Secure communication method and system based on QRNG and Beidou positioning terminal

Abstract

The invention provides a secure communication method and system based on a QRNG and a Beidou positioning terminal. A sending end and a receiving end of communication preset a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning; a secret key packaging secret key is generated by using a national secret SM4 algorithm; monitoring time-space parameter deviation in a communication process in real time, and triggering a key updating protocol when the time-space parameter deviation exceeds a threshold value; and after the receiving end verifies the Hash verification value, decrypting to obtain the primary encryption key, and restoring the plaintext data. According to the system, the generated true random number sequence is used as an encryption key, so that the unpredictability and randomness of the key are fundamentally enhanced, and quantum computing attack and man-in-the-middle attack are effectively resisted. The use of the pre-shared key mechanism and the key packaging key improves the response speed and efficiency of the communication system. And meanwhile, the position parameter and the timestamp are deeply fused to the key generation process, so that the spatio-temporal information is more difficult to counterfeit, and the defense capability of the system is further improved.

Description

Technical Field

[0001] The present application relates to the field of secure communication technology, and in particular to a secure communication method and system based on QRNG and Beidou positioning terminal. Background Art

[0002] The Beidou Navigation Satellite System (BDS), my country's independently developed global satellite navigation system, has achieved widespread application in positioning, timing, and short message communications. However, with the rapid development of information technology, the importance of communication security has become increasingly prominent. Currently, traditional Beidou communications rely on classical encryption algorithms such as AES and RSA, whose security is based on computational complexity. This means that Beidou link data transmission lacks quantum-level security protection, and the key distribution process is extremely vulnerable to eavesdropping and man-in-the-middle attacks, making it difficult to meet the stringent requirements of high-security scenarios.

[0003] At the same time, the field of communications security is facing a severe dual challenge. From the perspective of encryption algorithms, the Shor algorithm in quantum computing can successfully crack traditional public-key encryption systems such as RSA and ECC in polynomial time. However, due to the deterministic nature of traditional pseudo-random number generators (PRNGs), there are predictability risks, which seriously affect the security of key generation. From the perspective of spatiotemporal information, in existing communication systems, spatiotemporal information such as timestamps and geographic location are separated from the encryption process. This makes time synchronization vulnerable to signal interruption or tampering, and location information is also extremely easy to forge. In the face of complex combined attacks, the existing system's defense capabilities are seriously insufficient. Summary of the Invention

[0004] In order to solve the problems of low security and serious lack of defense capability of key generation in the above-mentioned existing communication security field, the present application provides a secure communication method based on QRNG and Beidou positioning terminal, including the steps of:

[0005] A secure communication method based on QRNG and Beidou positioning terminal, comprising the following steps:

[0006] Preset the same pre-shared initial key at the sending and receiving ends of the communication;

[0007] The transmitting end obtains a time-space reference parameter group including a timestamp, an initial longitude, an initial latitude and an initial altitude through Beidou positioning;

[0008] Randomly generate an initial encryption key, and use the national secret SM4 algorithm to perform an XOR operation on the initial encryption key, the pre-shared initial key, and the time-space reference parameter group to generate a key encapsulation key;

[0009] Performing an initial encryption key exclusive-OR operation on the plaintext data of the Beidou short message to generate ciphertext data and a hash check value corresponding to the ciphertext data;

[0010] Real-time monitoring of spatiotemporal parameter deviations during communication, including time deviation and spatial displacement, triggering a key update protocol when the time deviation exceeds 50ms or the spatial displacement exceeds 1.389m;

[0011] Transmitting the encrypted data packet to the receiving end via the Beidou communication link;

[0012] After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and decrypts and restores the plaintext data;

[0013] The key update protocol includes:

[0014] The receiving end randomly generates a new initial encryption key and obtains a new space-time reference parameter group;

[0015] Performing an XOR operation on the new primary encryption key, the pre-shared initial key, and the new space-time reference parameter group using the national secret SM4 algorithm to generate a new key encapsulation key;

[0016] The time-space parameter deviation in the current communication process is monitored in real time until the time-space parameter deviation meets a threshold range.

[0017] In a feasible implementation, the calculation of the spatiotemporal parameter deviation includes:

[0018] Calculate the time deviation ΔT and spatial displacement ΔS;

[0019] The time deviation ΔT=|T1-T0|, where T1 is the current timestamp and T0 is the initial timestamp;

[0020] the spatial displacement;

[0021] Where X1 is the real-time longitude, X0 is the initial longitude, Y1 is the real-time latitude, Y0 is the initial latitude, Z1 is the real-time altitude, and Z0 is the initial altitude;

[0022] The spatial displacement threshold of 1.389 m is based on the maximum displacement in a 50 ms period at a moving speed of 100 km / h.

[0023] In one feasible implementation, the step of verifying the hash value includes:

[0024] The receiving end calculates the SHA256 value of the obtained ciphertext data;

[0025] When the calculation result is inconsistent with the hash check value in the encrypted data packet, the communication is interrupted and an abnormal alarm is triggered.

[0026] In a feasible implementation, the steps of using the pre-shared initial key to decrypt and obtain the initial encryption key, and decrypting and restoring the original data include:

[0027] The receiving end uses the pre-shared initial key to perform SM4 decryption on the key encapsulation key to restore the initial encryption key of the sending end;

[0028] The initial encryption key is used to perform an inverse XOR operation on the ciphertext data to obtain the plaintext data of the original Beidou short message.

[0029] Another aspect of the present application provides a secure communication system based on QRNG and a Beidou positioning terminal, which is used to implement any of the above-mentioned secure communication methods based on QRNG and a Beidou positioning terminal, comprising: a quantum random number generation module, a Beidou positioning module, an encryption control module, a storage module, an interface module, and a power supply module; wherein the quantum random number generation module and the Beidou positioning module are integrated into the same hardware device;

[0030] The quantum random number generation module is used to generate a true random number sequence as an encryption key and an initial encryption key;

[0031] The Beidou positioning module is used to obtain a time-space reference parameter group including a timestamp, an initial longitude, an initial latitude, and an initial altitude in real time;

[0032] The encryption control module is configured to execute an encryption algorithm and perform an XOR operation on the spatiotemporal reference parameter group and the random number sequence;

[0033] The encryption control module is further configured to: trigger the key update protocol according to the time-space parameter deviation of the time-space reference parameter group;

[0034] The storage module is used to store the pre-shared initial key, the dynamic encryption key and the security policy parameters;

[0035] The interface module is used to send the encapsulated encrypted data packet via Beidou short message;

[0036] The power supply module is electrically connected to the quantum random number generation module, Beidou positioning module, encryption control module, storage module, and interface module, and is used to power the communication system.

[0037] In a feasible implementation, the pre-shared initial key is a reference random number sequence pre-assigned by a quantum random number generation module, and the sending end and the receiving end preset the same pre-shared initial key before communication.

[0038] In a feasible implementation, the spatiotemporal reference parameter group includes: an initial timestamp, an initial longitude, an initial latitude, and an initial altitude;

[0039] The initial timestamp is a nanosecond time stamp provided by the BeiDou timing system;

[0040] The initial longitude, initial latitude, and initial altitude are the geographic coordinates obtained in real time by the Beidou positioning module;

[0041] The encryption control module is further configured to perform an XOR operation on the spatiotemporal reference parameter group and the pre-shared initial key to generate a key encapsulation key.

[0042] In a feasible implementation, the encryption control module is further configured to:

[0043] After performing a bitwise exclusive OR operation on the initial encryption key generated by the quantum random number generation module, the pre-shared initial key, and the space-time reference parameter group, a key encapsulation key is generated using the national secret SM4 algorithm;

[0044] Using the initial encryption key to perform XOR encryption on the Beidou short message plain text data to generate ciphertext data;

[0045] Calculate the SHA256 hash value of the ciphertext data as the integrity check value.

[0046] In a feasible implementation, the data packet structure sent by the communication module includes: a synchronization header, the synchronization header is used to identify the start of the data frame;

[0047] and the encrypted space-time reference parameter group, key encapsulation key, ciphertext data, and hash check value;

[0048] The hash check value is generated by performing a SHA256 operation on the ciphertext data.

[0049] As can be seen from the above content, the present application provides a secure communication method and system based on QRNG and Beidou positioning terminal. By integrating the quantum random number generator (QRNG) with the Beidou positioning terminal, a highly secure space-time information binding secure communication system is constructed. The system realizes a complete security closed loop from the physical layer to the application layer, significantly improving the overall security and reliability of the communication system. The system uses the true random number sequence generated by QRNG as the encryption key, which fundamentally enhances the unpredictability and randomness of the key, and effectively resists quantum computing attacks and man-in-the-middle attacks. The use of pre-shared key mechanism and key encapsulation key reduces the complexity of key management and improves the response speed and efficiency of the communication system. At the same time, through the space-time dynamic verification mechanism, the position parameters and timestamps are deeply integrated into the key generation process, making it difficult for attackers to forge the space-time information of legitimate users, further improving the defense capability of the system, and providing effective security protection for scenarios such as IoT device authentication and critical infrastructure protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] The accompanying drawings are incorporated into and constitute a part of this specification, illustrate embodiments consistent with the implementation of the present invention, and together with the description, serve to explain the principles of the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the implementation of the present invention. For those skilled in the art, other drawings can be derived from these drawings without inventive effort.

[0051] Figure 1 This is a schematic diagram of information transmission based on secure communication between QRNG and Beidou positioning terminal shown in an exemplary embodiment of the present application;

[0052] Figure 2 This is a flowchart of a secure communication method based on QRNG and a BeiDou positioning terminal according to an exemplary embodiment of the present application;

[0053] Figure 3 This is a schematic diagram of the secure communication system structure based on QRNG and Beidou positioning terminal shown in an exemplary embodiment of this application;

[0054] Figure 4 This is a schematic diagram of a secure communication architecture based on QRNG and Beidou positioning terminal, shown as an exemplary embodiment of this application. DETAILED DESCRIPTION

[0055] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the present invention will be more comprehensive and complete and to fully convey the concepts of the example embodiments to those skilled in the art. The described features, mechanisms, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to provide a thorough understanding of the implementation of the example embodiments of the present invention.

[0056] The Beidou Navigation Satellite System (BDS), my country's independently developed global satellite navigation system, has achieved widespread application in positioning, timing, and short message communications. However, with the rapid development of information technology, the importance of communication security has become increasingly prominent. Currently, traditional Beidou communications rely on classical encryption algorithms such as AES and RSA, whose security is based on computational complexity. This means that Beidou link data transmission lacks quantum-level security protection, and the key distribution process is extremely vulnerable to eavesdropping and man-in-the-middle attacks, making it difficult to meet the stringent requirements of high-security scenarios.

[0057] Against this backdrop, traditional encryption systems face severe challenges from quantum vulnerability. Their core flaw lies in the fact that the key generation mechanism relies on pseudo-random number generators with high algorithmic complexity. Such generators are inherently insufficient in key strength due to statistical biases and residual predictability. Coupled with the prevalence of weak passwords and the continued existence of vulnerabilities like Heartbleed, attackers can exploit system vulnerabilities to directly intercept random number sequences. At the same time, mainstream public key encryption algorithms (such as RSA-2048) cannot withstand quantum computing attacks, and new quantum-resistant cryptographic schemes based on lattice theory have yet to form large-scale replacement capabilities due to lagging standardization processes, high software and hardware adaptation costs, and insufficient ecological compatibility. This technological generational gap exposes traditional encryption systems to the risk of structural failure in the quantum computing era.

[0058] At the same time, the spatiotemporal information security system has multi-dimensional vulnerabilities. Its time synchronization mechanism is overly dependent on vulnerable external sources (such as the NTP protocol based on GPS or the Internet). Once it encounters interference or hijacking, it will trigger a systemic trust crisis; and the location information verification link lacks effective protection. Attackers can forge GPS signals to induce objects to deviate from the preset path, or tamper with the physical coordinates of IoT devices and thus destroy the authentication mechanism; the deeper hidden danger lies in the fact that existing security protocols (such as TLS) only establish a trust chain through timestamps, but do not deeply bind location parameters with encryption processes. This loose coupling state of spatiotemporal association provides an opportunity for the combined attack of "location deception + time replay", resulting in the traditional security protection system facing a three-dimensional failure risk in the spatiotemporal dimension.

[0059] The current positioning technology and cryptographic system show significant systemic separation characteristics. The Beidou terminal function is still focused on basic navigation positioning and emergency communication scenarios. Its spatiotemporal data and encryption system lack a full-link deep integration mechanism, which makes it impossible to internalize the position parameters into the key generation process; and the quantum random number generation system mostly operates independently as an isolated module. It has neither established a real-time spatiotemporal association with the positioning terminal nor mapped dynamic environmental variables such as location coordinates and timestamps to the key entropy source construction process. This "key generation-spatiotemporal verification" dual-track parallel separation state seriously restricts the implementation of the "dynamic spatiotemporal binding + one-time one-key" active defense mode, making scenarios such as IoT device authentication and critical infrastructure protection exposed to significant defense blind spots in the face of complex spatiotemporal attacks.

[0060] Traditional quantum key distribution (QKD) systems have significant system implementation bottlenecks. Their physical devices mostly adopt a chassis-type architecture, which results in large size and high power consumption, forming a fundamental contradiction with the lightweight integration requirements of mobile terminals. The independent deployment characteristics of early quantum random number generators further aggravate hardware redundancy; at the same time, quantum-resistant cryptographic algorithms have deep-seated adaptation conflicts with existing communication protocols such as IPSec / SSL. Protocol stack transformation requires the reconstruction of the network trust model, resulting in a double cost dilemma in the security upgrade process - not only the need to bear the R&D investment of new cryptographic modules, but also the additional cost of cross-protocol family compatibility testing and full-link equipment iteration. This technical debt superposition effect has seriously delayed the large-scale penetration of quantum security capabilities.

[0061] To solve the above problems, the first aspect of the embodiment of the present application provides a secure communication method based on the spatiotemporal information binding of QRNG and Beidou positioning terminal, referring to Figure 1 and Figure 2 As shown, the steps include:

[0062] S100: Preset the same pre-shared initial key Q0 at the transmitting end and the receiving end of the communication.

[0063] This key, consisting of a 256-bit sequence of true random numbers pre-generated by a quantum random number generator (QRNG), is loaded into the storage modules of the sender and receiver respectively through a secure channel (such as offline key injection). This step ensures that both communicating parties have an initial trust anchor, providing the foundation for subsequent key negotiation.

[0064] S200: The sending end obtains a space-time reference parameter group including a timestamp, an initial longitude, an initial latitude, and an initial altitude through Beidou positioning.

[0065] The temporal and spatial reference parameter group can be labeled (T0, X0, Y0, Z0). Specifically, T0 is the nanosecond timestamp provided by the Beidou timing system, with an accuracy better than ±10ns; X0 and Y0 are the initial latitude and longitude coordinates, with an accuracy better than ±0.1m; and Z0 is the altitude, with an accuracy better than ±0.5m. Temporal and spatial parameters can be obtained through the Beidou RDSS (Radiodetermination Service) and RNSS (Navigation Satellite Service) dual modes, ensuring positioning reliability in complex electromagnetic environments.

[0066] S300: Randomly generate an initial encryption key, and use the national secret SM4 algorithm to perform an XOR operation on the initial encryption key, the pre-shared initial key, and the time-space reference parameter group to generate a key encapsulation key;

[0067] The initial encryption key is marked as K0, K0 is a 256-bit true random number sequence, and the key encapsulation key is marked as KEK. The calculation formula is as follows:

[0068] KEK=SM4_Encrypt(K0⊕Q0⊕T0⊕X0⊕Y0⊕Z0, SM4_Key).

[0069] Where SM4_Key is a fixed system parameter (such as the public key specified by national standards), and ⊕ represents a bitwise exclusive OR operation. This step combines the pre-shared key, spatiotemporal parameters, and the random key to generate the key encapsulation key KEK, achieving dynamic key binding.

[0070] S400: Performing a primary encryption key exclusive-OR operation on the plaintext data of the Beidou short message to generate ciphertext data and a hash check value corresponding to the ciphertext data.

[0071] Among them, the plain text data of the Beidou short message is marked as: D0 (the plain text data content is, for example: "Emergency rescue coordinates: X1, Y1, Z1"). This step specifically performs the following operations:

[0072] XOR encryption obtains the ciphertext: C0=D0⊕K0;

[0073] Hash calculation obtains the hash value: H = SHA256 (C0);

[0074] The encrypted data C0 is the ciphertext, and H is the 256-bit hash value, which is used by the receiving end to verify the data integrity.

[0075] S500: Real-time monitoring of the space-time parameter deviation during the communication process, that is, collecting real-time space-time parameters (T1, X1, Y1, Z1) once per second, and calculating the space-time deviation, which includes the time deviation ΔT and the spatial displacement ΔS.

[0076] When ΔT > 50ms or ΔS > 1.389m (corresponding to a maximum displacement of 50ms at a speed of 100km / h), the key update protocol is triggered. The threshold is set based on the Beidou positioning error tolerance and movement speed limit.

[0077] Specifically, the key update protocol includes the following steps:

[0078] S001: When ΔT or ΔS exceeds the limit, the receiving end randomly generates a new initial encryption key K1 and obtains a new space-time reference parameter group.

[0079] S002: Using the national secret SM4 algorithm, the new initial encryption key K1 is XORed with the pre-shared initial key and the new space-time reference parameter group to generate a new key encapsulation key KEK.

[0080] S003: monitoring the space-time parameter deviation in the current communication process in real time until the space-time parameter deviation meets a threshold range.

[0081] After the receiving end verifies the legitimacy of the initial encryption key K1 through hash chain verification, it uses the new initial encryption key K1 as the initial encryption key for the next communication.

[0082] The key update protocol cannot be recovered after the baseline key Q1 is destroyed. Even if the current session is compromised, historical data remains secure. It does not rely on an external key distribution center and is suitable for key updates in disconnected environments. By binding the new initial encryption key K1 to the time-space deviation, attackers cannot replay ciphertext generated with the old key.

[0083] S600: Transmit the encrypted data packet to the receiving end via the Beidou communication link.

[0084] Under normal circumstances, the Beidou short message supports a maximum length of 1024 bytes. The total length of the data packet in this application does not exceed 512 bytes, which can ensure transmission efficiency.

[0085] S700: After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and decrypts and restores the plaintext data.

[0086] Specifically, the receiving end performs the following operations:

[0087] Calculate the SHA256 value of the ciphertext C0' received by the receiving end and compare it with H. If they are inconsistent, the communication is terminated;

[0088] Decrypt the key encapsulation key KEK using the pre-shared initial key Q0;

[0089] The restored initial encryption key is: K0'=SM4_Decrypt(KEK,SM4_Key)⊕Q0⊕T0⊕X0⊕Y0⊕Z0;

[0090] The restored Beidou short message civilized data is: D0'=C0⊕K0'.

[0091] The K0 generated in this embodiment is truly random, with a cracking complexity of 2256, far exceeding the brute force difficulty of traditional AES-256. In addition, an attacker needs to forge both the time and space parameters and the pre-shared initial key Q0 to generate a legitimate KEK. However, the pre-shared initial key Q0 is not transmitted online, which greatly increases the attack threshold. At the same time, the key update is automatically triggered by the ΔT / ΔS threshold to solve the leakage risk caused by the long-term use of static keys.

[0092] In some embodiments of the present application, the time deviation is calculated as follows: the transmitter reads the timestamp T1 output by the Beidou timing module and calculates the absolute difference between it and the initial timestamp T0: ΔT = |T1-T0|. For example:

[0093] The initial time is: T0 = 1625437200.123456789;

[0094] The current time is: T1 = 1625437201.456789123;

[0095] Then ΔT = 1.333332334 seconds → 1333.332334 ms, which exceeds the 50 ms threshold and triggers a key update.

[0096] The spatial displacement is calculated as follows: the Beidou positioning module outputs the real-time coordinates (X1, Y1, Z1) at the sending end, and the formula for calculating the Euclidean distance with the initial coordinates (X0, Y0, Z0) is:

[0097]

[0098] Take a specific coordinate data as an example:

[0099] Initial coordinates: X0 = 116.3974°, Y0 = 39.9093°, Z0 = 43m;

[0100] Coordinates after 50ms: X1 = 116.3975°, Y1 = 39.9094°, Z1 = 45m;

[0101] Converting longitude and latitude into displacement yields: longitude difference: 0.0001°×111319×cos(39.9093°)≈8.45m, latitude difference: 1° latitude ≈111.319km, so 0.0001°×111319≈11.13m.

[0102] but When the threshold of 1.389m is exceeded, a key update is triggered.

[0103] The threshold value of the time deviation in this application is set based on the time threshold of 50ms and the space threshold of 1.389m.

[0104] The time threshold of 50 ms is the maximum time synchronization error of the Beidou timing module under extreme electromagnetic interference. The spatial threshold of 1.389 m is calculated using the formula v × t, where v = 100 km / h = 27.778 m / s and t = 0.5 ms. The product is rounded down to 1.389 m.

[0105] In this embodiment, based on the threshold setting of the time deviation amount, the execution of the plan has the following three results:

[0106] (1) ΔT = |T1-T0|≥50ms, the time information deviates, the second time-space information data times out, a local alarm is issued, a timeout retransmission is performed, the key update protocol is executed, and all the above steps are repeated.

[0107] (2) If there is a deviation in spatial information or data anomaly, a local alarm will be issued and communication will be interrupted. The system will wait for the next communication cycle, execute the key update protocol and repeat all the above steps.

[0108] (3) ΔT = |T1-T0| ≤ 50ms, ΔS ≤ 1.389m, then the time-space information deviation is within the allowable range, and the communication continues.

[0109] This embodiment uses dual-threshold joint judgment to avoid single-dimensional misjudgment, such as when short-term electromagnetic interference causes ΔT to exceed the standard but ΔS is normal, and the attacker needs to control the time and space parameters at the same time to bypass detection. The Beidou military code signal has anti-interference capabilities, and the civilian signal can also improve anti-spoofing performance through multi-frequency point combination.

[0110] In some embodiments of the present application, step S700 of verifying the hash value includes:

[0111] S710: After receiving the encrypted data packet, the receiving end extracts the ciphertext data C0 and calculates the hash check value H'=SHA256(C0).

[0112] S720: Compare the hash check value H' with the hash value H in the data packet bit by bit:

[0113] If H'=H, the data is complete and decryption can continue;

[0114] If H'≠H, it means that the data has been tampered with, communication is interrupted and an abnormal alarm is triggered.

[0115] When the hash check fails, the receiving end records the abnormal event (including time, other party ID, and data packet summary), starts the key update protocol, forces both parties to update the pre-shared key, and sends an alarm log to the security monitoring center.

[0116] This embodiment uses SHA256's anti-collision property to ensure that attackers cannot construct a valid H value. When the hash check fails, an alarm is immediately triggered, shortening the attack window. At the same time, abnormal records provide data support for security audits.

[0117] In some embodiments of the present application, step S700 further includes:

[0118] S701: The receiving end uses the pre-shared initial key Q0 to decrypt the key encapsulation key KEK and obtain the restored initial encryption key:

[0119] K0′=SM4_Decrypt(KEK, SM4_Key)⊕Q0⊕T0⊕X0⊕Y0⊕Z0.

[0120] S702: Use K0' to perform an inverse XOR operation on C0 to obtain the restored Beidou short message civilized data: D0'=C0⊕K0'.

[0121] Perform format check on the restored Beidou short message civilized data D0' (such as the field length and encoding rules specified by the Beidou short message protocol). If the check fails, the data is discarded and an alarm is triggered.

[0122] This embodiment uses a dual decryption mechanism, namely, layered protection of the key encapsulation key KEK and the initial encryption key K0. Even if the key encapsulation key KEK is leaked, the attacker still needs to crack the Beidou short message civil data Q0 and time and space parameters to obtain the initial encryption key K0. It can also prevent the attacker from sending legally encrypted messages with forged content.

[0123] On the other hand, an embodiment of the present application provides a secure communication system based on QRNG and Beidou positioning terminal, which is used to implement any of the aforementioned secure communication methods based on QRNG and Beidou positioning terminal.

[0124] Reference Figure 3 As shown, the system includes: a quantum random number generation module, a Beidou positioning module, an encryption control module, a storage module, an interface module and a power module; among them, the quantum random number generation module, that is, the QRNG chip and the Beidou positioning module are integrated into the same hardware device, and the data interaction between the quantum random number generation module and the Beidou module is realized through the SPI bus. The quantum random number generation module is directly connected to the Beidou positioning module, sharing power management and interface functions, and performing data interaction through the encryption control module.

[0125] The BeiDou positioning module provides precise spatial and temporal information, including the current timestamp (T1) and coordinates (X1, Y1, Z1). This information is an essential spatial and temporal reference for encryption. The quantum random number generation module generates true random number sequences, which are used as encryption keys and initial encryption keys, ensuring their randomness and unpredictability.

[0126] The encryption control module reads the random numbers generated by the QRNG and the spatial and temporal information provided by BeiDou to perform encryption operations. Using an advanced encryption algorithm, it performs an XOR operation on the spatial and temporal reference parameter group and the random number sequence to generate a secure encryption key. Furthermore, the encryption control module is configured to trigger a key update protocol based on deviations in the spatial and temporal parameters of the spatial and temporal reference parameter group, ensuring real-time key updates and security.

[0127] The storage module is responsible for storing keys and related data, including pre-shared keys, dynamic keys, and security policies. These keys and data are crucial to the security and reliability of the communication system. By using partitioned storage, the storage module can efficiently manage different types of keys and data, ensuring security and availability.

[0128] The interface module sends encapsulated encrypted data packets via BeiDou short messages. Leveraging the BeiDou system's short message communication capabilities, the encrypted data packets are securely transmitted to the receiving end. This communication method is not only highly secure but also enables communication even when traditional communication networks are unavailable.

[0129] The power module is electrically connected to the quantum random number generation module, Beidou positioning module, encryption control module, storage module, and interface module, providing a stable power supply for the entire communication system. A distributed power supply approach provides each module with an independent power domain, reducing the risk of noise interference and power failure.

[0130] Specifically, the integrated architecture in this embodiment leverages BeiDou's spatial and temporal references and the high security of QRNG, providing dual security for the communication process. By dynamically monitoring temporal and spatial parameter deviations, this solution ensures the real-time and security of keys, effectively defending against key leaks and man-in-the-middle attacks. Furthermore, the encryption control module can directly access the storage module, enabling rapid key loading and improving the responsiveness and security of the communication system.

[0131] In some embodiments of the present application, the pre-shared initial key is a baseline random number sequence pre-assigned by a quantum random number generation module. This module utilizes the principles of quantum mechanics to generate truly random numbers, ensuring the generated key is highly unpredictable and random. Before communication begins, the sender and receiver pre-set the same pre-shared initial key. This step ensures that both parties use the same key for encryption and decryption during encrypted communication.

[0132] This pre-shared key mechanism not only improves the security of key transmission but also reduces the complexity of key management. Because the keys generated by the quantum random number generator are unpredictable, attackers are unlikely to obtain them through guessing or cracking, thereby enhancing communication security. Furthermore, because the sender and receiver already have the same key pre-set before communication, frequent key updates and synchronization are unnecessary during communication, simplifying key management and reducing management costs. Furthermore, this mechanism offers excellent compatibility and scalability, adapting to communication systems of varying sizes and types.

[0133] Furthermore, this embodiment enhances communication security. By using keys generated using quantum random numbers, the keys' unpredictability and randomness are increased, thereby enhancing communication security. It also simplifies the key management process. The use of a pre-shared key mechanism avoids the tedious task of frequently updating and synchronizing keys during communication, reducing management costs. It also improves communication efficiency. By eliminating the need for frequent key updates, communication latency and overhead are reduced, thereby improving communication efficiency.

[0134] In some embodiments of the present application, the spatiotemporal reference parameter group specifically includes four key parameters: initial timestamp, initial longitude, initial latitude, and initial altitude. These parameters are not preset values, but are collected and provided in real time by the Beidou timing system and positioning module. The Beidou timing system ensures the accuracy of the timestamp, while the positioning module provides accurate latitude and longitude information as well as altitude data. These real-time spatiotemporal reference parameters provide an objective and reliable reference benchmark for the subsequent encryption process.

[0135] The encryption control module manages and controls the entire encryption process. It also uses the aforementioned spatiotemporal reference parameters to perform an exclusive-OR operation with the pre-shared initial key. This operation is a basic bitwise operation that compares two binary numbers bit by bit, evaluating the result to 1 if the corresponding bits differ and 0 if they match. This operation combines the uniqueness of the spatiotemporal reference parameters with the confidentiality of the pre-shared key to generate a highly complex and random key encapsulation key, effectively enhancing key security.

[0136] In some embodiments of the present application, the functions of the encryption control module are further optimized and expanded. Specifically, the encryption control module is configured to perform the following operations:

[0137] First, the initial encryption key generated by the quantum random number generation module is bitwise XORed with the pre-shared initial key and the space-time reference parameter group. Quantum random numbers are unpredictable and truly random, further improving the complexity and security of the key. The result is then further processed using the National Security SM4 algorithm to generate the final key encapsulation key.

[0138] The National Encryption SM4 algorithm is a symmetric encryption algorithm with high efficiency and security, suitable for scenarios such as key encapsulation. Furthermore, the encryption control module uses the initial encryption key to perform XOR encryption on the plaintext data of the Beidou short message, generating ciphertext data and calculating the SHA256 hash value of the ciphertext data as an integrity check value. SHA256 is a widely used hash function that generates fixed-length hash values for verifying data integrity and authenticity.

[0139] The combination of these encryption and verification mechanisms ensures the integrity and security of data during transmission. XOR encryption and SHA256 hashing provide means for data confidentiality and integrity verification, respectively, effectively preventing data tampering or interception during transmission.

[0140] In some embodiments of the present application, the data packet structure sent by the communication module includes a synchronization header, an encrypted space-time reference parameter group, a key encapsulation key, ciphertext data, and a hash check value.

[0141] Specifically, the synchronization header identifies the starting position of the data frame, facilitating accurate data packet parsing at the receiving end. The encrypted space-time reference parameter group, key encapsulation key, ciphertext data, and hash checksum provide information about the space-time reference, key information, encrypted data, and data integrity verification, respectively. This data packet structure not only ensures data security but also improves the reliability and stability of the communication system. By ensuring the integrity and authenticity of data packets, it reduces error rates and packet loss during data transmission, thereby improving the overall performance of the communication system.

[0142] In summary, refer to Figure 4 As shown, this application presents the BeiDou space-time enhanced quantum security communication architecture, which builds a protection system with a physical layer security foundation by deeply coupling the space-time reference and quantum security characteristics of the BeiDou satellite navigation system. The architecture adopts a three-layer collaborative protection design:

[0143] A lightweight quantum random number generator (QRNG) chip and a Beidou positioning module are integrated at the physical layer, and the satellite signal propagation characteristics are used to capture the real space-time entropy source. The quantum random process ensures that the entropy source cannot be copied, and the Beidou space-time reference ensures that the geographic coordinates cannot be forged.

[0144] The protocol layer innovatively develops a bidirectional space-time key binding protocol, mapping the terminal device's three-dimensional geographic coordinates and nanosecond timestamps to a key generation matrix, forming dynamically evolving encryption parameters. A dynamic evolution mechanism for the key generation matrix is established, ensuring that the encryption parameters possess both spatiotemporal uniqueness and instantaneousness.

[0145] An intelligent security policy engine is deployed at the application layer to implement risk decisions based on real-time calculated spatiotemporal offsets, establishing a closed security loop from the physical layer to the application layer.

[0146] This application architecture establishes a progressive protection logic of "spacetime entropy source → dynamic key → intelligent closed loop," deeply coupling quantum physical security with the credibility of spacetime benchmarks to form a secure communication system that combines physical layer unbreakability with dynamic adaptability at the protocol layer. Through the synergistic effect of these three layers, it not only ensures the physical security of key generation, but also realizes adaptive protection capabilities during the communication process.

[0147] As can be seen from the above examples, this application has built a highly secure, spatiotemporal information-binding secure communication system by integrating a quantum random number generator (QRNG) with a BeiDou positioning terminal. This system achieves a complete security closed loop from the physical layer to the application layer, significantly improving the overall security and reliability of the communication system.

[0148] The system utilizes a true random number sequence generated by a QRNG as the encryption key, fundamentally enhancing the key's unpredictability and randomness, effectively defending against quantum computing attacks and man-in-the-middle attacks. Furthermore, through a spatiotemporal dynamic verification mechanism, position parameters and timestamps are deeply integrated into the key generation process, making it difficult for attackers to forge legitimate users' spatiotemporal information, further enhancing the system's defense capabilities.

[0149] Furthermore, the system employs a dynamic key update mechanism that monitors temporal and spatial parameter deviations in real time based on preset security thresholds and communication conditions. Once specific conditions are triggered, a key update is immediately executed, ensuring real-time and secure key security. Furthermore, the system verifies the integrity of data transmission through hash checksums and anomaly alerts, promptly identifying and addressing potential security threats. By optimizing the design of the encryption control module and interface module, efficient data encryption and transmission are achieved. Furthermore, the use of a pre-shared key mechanism and key encapsulation reduces the complexity of key management and improves the responsiveness and efficiency of the communication system.

[0150] In summary, this application has built a highly secure and reliable spatiotemporal information binding secure communication system through the deep integration of QRNG and Beidou positioning terminals, providing effective security guarantees for scenarios such as IoT device authentication and critical infrastructure protection.

[0151] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the disclosure of the specification and examples. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art not disclosed herein. The description and examples are to be considered as exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

Claims

1. A secure communication method based on QRNG and Beidou positioning terminal, characterized in that: The following steps are involved: Preset the same pre-shared initial key at the sending and receiving ends of the communication; The transmitting end obtains a time-space reference parameter group including a timestamp, an initial longitude, an initial latitude and an initial altitude through Beidou positioning; Randomly generate an initial encryption key, and use the national secret SM4 algorithm to perform an XOR operation on the initial encryption key, the pre-shared initial key, and the time-space reference parameter group to generate a key encapsulation key; Performing an initial encryption key exclusive-OR operation on the plaintext data of the Beidou short message to generate ciphertext data and a hash check value corresponding to the ciphertext data; Real-time monitoring of spatiotemporal parameter deviations during communication, including time deviation and spatial displacement, triggering a key update protocol when the time deviation exceeds 50ms or the spatial displacement exceeds 1.389m; Transmitting the encrypted data packet to the receiving end via the Beidou communication link; After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and decrypts and restores the plaintext data; The key update protocol includes: The receiving end randomly generates a new initial encryption key and obtains a new space-time reference parameter group; Performing an XOR operation on the new primary encryption key, the pre-shared initial key, and the new space-time reference parameter group using the national secret SM4 algorithm to generate a new key encapsulation key; The time-space parameter deviation in the current communication process is monitored in real time until the time-space parameter deviation meets the threshold range.

2. The secure communication method based on QRNG and BeiDou positioning terminal according to claim 1, characterized in that: The calculation of the spatiotemporal parameter deviation includes: Calculate the time deviation ΔT and spatial displacement ΔS; The time deviation ΔT=|T1-T0|, where T1 is the current timestamp and T0 is the initial timestamp; the spatial displacement; Where X1 is the real-time longitude, X0 is the initial longitude, Y1 is the real-time latitude, Y0 is the initial latitude, Z1 is the real-time altitude, and Z0 is the initial altitude; The spatial displacement threshold of 1.389 m is based on the maximum displacement in a 50 ms period at a moving speed of 100 km / h.

3. The secure communication method based on QRNG and BeiDou positioning terminal according to claim 1, characterized in that: The step of verifying the hash value includes: The receiving end calculates the SHA256 value of the obtained ciphertext data; When the calculation result is inconsistent with the hash check value in the encrypted data packet, the communication is interrupted and an abnormal alarm is triggered.

4. The secure communication method based on QRNG and BeiDou positioning terminal according to claim 1, characterized in that: The steps of using the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypting and restoring the original data include: The receiving end uses the pre-shared initial key to perform SM4 decryption on the key encapsulation key to restore the initial encryption key of the sending end; The initial encryption key is used to perform an inverse XOR operation on the ciphertext data to obtain the plaintext data of the original Beidou short message.

5. A secure communication system based on QRNG and Beidou positioning terminal, characterized in that: A method for implementing secure communication between a QRNG and a Beidou positioning terminal according to any one of claims 1 to 4, comprising: a quantum random number generation module, a Beidou positioning module, an encryption control module, a storage module, an interface module, and a power supply module; wherein the quantum random number generation module and the Beidou positioning module are integrated into the same hardware device; The quantum random number generation module is used to generate a true random number sequence as an encryption key and an initial encryption key; The Beidou positioning module is used to obtain a time-space reference parameter group including a timestamp, an initial longitude, an initial latitude, and an initial altitude in real time; The encryption control module is configured to execute an encryption algorithm and perform an XOR operation on the spatiotemporal reference parameter group and the random number sequence; The encryption control module is further configured to: trigger the key update protocol according to the time-space parameter deviation of the time-space reference parameter group; The storage module is used to store the pre-shared initial key, the dynamic encryption key and the security policy parameters; The interface module is used to send the encapsulated encrypted data packet via Beidou short message; The power supply module is electrically connected to the quantum random number generation module, Beidou positioning module, encryption control module, storage module, and interface module, and is used to power the communication system.

6. The secure communication system based on QRNG and BeiDou positioning terminal according to claim 5, characterized in that: The pre-shared initial key is a reference random number sequence pre-assigned by the quantum random number generation module, and the sending end and the receiving end preset the same pre-shared initial key before communication.

7. The secure communication system based on QRNG and BeiDou positioning terminal according to claim 5, characterized in that: The spatiotemporal reference parameter group includes: initial timestamp, initial longitude, initial latitude and initial altitude; The initial timestamp is a nanosecond time stamp provided by the BeiDou timing system; The initial longitude, initial latitude, and initial altitude are the geographic coordinates obtained in real time by the Beidou positioning module; The encryption control module is further configured to perform an XOR operation on the spatiotemporal reference parameter group and the pre-shared initial key to generate a key encapsulation key.

8. The secure communication system based on QRNG and BeiDou positioning terminal according to claim 7, characterized in that: The encryption control module is further configured to: After performing a bitwise exclusive OR operation on the initial encryption key generated by the quantum random number generation module, the pre-shared initial key, and the space-time reference parameter group, a key encapsulation key is generated using the national secret SM4 algorithm; Using the initial encryption key to perform XOR encryption on the Beidou short message plain text data to generate ciphertext data; Calculate the SHA256 hash value of the ciphertext data as the integrity check value.

9. The secure communication system based on QRNG and BeiDou positioning terminal according to claim 8, characterized in that: The data packet structure sent by the communication module includes: a synchronization header, the synchronization header is used to identify the start of the data frame; and the encrypted space-time reference parameter group, key encapsulation key, ciphertext data, and hash check value; The hash check value is generated by performing a SHA256 operation on the ciphertext data.

Images