed to generate the third channel information. 7. The system according to claim 6, wherein the second device is further configured to, before sending the second interaction information to the first device, based on a second secret seed, a second time stamp and the first channel information, generate second channel information, and carry the second channel information and the second time stamp encrypted with the security key in the second interaction information; The first device is further configured to, after receiving the fourth interaction information, based on the fourth identity authentication information carried in the fourth interaction information, the second timestamp carried in the second interaction information, and the The first channel information generated by a device is calculated to generate the second channel verification information; it is detected whether the second channel verification information generated by the calculation is consistent with the second channel information carried in the second interaction information; After the channel verification information and the second channel information carried in the second interaction information are consistent, the fourth interaction information is verified. 8. The system according to claim 7, wherein the second device is specifically configured to generate the second channel based on the second secret seed, the second timestamp and the first channel information through the following steps information: performing m-2 hash operations on the second secret seed; After splicing the second secret seed, the second timestamp and the first channel information that have undergone m-2 hash operations, one hash operation is performed to generate the second channel information. 9. The system according to claim 1, wherein the first interaction information further carries a first timestamp encrypted by using the security key; The second device is further configured to decrypt the encrypted first timestamp by using the security key, obtain the first timestamp, and detect whether the time difference between the first timestamp and the current time is less than a preset time difference threshold; after detecting that the time difference between the first timestamp and the current time is less than a preset time difference threshold, generating the second interaction information; as well as, The third interaction information also carries a third timestamp encrypted with the security key; The second device is further configured to decrypt the encrypted third timestamp by using the security key, obtain the third timestamp, and detect whether the time difference between the third timestamp and the current time is less than a preset time difference threshold; after detecting that the time difference between the third timestamp and the current time is less than a preset time difference threshold, generating the fourth interaction information; as well as, The second interaction information also carries a second timestamp encrypted with the security key; The first device is further configured to decrypt the encrypted second timestamp by using the security key, obtain the second timestamp, and detect whether the time difference between the second timestamp and the current time is less than a preset time difference threshold; after detecting that the time difference between the second timestamp and the current time is less than the preset time difference threshold, a temporary transmission key is generated; The fourth interaction information also carries a fourth timestamp encrypted with the security key; The first device is further configured to decrypt the encrypted fourth timestamp by using the security key, obtain the fourth timestamp, and detect whether the time difference between the fourth timestamp and the current time is less than a preset time difference threshold; after detecting that the time difference between the fourth timestamp and the current time is smaller than the preset time difference threshold, verify the fourth interaction information. 10. A network key agreement apparatus, characterized in that it is used in a network key agreement system composed of a first device and a second device; the first device is provided with a first interaction module; the second device A second interaction module is installed in the device; The first interaction module is configured to: generate first interaction information, and send the first interaction information to the second interaction module; the first interaction information carries: the first interaction information encrypted with a security key round information; receiving second interaction information fed back by the second device according to the first interaction information; based on the first round information, the second round information carried in the second interaction information, and the first round of information The device key specified by the device is used to generate a temporary transmission key; the randomly generated network key is encrypted using the temporary transmission key to generate network key encryption information; the network key encryption information is carried in the third interactive information, and send it to the second interaction module; receive fourth interaction information sent by the second interaction module based on the third interaction information, and pair the fourth interaction information based on the randomly generated network key. Carry out verification, if the verification is passed, then complete the negotiation of the network key with the second interaction module; The second interaction module is configured to generate second interaction information after receiving the first interaction information, and send the second interaction information to the first interaction module; the second interaction information carries: using the second round of information encrypted by the security key; receiving the third interaction information sent by the first interaction module according to the second interaction information; based on the obtained device key specified by the first device, the Generate a temporary transmission key based on the first-round information and the second-round information carried in the first interaction information, and decrypt the network key encryption information based on the temporary transmission key to obtain the network key; generating a network key and sending fourth interaction information to the first interaction module; The second device is pre-stored with a key bit mask; the key bit mask includes at least three key indices; each of the key indices corresponds to a device key; The second interaction information also carries a key bitmask encrypted with the security key; The first interaction module is further configured to use the security key to decrypt the key bitmask after receiving the second interaction information, and specify from the obtained decrypted key bitmask a key index; and generating an ephemeral transport key by: connecting the first round of information and the second round of information carried in the second interactive information to form a string; Using a preset encryption algorithm, using the device key corresponding to the key index specified by the first device as an encryption key, encrypting the character string to generate the temporary transmission key; And, use the security key to encrypt the key index specified by the first device, and carry the encrypted key index in the third interaction information; The second interaction module is further configured to decrypt the key index specified by the encrypted first device using the security key after receiving the third interaction information, and obtain the key specified by the first device an index; and, generating the temporary transport key by the following steps: connecting the first round of information and the second round of information carried in the first interaction information to form a string; It is used for encrypting the character string using the preset encryption algorithm, using the device key corresponding to the key index specified by the first device carried in the third interaction information as the encryption key, and generating the encryption key. the temporary transport key. 11. A network key negotiation method, characterized in that it is a first device for performing network key negotiation, the method comprising: generating first interaction information, and sending the first interaction information to the second device; the first interaction information carries: the first round of information encrypted with a security key; Receive second interaction information sent by the second device after receiving the first interaction information; the second interaction information carries: the second round of information encrypted with a security key; generating a temporary transmission key based on the first-round information and the second-round information carried in the second interaction information; Using the temporary transmission key to encrypt the randomly generated network key to generate network key encryption information; carrying the network key encryption information in the third interaction information, and sending it to the second device; receiving fourth interaction information sent by the second device based on the third interaction information; the fourth interaction information is generated based on the network key; Verifying the fourth interaction information based on the network key, and completing the network key negotiation with the second device if the verification is passed; The second device is pre-stored with a key bit mask; the key bit mask includes at least three key indices; each of the key indices corresponds to a device key; The second interaction information also carries a key bitmask encrypted with the security key; The method also includes: After receiving the second interaction information, decrypt the key bitmask using the security key, and specify a key index from the obtained decrypted key bitmask; and by the following steps Generate a temporary transport key: connecting the first round of information and the second round of information carried in the second interactive information to form a string; Using a preset encryption algorithm, using the device key corresponding to the key index specified by the first device as an encryption key, encrypting the character string to generate the temporary transmission key; And, the key index specified by the first device is encrypted by using the security key, and the encrypted key index is carried in the third interaction information. 12. A network key negotiation method, characterized in that it is a second device for performing network key negotiation, the method comprising: receiving the first interaction information sent by the first device; the first interaction information carries the first round of information; After receiving the first interaction information, generating second interaction information; sending the second interaction information to the first device; the second interaction information carries: the second round of information encrypted with a security key; receiving third interaction information sent by the first device according to the second interaction information; Based on the first-round information and the second-round information carried in the first interaction information, a temporary transmission key is generated, and the network key encryption information is decrypted based on the temporary transmission key to obtain the network encryption key. key; generating fourth interaction information based on the network key, and sending the fourth interaction information to the first device; The second device pre-stores a key bit mask; the key bit mask includes at least three key indices; each of the key indices corresponds to a device key; The second interaction information also carries a key bit mask encrypted with the security key; After receiving the third interaction information, use the security key to decrypt the key index designated by the encrypted first device to obtain the key index designated by the first device; and generate the encrypted key index through the following steps Describe the temporary transport key: connecting the first round of information and the second round of information carried in the first interaction information to form a string; is used for encrypting the character string by using a preset encryption algorithm, using the device key corresponding to the key index specified by the first device carried in the third interaction information as an encryption key, and generating the temporary transfer key.

Images