Financial-level secure transmission system based on quantum encryption communication

Abstract

The invention discloses a financial-level secure transmission system based on quantum encryption communication, and the system comprises a terminal quantum key distribution module, a cloud trusted node cluster, and a dynamic key agreement protocol engine. The terminal quantum key distribution module, the cloud trusted node cluster and the dynamic key agreement protocol engine are used for generating a shared key of anti-quantum computing through quantum key division, and realizing end-to-end encrypted transmission of a transaction instruction between a terminal and a cloud; according to the invention, by constructing a quantum key dynamic distribution and hybrid encryption system and creatively fusing quantum teleportation and trusted execution environment technologies, the performance bottleneck of an existing quantum communication system in a financial scene is broken through, and end-to-end secure transmission resisting quantum computing attack is realized.

Description

Technical Field

[0001] The present invention relates to the field of encryption technology, and in particular to a financial-grade secure transmission system based on quantum encryption communication. Background Art

[0002] Existing financial data transmission relies on asymmetric encryption algorithms such as RSA and ECC, and faces the threat of cracking by the quantum computer Shor algorithm. In addition, traditional QKD systems have problems such as low key generation rate and poor adaptability to dynamic networks. Existing technologies cannot meet the high-frequency and low-latency security requirements of high-net-worth customers' privacy transactions, and lack active defense mechanisms against man-in-the-middle attacks. Summary of the Invention

[0003] The purpose of the present invention is to provide a financial-grade secure transmission system based on quantum encryption communication to address the above-mentioned problems in the prior art, thereby solving all or one of the above-mentioned problems in the prior art.

[0004] In order to solve the above technical problems, the specific technical solutions of the present invention are as follows: The present invention provides a financial-grade secure transmission system based on quantum cryptographic communication, comprising: The terminal quantum key distribution module, the cloud-based trusted node cluster, and the dynamic key agreement protocol engine are used to generate a shared key that is resistant to quantum computing through quantum key distribution, thereby realizing end-to-end encrypted transmission of transaction instructions between the terminal and the cloud.

[0005] As an improved solution, the terminal quantum key distribution module integrates a single photon emitter and a superconducting nanowire detector, adopts the BB84 protocol and the improved scheme of the entrapped state, supports quantum state transmission with a wavelength of 1550nm, and the key generation rate is not less than 10kbps.

[0006] As an improved solution, the cloud-based trusted node cluster is also specifically used to deploy a quantum random number generator, generate true random numbers through a vacuum fluctuation entropy source, and combine blockchain evidence storage technology to achieve full life cycle traceability of keys.

[0007] As an improved solution, the dynamic key agreement protocol engine is further configured to adopt a key update mechanism based on quantum teleportation to automatically refresh the session key every 200ms.

[0008] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also includes: a hybrid encryption architecture that is resistant to quantum computing attacks, which is used to combine the quantum key generated by QKD with the post-quantum algorithm based on lattice cryptography to form a two-factor authentication system.

[0009] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also includes: a quantum channel fingerprint authentication module, which is used to identify forged signals through quantum state waveform characteristics.

[0010] As an improved solution, the dynamic key agreement protocol engine integrates a trusted execution environment to complete key exchange in the SGX security zone to prevent side channel information leakage.

[0011] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also deploys a quantum key distribution network optimization algorithm, through QKD node intelligent routing selection and channel state prediction.

[0012] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication is also equipped with a key lifecycle management engine. The key lifecycle management engine adopts a key elimination strategy based on the Markov decision process to ensure that the key usage period does not exceed the quantum bit storage limit time.

[0013] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also integrates a security situation awareness module, which is also used to analyze the quantum channel bit error rate and key consistency parameters in real time, and automatically trigger key degradation alarms and emergency response protocols.

[0014] The beneficial effects of the technical solution of the present invention are: by constructing a quantum key dynamic distribution and hybrid encryption system, the present invention innovatively integrates quantum teleportation and trusted execution environment technology, breaks through the performance bottleneck of existing quantum communication systems in financial scenarios, and realizes end-to-end secure transmission that is resistant to quantum computing attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the specific embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0016] Figure 1 This is a schematic diagram of the architecture of a financial-grade secure transmission system based on quantum cryptography communication according to an embodiment of the present invention. DETAILED DESCRIPTION

[0017] The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings so that the advantages and features of the present invention can be more easily understood by those skilled in the art, thereby making a clearer and more precise definition of the protection scope of the present invention.

[0018] In the description of the present invention, it should be noted that the embodiments described in the present invention are only part of the embodiments of the present invention, rather than all of the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative work are within the scope of protection of the present invention.

[0019] The terms "first," "second," and the like in the specification and claims herein and in the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a particular order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate so that the embodiments of the present invention described herein can be implemented in orders other than those illustrated or described herein. In addition, the terms "including" and "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, apparatus, product, or device comprising a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such process, method, product, or device.

[0020] This embodiment provides a financial-grade secure transmission system based on quantum cryptography communication. Figure 1 Shown, including: The terminal quantum key distribution module, the cloud-based trusted node cluster, and the dynamic key agreement protocol engine are used to generate a shared key that is resistant to quantum computing through quantum key distribution, thereby realizing end-to-end encrypted transmission of transaction instructions between the terminal and the cloud.

[0021] As an improved solution, the terminal quantum key distribution module integrates a single photon emitter and a superconducting nanowire detector, adopts the BB84 protocol and the improved scheme of the entrapped state, supports quantum state transmission with a wavelength of 1550nm, and the key generation rate is not less than 10kbps.

[0022] As an improved solution, the cloud-based trusted node cluster is also specifically used to deploy a quantum random number generator, generate true random numbers through a vacuum fluctuation entropy source, and combine blockchain evidence storage technology to achieve full life cycle traceability of keys.

[0023] As an improved solution, the dynamic key agreement protocol engine is further configured to adopt a key update mechanism based on quantum teleportation to automatically refresh the session key every 200ms.

[0024] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also includes: a hybrid encryption architecture that is resistant to quantum computing attacks, which is used to combine the quantum key generated by QKD with the post-quantum algorithm based on lattice cryptography to form a two-factor authentication system.

[0025] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also includes: a quantum channel fingerprint authentication module, which is used to identify forged signals through quantum state waveform characteristics.

[0026] As an improved solution, the dynamic key agreement protocol engine integrates a trusted execution environment to complete key exchange in the SGX security zone to prevent side channel information leakage.

[0027] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also deploys a quantum key distribution network optimization algorithm, through QKD node intelligent routing selection and channel state prediction.

[0028] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication is also equipped with a key lifecycle management engine. The key lifecycle management engine adopts a key elimination strategy based on the Markov decision process to ensure that the key usage period does not exceed the quantum bit storage limit time.

[0029] As an improved solution, the financial-grade secure transmission system based on quantum encryption communication also integrates a security situation awareness module, which is also used to analyze the quantum channel bit error rate and key consistency parameters in real time, and automatically trigger key degradation alarms and emergency response protocols.

[0030] It should be noted that the above examples are only for explaining the present invention and are not intended to limit the scope of protection of the present invention.

[0031] It should also be understood that in the embodiments herein, the term "and / or" merely describes an association between associated objects, indicating that three possible relationships exist. For example, "A and / or B" could represent: A alone, A and B simultaneously, or B alone. Furthermore, the character " / " in this document generally indicates an "or" relationship between the associated objects.

[0032] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the composition and steps of each example according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this document.

[0033] In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices, or units, or can be an electrical, mechanical, or other form of connection.

[0034] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments herein.

[0035] In addition, the functional units in the various embodiments herein may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0036] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the existing technology, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0037] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention's description and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A financial-grade secure transmission system based on quantum cryptography communication, characterized in that: include: The terminal quantum key distribution module, the cloud-based trusted node cluster, and the dynamic key agreement protocol engine are used to generate a shared key that is resistant to quantum computing through quantum key distribution, thereby realizing end-to-end encrypted transmission of transaction instructions between the terminal and the cloud.

2. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1 is characterized by: The terminal quantum key distribution module integrates a single photon emitter and a superconducting nanowire detector, adopts the BB84 protocol and a decoy state improvement scheme, supports quantum state transmission with a wavelength of 1550nm, and has a key generation rate of no less than 10kbps.

3. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1 is characterized by: The cloud-based trusted node cluster is also specifically used to deploy a quantum random number generator, generate true random numbers through a vacuum fluctuation entropy source, and combine blockchain evidence storage technology to achieve full life cycle traceability of keys.

4. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The dynamic key agreement protocol engine is further specifically configured to adopt a key update mechanism based on quantum teleportation to automatically refresh the session key every 200ms.

5. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1 is characterized by: The financial-grade secure transmission system based on quantum cryptographic communication also includes: a hybrid encryption architecture that is resistant to quantum computing attacks, which is used to combine the quantum key generated by QKD with a post-quantum algorithm based on lattice cryptography to form a two-factor authentication system.

6. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The financial-grade secure transmission system based on quantum encryption communication also includes: a quantum channel fingerprint authentication module, which is used to identify forged signals through quantum state waveform characteristics.

7. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The dynamic key agreement protocol engine integrates a trusted execution environment to complete key exchange in the SGX security zone to prevent side channel information leakage.

8. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The financial-grade secure transmission system based on quantum encryption communication also deploys a quantum key distribution network optimization algorithm, which uses QKD node intelligent routing selection and channel state prediction.

9. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The financial-grade secure transmission system based on quantum encryption communication is also equipped with a key lifecycle management engine, which adopts a key elimination strategy based on the Markov decision process to ensure that the key usage period does not exceed the quantum bit storage limit time.

10. The financial-grade secure transmission system based on quantum cryptography communication according to claim 1, characterized in that: The financial-grade secure transmission system based on quantum encryption communication also integrates a security situation awareness module, which is also used to analyze the quantum channel bit error rate and key consistency parameters in real time, and automatically trigger key degradation alarms and emergency response protocols.

Images