CN111601288A - A Safe and Efficient Agricultural Environment Data Communication Method - Google Patents

Abstract

The invention discloses a safe and efficient agricultural environment data communication method, relates to agricultural data communication, and solves the technical problems of low reliability and poor security of the existing communication mode. The regional data center encrypts the on-site data to obtain encrypted data, calculates the current message authentication code, encapsulates the data and sends it to the server; the server calculates a new message authentication code for the encapsulated data and compares it with the message authentication code in the encapsulated data, and the comparison passes Then decrypt the encrypted data in the encapsulated data to obtain the measurement item data, otherwise discard the encapsulated data, and the server sequentially calculates the message authentication code to perform data authenticity backtracking. The present invention can improve the reliability and security of communication by encrypting the data and comparing the authentication codes for sending and receiving messages.

Description

A Safe and Efficient Agricultural Environment Data Communication Method

technical field

The present invention relates to agricultural data communication, more particularly, to a safe and efficient agricultural environment data communication method.

Background technique

Most of the current agricultural data transmission is based on zigbee or LoRa and other methods to transmit the data collected on site to the regional processing module, and then transmit the data to the server through technologies such as WLAN or 4G communication. In remote areas and areas with weak 4G signals, the wireless signal is weak, especially when long messages with more data are transmitted, the communication quality is further degraded; secondly, most of the existing agricultural data transmission uses plaintext transmission, and there is no available The method of verifying the reliability and integrity of data has poor data security.

SUMMARY OF THE INVENTION

The technical problem to be solved by the present invention is aimed at the above-mentioned deficiencies of the prior art, and the purpose of the present invention is to provide a safe and efficient agricultural environment data communication method.

The technical scheme of the present invention is: a safe and efficient agricultural environment data communication method, comprising:

The regional data center obtains on-site data collected by different collection terminals;

The regional data center sorts and encrypts the on-site data according to the measurement item mask to obtain encrypted data, calculates the current message authentication code and adds it to the first authentication chain, and encrypts the device ID, timestamp, data number, and encrypted data. The data and the current message authentication code are encapsulated to obtain the encapsulated data and sent to the server;

The server calculates a new message authentication code for the encapsulated data, and if the new message authentication code is consistent with the message authentication code in the encapsulated data, the new message authentication code is added to the second authentication chain, and the new message authentication code is added to the second authentication chain. Decrypt the encrypted data in the encapsulated data to obtain the measurement item data; otherwise, discard the encapsulated data;

The server sequentially calculates the message authentication codes in the second authentication chain to perform data authenticity backtracking on all historical data sent by the regional data center.

As a further improvement, the regional data center and the server pre-negotiate data measurement items, corresponding masks and secret information, and the regional data center and the server calculate and obtain the communication key according to the data measurement items, corresponding masks and secret information and the item mask.

Further, the regional data center encrypts the sorted on-site data according to the communication key to obtain the encrypted data.

Further, the data measurement items include all parameters and sequences required by the task.

Further, the regional data center calculates the current message authentication code according to the device ID, time stamp, data number, encrypted data, communication key and the last message authentication code.

Further, the server extracts the device ID, time stamp, data number, encrypted data, and message authentication code in the encapsulated data, and authenticates the device according to the device ID, time stamp, data number, encrypted data and the last message. code to calculate the new message authentication code.

Further, the regional data center obtains the field data collected by the collection terminal through a Zigbee or LoRa module.

Further, the regional data center sends the packaged data to the server through a WALN or 4G or 5G network.

Further, the first authentication chain and the second authentication chain are both one-way hash chains.

beneficial effect

Compared with the prior art, the present invention has the following advantages: the present invention provides a safe and efficient agricultural environment data communication method, provides more field data with a very short message, effectively improves the reliability of wireless transmission, It saves transmission energy consumption and communication costs; at the same time, combined with the one-way hash chain, a message verification code chain that can be verified for integrity and authenticity is generated for the historical data uploaded by each regional data center, which effectively improves the efficiency of data transmission. Security, providing an effective data authenticity backtracking method.

Description of drawings

Fig. 1 is the structural representation of the present invention;

Fig. 2 is the preprocessing flow chart of the regional data center of the present invention;

Fig. 3 is the data processing flow chart of the regional data center of the present invention;

Fig. 4 is the server data processing flow chart of the present invention;

FIG. 5 is a schematic diagram of a data encapsulation format of a regional data center according to the present invention.

Detailed ways

The present invention will be further described below with reference to the specific embodiments in the accompanying drawings.

Referring to Figure 1-5, a safe and efficient agricultural environment data communication method includes:

The regional data center obtains the field data collected by different collection terminals; the collection terminal performs periodic data collection, and the regional data center obtains the field data collected by the collection terminal through the Zigbee or LoRa module;

The regional data center sorts and encrypts the field data according to the measurement item mask to obtain encrypted data, calculates the current message authentication code and adds it to the first authentication chain, and authenticates the device ID, timestamp, data number, encrypted data, and current message. code encapsulation to obtain encapsulated data and send it to the server; the regional data center and the server pre-negotiate data measurement items, corresponding masks and secret information, and the regional data center and the server calculate and obtain the communication key and secret information according to the data measurement items, corresponding masks and secret information. Mask of measurement items; the regional data center encrypts the on-site data sorted according to the communication key pair to obtain encrypted data; the data measurement items include all parameters and sequences required by the task; The communication key and the last message authentication code calculate the current message authentication code, and the first message authentication code is the initial setting message authentication code;

As shown in Figure 2, the method of generating the communication key in the preprocessing of the regional data center is as follows: devId is the device ID of the regional data center, the secret information preset by the server for the regional data center is Msec, and the secret information is stored in the regional data center at the same time. Center and server; H(M) means that the message M is calculated by cryptographic methods such as SHA or MD5. The regional data center and the server calculate the communication key key=H(devId+Msec) in the same way, and in the regional data The center and the server locally store the device ID, secret information and communication key; the regional data center uses the communication key key to encrypt the collected data S=E _key (M), which means that the plaintext M is encrypted with the communication key key to obtain Ciphertext S; the server decrypts M=D _key (S) according to the communication key key corresponding to the device ID in the data uploaded by the regional data center, indicating that the ciphertext S is decrypted with the communication key key to obtain plaintext M;

As shown in Figure 3, the data processing flow of the regional data center is: 1) the regional data center periodically collects on-site data of multiple collection terminals; 2) according to the measurement items corresponding to the bit value of 1 in the measurement item mask, the measurement items are stored in sequence The corresponding field data is stored in the byte array B; 3) Encrypt the measurement item mask and field data using the communication key and the AES symmetric encryption algorithm to obtain a ciphertext of the same length as the plaintext; 4) According to the device ID, timestamp , data number, encrypted data, communication key and last message authentication code, calculate the current message authentication code and add it to the first authentication chain;

The server calculates a new message authentication code for the encapsulated data. If the new message authentication code is consistent with the message authentication code in the encapsulated data, the new message authentication code is added to the second authentication chain to decrypt the encrypted data in the encapsulated data. Obtain the measurement item data; otherwise, discard the encapsulated data; the server extracts the device ID, timestamp, data number, encrypted data, and message authentication code in the encapsulated data, and based on the device ID, timestamp, data number, encrypted data and the last message The authentication code calculates the new message authentication code;

As shown in Figure 4, the steps of the server data processing flow are: 1) the server receives the encapsulated data from the regional data center; 2) the server extracts the device ID, time stamp, data number, encrypted data and message authentication code MAC in the encapsulated data 3) server searches corresponding communication key key according to equipment ID and the message verification code MAC _last of the packaged data sent by the regional data center; 4) server checks according to equipment ID, time stamp, data number, encrypted data and message code MAC _last to recalculate the new message authentication code MAC1 of the current encapsulated data, and compare the new message authentication code MAC1 with the message authentication code MAC in the current encapsulated data; 5) If MAC1 and MAC are inconsistent, discard the received encapsulated data And return an error code; if MAC1 is consistent with MAC, go to step 6); 6) The server sends a response message to the regional data center, at the same time, the server will encapsulate the device ID, timestamp, data number, encrypted data and message authentication code in the data The MAC is stored locally; 7) the server decrypts the encrypted data using the corresponding communication key key, and parses the measured item data in turn according to the bit whose value is 1 in the measured item mask, and saves the parsed measured item data;

The server sequentially calculates the message authentication codes in the second authentication chain to perform data authenticity backtracking on all historical data sent by the regional data center.

Regional data centers send packaged data to servers via WALN or 4G or 5G networks.

An example of the method for generating a measurement item mask by a regional data center is as follows: Suppose there are 32 types of field parameters, and the first 24 parameters are actually required to be detected, then the initial measurement item mask is a 32-bit binary string 0X00000000 with a value of 0 , set the first 24 bits to 1 according to the detection requirements, that is, the binary string 0XFFFFFF00 obtains the corresponding measurement item mask.

The data encapsulation format specified by the regional data center is shown in Figure 5, where MASK represents the mask of the measurement item, MAC is the message verification code, each mask bit set to 1 corresponds to a 4Byte floating point number, and the length of the data part is 4 to 128Byte. It can be known from the encapsulation format that in the communication protocol proposed by the present invention, 176 bytes can contain 32 field parameters, device ID, time stamp, data number and message verification code, which is a very efficient data communication protocol.

The regional data center generates the communication key key through the device ID, the secret information preset by the server, and the one-way function cryptography method, and performs data encryption processing E _key {mask + field data}; E _key {M} indicates that the communication key is used The key and the symmetric encryption algorithm E encrypt the message M.

By calculating the message authentication code corresponding to the current message through the regional data center, it should be possible to check the device IDdevId, timestamp time, data number dataId, and the message authentication code MAC _last information of the last data. The specific method for generating the current message authentication code MAC is given as an example. As follows: The cryptographic method for generating the message authentication code MAC is SHA, and SHA(M) indicates that the digest of the data M is calculated by SHA; "+" indicates the data connection operation; the message authentication code is calculated as follows:

MAC=SHA(devId+time+dataId+E _key {mask+field data}+key+MAC _last ).

The method for the server to verify the authenticity of the currently received package data is as follows: the server uses the preset secret information matching the device IDdevId and the same cryptographic method to calculate and store the communication key key corresponding to the device, and the server extracts the device in the currently received package data. IDdevId, timestamp time, data ID dataId, encrypted data E _key {mask + field data} and the message authentication code MAC _last in the last message sent by the device, using the same cryptographic method SHA128 as the regional data center for digest calculation ; If the calculation result is the same as the message authentication code in the received data, the current message is considered to be real and valid.

The regional data center stores the first authentication chain, the server stores the second authentication chain, and both the first authentication chain and the second authentication chain are one-way hash chains.

The message authentication code in all the historical data sent by the regional data center constitutes the second authentication chain. The server starts from the first historical data, recalculates the message authentication code of the data and compares it with the message authentication code in the historical data. Any changes to any data in the data cannot complete the calculation of the complete authentication chain, so it can provide effective verification of the authenticity of historical data. The authenticity of the backtracking algorithm is briefly described as follows:

Preprocessing: To verify the authenticity and integrity of data uploaded by a regional data center, the server will first query the local database for all the original record sets corresponding to the regional data center and the communication key corresponding to the regional data center. Each record contains device ID, timestamp, data number, original encrypted data and message authentication code;

Input: the original record set corresponding to a regional data center and the corresponding communication key key

Output: verification result (True/False) and error record information;

Step1: The server initializes the last message authentication code MAC _last to be empty; the initialization verification result is True, and the error record is empty;

Step2: Do the following for all data records in the original record set:

1) Extract the device IDdevId, timestamp time, data number dataId, encrypted data E _key and message authentication code MAC in the data record;

2) Calculate the message authentication code according to the communication key key and the extracted data:

MAC1=SHA(devId+time+dataId+E _key +key+MAC _last );

3) If the MAC1 is inconsistent with the MAC, the verification result is False, the error record is the current record, and the loop is jumped out;

4) If MAC1 is consistent with MAC, then MAC _last = MAC, and verify the next data record;

Step3: Output verification results and error records.

In this way, the data authenticity backtracking of all historical data sent by the regional data center is realized.

A safe and efficient agricultural environment data communication system, comprising a server, at least one regional data center connected with the server network, and each regional data center is respectively connected with a plurality of acquisition terminals for collecting different field data;

The regional data center is used to obtain different on-site data through the acquisition terminal; according to the above method, the packaged data is obtained and sent to the server;

The server is used for decrypting the encrypted data in the encapsulated data to obtain the measurement item data according to the above method; and performing data authenticity backtracking on all the historical data sent by the regional data center.

The regional data center is wirelessly connected to the acquisition terminal through Zigbee or LoRa module, and the regional data center is connected to the server through WALN or 4G or 5G network.

The invention provides more on-site data with very short messages, effectively improves the reliability of wireless transmission, and saves transmission energy consumption and communication costs; The historical data generates a message verification code chain that can be verified for integrity and authenticity, which effectively improves the security of data transmission and provides an effective data authenticity backtracking method.

The above are only the preferred embodiments of the present invention, and it should be pointed out that for those skilled in the art, without departing from the structure of the present invention, several modifications and improvements can be made, which will not affect the effect and effect of the present invention. Utility of Patents.

Claims (9)

1. a safe and efficient agricultural environment data communication method, is characterized in that, comprises: The regional data center obtains on-site data collected by different collection terminals; The regional data center sorts and encrypts the on-site data according to the measurement item mask to obtain encrypted data, calculates the current message authentication code and adds it to the first authentication chain, and encrypts the device ID, timestamp, data number, and encrypted data. The data and the current message authentication code are encapsulated to obtain the encapsulated data and sent to the server; The server calculates a new message authentication code for the encapsulated data, and if the new message authentication code is consistent with the message authentication code in the encapsulated data, the new message authentication code is added to the second authentication chain, and the new message authentication code is added to the second authentication chain. Decrypt the encrypted data in the encapsulated data to obtain the measurement item data; otherwise, discard the encapsulated data; The server sequentially calculates the message authentication codes in the second authentication chain to perform data authenticity backtracking on all historical data sent by the regional data center. 2. A safe and efficient agricultural environment data communication method according to claim 1, wherein the regional data center and the server pre-negotiate data measurement items, corresponding masks and secret information, the regional data center and the server The server calculates and obtains the communication key and the mask of the measurement item according to the data measurement item, the corresponding mask and the secret information. 3 . The safe and efficient agricultural environment data communication method according to claim 2 , wherein the encrypted data is obtained by the regional data center encrypting the sorted field data according to the communication key. 4 . 4 . A safe and efficient agricultural environment data communication method according to claim 2 , wherein the data measurement items include all parameters and sequences required by the task. 5 . 5. A safe and efficient agricultural environment data communication method according to claim 2, wherein the regional data center is based on the device ID, time stamp, data number, encrypted data, communication key and last time The message authentication code of the current message authentication code is calculated. 6. A safe and efficient agricultural environment data communication method according to claim 2, wherein the server extracts the device ID, time stamp, data number, encrypted data, message authentication code in the encapsulated data, And calculate the new message authentication code according to the device ID, time stamp, data number, encrypted data and the last message authentication code. 7 . A safe and efficient agricultural environment data communication method according to claim 1 , wherein the regional data center obtains the field data collected by the collection terminal through a Zigbee or LoRa module. 8 . 8 . The safe and efficient agricultural environment data communication method according to claim 1 , wherein the regional data center sends the packaged data to the server through a WALN or 4G or 5G network. 9 . 9 . The safe and efficient agricultural environment data communication method according to claim 1 , wherein the first authentication chain and the second authentication chain are both one-way hash chains. 10 .

Images