Quantum secure and credible meteorological data system based on quantum key

Abstract

The invention relates to data security, in particular to a quantum security and credible meteorological data system based on a quantum key, and the system comprises a quantum security service platform which carries out the life cycle management of the quantum key, and carries out the identity authentication of a quantum security application terminal; the quantum security database performs quantum key interaction with the quantum security service platform, realizes encrypted storage of data in an application system by using a quantum cryptography technology in a manner of avoiding development and transformation, and provides a compliant and easy-to-implement data security protection scheme; the quantum application service is in butt joint with the business application service through customized research and development, and after business application is simply configured, automatic encryption and decryption of data can be realized, and abundant data security policy management capability is provided; according to the technical scheme provided by the invention, the defect that the safety of meteorological data is difficult to effectively guarantee in the prior art can be effectively overcome.

Description

Technical Field

[0001] This invention relates to data security, and more specifically to a quantum-secure and trustworthy meteorological data system based on quantum key distribution. Background Technology

[0002] As the core of data storage and management, the security of databases directly affects the confidentiality, integrity, and availability of data. The security issues existing in current databases can be analyzed from multiple dimensions, as follows: I. Deficiencies in Authentication and Authorization Mechanisms Authentication and authorization are the first line of defense for database security. Weaknesses in these mechanisms can directly lead to unauthorized access. Common issues include: 1) Weak authentication: If a user uses a simple password (such as "123456", "password", etc.), does not change the password for a long time, or has a strong association between the username and password (such as the username is "admin" and the corresponding password is "admin"), it is easy to be brute-forced; some systems even allow login with blank passwords, further lowering the threshold for attacks; 2) Excessive permission allocation: Ordinary users are given unnecessary high privileges (such as "database administrator" privileges), or privileges are not revoked in a timely manner (such as employees not canceling their accounts after leaving the company), resulting in unauthorized users being able to operate on sensitive data (such as deleting tables, modifying core configurations, etc.). 3) Lack of multi-factor authentication (MFA): Relying solely on a single password for authentication, once the password is compromised (e.g., through phishing, keyloggers, etc.), attackers can directly log into the database; II. Data Transmission and Storage Security Vulnerabilities Insufficient protection of data during both transmission and storage can lead to data leaks or tampering. 1) Unencrypted transmission: Communication between the database and the application and backup server uses plaintext protocols (such as HTTP, unencrypted TCP, etc.), which may lead to man-in-the-middle attacks (MITM), resulting in data being eavesdropped on or tampered with (such as modifying query results, replacing sensitive fields, etc.). 2) Unencrypted data storage: Sensitive data (such as user passwords, bank card numbers, ID card numbers, etc.) is stored in plaintext in the database. Once the database is compromised (such as a data breach), the data will be directly leaked. Even if encryption algorithms are used in some scenarios, if the encryption algorithms are outdated (such as DES, MD5, etc.), they are easy to crack. 3) Disorganized key management: The encryption key and data are stored in the same location (such as the key being written in plaintext in the code), or the key is not rotated for a long time, which causes the encryption mechanism to fail; III. Improper Configuration and Management Oversights in routine database configuration and management can significantly reduce security protection capabilities. 1) Default configuration not modified: The database retains default settings after installation (such as default username "sa", "root", default port 3306 / 1433 not modified, etc.). Attackers can use the publicly available default configuration dictionary to try to log in. 2) Excessive server "exposure": The database server is running other unrelated services (such as web services, FTP services, etc.) at the same time, or has unnecessary ports open (such as opening the 3389 remote desktop port in addition to the database port), which increases the probability of being attacked (vulnerabilities in other services may indirectly affect the database). IV. Internal Threats and Third-Party Risks Besides external attacks, the risks posed by internal personnel and third-party components should not be ignored: 1) Internal personnel misconduct: Data security incidents are caused by employee errors (such as accidentally deleting core tables, misconfiguration leading to access leaks, etc.) or malicious intent (such as leaking data to competitors, ransomware companies, etc.); for example, a company illegally downloaded meteorological data, resulting in the loss of a large amount of meteorological data and causing serious damage to the overall interests of the meteorological department; 2) Third-party component vulnerabilities: Security vulnerabilities exist in third-party libraries that the database depends on (such as JDBC drivers, ODBC components, etc.), which attackers can use to indirectly compromise the database. For example, a certain version of the MySQL JDBC driver had a vulnerability that allowed malicious SQL injection parameters to bypass filtering, causing the application's protection to fail. V. Inadequate physical and environmental safety The lack of physical layer protection directly threatens the security of database hardware and media. Uncontrolled physical access: If the data center where the database server is located does not have strict access restrictions (such as no access control, unauthorized personnel can enter at will), attackers may directly steal hard drives, insert USB flash drives to implant malicious programs, or export data through physical interfaces (such as HDMI, USB, etc.).

[0003] In summary, database security issues are the result of multiple factors, including "technical defects," "management oversights," and "personnel risks." Therefore, a multi-dimensional approach is needed, combining "technical protection (such as encryption and MFA) + process standardization (such as access control and patch management) + personnel training." Summary of the Invention

[0004] (a) Technical problems to be solved In view of the above-mentioned shortcomings of the existing technology, the present invention provides a quantum-secure and reliable meteorological data system based on quantum key distribution, which can effectively overcome the defects of the existing technology in that it is difficult to effectively guarantee the security of meteorological data.

[0005] (II) Technical Solution To achieve the above objectives, the present invention provides the following technical solution: A quantum-secure and trustworthy meteorological data system based on quantum key distribution, comprising: The quantum security service platform manages the lifecycle of quantum keys and authenticates the identities of quantum security application terminals. The quantum-safe database interacts with the quantum-safe service platform using quantum keys. It utilizes quantum cryptography to achieve encrypted storage of data in application systems without requiring development or modification, providing a compliant and easy-to-implement data security protection solution. Quantum application services, through customized R&D and integration with business application services, enable automatic encryption and decryption of data after simple configuration of business applications, and provide rich data security policy management capabilities; Among these, using quantum cryptography to achieve encrypted storage of data in application systems without requiring development or modification includes: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, encrypted data is stored in a hybrid quantum key library through quantum teleportation synchronization.

[0006] Preferably, the quantum security service platform includes a quantum key generation system, a quantum key filling system, and a quantum key scheduling system, which are used to manage the lifecycle of quantum keys, including generation, storage, distribution, use, updating, and destruction, and to authenticate the quantum security application terminals.

[0007] Preferably, the quantum-safe database interacts with the quantum-safe service platform using quantum key exchange. It utilizes quantum cryptography technology to achieve encrypted storage of structured and unstructured data in the application system without requiring development or modification. This provides fine-grained identity access control, multiple de-identification strategies, and auditing functions, offering users a compliant and easy-to-implement data security protection solution and addressing the problem of sensitive data leakage.

[0008] Preferably, the method of using quantum cryptography to achieve encrypted storage of structured and unstructured data in the application system without development or modification includes: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, the encrypted data is stored in a hybrid quantum key store through quantum teleportation synchronization. ; in, To encrypt data; Temporary key fragments generated for quantum key distribution Real-time expansion via quantum random number generator (QRNG); For data quantum states, This indicates that the temporary key fragment will be sent. With data quantum state Entanglement pairs are bound together. For structured data, key bits and field quantum states are entangled through CNOT gates; for unstructured data, key photons and data photons are entangled in a parametrically converted crystal to generate entangled pairs, which are then bound together by temporary key fragments. With data quantum state Entangling pairs are bound together so that any eavesdropping will cause a violation of Bell's inequality, triggering key self-destruction; This means performing a tensor product operation on n key-data quantum state entangled pairs to generate a high-dimensional composite quantum key; For data form transformation, for structured data, arbitrary subweaving is used to convert its field relationships into a non-Abelian statistical topological state, generating a topological coding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and semantic information is hidden through phase encoding to generate a quantum Fourier layer. By deeply binding encryption rules with data semantics, even if the key is leaked, attackers cannot parse the data form logic. For quantum encryption functions, This indicates the use of high-dimensional composite quantum keys. With data form transformation Nonlinear combinations are performed, and the encryption strength is dynamically adjusted through a parameterized quantum gate array of a quantum neural network (QNN). This indicates quantum teleportation synchronization. It is a hybrid quantum key library.

[0009] Preferably, the quantum application service includes an SDK, a quantum-safe medium, and data security management. SDK + quantum-safe medium, through customized R&D and business application service integration, business applications only need to import the plugin jar package and perform simple configuration to realize automatic encryption and decryption of data. At the same time, the encryption plugin itself is a software cryptographic module, using collaborative signature algorithm and white-box cryptographic algorithm to protect the security of quantum key in the encryption plugin. Data security management offers a wealth of data security policy management capabilities, including dashboards, enhanced login security, application management, data source management, automatic discovery of sensitive data, automatic discovery of related queries, dual-track operation mode, encryption policy configuration, database sharding and table partitioning, data migration, de-identification policy configuration, de-identification access control, log management, and system management.

[0010] Preferably, when internal operations and maintenance personnel perform data cleaning and processing, dual authentication is performed through the client or web interface. This includes business-level authentication, which verifies the compliance of the login personnel by logging in with an account and password, and key-level authentication, which performs two-way authentication and identification through the quantum security service platform and SDK + quantum security medium, thereby improving the credibility of the login personnel.

[0011] Preferably, when data is shared with relevant operations including weather forecasting, meteorological research, and meteorological services: Customized development is carried out based on SDK + quantum secure medium and its business information system, so as to achieve controllable data sharing frequency, controllable sharing time and controllable sharing content from the perspective of quantum key management; At the same time, a security monitoring and log auditing system is established to continuously monitor shared services, promptly detect abnormal behavior and potential security threats, and immediately activate the emergency response plan in the event of a security incident. The quantum key is remotely controlled in real time, and corresponding measures are taken to control the loss, so that the shared data cannot be decrypted, viewed, or used.

[0012] Preferably, when data is shared with industry users: Standardize API call interfaces and implement a multi-factor authentication mechanism that includes account passwords, biometrics, and dynamic tokens to enhance authentication security. At the same time, adopt the principle of least privilege to ensure that industry users can only access the data necessary to complete their work. Develop multiple authentication methods, including business platform authentication and password service platform authentication, to enhance the credibility of authentication. Clearly define the sharing agreement and compliance requirements, including the purpose of data use, usage guidelines, storage period, and attribution of responsibility. Implement anonymization strategies to ensure that the content seen by the same type of data is inconsistent when it is shared with different industry users.

[0013] (III) Beneficial Effects Compared with existing technologies, the quantum-secure and reliable meteorological data system based on quantum key distribution provided by this invention has the following advantages: 1) From the perspective of quantum key management, it enables controllable data sharing frequency, sharing time, and sharing content; 2) Establish a security monitoring and log auditing system to continuously monitor shared services, promptly detect abnormal behavior and potential security threats, and improve the identity verification mechanism. Use quantum keys and quantum-secure media to authenticate and verify with the quantum security service platform in real time. In the event of a security incident, immediately activate the emergency response plan, remotely control the quantum keys in real time, and take corresponding measures to control the loss, so that the shared data cannot be decrypted, viewed or used. 3) Makes the data encryption process more automated and transparent, allowing users to use encrypted data like ordinary data without having to worry about the implementation details of data encryption. At the same time, the quantum application service also supports advanced features such as: fuzzy ciphertext search, automatic discovery of sensitive data, consistency of encryption of related data, and function adaptation. Through the technical solution of this application, the provincial meteorological database not only improves the security and privacy of data in the sharing business, but also strengthens the controllability and auditability of data, providing a strong guarantee for the secure sharing of meteorological data. Attached Figure Description

[0014] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0015] Figure 1 This is a schematic diagram of the system of the present invention; Figure 2 This is a schematic diagram of data sharing in this invention; Figure 3 This is a schematic diagram illustrating the sharing of ground hour meter data in this invention. Detailed Implementation

[0016] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0017] The following describes the specific functional modules of the quantum-secure and reliable meteorological data system based on quantum key distribution provided by this invention, using concrete examples (such as...). Figure 1 As shown), the system functional modules include: The quantum security service platform manages the lifecycle of quantum keys and authenticates the identities of quantum security application terminals. The quantum-safe database interacts with the quantum-safe service platform using quantum keys. It utilizes quantum cryptography to achieve encrypted storage of data in application systems without requiring development or modification, providing a compliant and easy-to-implement data security protection solution. Quantum application services, through customized R&D and integration with business application services, enable automatic encryption and decryption of data after simple configuration of business applications, and provide rich data security policy management capabilities.

[0018] The technical solution of this application utilizes quantum cryptography to achieve encrypted storage of data in the application system without requiring development or modification, including: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, encrypted data is stored in a hybrid quantum key library through quantum teleportation synchronization.

[0019] I. Quantum Security Service Platform The quantum security service platform includes a quantum key generation system, a quantum key filling system, and a quantum key scheduling system. It is used to manage the lifecycle of quantum keys, including generation, storage, distribution, use, updating, and destruction, and to authenticate the identity of quantum security application terminals.

[0020] II. Quantum-Safe Database The quantum-safe database interacts with the quantum-safe service platform using quantum keys. It utilizes quantum cryptography technology to achieve encrypted storage of structured and unstructured data in application systems without requiring development or modification. It provides fine-grained identity access control, multiple de-identification strategies, and auditing functions, offering users a compliant and easy-to-implement data security protection solution to address the problem of sensitive data leakage.

[0021] Specifically, quantum cryptography technology is used to achieve encrypted storage of structured and unstructured data in application systems without requiring development or modification, including: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, the encrypted data is stored in a hybrid quantum key store through quantum teleportation synchronization. ; in, To encrypt data; Temporary key fragments generated for quantum key distribution Real-time expansion via quantum random number generator (QRNG); For data quantum states, This indicates that the temporary key fragment will be sent. With data quantum state Entanglement pairs are bound together. For structured data, key bits and field quantum states are entangled through CNOT gates; for unstructured data, key photons and data photons are entangled in a parametrically converted crystal to generate entangled pairs, which are then bound together by temporary key fragments. With data quantum state Entangling pairs are bound together so that any eavesdropping will cause a violation of Bell's inequality, triggering key self-destruction; This means performing a tensor product operation on n key-data quantum state entangled pairs to generate a high-dimensional composite quantum key; For data form transformation, for structured data, arbitrary subweaving is used to convert its field relationships into a non-Abelian statistical topological state, generating a topological coding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and semantic information is hidden through phase encoding to generate a quantum Fourier layer. By deeply binding encryption rules with data semantics, even if the key is leaked, attackers cannot parse the data form logic. For quantum encryption functions, This indicates the use of high-dimensional composite quantum keys. With data form transformation Nonlinear combinations are performed, and the encryption strength is dynamically adjusted through a parameterized quantum gate array of a quantum neural network (QNN). This indicates quantum teleportation synchronization. It is a hybrid quantum key library.

[0022] III. Quantum Application Services Quantum application services include SDK, quantum-safe media, and data security management; SDK + quantum-safe medium, through customized R&D and business application service integration, business applications only need to import the plugin jar package and perform simple configuration to realize automatic encryption and decryption of data. At the same time, the encryption plugin itself is a software cryptographic module, using collaborative signature algorithm and white-box cryptographic algorithm to protect the security of quantum key in the encryption plugin. Data security management offers a wealth of data security policy management capabilities, including dashboards, enhanced login security, application management, data source management, automatic discovery of sensitive data, automatic discovery of related queries, dual-track operation mode, encryption policy configuration, database sharding and table partitioning, data migration, de-identification policy configuration, de-identification access control, log management, and system management.

[0023] When internal operations and maintenance personnel perform data cleaning and processing, dual authentication is performed through the client or web interface. This includes business-level authentication, which verifies the compliance of the login personnel by using an account and password, and key-level authentication, which performs two-way authentication and identification through the quantum security service platform and SDK + quantum security medium to improve the credibility of the login personnel.

[0024] When using the quantum-secure and reliable meteorological data system based on quantum key distribution provided by this invention for data sharing, such as... Figure 2 As shown, it includes: 1) When data is shared with relevant operations including weather forecasting, meteorological research, and meteorological services: Customized development is carried out based on SDK + quantum secure medium and its business information system, so as to achieve controllable data sharing frequency, controllable sharing time and controllable sharing content from the perspective of quantum key management; At the same time, a security monitoring and log auditing system is established to continuously monitor shared services, promptly detect abnormal behavior and potential security threats, and immediately activate the emergency response plan in the event of a security incident. The quantum key is remotely controlled in real time, and corresponding measures are taken to control the loss, so that the shared data cannot be decrypted, viewed or used. 2) When data is shared with industry users: Standardize API call interfaces and implement a multi-factor authentication mechanism that includes account passwords, biometrics, and dynamic tokens to enhance authentication security. At the same time, adopt the principle of least privilege to ensure that industry users can only access the data necessary to complete their work. Develop multiple authentication methods, including business platform authentication and password service platform authentication, to enhance the credibility of authentication. Clearly define the sharing agreement and compliance requirements, including the purpose of data use, usage guidelines, storage period, and attribution of responsibility. Implement anonymization strategies to ensure that the content seen by the same type of data is inconsistent when it is shared with different industry users.

[0025] To better illustrate the technical solution of this application, the following explanation uses ground hourly meter data sharing as an example. Figure 3 As shown: For structured data such as ground hour tables, the meteorological data sharing service system uses a quantum encryption database to obtain real-time ground hour table data from the "Tianqing" service interface in a unified format via the Internet or e-government extranet. This data is encrypted in a unified format during collection and stored in the sharing service system database in a structured encrypted form according to the data's correlation and encryption requirements, ensuring the security and integrity of the data. In the above process, the meteorological data sharing service system is deeply integrated with the SDK + quantum secure medium provided by the quantum security service platform to achieve two-way authentication and authorization with the quantum security service platform. This integration not only improves the security of data transmission, but also provides a solid guarantee for the legal use of data. When an external system needs to retrieve real-time ground hourly table data, the meteorological data sharing service system will configure the interface parameter information and generate the corresponding SDK (Quantum version) to provide a calling interface. External apps can call the encapsulated SDK as needed to obtain the relevant encrypted data, and then decrypt it locally to obtain the real-time ground hourly table data, further ensuring the security and availability of the data.

[0026] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A quantum-secure and trustworthy meteorological data system based on quantum key distribution, characterized in that: include: The quantum security service platform manages the lifecycle of quantum keys and authenticates the identities of quantum security application terminals. The quantum-safe database interacts with the quantum-safe service platform using quantum keys. It utilizes quantum cryptography to achieve encrypted storage of data in application systems without requiring development or modification, providing a compliant and easy-to-implement data security protection solution. Quantum application services, through customized R&D and integration with business application services, enable automatic encryption and decryption of data after simple configuration of business applications, and provide rich data security policy management capabilities; Among these, using quantum cryptography to achieve encrypted storage of data in application systems without requiring development or modification includes: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, encrypted data is stored in a hybrid quantum key library through quantum teleportation synchronization.

2. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 1, characterized in that: The quantum security service platform includes a quantum key generation system, a quantum key filling system, and a quantum key scheduling system, which are used to manage the lifecycle of quantum keys, including generation, storage, distribution, use, updating, and destruction, and to authenticate the identity of quantum security application terminals.

3. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 2, characterized in that: The quantum-safe database interacts with the quantum-safe service platform using quantum keys. It utilizes quantum cryptography to achieve encrypted storage of structured and unstructured data in the application system without requiring development or modification. It provides fine-grained identity access control, multiple de-identification strategies, and auditing functions, offering users a compliant and easy-to-implement data security protection solution to address the problem of sensitive data leakage.

4. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 3, characterized in that: The method of using quantum cryptography to achieve encrypted storage of structured and unstructured data in application systems without requiring development or modification includes: Dynamic quantum keys are generated through quantum key distribution and quantum entanglement, and unified quantum encryption of structured and unstructured data is achieved by combining data form transformation. Finally, the encrypted data is stored in a hybrid quantum key store through quantum teleportation synchronization. ； in, To encrypt data; Temporary key fragments generated for quantum key distribution Real-time expansion via quantum random number generator (QRNG); For data quantum states, This indicates that the temporary key fragment will be sent. With data quantum state Entanglement pairs are bound together. For structured data, key bits and field quantum states are entangled through CNOT gates; for unstructured data, key photons and data photons are entangled in a parametrically converted crystal to generate entangled pairs, which are then bound together by temporary key fragments. With data quantum state Entangling pairs are bound together so that any eavesdropping will cause a violation of Bell's inequality, triggering key self-destruction; This means performing a tensor product operation on n key-data quantum state entangled pairs to generate a high-dimensional composite quantum key; For data form transformation, for structured data, arbitrary subweaving is used to convert its field relationships into a non-Abelian statistical topological state, generating a topological coding layer; for unstructured data, it is mapped to a high-dimensional Hilbert space, and semantic information is hidden through phase encoding to generate a quantum Fourier layer. By deeply binding encryption rules with data semantics, even if the key is leaked, attackers cannot parse the data form logic. For quantum encryption functions, This indicates the use of high-dimensional composite quantum keys. With data form transformation Nonlinear combinations are performed, and the encryption strength is dynamically adjusted through a parameterized quantum gate array of a quantum neural network (QNN). This indicates quantum teleportation synchronization. It is a hybrid quantum key library.

5. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 3, characterized in that: The quantum application service includes SDK + quantum-safe media and data security management; SDK + quantum-safe medium, through customized R&D and business application service integration, business applications only need to import the plugin jar package and perform simple configuration to realize automatic encryption and decryption of data. At the same time, the encryption plugin itself is a software cryptographic module, using collaborative signature algorithm and white-box cryptographic algorithm to protect the security of quantum key in the encryption plugin. Data security management offers a wealth of data security policy management capabilities, including dashboards, enhanced login security, application management, data source management, automatic discovery of sensitive data, automatic discovery of related queries, dual-track operation mode, encryption policy configuration, database sharding and table partitioning, data migration, de-identification policy configuration, de-identification access control, log management, and system management.

6. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 5, characterized in that: When internal operations and maintenance personnel perform data cleaning and processing, dual authentication is performed through the client or web interface. This includes business-level authentication, which verifies the compliance of the login personnel by using an account and password, and key-level authentication, which performs two-way authentication and identification through the quantum security service platform and SDK + quantum security medium to improve the credibility of the login personnel.

7. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 6, characterized in that: When data is shared with relevant operations including weather forecasting, meteorological research, and meteorological services: Customized development is carried out based on SDK + quantum secure medium and its business information system, so as to achieve controllable data sharing frequency, controllable sharing time and controllable sharing content from the perspective of quantum key management; At the same time, a security monitoring and log auditing system is established to continuously monitor shared services, promptly detect abnormal behavior and potential security threats, and immediately activate the emergency response plan in the event of a security incident. The quantum key is remotely controlled in real time, and corresponding measures are taken to control the loss, so that the shared data cannot be decrypted, viewed, or used.

8. The quantum-secure and trustworthy meteorological data system based on quantum key distribution according to claim 7, characterized in that: When data is shared with industry users: Standardize API call interfaces and implement a multi-factor authentication mechanism that includes account passwords, biometrics, and dynamic tokens to enhance authentication security. At the same time, adopt the principle of least privilege to ensure that industry users can only access the data necessary to complete their work. Develop multiple authentication methods, including business platform authentication and password service platform authentication, to enhance the credibility of authentication. Clearly define the sharing agreement and compliance requirements, including the purpose of data use, usage guidelines, storage period, and attribution of responsibility. Implement anonymization strategies to ensure that the content seen by the same type of data is inconsistent when it is shared with different industry users.

Images