A quantum key injection method for communication terminal

Abstract

The invention relates to communication encryption, and in particular to a quantum key charging method for a communication terminal. A connection relationship is established among a charging terminal, a quantum random number generator, an exchange cipher machine and a cryptographic service platform. The cryptographic service platform initializes a secure medium in the communication terminal through the exchange cipher machine and the charging terminal. The quantum random number generator generates a charging key. The exchange cipher machine generates an encryption key to encrypt the charging key. The charging terminal obtains the charging key based on a key acquisition token. The exchange cipher machine encrypts the encryption key through a card public key and returns a charging key ciphertext and an encryption key ciphertext to the charging terminal. The charging terminal imports the charging key ciphertext and the encryption key ciphertext into a secure medium. The secure medium returns a charging result to the charging terminal, and the charging terminal ends the charging of the secure medium key. The technical solution provided by the invention can effectively overcome the defects of limited use scope and easy theft during the quantum key charging process.

Description

Technical Field

[0001] The present invention relates to communication encryption, and in particular to a quantum key filling method for a communication terminal. Background Art

[0002] At present, the encryption measures for communication between mobile terminals mainly use an encryption system based on a combination of public and private keys and symmetric keys for communication encryption. The working key is distributed on the public network through the public and private key system. The central site and each mobile terminal share a pair of public and private keys. The central site generates a working key, encrypts the working key with the public key, and sends it to the mobile terminal. The mobile terminal uses the paired private key to decrypt and obtain the working key. The link between the mobile terminal and the central site can use this working key as the key of the symmetric encryption algorithm for encryption and decryption.

[0003] However, with the rapid development of quantum computer technology, especially in combination with corresponding cracking algorithms (such as Shor's algorithm), mathematical difficulty problems can be solved in polynomial time under the quantum computing model. This means that public-private key cryptographic algorithms based on mathematical difficulty problems are no longer safe under the quantum computing model, resulting in the communication data protected by public-private key algorithms no longer being safe.

[0004] Quantum key distribution is based on the basic principles of quantum mechanics. In principle, it ensures that once eavesdropping occurs, it will be discovered. It will not be threatened by the continuous improvement of computing power and mathematical level. It has long-term security and can theoretically achieve unbreakable secure and confidential communications. It has become a development and application trend at home and abroad to ensure the security of communication data.

[0005] During the use of quantum keys, the quantum keys can be charged into the quantum key storage device through the charging terminal for use. In the prior art, the charging process of quantum keys is usually that the paired quantum key distribution devices negotiate to generate quantum keys, and the two quantum key distribution devices send the same quantum key to the key distribution center and the charging terminal respectively. The key distribution center stores the quantum key in the local storage device, and the charging terminal writes the quantum key to the quantum key storage device. Then the key distribution center and the quantum key storage device have the same quantum key, thereby completing the quantum key charging.

[0006] However, the existing quantum key filling process is only applicable to areas where quantum private networks are laid, as quantum key distribution equipment must rely on dedicated quantum networks. Its scope of use is limited, and during the quantum key filling process, quantum keys are prone to being stolen. Summary of the invention

[0007] 1. Technical issues to be solved

[0008] In view of the above-mentioned shortcomings of the prior art, the present invention provides a quantum key injection method for a communication terminal, which can effectively overcome the defects of the prior art that the scope of use is limited and the quantum key is easily stolen during the injection process.

[0009] (II) Technical solution

[0010] To achieve the above objectives, the present invention is implemented through the following technical solutions:

[0011] A quantum key injection method for a communication terminal comprises the following steps:

[0012] S1. Establishing the connection between the charging terminal, quantum random number generator, exchange cipher machine and cryptographic service platform;

[0013] S2. The cryptographic service platform initializes the secure medium in the communication terminal by exchanging cryptographic machines and charging terminals;

[0014] S3, the quantum random number generator generates a charging key, and the exchange cipher generates an encryption key to encrypt the charging key;

[0015] S4, the charging terminal obtains the charging key based on the key acquisition token, the exchange cipher machine encrypts the encryption key by the card public key, and returns the charging key ciphertext and the encryption key ciphertext to the charging terminal;

[0016] S5. The charging terminal imports the charging key ciphertext and the encryption key ciphertext into the secure medium. The secure medium returns the charging result to the charging terminal, and the charging terminal completes the secure medium key charging.

[0017] Preferably, the connection relationship between the charging terminal, the quantum random number generator, the exchange cipher machine and the cryptographic service platform is established in S1, including:

[0018] S11, the exchange cipher machine registers for network access with the cipher service platform, the cipher service platform performs network access authentication, and returns the network access result to the exchange cipher machine;

[0019] S12, the charging terminal inserts Ukey to log in, and the exchange password machine sends the private key signature authentication data based on Ukey to the password service platform;

[0020] S13. The cryptographic service platform uses the private key signature authentication data based on Ukey to perform identity authentication, and returns the identity authentication result to the charging terminal through the exchange cipher machine.

[0021] Preferably, the cryptographic service platform in S2 initializes the secure medium in the communication terminal by exchanging cryptographic machines and charging terminals, including:

[0022] S21, the secure medium establishes a connection with the charging terminal, the secure medium generates signature public and private keys, and sends the medium information and signature public key to the charging terminal;

[0023] S22. The cryptographic service platform generates an encrypted public-private key pair and a symmetric key, and encrypts the encrypted public-private key pair using the symmetric key, and encrypts the symmetric key using the signature public key;

[0024] S23. The charging terminal imports the encrypted public-private key pair ciphertext and the symmetric key ciphertext into the secure medium, and the secure medium obtains and imports the encrypted public-private key pair.

[0025] Preferably, the charging terminal and the cryptographic service platform transfer data via an exchange cryptographic machine, including:

[0026] The charging terminal uploads the medium information and signature public key to the cryptographic service platform through the exchange cryptographic machine;

[0027] The cryptographic service platform returns the encrypted public and private key pair ciphertext and symmetric key ciphertext to the charging terminal through the exchange cipher machine.

[0028] Preferably, the secure medium acquires and imports the encrypted public and private key pair, including:

[0029] The secure medium decrypts the symmetric key ciphertext by using the signature private key to obtain the symmetric key, and decrypts the encrypted public-private key pair ciphertext by using the symmetric key to obtain the encrypted public-private key pair.

[0030] Preferably, after the exchange cipher generates an encryption key to encrypt the charging key in S3, the following steps are included:

[0031] The exchange cipher machine saves the charging key ciphertext and returns the generated result to the cryptographic service platform. The cryptographic service platform returns the charging key application response and key acquisition token to the charging terminal through the exchange cipher machine.

[0032] Preferably, after the charging terminal imports the charging key ciphertext and the encryption key ciphertext into the secure medium in S5, the following steps are performed:

[0033] The charging terminal decrypts the encryption key ciphertext by using the card private key to obtain the encryption key, and decrypts the charging key ciphertext by using the encryption key to obtain the charging key.

[0034] (III) Beneficial effects

[0035] Compared with the prior art, the quantum key injection method for a communication terminal provided by the present invention has the following beneficial effects:

[0036] 1) The quantum key distribution device is replaced by an exchange cipher machine. The generation of quantum keys no longer needs to rely on a dedicated quantum network, and the scope of use is no longer limited;

[0037] 2) The exchange cipher generates quantum keys based on quantum random numbers, and uses quantum keys to generate charging keys. At the same time, it generates encryption keys to encrypt the charging keys. The exchange cipher encrypts the encryption keys through the card public key, achieving effective encryption of the charging keys and encryption keys. The encryption key ciphertext can only be decrypted through the card private key, which fully guarantees the security of quantum key charging and effectively prevents theft during the quantum key charging process. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0039] Figure 1 It is a schematic diagram of the system of the present invention;

[0040] Figure 2 A schematic diagram of a process for establishing a connection relationship between a charging terminal, an exchange cipher machine and a cipher service platform in the present invention;

[0041] Figure 3 A schematic diagram of the process of initializing the internal secure medium of the communication terminal in the present invention;

[0042] Figure 4 This is a schematic diagram of the process of quantum key injection in the present invention. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0044] A quantum key injection method for a communication terminal, such as Figure 2 As shown, a connection relationship is established between the charging terminal, the quantum random number generator, the exchange cipher machine and the cryptographic service platform, specifically including:

[0045] S11, the exchange cipher machine registers for network access with the cipher service platform, the cipher service platform performs network access authentication, and returns the network access result to the exchange cipher machine;

[0046] S12, the charging terminal inserts Ukey to log in, and the exchange password machine sends the private key signature authentication data based on Ukey to the password service platform;

[0047] S13. The cryptographic service platform uses the private key signature authentication data based on Ukey to perform identity authentication, and returns the identity authentication result to the charging terminal through the exchange cipher machine.

[0048] like Figure 3 As shown, the cryptographic service platform initializes the security medium in the communication terminal by exchanging cryptographic machines and charging terminals, specifically including:

[0049] S21. The secure medium establishes a connection with the charging terminal, the secure medium generates signature public and private keys, and sends the medium information and signature public key to the charging terminal. The charging terminal uploads the medium information and signature public key to the cryptographic service platform through the exchange cryptographic machine;

[0050] S22, the cryptographic service platform generates an encrypted public-private key pair and a symmetric key, and encrypts the encrypted public-private key pair by the symmetric key, and encrypts the symmetric key by the signature public key, and the cryptographic service platform returns the encrypted public-private key pair ciphertext and the symmetric key ciphertext to the charging terminal through the exchange cipher machine;

[0051] S23. The charging terminal imports the encrypted public-private key pair ciphertext and the symmetric key ciphertext into the secure medium. The secure medium decrypts the symmetric key ciphertext by using the signed private key to obtain the symmetric key, and decrypts the encrypted public-private key pair ciphertext by using the symmetric key to obtain the encrypted public-private key pair.

[0052] Figure 4 Schematic diagram of the process of filling the quantum key, including:

[0053] ①The quantum random number generator generates the charging key, and the exchange cipher generates the encryption key to encrypt the charging key;

[0054] Among them, after the exchange cipher generates an encryption key to encrypt the charging key, it includes:

[0055] The exchange cipher machine saves the charging key ciphertext and returns the generated result to the cryptographic service platform. The cryptographic service platform returns the charging key application response and key acquisition token to the charging terminal through the exchange cipher machine.

[0056] ② The charging terminal obtains the charging key based on the key acquisition token, and the exchange cipher machine encrypts the encryption key through the card public key, and returns the charging key ciphertext and encryption key ciphertext to the charging terminal;

[0057] ③ The charging terminal imports the charging key ciphertext and the encryption key ciphertext into the secure medium, and the secure medium returns the charging result to the charging terminal, and the charging terminal completes the secure medium key charging;

[0058] Among them, after the charging terminal imports the charging key ciphertext and the encryption key ciphertext into the secure medium, it includes:

[0059] The charging terminal decrypts the encryption key ciphertext by using the card private key to obtain the encryption key, and decrypts the charging key ciphertext by using the encryption key to obtain the charging key.

[0060] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A quantum key injection method for a communication terminal, characterized in that: The following steps are involved: S1. Establishing the connection between the charging terminal, quantum random number generator, exchange cipher machine and cryptographic service platform; S2. The cryptographic service platform initializes the secure medium in the communication terminal by exchanging cryptographic machines and charging terminals; S3, the quantum random number generator generates a charging key, and the exchange cipher generates an encryption key to encrypt the charging key; S4, the charging terminal obtains the charging key based on the key acquisition token, the exchange cipher machine encrypts the encryption key by the card public key, and returns the charging key ciphertext and the encryption key ciphertext to the charging terminal; S5. The charging terminal imports the charging key ciphertext and the encryption key ciphertext into the secure medium. The secure medium returns the charging result to the charging terminal, and the charging terminal completes the secure medium key charging. Step S2 includes: S21, the secure medium establishes a connection with the charging terminal, the secure medium generates signature public and private keys, and sends the medium information and signature public key to the charging terminal; S22. The cryptographic service platform generates an encrypted public-private key pair and a symmetric key, and encrypts the encrypted public-private key pair using the symmetric key, and encrypts the symmetric key using the signature public key; S23. The charging terminal imports the encrypted public-private key pair ciphertext and the symmetric key ciphertext into the secure medium, and the secure medium obtains and imports the encrypted public-private key pair.

2. The method for quantum key injection of a communication terminal according to claim 1, characterized in that: S1 establishes the connection between the charging terminal, quantum random number generator, exchange cipher machine and cryptographic service platform, including: S11, the exchange cipher machine registers for network access with the cipher service platform, the cipher service platform performs network access authentication, and returns the network access result to the exchange cipher machine; S12, the charging terminal inserts Ukey to log in, and the exchange password machine sends the private key signature authentication data based on Ukey to the password service platform; S13. The cryptographic service platform uses the private key signature authentication data based on Ukey to perform identity authentication, and returns the identity authentication result to the charging terminal through the exchange cipher machine.

3. The method for quantum key injection of a communication terminal according to claim 1, characterized in that: The charging terminal and the cryptographic service platform transfer data via an exchange cryptographic machine, including: The charging terminal uploads the medium information and signature public key to the cryptographic service platform through the exchange cryptographic machine; The cryptographic service platform returns the encrypted public and private key pair ciphertext and symmetric key ciphertext to the charging terminal through the exchange cipher machine.

4. The method for quantum key injection of a communication terminal according to claim 1, characterized in that: The secure medium obtains and imports the encrypted public and private key pair, including: The secure medium decrypts the symmetric key ciphertext by using the signature private key to obtain the symmetric key, and decrypts the encrypted public-private key pair ciphertext by using the symmetric key to obtain the encrypted public-private key pair.

5. The method for quantum key injection of a communication terminal according to claim 1, characterized in that: After the exchange cipher machine in S3 generates an encryption key to encrypt the charging key, it includes: The exchange cipher machine saves the charging key ciphertext and returns the generation result to the cryptographic service platform. The cryptographic service platform returns the charging key application response and key acquisition token to the charging terminal through the exchange cipher machine.

6. The method for quantum key injection of a communication terminal according to claim 1, characterized in that: After the charging terminal in S5 imports the charging key ciphertext and the encryption key ciphertext into the secure medium, it includes: The charging terminal decrypts the encryption key ciphertext by using the card private key to obtain the encryption key, and decrypts the charging key ciphertext by using the encryption key to obtain the charging key.

Images