Quantum key using method for smart home system

Abstract

The invention discloses a quantum key using method for an intelligent home system. The quantum key using method comprises the steps that an intelligent home gateway requests a control center to establish connection; a symmetric key-identity key K1 distributed by a quantum key distribution center is used between the control center and the gateway, and identity authentication is carried out through a national standard password verification function mechanism; the control center confirms the identity and then returns an identification of successful authentication, and communication connection is established; the gateway selects a session key K3, encrypts the session key K3 by using a symmetric key-encryption key K2 distributed by a quantum key distribution center through a national cryptographic algorithm, and transmits the encrypted session key K3 to a control center; the control center carries out decryption by using the distributed encryption key K2 to obtain a session key K3; the session key K3 is adopted during data transmission between the control center and the gateway, and the data is encrypted through a national cryptographic algorithm; when receiving the encrypted data, the control center carries out cryptographic algorithm decryption through the session key K3; and the gateway also adopts the session key K3 to decrypt and acquire the instruction data.

Description

Technical Field

[0001] The present invention belongs to the technical field of secure transmission of electronic information, and in particular, relates to a method for using a quantum key for a smart home system. Background Art

[0002] In recent years, with the rapid development and popularization of smart home systems, various devices in the home, such as smart lighting, smart security, and smart appliances, have been increasingly integrated into people's daily lives. These smart home devices are connected and interacted through the Internet, providing users with a more convenient, comfortable, and intelligent living experience. However, with the increase in the number of devices and the growth in data transmission, the security issues of smart home systems have become increasingly prominent.

[0003] In this context, quantum key technology, as an emerging encryption technology, has received extensive attention and research. Based on the principles of quantum mechanics, quantum key technology achieves unconditionally secure key distribution by utilizing the characteristics of quantum states such as non-cloning and measurement collapse. Compared with traditional encryption technology, quantum key technology has higher security and stronger anti-attack capabilities. The application of quantum key technology in smart home systems can significantly improve the communication security of the system. Through quantum key distribution, secure communication encryption can be established between smart home devices to ensure that the transmission of sensitive information such as user instructions and device perception data is not stolen or tampered with.

[0004] However, applying quantum key technology to smart home systems also faces a series of challenges. There are many types of devices in smart home systems, and the communication protocols and standards are not unified. How to achieve compatibility and interoperability of quantum key technology with existing systems is an important issue.

[0005] Traditional encryption technology has played a certain role in protecting the security of data transmission in smart home systems, but it faces many challenges. First, with the continuous advancement of computing technology, traditional encryption algorithms may face the risk of being cracked. Second, the devices in smart home systems often have limited computing power and memory resources, making it difficult to undertake complex encryption operations. In addition, data transmission in smart home systems often needs to pass through multiple relay nodes, which increases the risk of data being stolen or tampered with. Summary of the invention

[0006] In view of the problem that the existing smart home system encryption technology has poor security in protecting the data transmission of the smart home system, the present invention provides a quantum key usage method for the smart home system.

[0007] In order to achieve the above technical objectives, the technical solution adopted by the present invention is as follows:

[0008] A method for using a quantum key for a smart home system, comprising the steps of:

[0009] S1, the smart home gateway requests the control center to establish a connection;

[0010] S2, the control center and the gateway use the symmetric key distributed by the quantum key distribution center - identity key K1, and perform identity authentication through the national standard cryptographic verification function mechanism;

[0011] S3. After the control center confirms the identity of the gateway, it returns an authentication success mark and establishes a communication connection;

[0012] S4. The gateway will select a session key K3 from the quantum key pool, use the symmetric key distributed by the quantum key distribution center - encryption key K2, encrypt the session key K3 through the national secret algorithm, and transmit it to the control center;

[0013] S5. The control center also uses the distributed encryption key K2 to decrypt and obtain the session key K3;

[0014] S6, when data is transmitted between the control center and the gateway, the session key K3 in step S4 is used to encrypt the data using the national encryption algorithm;

[0015] S7. When the control center receives the encrypted data, it uses the session key K3 to decrypt it using the national secret algorithm to obtain the data; when the gateway receives the command from the control center, it encrypts the data and the gateway also uses the session key K3 to decrypt it to obtain the command data.

[0016] Furthermore, each sensor device and home IoT gateway in the smart home system will be assigned a secure and unique registration ID; added devices must also be verified and registered through the control center, and detailed information will be recorded in the control center for future secure login.

[0017] Further, the registration process of gateways and devices in the smart home system:

[0018] Registration includes gateway registration and new smart home devices, which are first connected to the smart home gateway through physical or wireless connection;

[0019] Initial gateway registration authentication: The smart home gateway (hereinafter referred to as the gateway) initiates the initial registration request of the device to the control center, including the gateway <idmp>and basic information of the gateway;

[0020] The control center verifies the gateway's registration authority by comparing it with the ID database, generates a unique registration credential, and returns it to the gateway;

[0021] Gateway authentication: The gateway sends a (quantum key distribution center) authentication request to the quantum key distribution center, including the gateway <idmp>The quantum key distribution center sends a gateway identity verification request to the control center, including the gateway ID. Once the control center passes the verification, it returns the identity confirmation to the quantum key distribution center. After receiving the identity confirmation, the quantum key distribution center returns the identity verification request to the gateway.

[0022] Quantum key distribution request: The gateway sends a key request to the control center. After receiving the request, the control center sends a quantum key request to the quantum key distribution center, and the quantum key distribution center starts the quantum key distribution process.

[0023] The quantum key distribution center uses the communication channel to distribute the shared symmetric quantum key to the smart home gateway and the control center at the same time. The control center and the smart home gateway store the received quantum key in the security module respectively and ensure the confidentiality of the key. Since the control center and the quantum key distribution center can control the distance, the quantum channel can be used to transmit the quantum key. The quantum key channel can ensure that the key is not eavesdropped through the exchange of quantum states (such as quantum superposition or entangled states).

[0024] Smart home device registration: Users can connect new smart home devices (hereinafter referred to as devices) to the smart home gateway through physical or wireless connection through the registration interface of the smart home system. The gateway initially confirms the hardware of the device. <idp>and basic communication information.

[0025] Device authentication: After verification, the gateway generates an authentication result and feeds it back to the device, and at the same time sends the registration-related credentials distributed by the control center in step S2 to the device.

[0026] Next, the gateway will distribute the quantum key of step S5 to the device to ensure that the communication between the device and the gateway begins to be encrypted. The gateway and the device use the negotiated communication key for two-way encrypted communication to ensure the security of data transmission. The gateway also reports the authentication status of the device to the control center to ensure centralized management and tracking.

[0027] Registration Complete: Once the device and gateway are authenticated, the Control Center will mark them as registered.

[0028] Furthermore, the quantum key distribution center distributes the specific process:

[0029] Key distribution request: The smart home gateway determines whether a new quantum key needs to be updated or distributed based on the system security requirements. If a new key needs to be distributed, the gateway sends a key request to the control center, and the control center then sends a key distribution request to the quantum key distribution center.

[0030] Quantum key distribution: After receiving the key request, the quantum key distribution center will distribute quantum keys to the control center and gateway respectively, which are used to encrypt the communication data between the device and the network. The quantum key distribution center will distribute the authentication key K1 and encryption key K2 to the control center; at the same time, the quantum key distribution center will distribute the authentication key K1, encryption key K2 and a quantum key pool to the gateway. The quantum key pool contains 3 quantum keys, which will be used as the session key for data transmission between the gateway and the control center.

[0031] Session key distribution: When the gateway initiates a session request to the control center, it first sends an identity verification, and then the control center confirms the identity and returns a confirmation request after confirmation. Next, the gateway will select one of the three quantum keys in the quantum pool as the session key K3. The gateway and the control center can use the session key K3 to encrypt data transmission. When a session ends, the key is eliminated.

[0032] Key update and renewal: In a smart home system, some devices may be online continuously, and the security of keys will decrease over time. The system supports dynamic key update, that is, updating keys through secure re-authentication or preset time intervals. The system automatically triggers key renewal and redistributes new session keys to devices.

[0033] Furthermore, the specific process of identity authentication is as follows:

[0034] In the present invention, the single-item authentication in the authentication mechanism of the cryptographic verification function is adopted as follows Figure 1 , control center B has an identity <idcp>And obtain the identity authentication quantum key K1 from the quantum key distribution center and generate a random number R B , the identity <idcp>As Text1, and the random number Ra are sent to the smart home gateway A;

[0035] S2. Smart home gateway A has an identity <idmp>And obtain the identity authentication quantum key K1 from the quantum key distribution center; Gateway A receives the identity of control center B <idcp>and the random number R B , combined with the identity <idmp>The gateway A and the identity authentication quantum key K1 are used to calculate and generate the cryptographic check value TokenAB and send it to the control center B. The gateway A identity authentication information TokenAB is obtained using the following logic:

[0036] TokenAB=Text3||f K1 (R B ||B||Text2)

[0037] In the formula, f k1 (X) represents the cryptographic verification value calculated using the cryptographic verification function f and the key K1 for the data X. , R B is a random number. B is a distinguishable identifier, which is optional. K1 is the authentication key, and Text2 is the identity of gateway A. <idmp>, Text3 is the text field.

[0038] S3. Once the control center B receives the password verification value TokenAB, it calculates to obtain a comparison parameter and verifies whether the obtained comparison parameter is consistent with the password verification value TokenAB sent by the gateway A. The following logic is used to obtain the comparison parameter:

[0039] f K1 (R B ||B||Text2)

[0040] After calculation, it is compared with the cryptographic check value of gateway A to verify the correctness of the distinguishable identifier B and the random number R sent to A in step S1 B Whether it matches the random number contained in TokenAB, thereby verifying TokenAB.

[0041] If so, the two-way authentication is judged to be successful, and the identity confirmation information is returned to gateway A.

[0042] Furthermore, the quantum key distribution center and the control center communicate through the quantum channel of the B92 protocol. 50% of the 16 invalid bits in the B92 protocol are accepted, and 37.5% of the bits that are considered valid are detected as potential eavesdroppers trying to eavesdrop on the key distribution line. The bits detected by the quantum key distribution protocol are considered invalid, and the communication of the quantum channel continues until the valid bits of the encryption key are obtained.

[0043] Furthermore, the quantum key distribution center generates a quantum key and randomly determines 16 bits consisting of 0 and 1 to create a master key. The 16-bit master key is sent one by one to the control center through the quantum channel.

[0044] Furthermore, the IoT gateway and the control center evaluate whether the communication is secure by comparing the symmetric quantum key shared between them; when errors and mismatches exceed the specified equality value, the entire key sequence is regenerated; when the presence of an eavesdropper monitoring bit transmission is detected and does not exceed the threshold, the bit is canceled and the security bit is retained. When 16 security bits are obtained and the key is generated, the communication is completed.

[0045] Furthermore, if an eavesdropper listens in on the communication line to obtain the master key information, the quantum key distribution center sends photons with 0° linear polarization and photons with 45° diagonal polarization, and the eavesdropper captures and measures the photons, and then sends the photons to the control center, maintaining the same polarization state;

[0046] If the eavesdropper's measurement affects the polarization of the photons, the presence of the eavesdropper can be detected. The control center measures the transmitted photons and reports the measurement results to the quantum key distribution center;

[0047] If the control center's measurement results are 0° and 45°, these bits are considered invalid, and when 90° and -45° are found, they are considered valid, and the control center reports the measurement results to the quantum key distribution center.

[0048] Compared with the prior art, the present invention has the following beneficial effects:

[0049] The present invention solves the problem that in the current security application of smart home systems, the data transmission between the gateway and the cloud can be easily decrypted using classical encryption methods in the case of quantum attackers. The present invention adopts a quantum key distribution method, which can distribute keys more securely between the gateway and the cloud. With the quantum key distribution method, the smart home system will be more securely protected from the middleman threat. In addition, once secure key sharing is achieved, it is possible to securely encrypt and transmit data by combining the key with a traditional encryption algorithm (asymmetric or symmetric). In this way, quantum cryptography can be combined with traditional cryptography to create a more powerful secure communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is a flow chart of a method for using a quantum key for a smart home system in an embodiment of the present invention;

[0051] Figure 2 A registration flow chart of a gateway and a device in a smart home system in an embodiment of the present invention;

[0052] Figure 3 This is a specific flow chart of quantum key distribution center distribution in an embodiment of the present invention. DETAILED DESCRIPTION

[0053] In order to facilitate the understanding of those skilled in the art, the present invention is further described below in conjunction with embodiments and drawings. The contents mentioned in the implementation modes are not intended to limit the present invention.

[0054] like Figure 1 As shown, this embodiment provides a quantum key usage method for a smart home system, comprising the steps of:

[0055] S1, the smart home gateway requests the control center to establish a connection;

[0056] S2, the control center and the gateway use the symmetric key distributed by the quantum key distribution center - identity key K1, and perform identity authentication through the national standard cryptographic verification function mechanism;

[0057] S3. After the control center confirms the identity of the gateway, it returns an authentication success mark and establishes a communication connection;

[0058] S4. The gateway will select a session key K3 from the quantum key pool, use the symmetric key distributed by the quantum key distribution center - encryption key K2, encrypt the session key K3 through the national secret algorithm, and transmit it to the control center;

[0059] S5. The control center also uses the distributed encryption key K2 to decrypt and obtain the session key K3;

[0060] S6, when data is transmitted between the control center and the gateway, the session key K3 in step S4 is used to encrypt the data using the national encryption algorithm;

[0061] S7. When the control center receives the encrypted data, it uses the session key K3 to decrypt it using the national secret algorithm to obtain the data; when the gateway receives the command from the control center, it encrypts the data and the gateway also uses the session key K3 to decrypt it to obtain the command data.

[0062] Each sensor device and home IoT gateway in the smart home system will be assigned a secure and unique registration ID; added devices must also be verified and registered through the control center, and detailed information will be recorded in the control center for future secure login.

[0063] like Figure 2 As shown in the figure, the registration process of gateways and devices in the smart home system:

[0064] Registration includes gateway registration and new smart home devices, which are first connected to the smart home gateway through physical or wireless connection;

[0065] Initial gateway registration authentication: The smart home gateway (hereinafter referred to as the gateway) initiates the initial registration request of the device to the control center, including the gateway <idmp>and basic information of the gateway;

[0066] The control center verifies the gateway's registration authority by comparing it with the ID database, generates a unique registration credential, and returns it to the gateway;

[0067] Gateway authentication: The gateway sends a (quantum key distribution center) authentication request to the quantum key distribution center, including the gateway <idmp>The quantum key distribution center sends a gateway identity verification request to the control center, including the gateway ID. Once the control center passes the verification, it returns the identity confirmation to the quantum key distribution center. After receiving the identity confirmation, the quantum key distribution center returns the identity verification request to the gateway.

[0068] Quantum key distribution request: The gateway sends a key request to the control center. After receiving the request, the control center sends a quantum key request to the quantum key distribution center, and the quantum key distribution center starts the quantum key distribution process.

[0069] The quantum key distribution center uses the communication channel to distribute the shared symmetric quantum key to the smart home gateway and the control center at the same time. The control center and the smart home gateway store the received quantum key in the security module respectively and ensure the confidentiality of the key. Since the control center and the quantum key distribution center can control the distance, the quantum channel can be used to transmit the quantum key. The quantum key channel can ensure that the key is not eavesdropped through the exchange of quantum states (such as quantum superposition or entangled states).

[0070] Smart home device registration: Users can connect new smart home devices (hereinafter referred to as devices) to the smart home gateway through physical or wireless connection through the registration interface of the smart home system. The gateway initially confirms the hardware of the device. <idp>and basic communication information.

[0071] Device authentication: After verification, the gateway generates an authentication result and feeds it back to the device, and at the same time sends the registration-related credentials distributed by the control center in step S2 to the device.

[0072] Next, the gateway will distribute the quantum key of step S5 to the device to ensure that the communication between the device and the gateway begins to be encrypted. The gateway and the device use the negotiated communication key for two-way encrypted communication to ensure the security of data transmission. The gateway also reports the authentication status of the device to the control center to ensure centralized management and tracking.

[0073] Registration Complete: Once the device and gateway are authenticated, the Control Center will mark them as registered.

[0074] like Figure 3 As shown, the specific process of quantum key distribution center distribution is as follows:

[0075] Key distribution request: The smart home gateway determines whether a new quantum key needs to be updated or distributed based on the system security requirements. If a new key needs to be distributed, the gateway sends a key request to the control center, and the control center then sends a key distribution request to the quantum key distribution center.

[0076] Quantum key distribution: After receiving the key request, the quantum key distribution center will distribute quantum keys to the control center and gateway respectively, which are used to encrypt the communication data between the device and the network. The quantum key distribution center will distribute the authentication key K1 and encryption key K2 to the control center; at the same time, the quantum key distribution center will distribute the authentication key K1, encryption key K2 and a quantum key pool to the gateway. The quantum key pool contains 3 quantum keys, which will be used as the session key for data transmission between the gateway and the control center.

[0077] Session key distribution: When the gateway initiates a session request to the control center, it first sends an identity verification, and then the control center confirms the identity and returns a confirmation request after confirmation. Next, the gateway will select one of the three quantum keys in the quantum pool as the session key K3. The gateway and the control center can use the session key K3 to encrypt data transmission. When a session ends, the key is eliminated.

[0078] Key update and renewal: In a smart home system, some devices may be online continuously, and the security of keys will decrease over time. The system supports dynamic key update, that is, updating keys through secure re-authentication or preset time intervals. The system automatically triggers key renewal and redistributes new session keys to devices.

[0079] The specific process of identity authentication:

[0080] In the present invention, the single-item authentication in the authentication mechanism of the cryptographic verification function is adopted as follows Figure 1 , control center B has an identity <idcp>And obtain the identity authentication quantum key K1 from the quantum key distribution center and generate a random number R B , the identity <idcp>As Text1, and the random number Ra are sent to the smart home gateway A;

[0081] S2. Smart home gateway A has an identity <idmp>And obtain the identity authentication quantum key K1 from the quantum key distribution center; Gateway A receives the identity of control center B <idcp>and the random number R B , combined with the identity <idmp>The gateway A and the identity authentication quantum key K1 are used to calculate and generate the cryptographic check value TokenAB and send it to the control center B. The gateway A identity authentication information TokenAB is obtained using the following logic:

[0082] TokenAB=Text3||f K1 (R B ||B||Text2)

[0083] In the formula, f k1 (X) represents the cryptographic verification value calculated using the cryptographic verification function f and the key K1 for the data X. , R B is a random number. B is a distinguishable identifier, which is optional. K1 is the authentication key, and Text2 is the identity of gateway A. <idmp>, Text3 is the text field.

[0084] S3. Once the control center B receives the password verification value TokenAB, it calculates to obtain a comparison parameter and verifies whether the obtained comparison parameter is consistent with the password verification value TokenAB sent by the gateway A. The following logic is used to obtain the comparison parameter:

[0085] f K1 (R B ||B||Text2)

[0086] After calculation, it is compared with the cryptographic check value of gateway A to verify the correctness of the distinguishable identifier B and the random number R sent to A in step S1 B Whether it matches the random number contained in TokenAB, thereby verifying TokenAB.

[0087] If so, the two-way authentication is judged to be successful, and the identity confirmation information is returned to gateway A.

[0088] The quantum key distribution center and the control center communicate through the quantum channel of the B92 protocol. 50% of the 16 invalid bits in the B92 protocol are accepted, and 37.5% of the bits that are considered valid are detected as potential eavesdroppers trying to eavesdrop on the key distribution line. The bits detected by the quantum key distribution protocol are considered invalid, and the communication of the quantum channel continues until the valid bits of the encryption key are obtained.

[0089] The quantum key distribution center generates a quantum key and randomly determines 16 bits consisting of 0 and 1 to create a master key. The 16-bit master key is sent one by one to the control center through the quantum channel.

[0090] The IoT gateway and control center evaluate whether the communication is secure by comparing the symmetric quantum key shared between them; when errors and mismatches exceed the specified equality value, the entire key sequence is regenerated; when the presence of an eavesdropper monitoring bit transmission is detected and does not exceed the threshold, the bit is canceled and the security bit is retained. When 16 security bits are obtained and the key is generated, the communication is completed.

[0091] If an eavesdropper listens in on the communication line to obtain the master key information, the quantum key distribution center sends photons with 0° linear polarization and photons with 45° diagonal polarization. The eavesdropper captures and measures the photons and then sends them to the control center, maintaining the same polarization state;

[0092] If the eavesdropper's measurement affects the polarization of the photons, the presence of the eavesdropper can be detected. The control center measures the transmitted photons and reports the measurement results to the quantum key distribution center;

[0093] If the control center's measurement results are 0° and 45°, these bits are considered invalid, and when 90° and -45° are found, they are considered valid, and the control center reports the measurement results to the quantum key distribution center.

[0094] Compared with the prior art, the present invention has the following beneficial effects:

[0095] The present invention solves the problem that in the current security application of smart home systems, the data transmission between the gateway and the cloud can be easily decrypted using classical encryption methods in the case of quantum attackers. The present invention adopts a quantum key distribution method, which can distribute keys more securely between the gateway and the cloud. With the quantum key distribution method, the smart home system will be more securely protected from the middleman threat. In addition, once secure key sharing is achieved, it is possible to securely encrypt and transmit data by combining the key with a traditional encryption algorithm (asymmetric or symmetric). In this way, quantum cryptography can be combined with traditional cryptography to create a more powerful secure communication network.

[0096] The above is a detailed introduction to a quantum key usage method for a smart home system provided by the present application. The description of the specific embodiments is only used to help understand the method and its core idea of ​​the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principles of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the claims of the present application.< / idmp> < / idmp> < / idcp> < / idmp> < / idcp> < / idcp> < / idp> < / idmp> < / idmp> < / idmp> < / idmp> < / idcp> < / idmp> < / idcp> < / idcp> < / idp> < / idmp> < / idmp>

Claims

1. A quantum key usage method for a smart home system, characterized in that: Includes steps: S1, the smart home gateway requests the control center to establish a connection; S2, the control center and the gateway use the symmetric key distributed by the quantum key distribution center - identity key K1, and perform identity authentication through the national standard cryptographic verification function mechanism; S3. After the control center confirms the identity of the gateway, it returns an authentication success mark and establishes a communication connection; S4. The gateway will select a session key K3 from the quantum key pool, use the symmetric key distributed by the quantum key distribution center - encryption key K2, encrypt the session key K3 through the national secret algorithm, and transmit it to the control center; S5. The control center also uses the distributed encryption key K2 to decrypt and obtain the session key K3; S6, when data is transmitted between the control center and the gateway, the session key K3 in step S4 is used to encrypt the data using the national encryption algorithm; S7. When the control center receives the encrypted data, it uses the session key K3 to decrypt it using the national secret algorithm to obtain the data; when the gateway receives the command from the control center, it encrypts the data and the gateway also uses the session key K3 to decrypt it to obtain the command data.

2. A method for using a quantum key for a smart home system according to claim 1, characterized in that: Each sensor device and home IoT gateway in the smart home system will be assigned a secure and unique registration ID; added devices must also be verified and registered through the control center, and detailed information will be recorded in the control center for future secure login.

3. A method for using a quantum key for a smart home system according to claim 2, characterized in that: Registration process of gateways and devices in smart home system: Registration includes gateway registration and new smart home devices; First, access the smart home gateway through a physical or wireless connection; Initial gateway registration and authentication: The smart home gateway initiates the initial registration request of the device to the control center, which includes the gateway and its basic information; The control center verifies the gateway's registration authority by comparing it with the ID database, generates a unique registration credential, and returns it to the gateway; Gateway identity authentication: The gateway sends an identity authentication request to the quantum key distribution center, which contains the gateway and its basic information; the quantum key distribution center sends a gateway identity authentication request to the control center, which contains the gateway ID. After the control center verifies the request, it returns the identity confirmation to the quantum key distribution center; after receiving the identity confirmation, the quantum key distribution center returns the identity authentication request to the gateway; Quantum key distribution request: The gateway sends a key request to the control center. After receiving the request, the control center sends a quantum key request to the quantum key distribution center, and the quantum key distribution center starts the quantum key distribution process. The quantum key distribution center uses the communication channel to distribute the shared symmetric quantum key to the smart home gateway and the control center at the same time. The control center and the smart home gateway store the received quantum key in the security module respectively and ensure the confidentiality of the key. Smart home device registration: Users connect new smart home devices to the smart home gateway through physical or wireless connections through the smart home system registration interface. The gateway initially confirms the hardware and basic communication information of the smart home device; Device authentication: After verification, the gateway generates an authentication result and feeds it back to the smart home device. At the same time, it sends the registration-related credentials distributed by the control center to the smart home device. Next, the gateway will distribute the quantum key stored in the security module to the smart home device to ensure that the communication between the smart home device and the gateway begins to be encrypted. The gateway and the smart home device use the negotiated communication key for two-way encrypted communication. The gateway also reports the authentication status of the smart home device to the control center. Registration completed: The smart home devices and gateways are authenticated and the control center will be marked as registered.

4. A method for using a quantum key for a smart home system according to claim 3, characterized in that: The specific process of quantum key distribution center distribution is as follows: Key distribution request: The smart home gateway determines whether a new quantum key needs to be updated or distributed based on system security requirements; Quantum key distribution: After receiving the key request, the quantum key distribution center will distribute quantum keys to the control center and gateway respectively, which are used to encrypt the communication data between the device and the network; the quantum key distribution center will distribute the identity authentication key K1 and encryption key K2 to the control center; at the same time, the quantum key distribution center will distribute the identity authentication key K1, encryption key K2 and a quantum key pool to the gateway. The quantum key pool contains 3 quantum keys, which will be used as the session key for data transmission between the gateway and the control center; Session key distribution: When the gateway initiates a session request to the control center, it first sends an identity verification, and then the control center confirms the identity and returns a confirmation request after confirmation; next, the gateway selects one of the three quantum keys in the quantum pool as the session key K3, and the gateway and the control center can use the session key K3 to encrypt data transmission. When a session ends, the key is eliminated; Key update and renewal: In the smart home system, the system supports dynamic key update, which is updated through secure re-authentication or preset time intervals. The system automatically triggers key renewal and redistributes new session keys to smart home devices.

5. A method for using a quantum key for a smart home system according to claim 4, characterized in that: The specific process of identity authentication: Using the single-item authentication in the authentication mechanism of the password verification function, the control center B has the identity <idcp>And obtain the identity authentication quantum key K1 from the quantum key distribution center and generate a random number R B , the identity <idcp> As Text1, and the random number Ra are sent to the smart home gateway A;< / idcp> < / idcp> S2. Smart home gateway A has an identity <idmp>And obtain the identity authentication quantum key K1 from the quantum key distribution center; Gateway A receives the identity of control center B <idcp>and the random number R B , combined with the identity <idmp> The gateway A and the identity authentication quantum key K1 are used to calculate and generate the cryptographic check value TokenAB and send it to the control center B. The gateway A identity authentication information TokenAB is obtained using the following logic:< / idmp> < / idcp> < / idmp> TokenAB=Text3||f K1 (R B ||B||Text2) In the formula, f k1 (X) represents the cryptographic verification value calculated using the cryptographic verification function f and the key K1 for the data X, R B is a random number, B is a distinguishable identifier, which is optional, K1 is the authentication key, and Text2 is the identity of gateway A. <idmp> , Text3 is the text field;< / idmp> S3. Once the control center B receives the password verification value TokenAB, it calculates to obtain a comparison parameter, and verifies whether the obtained comparison parameter is consistent with the password verification value TokenAB sent by the gateway A. The comparison parameter is obtained using the following logic: f K1 (R B ||B||Text2) After calculation, it is compared with the cryptographic check value of gateway A to verify the correctness of the distinguishable identifier B and the random number R sent to A in step S1 B Whether it matches the random number contained in TokenAB, thereby verifying TokenAB; If so, the two-way authentication is judged to be successful, and the identity confirmation information is returned to gateway A.

6. A method for using a quantum key for a smart home system according to claim 5, characterized in that: The quantum key distribution center and the control center communicate through the quantum channel of the B92 protocol.

7. A method for using a quantum key for a smart home system according to claim 6, characterized in that: The quantum key distribution center generates quantum keys, randomly determining 16 bits consisting of 0s and 1s to create a master key.

8. The method for using a quantum key for a smart home system according to claim 7, characterized in that: The IoT gateway and control center evaluate whether the communication is secure by comparing the symmetric quantum key shared between them; when errors and mismatches exceed the specified equality value, the entire key sequence is regenerated; when the presence of an eavesdropper monitoring bit transmission is detected and does not exceed the threshold, the bit is canceled and the security bit is retained. When 16 security bits are obtained and the key is generated, the communication is completed.

9. A method for using a quantum key for a smart home system according to claim 8, characterized in that: If an eavesdropper listens in on the communication line to obtain the master key information, the quantum key distribution center sends photons with 0° linear polarization and photons with 45° diagonal polarization. The eavesdropper captures and measures the photons and then sends them to the control center, maintaining the same polarization state; If the eavesdropper's measurement affects the polarization of the photons, the presence of the eavesdropper can be detected. The control center measures the transmitted photons and reports the measurement results to the quantum key distribution center; If the control center's measurement results are 0° and 45°, these bits are considered invalid, and when 90° and -45° are found, they are considered valid, and the control center reports the measurement results to the quantum key distribution center.

Images