Data transmission method and device, computer equipment and readable storage medium

Abstract

The invention relates to a data transmission method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: sending a quantum encryption session key application request to a quantum security service platform based on a session identifier of a current quantum encryption session and authentication information of a terminal; receiving a quantum encryption session key sent by the quantum security service platform, and encrypting service data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data; and sending the encrypted data and the session identifier to the user identification card. By adopting the method, the security of the data transmission method can be improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a data transmission method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] As operators vigorously promote and develop enhanced call services, DC (Data Channel) service applets are becoming more and more abundant, and the application scenarios are becoming more and more extensive. When the terminal runs the DC service applet, the terminal will interact with the data receiving end through the data transmission method.

[0003] In the current data transmission method, the DC applet on the terminal generates business data and transmits the business data to the SIM card (Subscriber Identity Module). The SIM card encrypts the business data based on the DTLS protocol (Datagram Transport Layer Security) and sends the encrypted business data to the data receiving end.

[0004] However, in the current data transmission method, the transmission process of service data from the terminal to the SIM card is all in plain text, which is easily copied or attacked. Therefore, the current data transmission method has low security. Summary of the invention

[0005] Based on this, it is necessary to provide a data transmission method, apparatus, computer device, computer-readable storage medium and computer program product to address the above technical issues.

[0006] In a first aspect, the present application provides a data transmission method, which is applied to a terminal and includes:

[0007] Sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal;

[0008] Receiving a quantum encryption session key sent by the quantum security service platform, and encrypting the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data;

[0009] The encrypted data and the session identifier are sent to a user identification card.

[0010] In one of the embodiments, before sending a quantum encryption session key application request to a quantum security service platform based on a session identifier of a current quantum encryption session and authentication information of the terminal, the method further comprises:

[0011] Obtaining quantum keys from user identification cards;

[0012] Sending a quantum identity authentication request of the terminal to the quantum security service platform based on the quantum key; the quantum identity authentication request is used to enable the quantum security service platform to authenticate the terminal and obtain authentication information of the terminal;

[0013] Receive authentication information of the terminal sent by the quantum security service platform.

[0014] In one of the embodiments, before sending a quantum encryption session key application request to a quantum security service platform based on a session identifier of a current quantum encryption session and authentication information of the terminal, the method further comprises:

[0015] Initialize the quantum encryption and decryption SDK and data channel SDK;

[0016] Generate business data, and initialize a current quantum encryption session based on the business data to obtain a session identifier of the current quantum encryption session.

[0017] In one embodiment, sending the encrypted data and the session identifier to a user identification card includes:

[0018] The encrypted data and the session identifier are sent to a user identification card through a data channel software development kit, so that the user identification card encrypts the encrypted data and the session identifier to obtain a target encrypted data packet, and sends the target encrypted data packet to a data receiving end.

[0019] In a second aspect, the present application provides a data transmission method, which is applied to a quantum security service platform, and the method includes:

[0020] A quantum encryption session key application request sent by a receiving terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session;

[0021] Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier;

[0022] A quantum encryption session key of the current quantum encryption session is sent to the terminal; the quantum encryption session key is used to encrypt business data of the current quantum encryption session to obtain encrypted data.

[0023] In one embodiment, before receiving the quantum encryption session key application request sent by the terminal, the method further includes:

[0024] A quantum identity authentication request sent by a receiving terminal; the quantum identity authentication request includes a quantum key;

[0025] Performing identity authentication on the terminal based on the quantum key to obtain a verification result;

[0026] When the verification result is that the verification is passed, authentication information of the terminal is generated and sent to the terminal.

[0027] In one embodiment, after sending the quantum encryption session key of the current quantum encryption session to the terminal, the method further includes:

[0028] Receiving a quantum decryption session key application request sent by a data receiving end; the quantum decryption session key application request includes a session identifier;

[0029] A quantum decryption session key associated with the session identifier is queried, and the quantum decryption session key is returned to the data receiving end; the quantum decryption session key is used to decrypt the encrypted data to obtain the business data.

[0030] In a third aspect, the present application further provides a data transmission device, comprising:

[0031] A first sending module is used to send a quantum encryption session key application request to a quantum security service platform based on a session identifier of a current quantum encryption session and authentication information of a terminal;

[0032] An encryption module, used to receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data;

[0033] The second sending module is used to send the encrypted data and the session identifier to a user identification card.

[0034] In a fourth aspect, the present application further provides a data transmission device, including:

[0035] A receiving module, configured to receive a quantum encryption session key application request sent by a terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session;

[0036] A generating module, used to generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier;

[0037] The third sending module is used to send the quantum encryption session key of the current quantum encryption session to the terminal; the quantum encryption session key is used to encrypt the business data of the current quantum encryption session to obtain encrypted data.

[0038] In a fifth aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0039] Sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal;

[0040] Receiving a quantum encryption session key sent by the quantum security service platform, and encrypting the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data;

[0041] The encrypted data and the session identifier are sent to a user identification card.

[0042] In a sixth aspect, the present application further provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0043] A quantum encryption session key application request sent by a receiving terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session;

[0044] Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier;

[0045] A quantum encryption session key of the current quantum encryption session is sent to the terminal; the quantum encryption session key is used to encrypt business data of the current quantum encryption session to obtain encrypted data.

[0046] In a seventh aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0047] Sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal;

[0048] Receiving a quantum encryption session key sent by the quantum security service platform, and encrypting the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data;

[0049] The encrypted data and the session identifier are sent to a user identification card.

[0050] In an eighth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0051] A quantum encryption session key application request sent by a receiving terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session;

[0052] Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier;

[0053] A quantum encryption session key of the current quantum encryption session is sent to the terminal; the quantum encryption session key is used to encrypt business data of the current quantum encryption session to obtain encrypted data.

[0054] In a ninth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0055] Sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal;

[0056] Receiving a quantum encryption session key sent by the quantum security service platform, and encrypting the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data;

[0057] The encrypted data and the session identifier are sent to a user identification card.

[0058] In a tenth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0059] A quantum encryption session key application request sent by a receiving terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session;

[0060] Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier;

[0061] A quantum encryption session key of the current quantum encryption session is sent to the terminal; the quantum encryption session key is used to encrypt business data of the current quantum encryption session to obtain encrypted data.

[0062] The above-mentioned data transmission method, device, computer equipment, computer-readable storage medium and computer program product send a quantum encryption session key application request to a quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal; receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data; send the encrypted data and the session identifier to a user identification card. Using this method, the quantum encryption session key of the current quantum encryption session is applied to the quantum security service platform through the authentication information of the terminal and the session identifier of the current quantum encryption session, and the business data is encrypted according to the quantum encryption session key and the quantum encryption and decryption software development kit to obtain encrypted data. The encrypted data and the session identifier are sent to the user identification card, so that the transmission process of the business data from the terminal to the user identification card is all ciphertext transmission, which improves the security of the data transmission method. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0064] Figure 1 is an application environment diagram of a data transmission method in an embodiment;

[0065] Figure 2 is a flow chart of a conventional data transmission method in an exemplary embodiment;

[0066] Figure 3 A schematic diagram of a flow chart of a data transmission method in an embodiment;

[0067] Figure 4 A schematic diagram of a process flow of identity authentication steps performed by a terminal in an embodiment;

[0068] Figure 5 A schematic diagram of a process for initializing a current quantum encryption session in one embodiment;

[0069] Figure 6 A schematic diagram of a process for generating a quantum encryption session key in one embodiment;

[0070] Figure 7A schematic diagram of a process for a quantum security service platform to authenticate a terminal in an embodiment;

[0071] Figure 8 A schematic diagram of a process for generating a quantum decryption session key in one embodiment;

[0072] Fig. 9 A schematic diagram of the functional architecture of a SIM card in an embodiment;

[0073] Fig.10 Schematic diagram of the architecture of a quantum security service platform in one embodiment;

[0074] Fig.11 A flowchart of quantum encryption and decryption in one embodiment;

[0075] Fig.12 is a structural block diagram of a data transmission device in one embodiment;

[0076] Fig.13 is a structural block diagram of a data transmission device in another embodiment;

[0077] Fig.14 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0078] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0079] The data transmission method provided in the embodiment of the present application can be applied to Figure 1In the data transmission system 100 shown. The data transmission system 100 includes a terminal 110, a user identification card 120, a quantum security service platform 130 and a data receiving end 140. Among them, the terminal 110 is provided with a user identification card 120, that is, a SIM card 120. The terminal 110 is connected to a compliant security medium (SIM card 120). The SIM card 120 is pre-filled with a quantum key by the quantum security service platform 130, and the SIM card 120 integrates the identity authentication, digital certificate, cryptographic operation, session key generation and management and DC capabilities of the quantum key. The terminal 110 communicates with the quantum security service platform 130 through the network, and the data receiving end 140 also communicates with the quantum security service platform 130 through the network. The quantum security service platform 130 is a private quantum security service platform, which is deployed in the IMS (IP Multimedia Subsystem Dual Connectivity, IP Multimedia Subsystem Dual Connectivity Network, IP is Internet Protocol) network. The quantum security service platform 130 includes: a quantum random generator, a quantum exchange cipher, a quantum key filling machine and a quantum security service system. The quantum security service platform is accessed based on the C / S mode (Client / Server mode). Among them, the quantum key filling machine supports session key generation and management. The terminal 110 communicates with the data receiving terminal 140 through the network. The data receiving terminal 140 can be the opposite terminal 141 or a third-party AS (Application Service Provider) 142. The third-party service AS142 needs to integrate quantum encryption and decryption capabilities, identity authentication, cryptographic operations and session key management capabilities.

[0080] The opposite terminal 141 and the terminal 110 may be wireless terminals, which may be devices that provide voice and / or other business data connectivity to users, or handheld devices with wireless connection functions, or other processing devices connected to wireless modems. The wireless terminal may communicate with one or more core networks via a radio access network (Radio Access Network, referred to as RAN). The wireless terminal may be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal, for example, a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device, which exchanges language and / or data with the radio access network. The wireless terminal may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, an access terminal, a user terminal, a user agent, a user device or user equipment, which is not limited here.

[0081] In the traditional data transmission method, the DC applet on the terminal generates business data and transmits the business data to the SIM card (Subscriber Identity Module). The SIM card encrypts the business data based on the DTLS protocol (Datagram Transport Layer Security) and sends the encrypted business data to the data receiving end.

[0082] Specifically, Figure 2 FIG. 1 is a flow chart of a conventional data transmission method in an exemplary embodiment. Figure 2 As shown, the data transmission method includes:

[0083] Step 201: The DC applet on the terminal generates business data.

[0084] Step 202, the DC applet on the terminal calls the JS-API (JavaScript Application Programming Interface, JavaScript is a programming language) interface provided by the DC SDK (Data Channel Software Development Kit) to transfer the business data to the SDK (Software Development Kit).

[0085] Step 203: The SDK on the terminal calls the send() method in the AIDL (Android Interface Definition Language) interface provided by the chip side on the SIM card to transfer the service data to the DC chip on the SIM card.

[0086] Step 204: The terminal DC chip uses the DTLS protocol stack to encrypt the service data, obtains the target encrypted data, and sends the target encrypted data to the IMS DC network.

[0087] Step 205: The IMS DC network sends the target encrypted data to a third-party AS or a peer terminal through a data channel.

[0088] Step 206: The third-party AS or the terminal chip side decrypts the target encrypted data through the DTLS protocol stack, and reports the data to the DC SDK through the AIDL interface.

[0089] Step 207: The third-party AS or the DC SDK on the terminal returns the service data to the DC service applet through the JS-API.

[0090] Step 208: The DC applet on the third-party AS or the DC applet on the terminal processes the peer service request.

[0091] The current data transmission method is based on the DTLS protocol stack on the DC chip side to encrypt business data, which can only ensure the security of data transmission in the channel, but cannot ensure the security of the entire business data flow. That is, the business data is transmitted from the terminal to the SIM card in plain text, which is easy to be copied or attacked. Therefore, the current data transmission method has low security.

[0092] Based on the above-mentioned traditional data transmission method, it is necessary to introduce a universal DC end-side encryption and decryption service data method to ensure the security requirements of the entire DC service data process. The data transmission method provided in the embodiment of the present application applies to the quantum security service platform for the quantum encryption session key of the current quantum encryption session through the terminal's authentication information and the session identifier of the current quantum encryption session, and encrypts the service data according to the quantum encryption session key and the quantum encryption and decryption software development kit to obtain encrypted data. The encrypted data and the session identifier are sent to the user identification card, so that the transmission process of the service data from the terminal to the user identification card is all ciphertext transmission, which improves the security of the data transmission method.

[0093] In an exemplary embodiment, Figure 3 As shown, a data transmission method is provided, which is applied to Figure 1 The terminal 110 (hereinafter, the reference numeral is omitted, referred to as the terminal) in FIG. 1 is taken as an example to illustrate the method, which includes the following steps 302 to 306. Among them:

[0094] Step 302: Send a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal.

[0095] In implementation, the terminal obtains the quantum key distributed by the quantum security service platform from the SIM card, and authenticates the identity of the terminal to the quantum security service platform based on the quantum key to obtain the authentication information of the terminal. When the DC applet on the terminal generates business data and needs to send the business data, the terminal initializes the current quantum encryption session and obtains the session identifier of the current quantum encryption session. Then, the terminal generates a quantum encryption session key application request based on the session identifier of the current quantum encryption session and the authentication information of the terminal. The terminal sends a quantum encryption session key application request to the quantum security service platform to obtain the quantum encryption session key of the current quantum encryption session.

[0096] Specifically, a SIM card filled with a quantum key is pre-set in the terminal. One data sent by the terminal to the data receiving end is a quantum encryption session. The terminal initializes the SDK, and initializes the DC applet and the SIM card. The SIM card is a quantum SIM card. The terminal performs identity authentication based on the quantum key in the SIM card to obtain the authentication information of the terminal. The terminal initializes and runs the DC applet. During the operation of the DC applet, business data will be generated. The terminal will interact with the data receiving end based on the business data. The terminal initializes the current quantum encryption session based on the business data and obtains the session identifier of the current quantum encryption session. The DC applet on the terminal generates a quantum encryption session key application request based on the authentication information and the session identifier of the current quantum encryption session. Then, the terminal sends a quantum encryption session key application request to the quantum security service platform to obtain the quantum encryption session key of the current quantum encryption session.

[0097] Step 304: Receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data.

[0098] In implementation, the terminal receives the quantum encryption session key sent by the quantum security service platform through a network connection. Then, the terminal calls the quantum encryption and decryption SDK (quantum encryption and decryption software development kit) and the quantum encryption session key to encrypt the business data of the current quantum encryption session and obtain the encrypted data.

[0099] Specifically, the quantum security service platform sends the generated quantum encryption session key to the terminal through a network connection. The DC applet on the terminal obtains the quantum encryption session key of the current quantum encryption session through the quantum encryption and decryption SDK. The DC applet on the terminal calls the quantum encryption API in the quantum encryption and decryption SDK, the cryptographic operation module in the SIM card, and the quantum encryption session key to encrypt the business data of the current quantum encryption session and obtain encrypted data.

[0100] Step 306: Send the encrypted data and the session identifier to the user identification card.

[0101] In the implementation, the terminal sends the session identifier based on the SIM card and the current quantum encryption session to the SIM card. The SIM card performs secondary encryption on the session identifier and the encrypted data according to the DTLS protocol to obtain the target encrypted data packet. Then, the terminal sends the target encrypted data packet to the data receiving end through the SIM card, thereby completing the current quantum encryption session.

[0102] In the above data transmission method, the quantum encryption session key of the current quantum encryption session is applied to the quantum security service platform through the terminal's authentication information and the session identifier of the current quantum encryption session, and the business data is encrypted according to the quantum encryption session key and the quantum encryption and decryption software development kit to obtain encrypted data. The encrypted data and the session identifier are sent to the user identification card, so that the transmission process of the business data from the terminal to the user identification card is all ciphertext transmission, which improves the security of the data transmission method.

[0103] In an exemplary embodiment, before sending a quantum encryption session key application request to the quantum security service platform, it is necessary to first authenticate the terminal according to the quantum key to obtain the terminal's authenticity information. Figure 4 As shown, before step 302 is executed, the specific processing process of the data transmission method also includes steps 402 to 406. Among them:

[0104] Step 402, obtaining a quantum key from a user identification card.

[0105] In implementation, the quantum security service platform pregenerates the quantum key and injects the quantum key into the SIM card. The user inserts the SIM card injected with the quantum key into the terminal. The terminal initializes the DC applet and the SIM card. The terminal obtains the quantum key from the SIM card based on the data transmission channel between the SIM card and the terminal.

[0106] In an exemplary embodiment, the user needs to apply for a SIM card that supports DC services and quantum services offline. While applying for the SIM card, the quantum security platform generates a quantum key and injects the quantum key into the SIM card through offline injection. Then, the user inserts the SIM card into the terminal so that the terminal is equipped with the SIM card. The terminal obtains the quantum key from the SIM card through the data transmission channel between the SIM card and the terminal.

[0107] Step 404: Send a quantum identity authentication request of the terminal to the quantum security service platform based on the quantum key.

[0108] Among them, the quantum identity authentication request is used to enable the quantum security service platform to authenticate the terminal and obtain the terminal's authentication information.

[0109] In implementation, the terminal constructs an identity authentication request based on the quantum key and the terminal's identity information, and sends the terminal's quantum identity authentication request to the quantum security service platform through a network connection. The quantum security service platform receives the terminal's quantum identity authentication request, performs identity authentication, and obtains a verification result.

[0110] Specifically, the terminal encrypts the terminal's identity information according to the quantum key to obtain encrypted identity information. Then, the terminal constructs the terminal's identity authentication request according to the encrypted identity information and the quantum key, and sends the terminal's quantum identity authentication request to the quantum security service platform through a network connection. The quantum security service platform receives the terminal's quantum identity authentication request, and authenticates the terminal according to the quantum identity authentication request to obtain a verification result.

[0111] Step 406: Receive the terminal authentication information sent by the quantum security service platform.

[0112] In implementation, when the verification result is that the verification is passed, the quantum security service platform generates authentication information of the terminal and sends the authentication information of the terminal to the terminal. The terminal receives the authentication information of the terminal sent by the quantum security service platform.

[0113] In this embodiment, a quantum identity authentication request is sent to the quantum security service platform through a quantum key to authenticate the terminal and obtain the authentication information of the terminal, so as to facilitate the subsequent encryption of business data based on the authentication information of the terminal.

[0114] In an exemplary embodiment, before sending a quantum encryption session key application request to the quantum security service platform, it is necessary to generate a session identifier for the current quantum encryption session. Figure 5 As shown, before step 302 is executed, the specific processing process of the data transmission method also includes steps 502 to 504. Among them:

[0115] Step 502, initialize the quantum encryption and decryption software development kit and the data channel software development kit.

[0116] During implementation, the terminal initializes the quantum encryption and decryption SDK and the data channel SDK.

[0117] Specifically, the terminal loads the quantum encryption and decryption SDK library file to ensure that the quantum encryption and decryption SDK is loaded correctly. Then, the terminal configures the encryption algorithm, key length and other parameters according to the preset security policy, and binds the authentication information to the quantum encryption and decryption SDK. The terminal loads the data channel SDK to ensure that the data channel SDK is loaded correctly. The terminal configures network parameters and security configuration parameters. Network parameters include IP address, port, protocol, etc., and security configuration parameters include data packet size, retransmission mechanism, timeout setting, etc.

[0118] Step 504: Generate business data, initialize the current quantum encryption session based on the business data, and obtain the session identifier of the current quantum encryption session.

[0119] In the implementation, the terminal initializes the DC applet and runs the DC applet. In the process of the terminal running the DC applet, business data is generated. The terminal initializes the current quantum encryption session according to the business data and generates a session identifier of the current quantum encryption session.

[0120] In an exemplary embodiment, the terminal obtains the installation program of the DC applet and installs the DC applet based on the installation program of the DC applet. Then, the terminal edits the configuration file of the DC applet according to the document of the DC applet, thereby configuring the necessary parameters of the DC applet. The terminal configures firewall rules and adjusts system security settings so that the DC applet has sufficient permissions to access the network interface and call the terminal's system. The terminal starts the DC applet and runs the DC applet. During the operation of the DC applet, the terminal generates business data. A quantum encryption session is established at the terminal based on the business data, and the session is the current quantum encryption session. Then, the terminal generates a session identifier of the current quantum encryption session to identify the current quantum encryption session.

[0121] In this embodiment, by encapsulating and initializing the quantum SDK and data channel SDK, it is convenient to call the SDK to process data service data, which improves the convenience of use. In addition, by initializing the current quantum encryption session, it is convenient to transmit business data later. The SDK uniformly encapsulates DC and quantum encryption and decryption related js northbound interfaces. The DC business applet can implement business by calling these northbound interfaces, which is highly practical and easy to use.

[0122] In an exemplary embodiment, the specific processing process of step 306 includes:

[0123] The encrypted data and session identifier are sent to the user identification card through the data channel software development tool kit, so that the user identification card encrypts the encrypted data and session identifier to obtain a target encrypted data packet, and sends the target encrypted data packet to the data receiving end.

[0124] Among them, the data channel software development kit is DC SDK, which is also the data channel SDK.

[0125] In implementation, the terminal sends the encrypted data and session identifier to the SIM card through the DC SDK. The SIM card re-encrypts the encrypted data and session identifier based on the DTLS protocol to obtain the target encrypted data packet. Then, the terminal sends the target encrypted data packet to the data receiving end.

[0126] Specifically, the terminal transmits the encrypted data and session identifier to the SIM card through the DC SDK. The SIM card contains a DC chip. The DC chip encrypts the encrypted data and session representation through the DTLS encryption and decryption suite to obtain the target encrypted data packet. Then, the terminal sends the target encrypted data packet to the Data Channel for transmission so that the target data packet reaches the other end of the Data Channel. The other end of the Data Channel is usually a third-party service AS or a terminal that supports DC.

[0127] In this embodiment, the current situation that DC business data encryption and decryption depends on the DTLS protocol stack on the DC chip side is solved. By combining quantum encryption and decryption and other technologies, the business data is encrypted to obtain encrypted data, and the end-side + DC channel encryption function is realized. The entire business process completely realizes the business data encryption transmission closed loop. Then, by sending encrypted data, encrypted data transmission is realized, and the security of the data transmission method is improved.

[0128] In an exemplary embodiment, Figure 6 As shown, a data transmission method is provided, which is applied to Figure 1 The quantum security service platform 130 (hereinafter referred to as the quantum security service platform) in FIG. 1 is taken as an example to illustrate the method, which includes the following steps 602 to 606. Among them:

[0129] Step 602: receiving a quantum encryption session key application request sent by a terminal.

[0130] The quantum encryption session key application request includes the terminal's authentication information and the session identifier of the current quantum encryption session.

[0131] In implementation, the quantum security service platform receives a quantum encryption session application request sent by a terminal through a network connection. The quantum encryption session application request is used to determine the session identifier of the current quantum encryption key.

[0132] Specifically, the quantum security service platform receives the quantum encryption session application request sent by the terminal through a network connection, and parses the quantum encryption session application request to obtain the terminal's authentication information and the current quantum encryption session identifier.

[0133] Step 604: Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier.

[0134] In implementation, the quantum security service platform queries the database for the authentication information of the terminal. If the authentication information of the terminal exists in the database, a quantum encryption session key and a quantum decryption session key are generated. Then, the quantum security service platform establishes an association relationship between the quantum encryption session key and the session identifier of the current quantum encryption session. At the same time, the quantum security service platform establishes an association relationship between the quantum decryption session key and the session identifier of the current quantum encryption session.

[0135] In an optional embodiment, if the authentication information of the terminal does not exist in the database, the quantum security service platform determines that the terminal authentication fails and returns authentication failure information to the terminal.

[0136] Step 606: Send the quantum encryption session key of the current quantum encryption session to the terminal.

[0137] Among them, the quantum encryption session key is used to encrypt the business data of the current quantum encryption session to obtain encrypted data.

[0138] During implementation, the quantum secure encryption platform sends the quantum encryption session key of the current quantum encryption session to the terminal via a network connection.

[0139] Specifically, the quantum security encryption platform sends the quantum session key of the current quantum encryption session to the terminal. The terminal receives the quantum encryption session key of the current quantum encryption session, and encrypts the business data of the quantum encryption session based on the quantum encryption session key to obtain encrypted data. Among them, the encryption process of the business data has been described in detail in the above step 304, and the embodiment of the present application will not be repeated here. After obtaining the encrypted data, the quantum encryption session key of the current quantum encryption session has expired. When the next business data needs to be sent, it is necessary to initialize the next quantum encryption session and obtain the quantum encryption session key of the next quantum encryption session.

[0140] In this embodiment, a quantum security service platform is set up in the IMS network, and the quantum security service platform generates a quantum encryption session key for the current quantum encryption session, and feeds back the quantum encryption session key to the terminal, so as to facilitate the subsequent generation of encrypted data based on the quantum encryption session key. In addition, the quantum security service platform supports the generation and management of user session keys, supports random number generation, supports the filling of quantum keys and other functions. In addition, the data transmission method of the present application covers all DC business scenarios, supports P2P, P2A and A2P and other scenarios business data encryption and decryption, and the business data encryption and decryption are basically consistent in the use process. The practicality and scalability of the data transmission method are improved by optimizing the overall structure of the system.

[0141] In an exemplary embodiment, before receiving the quantum encryption session key application request sent by the terminal, it is necessary to first process the quantum identity authentication request sent by the terminal. Figure 7 As shown, before step 602 is executed, the specific processing process of the data transmission method also includes steps 702 to 706. Among them:

[0142] Step 702: receiving a quantum identity authentication request sent by a terminal.

[0143] Among them, the quantum identity authentication request contains the quantum key.

[0144] During implementation, the quantum security service platform receives the quantum identity authentication request sent by the terminal, parses the quantum identity authentication request, and obtains the quantum key and the identity information of the terminal.

[0145] Specifically, the quantum security service platform parses the quantum identity authentication request to obtain the encrypted identity information and quantum key. Then, the quantum security service platform decrypts the encrypted identity information according to the quantum key to obtain the identity information of the terminal.

[0146] Step 704: Authenticate the terminal based on the quantum key to obtain a verification result.

[0147] During implementation, the quantum security service platform authenticates the terminal based on the quantum key and the terminal's identity information to obtain a verification result.

[0148] Step 706: If the verification result is that the verification is passed, generate authentication information of the terminal and send the authentication information to the terminal.

[0149] In implementation, when the verification result is that the verification is passed, the quantum security service platform generates the authentication information of the terminal based on the identity information of the terminal. Then, the quantum security service platform sends the authentication information of the terminal to the terminal through the network connection.

[0150] In this embodiment, the terminal is authenticated through the quantum security service platform, and if the authentication is successful, the authentication information is returned to the terminal, so that the terminal can obtain the quantum encryption session key based on the authentication information when transmitting data.

[0151] In an exemplary embodiment, after sending the quantum encryption session key, it is necessary to send the quantum decryption session key to decrypt the encrypted data. Figure 8 As shown, after step 606 is executed, the specific processing process of the data transmission method further includes steps 802 to 804. Among them:

[0152] Step 802: Receive a quantum decryption session key application request sent by a data receiving end.

[0153] The quantum decryption session key application request includes a session identifier.

[0154] In implementation, when the data receiving end receives the target encrypted data packet, the data receiving end needs to decrypt the encrypted data in the target encrypted data packet. Therefore, the data receiving end sends a quantum decryption session key application request to the quantum security service platform based on the session identifier in the target encrypted data packet to obtain the quantum decryption session key.

[0155] Specifically, the data receiving end receives the target encrypted data packet sent by the terminal through a network connection. Then, the data receiving end decrypts the target encrypted data packet based on the DTLS protocol to obtain the encrypted data and session identifier. The data receiving end constructs a quantum decryption session key application request based on the session identifier of the current quantum encryption session, and sends the quantum decryption session key application request to the quantum security service platform through a network connection. The quantum security service platform receives the quantum decryption session key application request, parses the quantum decryption session key application request, and obtains the session identifier of the current quantum encryption session.

[0156] In an exemplary embodiment, the data receiving end is a third-party service AS. The third-party service AS receives the target encrypted data packet sent by the terminal through a network connection. Then, the third-party service AS decrypts the target encrypted data packet based on the DTLS protocol to obtain the encrypted data and the session identifier. In order to read the plaintext data in the encrypted data, the service constructs a quantum decryption session key application request based on the session identifier of the current quantum encryption session, and sends the quantum decryption session key application request to the quantum security service platform through the network connection. The quantum security service platform receives the quantum decryption session key application request, parses the quantum decryption session key application request, and obtains the session identifier of the current quantum encryption session.

[0157] Step 804: query the quantum decryption session key associated with the session identifier, and return the quantum decryption session key to the data receiving end.

[0158] Among them, the quantum decryption session key is used to decrypt the encrypted data to obtain business data.

[0159] In implementation, the quantum security service platform queries the quantum decryption session key based on the session identifier. Then, the quantum security service platform returns the quantum decryption session key and the session identifier to the data receiving end. The data receiving end receives the session identifier and the quantum decryption session key, and decrypts the encrypted data based on the quantum decryption session key to obtain the business data. The business data is plaintext data. Then, the data receiving end performs business processing based on the business data.

[0160] Specifically, the quantum security service platform queries the quantum decryption session key associated with the session identifier. Then, the quantum security service platform constructs feedback information of the quantum decryption session key based on the quantum decryption session key and the session identifier. The quantum security service platform feeds back the feedback information of the quantum decryption session key to the data receiving end through a network connection. Feedback information of the quantum encryption session key of the data receiving end. The data receiving end queries the encrypted data corresponding to the session identifier based on the session identifier in the feedback information, and decrypts the encrypted data based on the quantum decryption session key in the feedback information to obtain the business data. If the data receiving end is the peer terminal, the peer terminal calls the quantum encryption and decryption SDK and the quantum encryption session key to decrypt the encrypted data to obtain the plaintext business data.

[0161] In an optional embodiment, the data receiving end performs business processing based on the plaintext business data to obtain a business processing result. The business processing result needs to be fed back to the terminal. The data receiving end initializes a new quantum encryption session based on the business processing result and generates a session identifier for the new quantum encryption session. Then, the data receiving end sends a new quantum encryption session key application request to the quantum security service platform based on the session identifier of the new quantum encryption session and the authentication information of the data receiving end. The data receiving end receives the new quantum encryption session key sent by the quantum security service platform, and encrypts the business processing result according to the new quantum encryption session key to obtain new encrypted data. The data receiving end sends the new encrypted data and the new session identifier to the terminal. The terminal receives the new encrypted data and the new session identifier, and obtains the new quantum decryption session key according to the new session identifier and the API interface request provided by the quantum encryption and decryption SDK, and decrypts the new encrypted data based on the quantum decryption session key to obtain the business processing result.

[0162] In this embodiment, by returning the quantum decryption session key to the data receiving end, the data receiving end can decrypt the encrypted data based on the quantum decryption session key to obtain the plaintext business data. In addition, this application can meet business scenarios with high security requirements, such as payment and other business scenarios.

[0163] In an exemplary embodiment, Fig. 9 FIG. 1 is a schematic diagram of the functional architecture of a SIM card in an embodiment. Fig. 9 As shown, the SIM card is a quantum security + DC SIM card. The SIM card supports DC and quantum security, that is, the SIM card has DC function and quantum security function. The quantum security function includes four functions: quantum key injection, cryptographic operation, certificate management, and session key generation and management.

[0164] In an exemplary embodiment, Fig.10 FIG. 1 is a schematic diagram of the architecture of a quantum security service platform in one embodiment. Fig.10As shown in the figure, the quantum security service platform is deployed inside the operator's IMS network and supports C / S architecture access. The quantum security service platform consists of four parts, namely quantum random number generator, quantum key filling, quantum exchange key machine and quantum security service system. The quantum random number generator is used to generate quantum random numbers, and the quantum exchange key machine is used to generate quantum keys, quantum encryption session keys and quantum decryption session keys based on quantum random numbers. The quantum security service system provides external access, and quantum key filling is used to charge quantum keys offline.

[0165] In an exemplary embodiment, Fig.11 FIG. 1 is a flowchart of quantum encryption and decryption in one embodiment. Fig.11 As shown, the quantum encryption and decryption process includes:

[0166] 1. The quantum security service platform (quantum key platform) injects quantum keys into the SIM card (quantum + DC SIM card).

[0167] 2. DC terminal (terminal) initializes DC SDK and quantum SDK.

[0168] 3. The DC terminal initializes the SIM card.

[0169] 4. The DC terminal initializes the current quantum encryption session (quantum session) and obtains the session identifier (session ID) of the current quantum encryption session.

[0170] 5. The DC terminal obtains the quantum encryption session key from the quantum security service system.

[0171] 6. The DC terminal encrypts the business data of the quantum session based on the quantum encryption session key to obtain the ciphertext.

[0172] 7. The DC terminal transmits the ciphertext and session ID to the third-party service AS.

[0173] 8. The third-party service AS obtains the quantum decryption session key from the quantum security service platform.

[0174] 9. The third-party service AS encrypts the ciphertext based on the quantum decryption session key to obtain other service data in the inscription.

[0175] 10. The third-party service AS obtains a new quantum encryption session key (corresponding quantum session encryption key) from the quantum security service platform.

[0176] 11. The third-party service AS encrypts the service processing result based on the new quantum encryption session key to obtain a new ciphertext.

[0177] 12. The third-party service AS transmits the new ciphertext and the new session ID to the DC applet of the DC terminal.

[0178] 13. The DC terminal obtains a new quantum decryption session key (corresponding quantum session decryption key) from the quantum security service platform.

[0179] 14. The DC terminal decrypts the new ciphertext based on the new quantum decryption session key to obtain the business processing result.

[0180] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0181] Based on the same inventive concept, the embodiment of the present application also provides a data transmission device for implementing the data transmission method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more data transmission device embodiments provided below can refer to the limitations on the data transmission method above, and will not be repeated here.

[0182] In an exemplary embodiment, Fig.12 As shown, a data transmission device 1200 is provided, comprising: a first sending module 1201, an encryption module 1202, and a second sending module 1203, wherein:

[0183] The first sending module 1201 is used to send a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal.

[0184] The encryption module 1202 is used to receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data.

[0185] The second sending module 1203 is used to send the encrypted data and the session identifier to the user identification card.

[0186] In an exemplary embodiment, the data transmission device 1200 further includes:

[0187] The first acquisition module is used to obtain the quantum key from the user identification card.

[0188] The third sending module is used to send a quantum identity authentication request of the terminal to the quantum security service platform based on the quantum key; the quantum identity authentication request is used to enable the quantum security service platform to authenticate the terminal and obtain the authentication information of the terminal.

[0189] The second receiving module is used to receive the authentication information of the terminal sent by the quantum security service platform.

[0190] In an exemplary embodiment, the data transmission device 1200 further includes:

[0191] Initialization module, used to initialize the quantum encryption and decryption software development kit and the data channel software development kit.

[0192] The second generating module is used to generate business data, and initialize the current quantum encryption session based on the business data to obtain the session identifier of the current quantum encryption session.

[0193] In an exemplary embodiment, the second sending module is specifically used to send the encrypted data and session identifier to the user identification card through the data channel software development kit, so that the user identification card encrypts the encrypted data and session identifier, obtains the target encrypted data packet, and sends the target encrypted data packet to the data receiving end.

[0194] In an exemplary embodiment, Fig.13 As shown, a data transmission device 1300 is provided, including: a receiving module 1301, a generating module 1302 and a third sending module 1303, wherein:

[0195] The receiving module 1301 is used to receive a quantum encryption session key application request sent by a terminal; the quantum encryption session key application request includes the authentication information of the terminal and the session identifier of the current quantum encryption session.

[0196] The generation module 1302 is used to generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier.

[0197] The third sending module 1303 is used to send the quantum encryption session key of the current quantum encryption session to the terminal; the quantum encryption session key is used to encrypt the business data of the current quantum encryption session to obtain encrypted data.

[0198] In an exemplary embodiment, the data transmission device 1300 further includes:

[0199] The third receiving module is used to receive a quantum identity authentication request sent by the terminal; the quantum identity authentication request includes a quantum key.

[0200] The authentication module is used to authenticate the terminal based on the quantum key and obtain a verification result.

[0201] The third generating module is used to generate authentication information of the terminal and send the authentication information to the terminal when the authentication result is that the authentication is passed.

[0202] In an exemplary embodiment, the data transmission device 1300 further includes:

[0203] The fourth receiving module is used to receive a quantum decryption session key application request sent by a data receiving end; the quantum decryption session key application request includes a session identifier.

[0204] The query module is used to query the quantum decryption session key associated with the session identifier and return the quantum decryption session key to the data receiving end; the quantum decryption session key is used to decrypt the encrypted data to obtain the business data.

[0205] Each module in the above data transmission device can be implemented in whole or in part by software, hardware, or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0206] In one embodiment, a communication device is provided. Fig.14 . Fig.14 It is a schematic diagram of the structure of a terminal device provided in an embodiment of the present invention. Fig.14 The terminal device 1400 shown includes: at least one processor 1401, a memory 1402, at least one network interface 1404 and a user interface 1403. The various components in the terminal device 1400 are coupled together via a bus system 1405. It is understood that the bus system 1405 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 1405 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, the bus system 1405 is not shown in FIG. Fig.14 In the figure, various buses are labeled as bus system 1405. In addition, the embodiment of the present invention also includes a transceiver 1406, which can be multiple components, that is, including a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium.

[0207] The user interface 1403 may include a display, a keyboard, or a pointing device (eg, a mouse, a trackball, a touch pad, or a touch screen).

[0208] It can be understood that the memory 1402 in the embodiment of the present invention can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct RAM bus random access memory (DRRAM). The memory 1402 of the system and method described in the embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

[0209] In some embodiments, the memory 1402 stores the following elements, executable modules or data structures, or a subset thereof, or an extended set thereof: an operating system 14021 and an application program 14022 .

[0210] The operating system 14021 includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and process hardware-based tasks. The application 14022 includes various application programs, such as a media player (MediaPlayer), a browser (Browser), etc., which are used to implement various application services. The program for implementing the method of the embodiment of the present invention can be included in the application 14022.

[0211] In an embodiment of the present invention, by calling the program or instruction stored in the memory 1402, specifically, the program or instruction stored in the application 14022, the transmitter is used to send a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal; the encrypted data and the session identifier are sent to the user identification card; the receiver is used to receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data.

[0212] Part or all of the methods disclosed in the above embodiments of the present invention may also be applied to the processor 1401, or implemented by the processor 1401, or implemented by the processor 1401 in cooperation with other components (such as a transceiver). The processor 1401 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware or software instructions in the processor 1401. The above processor 1401 may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied as being executed by a hardware decoding processor, or may be executed by a combination of hardware and software modules in a decoding processor. The software module may be located in a storage medium mature in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 1402, and the processor 1401 reads the information in the memory 1402 and completes the steps of the above method in combination with its hardware.

[0213] It is to be understood that the embodiments described in the embodiments of the present invention may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, the processing unit may be implemented in one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSP devices, DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), general purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions described in the present application or a combination thereof.

[0214] For software implementation, the technology described in the embodiments of the present invention can be implemented by a module (such as a process, function, etc.) that performs the functions described in the embodiments of the present invention. The software code can be stored in a memory and executed by the processor 1401. The memory can be implemented in the processor 1401 or outside the processor 1401.

[0215] Those skilled in the art will understand that Fig.14 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0216] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0217] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0218] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0219] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0220] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0221] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A data transmission method, characterized in that: The method is applied to a terminal, and the method includes: Sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal; Receiving a quantum encryption session key sent by the quantum security service platform, and encrypting the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data; The encrypted data and the session identifier are sent to a user identification card.

2. The method according to claim 1, characterized in that Before sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal, the method further includes: Obtaining a quantum key from a user identification card; Sending a quantum identity authentication request of the terminal to the quantum security service platform based on the quantum key; the quantum identity authentication request is used to enable the quantum security service platform to authenticate the terminal and obtain authentication information of the terminal; Receive authentication information of the terminal sent by the quantum security service platform.

3. The method according to claim 1, characterized in that Before sending a quantum encryption session key application request to the quantum security service platform based on the session identifier of the current quantum encryption session and the authentication information of the terminal, the method further includes: Initialize the quantum encryption and decryption SDK and data channel SDK; Generate business data, and initialize a current quantum encryption session based on the business data to obtain a session identifier of the current quantum encryption session.

4. The method according to claim 1, characterized in that: The step of sending the encrypted data and the session identifier to a user identification card comprises: The encrypted data and the session identifier are sent to a user identification card through a data channel software development kit, so that the user identification card encrypts the encrypted data and the session identifier to obtain a target encrypted data packet, and sends the target encrypted data packet to a data receiving end.

5. A data transmission method, characterized in that: The method is applied to a quantum security service platform, and the method comprises: A quantum encryption session key application request sent by a receiving terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session; Generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier; A quantum encryption session key of the current quantum encryption session is sent to the terminal; the quantum encryption session key is used to encrypt business data of the current quantum encryption session to obtain encrypted data.

6. The method according to claim 5, characterized in that Before the receiving terminal sends a quantum encryption session key application request, the method further includes: A quantum identity authentication request sent by a receiving terminal; the quantum identity authentication request includes a quantum key; Performing identity authentication on the terminal based on the quantum key to obtain a verification result; When the verification result is that the verification is passed, authentication information of the terminal is generated and sent to the terminal.

7. The method according to claim 5, characterized in that After sending the quantum encryption session key of the current quantum encryption session to the terminal, the method further includes: Receiving a quantum decryption session key application request sent by a data receiving end; the quantum decryption session key application request includes a session identifier; A quantum decryption session key associated with the session identifier is queried, and the quantum decryption session key is returned to the data receiving end; the quantum decryption session key is used to decrypt the encrypted data to obtain the business data.

8. A data transmission device, characterized in that: The device comprises: A first sending module is used to send a quantum encryption session key application request to a quantum security service platform based on a session identifier of a current quantum encryption session and authentication information of a terminal; An encryption module, used to receive the quantum encryption session key sent by the quantum security service platform, and encrypt the business data of the current quantum encryption session according to the quantum encryption session key to obtain encrypted data; The second sending module is used to send the encrypted data and the session identifier to a user identification card.

9. A data transmission device, characterized in that: The device comprises: A receiving module, configured to receive a quantum encryption session key application request sent by a terminal; the quantum encryption session key application request includes authentication information of the terminal and a session identifier of a current quantum encryption session; A generating module, used to generate a quantum encryption session key and a quantum decryption session key based on the authentication information of the terminal, and establish an association relationship between the quantum encryption session key, the quantum decryption session key and the session identifier; The third sending module is used to send the quantum encryption session key of the current quantum encryption session to the terminal; the quantum encryption session key is used to encrypt the business data of the current quantum encryption session to obtain encrypted data.

10. A communication device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 4 or 5 to 7 are implemented.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 4 or 5 to 7 are implemented.

Images