Key negotiation method, device, equipment and storage medium

Abstract

The present invention discloses a key negotiation method, device, equipment and storage medium. The method includes: a first mobile terminal determines a first seed key; encrypts the first seed key and sends the encrypted first seed key to a key server in a quantum key distribution network; the first seed key is used for the key server to negotiate a session key for communication with a second mobile terminal; the key server receives the encrypted first seed key, decrypts the encrypted first seed key, obtains the decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal; the second mobile terminal receives the first seed key and determines the second seed key; the session key is determined using the first seed key and the second seed key.

Description

Technical Field

[0001] The present invention relates to the field of wireless technology, and in particular to a key negotiation method, device, equipment and storage medium. Background Art

[0002] Quantum secure communication has technical advantages such as quantum indivisibility, quantum uncertainty, quantum non-replication, and ideal randomness. It is becoming more and more common to apply mobile terminals to quantum key distribution networks for quantum secure communication. In order to realize data communication of mobile terminals in quantum key distribution networks, the central node in the quantum key distribution network can provide quantum keys to mobile terminals, so that the mobile terminals can use the quantum keys to encrypt data transmitted in the quantum key distribution network. However, usually, mobile terminals can only passively receive quantum keys sent by central nodes in quantum key distribution networks, and cannot participate in the generation of quantum keys, resulting in a relatively simple method of generating quantum keys. Summary of the invention

[0003] In view of this, embodiments of the present invention are intended to provide a key negotiation method, apparatus, device, and storage medium.

[0004] The technical solution of the embodiment of the present invention is achieved as follows:

[0005] At least one embodiment of the present invention provides a key negotiation method, the method comprising:

[0006] The first mobile terminal determines a first seed key; encrypts the first seed key and sends the encrypted first seed key to a key server in a quantum key distribution network; the first seed key is used for the key server to negotiate a session key for communication with the second mobile terminal;

[0007] The key server receives the encrypted first seed key, decrypts the encrypted first seed key to obtain a decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal;

[0008] The second mobile terminal receives the first seed key and determines a second seed key; and determines the session key using the first seed key and the second seed key.

[0009] In addition, according to at least one embodiment of the present invention, the first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network;

[0010] The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes:

[0011] The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; encrypts the first seed key identifier of the first seed key by using the first quantum key, and sends the encrypted first seed key identifier and the first quantum key identifier to the first key server.

[0012] In addition, according to at least one embodiment of the present invention, the key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including:

[0013] The first key server receives the encrypted first seed key identifier and the first quantum key identifier; determines a first quantum key corresponding to the first quantum key identifier, and uses the first quantum key to decrypt the encrypted first seed key identifier to obtain a decrypted first seed key.

[0014] In addition, according to at least one embodiment of the present invention, sending the decrypted first seed key to the second mobile terminal includes:

[0015] The first key server determines a second shared quantum key and a corresponding second quantum key identifier between itself and the second mobile terminal; encrypts the decrypted first seed key using the second shared quantum key, and sends the encrypted first seed key and the second quantum key identifier to the second mobile terminal.

[0016] In addition, according to at least one embodiment of the present invention, the second mobile terminal receiving the first seed key includes:

[0017] The second mobile terminal receives the encrypted first seed key and the second quantum key identifier; determines the corresponding second quantum key according to the second quantum key identifier; and decrypts the encrypted first seed key using the second quantum key to obtain the decrypted first seed key.

[0018] In addition, according to at least one embodiment of the present invention, the first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network;

[0019] The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes:

[0020] The first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; uses the third shared quantum key to encrypt the first seed key identifier of the first seed key, and sends the encrypted first seed key identifier and the third quantum key identifier to the second key server.

[0021] In addition, according to at least one embodiment of the present invention, the key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including:

[0022] The second key server receives the encrypted first seed key identifier and the third quantum key identifier; uses the third quantum key identifier to determine the corresponding third shared quantum key; and uses the third shared quantum key to decrypt the encrypted first seed key identifier to obtain the decrypted first seed key.

[0023] In addition, according to at least one embodiment of the present invention, sending the decrypted first seed key to the second mobile terminal includes:

[0024] The second key server sends the decrypted first seed key to the third key server;

[0025] The third key server receives the first seed key; determines the fourth quantum key and the corresponding fourth quantum key identification information between itself and the second mobile terminal; encrypts the first seed key using the fourth quantum key, and sends the encrypted first seed key and the fourth quantum key identification to the second mobile terminal.

[0026] In addition, according to at least one embodiment of the present invention, the second mobile terminal receiving the first seed key includes:

[0027] The second mobile terminal receives the encrypted first seed key and the fourth quantum key identifier sent by the third key server; determines the corresponding fourth quantum key according to the fourth quantum key identifier; and uses the fourth quantum key to decrypt the encrypted first seed key to obtain the first seed key.

[0028] In addition, according to at least one embodiment of the present invention, the method further includes:

[0029] The second mobile terminal determines a second seed key identifier corresponding to the second seed key, and sends the second seed key identifier to the key server;

[0030] The key server receives the second seed key identifier; determines a second seed key corresponding to the second seed key identifier; and sends the second seed key to the first mobile terminal;

[0031] The first mobile terminal receives the second seed key; and determines the session key using the first seed key and the second seed key.

[0032] At least one embodiment of the present invention provides a key negotiation method, applied to a first mobile terminal, the method comprising:

[0033] Determine a first seed key identifier corresponding to a first seed key; the first seed key is used by the second mobile terminal to determine a session key used for communicating with the first mobile terminal;

[0034] Encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network;

[0035] The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key.

[0036] In addition, according to at least one embodiment of the present invention, the first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network;

[0037] The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes:

[0038] The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; encrypts the first seed key identifier of the first seed key by using the first quantum key, and sends the encrypted first seed key identifier and the first quantum key identifier to the first key server.

[0039] In addition, according to at least one embodiment of the present invention, the first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network;

[0040] The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes:

[0041] The first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; uses the third shared quantum key to encrypt the first seed key identifier of the first seed key, and sends the encrypted first seed key identifier and the third quantum key identifier to the second key server.

[0042] At least one embodiment of the present invention provides a key negotiation device, including:

[0043] A first processing unit, configured to determine a first seed key identifier corresponding to a first seed key; the first seed key is used by the second mobile terminal to determine a session key used for communicating with the first mobile terminal;

[0044] A second processing unit is used to encrypt the first seed key identifier and send the encrypted first seed key identifier to a key server in the quantum key distribution network;

[0045] The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key.

[0046] In addition, according to at least one embodiment of the present invention, the second processing unit is specifically configured to:

[0047] The first mobile terminal and the second mobile terminal are both bound to a first key server in a quantum key distribution network; the first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; the first seed key identifier of the first seed key is encrypted using the first quantum key, and the encrypted first seed key identifier and the first quantum key identifier are sent to the first key server.

[0048] In addition, according to at least one embodiment of the present invention, the second processing unit is specifically configured to:

[0049] The first mobile terminal is bound to a second key server in a quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network; the first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; the first seed key identifier of the first seed key is encrypting by using the third shared quantum key, and the encrypted first seed key identifier and the third quantum key identifier are sent to the second key server.

[0050] At least one embodiment of the present invention provides a mobile terminal, including:

[0051] Communication interface,

[0052] A processor, configured to determine a first seed key identifier corresponding to a first seed key; the first seed key is used by a second mobile terminal to determine a session key used to communicate with the first mobile terminal; encrypt the first seed key identifier, and send the encrypted first seed key identifier to a key server in a quantum key distribution network;

[0053] The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key.

[0054] At least one embodiment of the present invention provides a mobile terminal, including a processor and a memory for storing a computer program that can be run on the processor.

[0055] Wherein, the processor is used to execute the steps of any of the above-mentioned methods on the mobile terminal side when running the computer program.

[0056] At least one embodiment of the present invention provides a storage medium having a computer program stored thereon, wherein the computer program implements the steps of any of the above-mentioned methods on the mobile terminal side when executed by a processor.

[0057] The key negotiation method, device, equipment and storage medium provided by the embodiment of the present invention, the first mobile terminal determines the first seed key; encrypts the first seed key and sends the encrypted first seed key to the key server in the quantum key distribution network; the first seed key is used for the key server to negotiate the session key used for communication with the second mobile terminal; the key server receives the encrypted first seed key, decrypts the encrypted first seed key, obtains the decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal; the second mobile terminal receives the first seed key and determines the second seed key; the session key is determined using the first seed key and the second seed key. Using the technical solution of the embodiment of the present invention, the first mobile terminal provides the second mobile terminal with data for generating the session key through the key server, so that the second mobile terminal can generate the session key according to the seed key provided by the first mobile terminal through the key server. Compared with the related art in which the mobile terminal can only passively receive the session key sent by the central node in the quantum key distribution network, resulting in a relatively single key generation method, it can ensure that the first mobile terminal participates in the generation process of the session key. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 The implementation process of the key negotiation method of the embodiment of the present invention is shown in FIG. Figure 1;

[0059] Figure 2 This is a schematic diagram of a quantum key distribution network according to an embodiment of the present invention. Figure 1 ;

[0060] Figure 3 It is a schematic diagram of the implementation process of key negotiation initiation according to an embodiment of the present invention;

[0061] Figure 4 The embodiment of the present invention is a schematic diagram of the implementation process of the first mobile terminal and the second mobile terminal negotiating a session key Figure 1 ;

[0062] Figure 5 It is a schematic diagram of the implementation process of the second mobile terminal negotiating a session key with the first mobile terminal according to an embodiment of the present invention;

[0063] Figure 6 This is a schematic diagram of the implementation process of key negotiation initiation in an embodiment of the present invention. Figure 2 ;

[0064] Figure 7 The embodiment of the present invention is a schematic diagram of the implementation process of the first mobile terminal and the second mobile terminal negotiating a session key Figure 2 ;

[0065] Figure 8 The embodiment of the present invention is a schematic diagram of the implementation process of the second mobile terminal and the first mobile terminal negotiating the session key Figure 2 ;

[0066] Fig. 9 It is a schematic diagram of the structure of the key agreement system according to an embodiment of the present invention;

[0067] Fig.10 The implementation process of the key negotiation method of the embodiment of the present invention is shown in FIG. Figure 2 ;

[0068] Fig.11 It is a schematic diagram of the structure of a key agreement device according to an embodiment of the present invention;

[0069] Fig.12 It is a schematic diagram of the structure of a mobile terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0070] Before introducing the technical solution of the embodiment of the present invention, the related technology is first described.

[0071] Among the related technologies, quantum secure communication has the technical advantages of quantum indivisibility, quantum uncertainty, quantum non-replication, and ideal randomness. Its security is based on the basic principles of quantum mechanics and is currently the only secure communication technology whose theoretical security can be strictly proven. Due to many factors such as device size, the key transceiver system for practical quantum secure communication is difficult to directly apply to mobile devices that have extremely high requirements for device size and portability. The mobilization of quantum communication-related technologies is the core key issue in promoting the larger-scale application of quantum communication.

[0072] In the related art, the schemes for communicating using the keys sent by the quantum key distribution network include: (1) The patent document entitled "A mobile secure communication method based on a quantum key distribution network" discloses: the mobile terminal registers and joins the network, and establishes a binding relationship with a central control station in the quantum key distribution network; after the communication service is initiated, the mobile terminal participating in the communication applies for a service key from the quantum key distribution network; the quantum key distribution network obtains the addresses of the central control stations participating in the service key distribution in the communication, and specifies the service key generation central control station according to the current status indicators of each central control station; the service key generation central control station generates the service key required for this communication and distributes it to the mobile terminals participating in the communication; the mobile terminals participating in the communication use the service key to communicate securely through the original data link of this type of communication service. The technical defects of this scheme are: the main scenario of concern is the secure communication between mobile terminals based on the quantum key distribution network, the session key between mobile terminals is generated and distributed in a centralized manner through the quantum key distribution network, the mobile terminal does not participate in the specific generation of the session key, and the key generation mechanism and process are not agreed in detail. (2) The scheme entitled “Quantum key-based secure mobile communication system” discloses that: the system includes a quantum key service station, several mobile terminals and a public communication network, and the quantum key service station and the mobile terminal communicate through the public communication network; the quantum key service station is used to provide quantum key download services to the mobile terminal and complete the security management of the quantum key, the mobile terminal is used to realize the basic call function and the additional function of secure communication, and the public communication network is used to realize the data transmission function. The technical defect of this scheme is that: the quantum key service station, several mobile terminals and the public communication network are used to realize the distribution of quantum keys between mobile terminals and the application of secure communication functions. The scheme gives the system structure and basic steps, but does not make detailed agreements on the generation mechanism of session keys, and the session keys are generated and distributed in a centralized manner, and the mobile terminal does not participate in the specific generation and designation of the session keys. (3) The scheme entitled “A quantum wireless secure communication system and a mobile terminal” discloses that: the mobile terminal is applied to the quantum wireless secure communication system, and the quantum wireless secure communication system includes multiple service terminals, which are connected through a quantum key distribution network, and each service terminal is connected to multiple mobile terminals. When at least two mobile terminals are connected to a service terminal, if there is a pre-set mobile terminal that needs confidential communication among the at least two mobile terminals, the service terminal pre-assigns the same quantum key to the pre-set mobile terminal that needs confidential communication; if there is a mobile terminal that needs temporary communication, the service terminal assigns the same quantum key to the mobile terminal that needs confidential communication in real time. The technical defects of this scheme are: the system structure and basic steps are given, but the generation mechanism of the session key is not agreed in detail, and the session key is generated and distributed in a centralized manner, and the mobile terminal does not participate in the specific generation and designation of the session key.(4) The patent document entitled A Flexible Quantum-Secure Mobile Communication Method discloses: the quantum key distribution (QKD) node provides quantum basic key injection services for mobile terminals, and the QKD node and QKMC negotiate quantum keys through the QKD network; QKMC distributes session keys between two or more mobile terminals; including the registration process and the online negotiation of session keys. After the mobile terminal injects the quantum basic key once, it can obtain quantum key services at any QKD node, and can re-inject it at any QKD node after use; the whole process of the mobile terminal obtaining the session key is quantum secure; the quantum key management center is introduced to uniformly control the generation and negotiation of user session keys. The technical defects of this solution are: the main scenario of concern is confidential communication between mobile terminals based on the quantum key distribution network, the session keys between mobile terminals are generated and distributed in a centralized manner through the quantum key distribution network, the mobile terminal does not participate in the specific generation of the session key, and its key generation mechanism and process are not agreed in detail.

[0073] In summary, the relevant technologies mainly rely on quantum key distribution networks to generate and distribute session keys in a centralized manner, and the generation mechanism and steps are imperfect; the session keys between mobile terminals are completely allocated and specified by the quantum key distribution platform, and the mobile terminals passively receive the keys specified by the platform; the loss of key information transmitted by the communication line of any mobile terminal will lead to the leakage of the session key.

[0074] Based on this, in various embodiments of the present invention, the first mobile terminal determines a first seed key; encrypts the first seed key, and sends the encrypted first seed key to a key server in a quantum key distribution network; the first seed key is used for a session key negotiated between the key server and the second mobile terminal for communication; the key server receives the encrypted first seed key, decrypts the encrypted first seed key, obtains the decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal; the second mobile terminal receives the first seed key, and determines the second seed key; and the session key is determined using the first seed key and the second seed key.

[0075] The present invention will be described in further detail below in conjunction with the accompanying drawings and embodiments.

[0076] The embodiment of the present invention provides a key negotiation method, such as Figure 1 As shown, the method includes:

[0077] Step 101: The first mobile terminal determines a first seed key; encrypts the first seed key, and sends the encrypted first seed key to a key server in a quantum key distribution network;

[0078] The first seed key is used for the session key used by the key server to negotiate communication with the second mobile terminal;

[0079] Step 102: the key server receives the encrypted first seed key, decrypts the encrypted first seed key to obtain a decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal;

[0080] Step 103: The second mobile terminal receives the first seed key and determines a second seed key; and determines the session key using the first seed key and the second seed key.

[0081] Here, in step 101, when the first mobile terminal communicates with the second mobile terminal, in order to ensure the security of communication between the first mobile terminal and the second mobile terminal, it is necessary to determine the session key between the first mobile terminal and the second mobile terminal. In order to ensure that the first mobile terminal can participate in the generation process of the session key, the first mobile terminal can provide the second mobile terminal with partial data for generating the session key, that is, the first mobile terminal sends the first seed key to the second mobile terminal through the quantum key distribution network.

[0082] Here, in step 102, in actual application, the first seed key sent by the first mobile terminal can be sent to the second mobile terminal through a key server; or the first seed key sent by the first mobile terminal can be sent to the second mobile terminal through two different key servers.

[0083] Here, in step 103, the second mobile terminal can generate a session key between the first mobile terminal and the second mobile terminal using part of the data provided by the first mobile terminal and part of the data provided by itself, that is, the second mobile terminal generates a session key using the first seed key sent by the first mobile terminal through the quantum key distribution network and the second seed key provided by itself.

[0084] The following describes in detail the process of how to send the first seed key sent by the first mobile terminal to the second mobile terminal through the key server in the quantum key distribution network.

[0085] Case 1: Intra-domain negotiation, that is, the first seed key sent by the first mobile terminal is sent to the second mobile terminal through the same key server, wherein the same key server may refer to the key server bound to the first mobile terminal and the second mobile terminal being the same key server.

[0086] In actual application, in order to ensure that the session key will not be leaked even if part of the data provided by the first mobile terminal is lost, the first mobile terminal may send the identification information of the first seed key to the bound key server, so that the key server can send the first seed key to the second mobile terminal. Since what is received on the communication link between the key server and the first mobile terminal is the identification information of the first seed key sent by the first mobile terminal, and what is sent to the second mobile terminal on the communication link between the key server and the second mobile terminal is the first seed key, the session key will not be leaked even if data in any one of the two communication links is lost.

[0087] Based on this, in one embodiment, the first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network;

[0088] The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes:

[0089] The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; encrypts the first seed key identifier of the first seed key by using the first quantum key, and sends the encrypted first seed key identifier and the first quantum key identifier to the first key server.

[0090] Among them, the first key server may refer to a key server in a quantum key distribution network to which the first mobile terminal is bound, and at the same time, is also a key server in a quantum key distribution network to which the second mobile terminal is bound.

[0091] Here, the first seed key identifier may refer to a seed key identifier preset in the first mobile terminal by a first key server in a quantum key distribution network. The first quantum key identifier may refer to a quantum key identifier preset in the first mobile terminal by a first key server in a quantum key distribution network.

[0092] In actual application, the first key server can store the correspondence between the seed key identifier and the seed key. In this way, after the first key server receives the encrypted first seed key identifier sent by the first mobile terminal and decrypts the encrypted first seed key identifier to obtain the first seed key identifier, the correspondence between the seed key identifier and the seed key can be used to determine the first seed key corresponding to the first seed key identifier.

[0093] Based on this, in one embodiment, the key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including:

[0094] The first key server receives the encrypted first seed key identifier and the first quantum key identifier; determines a first quantum key corresponding to the first quantum key identifier, and uses the first quantum key to decrypt the encrypted first seed key identifier to obtain a decrypted first seed key.

[0095] Here, before the first key server receives the encrypted first seed key identifier and the first quantum key identifier sent by the first mobile terminal, it is also necessary to complete the processes of quantum key distribution network networking, mobile terminal binding, mobile terminal communication initiation, and session key negotiation initiation, which are specifically described as follows:

[0096] (1) Quantum key distribution network

[0097] Figure 2 is a schematic diagram of a quantum key distribution network, such as Figure 2 As shown, the quantum key distribution network is networked and includes several key servers, such as key server SC and key server SD. Quantum keys are distributed and shared between key servers in the quantum key distribution network through the quantum key distribution network, and have ideal security. For example, SC and SD are used to represent two key servers in the quantum key distribution network, and the key server SC shares the communication session key KCD with the key server SD.

[0098] (2) Mobile terminal binding

[0099] The mobile terminal can be bound to a key server through registration. The bound mobile terminal can charge the quantum key through the key server. After the charging is completed, the key server and the mobile terminal jointly hold several quantum keys. A small part of this quantum key is used for communication between the mobile terminal and the key server, and most of it is used for session key negotiation with other mobile terminals. The key server in the quantum key distribution network provides key services to mobile terminals. Mobile terminals register and bind to specific key servers, such as Figure 2 As shown, the mobile terminal UA is bound to the key server SC, and the communication session key KAC is shared between the mobile terminal UA and the key server SC; the mobile terminal UB is bound to the key server SD, and the communication session key KBD is shared between the mobile terminal UB and the key server SD; the mobile terminal UE is bound to the key server SD, and the communication session key KED is shared between the mobile terminal and the key server SD. Among them, the key server bound to the mobile terminal UA and the mobile terminal UB is an inter-domain key server, and the key server bound to the mobile terminal UB and the mobile terminal UE is an intra-domain server.

[0100] (3) Mobile terminal communication initiation

[0101] Assume that the first mobile terminal uses Figure 2 UB in the figure indicates that the second mobile terminal uses Figure 2 The UE in the figure indicates that the mobile terminal UB sends a communication request to the key server to which it is bound. The key server queries whether the mobile terminal UE is currently reachable and the key server to which the mobile terminal UE is bound through the quantum key distribution network. If the other end is unreachable, the session key negotiation fails.

[0102] Specifically, when two mobile terminals are bound to the same key server, Figure 2 As shown, both the mobile terminal UB and the mobile terminal UE are bound to the key server SD. UB initiates a communication request with the UE through the SD, and the SD checks whether the UE is reachable in the current state. If the UE is not reachable, it enters the failure state; if the UE is reachable, it enters the session key negotiation initiation state.

[0103] (4) Session key negotiation initiated

[0104] Mobile terminal 1 initiates a session key negotiation request through its bound key server, and mobile terminal 2 responds to the key negotiation request of mobile terminal 1 through its bound key server, and then the session key negotiation is initiated; if the number of failed attempts is exceeded, the session key negotiation fails.

[0105] In one example, if Figure 3 As shown, taking two mobile terminals bound to the same key server as an example, the process of initiating intra-domain session key negotiation is described, including the following steps:

[0106] Step 301: The mobile terminal UB and the mobile terminal UE are bound to a key server SD, and send a session request for session communication with the mobile terminal UE to the key server SD.

[0107] Step 302: The mobile terminal UB uses the session key KBD with the key server SD to encrypt and authenticate the sent session request, as follows:

[0108] Enc({UB,UE}||Req,KBD)||KIBD,MAC({UB,UE}||KIBD||Req,KBD),

[0109] Among them, Enc represents the symmetric encryption algorithm, MAC represents the message authentication code algorithm, {UB,UE} represents the communication between UB and UE, Req represents the specific content of the request (generally including communication request information, and including time, serial number, etc. to prevent replay), KBD and KIBD represent the session key and identifier between the mobile terminal UB and the key server SD.

[0110] Step 303: The key server SD checks and verifies the session request sent by the mobile terminal UB. If the verification is successful, step 304 is executed.

[0111] Specifically, the corresponding key KBD is first searched according to the session key identifier KIBD, and then the received data is decrypted and the message is authenticated using KBD. If the authentication fails, the request is rejected.

[0112] Step 304: The key server SD forwards the session request of the mobile terminal UB to the mobile terminal UE.

[0113] Here, the key server SD uses the session key KED with the mobile terminal UE and encrypts the session request and performs message authentication as follows:

[0114] Enc({UB,UE}||Req,KED)||KIED,MAC({UB,UE}||KIED||Req,KED),

[0115] Among them, KED and KIED represent the session key and identifier between the key server SD and the mobile terminal UE.

[0116] Step 305: The mobile terminal UE checks and verifies the data sent by the SD. If the verification is successful, the communication request of the UB is approved and step 306 is executed.

[0117] Specifically, firstly, the corresponding key KED is searched according to KIED, and then KED is used to decrypt and authenticate the received data. If the verification fails, the request is rejected.

[0118] Step 306: The mobile terminal UE sends a response of agreeing to communicate with the mobile terminal UB to the key server SD bound to itself.

[0119] Here, the mobile terminal UE uses the session key KED with the SD to encrypt and authenticate the response data, as follows:

[0120] Enc({UB,UE}||Rep,KED)||KIED,MAC({UB,UE}||KIED||Rep,KED),

[0121] Among them, Rep represents the specific content of the response (generally including communication response information, and including time, serial number and other information).

[0122] Step 307: The key server SD checks and verifies the received response data, that is, first searches for the corresponding key KED according to KIED, and then uses KED to decrypt and authenticate the received data. After verification, it enters (7).

[0123] Step 308: The key server SD sends the received response data to UB, that is, SD selects the session key KBD with UB, encrypts the response data and authenticates the message, and calculates and sends:

[0124] Enc({UB,UE}||Rep,KBD)||KIBD,MAC({UB,UE}||KIBD||Rep,KBD).

[0125] Step 309: The mobile terminal UB checks and verifies the received response data.

[0126] Specifically, firstly, the corresponding key KBD is searched according to the session key identifier KIBD, and then the received data is decrypted and the message is authenticated using KBD. After the verification is passed, the intra-domain session key negotiation initiation process is terminated and the intra-domain session key negotiation process is entered.

[0127] In actual application, in order to ensure that the loss of part of the data provided by the first mobile terminal will not lead to the leakage of the session key, the first key server receives the first seed key identifier sent by the first mobile terminal and determines the first seed key corresponding to the first seed key identifier. Then, the encrypted first seed key can be sent to the second mobile terminal.

[0128] Based on this, in one embodiment, sending the decrypted first seed key to the second mobile terminal includes:

[0129] The first key server determines a second shared quantum key and a corresponding second quantum key identifier between itself and the second mobile terminal; encrypts the decrypted first seed key using the second shared quantum key, and sends the encrypted first seed key and the second quantum key identifier to the second mobile terminal.

[0130] Here, the first key server may determine the identification information of the second mobile terminal according to the key negotiation request sent by the first mobile terminal in the key negotiation initiation phase, and determine the corresponding second mobile terminal according to the identification information of the second mobile terminal.

[0131] In actual application, the second mobile terminal may store the correspondence between the quantum key identifier and the quantum key. In this way, after the second mobile terminal receives the encrypted first seed key and the second quantum key identifier sent by the first key server, the second mobile terminal may use the correspondence between the quantum key identifier and the quantum key to determine the second quantum key corresponding to the second quantum key identifier. In this way, the encrypted first seed key may be decrypted using the second quantum key to obtain the first seed key.

[0132] Based on this, in one embodiment, the second mobile terminal receives the first seed key, including:

[0133] The second mobile terminal receives the encrypted first seed key and the second quantum key identifier; determines the corresponding second quantum key according to the second quantum key identifier; and decrypts the encrypted first seed key using the second quantum key to obtain the decrypted first seed key.

[0134] In actual application, after the second mobile terminal calculates the session key based on the first seed key and the second seed key, in order to ensure that the second mobile terminal can participate in the generation process of the session key, the second mobile terminal can provide the first mobile terminal with partial data for generating the session key, that is, the second mobile terminal sends the second seed key to the first mobile terminal through the quantum key distribution network.

[0135] Based on this, in one embodiment, the method further includes:

[0136] The second mobile terminal determines a second seed key identifier corresponding to the second seed key, and sends the second seed key identifier to the key server;

[0137] The key server receives the second seed key identifier; determines a second seed key corresponding to the second seed key identifier; and sends the second seed key to the first mobile terminal;

[0138] The first mobile terminal receives the second seed key; and determines the session key using the first seed key and the second seed key.

[0139] It should be noted that the process of the second mobile terminal sending the second seed key to the first mobile terminal through the quantum key distribution network is similar to the process of the first mobile terminal sending the first seed key to the second mobile terminal through the quantum key distribution network, which will not be repeated here.

[0140] In one example, if Figure 4 As shown, taking intra-domain negotiation as an example, a process of negotiating a session key between a first mobile terminal and a second mobile terminal is described, including:

[0141] Step 401: The mobile terminal UB uses the quantum key KBD of itself and the key server SD to encrypt the seed key identifier KI3 of the seed key K3, and sends the encrypted seed key identifier KI3 and the quantum key identifier KIBD of the quantum key KBD to the key server SD bound to itself.

[0142] The first mobile terminal may refer to a mobile terminal UB, and the second mobile terminal may refer to a mobile terminal UE. The mobile terminal UB and the mobile terminal UE are bound to a key server SD at the same time, and perform intra-domain session key negotiation through the key server SD.

[0143] Specifically, the mobile terminal UB encrypts the sent data and authenticates the message, that is, calculates and sends:

[0144] Enc({UB,UE}||KI3,KBD)||KIBD,MAC({UB,UE}||KI3||KIBD,KBD),

[0145] Among them, Enc represents a symmetric encryption algorithm, MAC represents a message authentication code algorithm, {UB,UE} represents the session key negotiation between UB and UE, KI3 represents the key identifier of the session seed key K3 selected by UB with UE, and KBD and KIBD represent the session key and identifier between UB and SD.

[0146] Step 402: The key server SD decrypts the encrypted seed key identifier KI3 sent by the mobile terminal UB to obtain the seed key corresponding to the seed key identifier KI3.

[0147] Here, the key server SD checks and verifies the data sent by the mobile terminal UB, that is, first searches for the corresponding key KBD according to KIBD, and then uses KBD to decrypt and authenticate the received data. If the verification fails, the request is rejected; if the verification succeeds, the key K3 is obtained according to the key identifier KI3.

[0148] Step 403: The key server SD sends the seed key K3 to the mobile terminal UE.

[0149] Here, the key server SD uses the session key KED with the mobile terminal UE to encrypt the seed key K3 and authenticate the message, that is, calculate and send:

[0150] Enc({UB,UE}||K3,KED)||KIED,MAC({UB,UE}||K3||KIED,KED),

[0151] Among them, KED and KIED represent the session key and identifier between SD and UE.

[0152] Step 404: The mobile terminal UE selects a seed key K4 from its own stored keys and calculates the final session key.

[0153] Here, the mobile terminal UE checks and verifies the data sent by the key server SD, that is, first searches for the corresponding key KED according to KIED, and then uses KED to decrypt and authenticate the received data. If the verification fails, the request is rejected; if the verification succeeds, K3 is decrypted, and the seed key K4 stored in itself is used to calculate the final session key.

[0154] SKBE=F(K3,K4),

[0155] Among them, SKBE represents the session key, F() represents a one-way function, which should have strong one-wayness and randomness, and cannot be easily inverted. Cryptographic hash functions, key expansion algorithms, etc. can be used.

[0156] In one example, if Figure 5 As shown, taking intra-domain negotiation as an example, a process of negotiating a session key between a second mobile terminal and a first mobile terminal is described, including:

[0157] Step 501: The mobile terminal UE forwards the identifier KI4 of the session seed key K4 of the mobile terminal UE to SD. The UE selects the session key KED with SD and encrypts the data and authenticates the message, i.e., calculates and sends:

[0158] Enc({UB,UE}||KI4,KED)||KIED,MAC({UB,UE}||KI4||KIED,KED).

[0159] Step 502: The key server SD checks and verifies the data sent by the UE, that is, first searches for the corresponding key KED according to KIED, and then uses KED to decrypt and authenticate the received data. If the verification fails, the request is rejected; if the verification succeeds, the key K4 is obtained by querying according to the key identifier KI4.

[0160] Step 503: The key server SD forwards the session seed key K4 of the terminal UE to the terminal UB. SD selects the session key KBD with UB and encrypts the data and authenticates the message, that is, calculates and sends:

[0161] Enc({UB,UE}||K4,KBD)||KIBD,MAC({UB,UE}||K4||KIBD,KBD).

[0162] Step 504: Terminal UB checks and verifies the data sent by SD, that is, first searches for the corresponding key KBD according to KIBD, and then uses KBD to decrypt and authenticate the received data. If the verification fails, the request is rejected; if the verification succeeds, K4 is decrypted and the process goes to (14).

[0163] Step 505: UB calculates the final session key SKBE: SKBE=F(K3, K4).

[0164] Here, the terminal UB and the terminal UE use the session key SKBE for subsequent confidential communication.

[0165] Here, the first mobile terminal and the second mobile terminal perform intra-domain session key negotiation through the same bound key server, which has the following advantages:

[0166] (1) Provide a method and process for a mobile terminal to negotiate and generate a session key with the assistance of a quantum key distribution network. The session key is negotiated and determined by both mobile terminals. The centralized node such as the quantum key distribution network only serves as an intermediate communication medium for key negotiation and cannot specify the final session key.

[0167] (2) The two communicating parties each select a seed key and use the two seed keys as input to calculate the final session key through the F() function. Since the two seed keys will not be transmitted in the same link at the same time, that is, the identifier of the first seed key is transmitted on the communication link between the first mobile terminal and the key server, and the first seed key is transmitted on the communication link between the second mobile terminal and the key server, it can effectively avoid the key leakage caused by the seed key being stolen in the link.

[0168] (3) The session key is generated by calculating a portion of data provided by both mobile terminals. Any portion of data only appears in the classic communication link of one mobile terminal. Even if the portion of data transmitted by the communication line of one mobile terminal is lost, it will not lead to the leakage of the session key, which has stronger security.

[0169] (4) When processing data, the quantum key identification information is transmitted, and the quantum key corresponding to the quantum key identification is used to encrypt and protect the integrity of the transmitted content, thereby avoiding the key from being directly transmitted in the communication link and effectively preventing the key from being leaked.

[0170] Case 2: inter-domain negotiation, that is, sending the first seed key sent by the first mobile terminal to the second mobile terminal through two different key servers, wherein the different key servers may refer to key servers bound to the first mobile terminal and the second mobile terminal being different key servers.

[0171] In actual application, in order to ensure that the session key will not be leaked even if part of the data provided by the first mobile terminal is lost, the first mobile terminal can send the identification information of the first seed key to the key server bound to itself, so that the key server can send the first seed key to the key server bound to the second mobile terminal, and the key server bound to the second mobile terminal can send the first seed key to the second mobile terminal. Since what is received on the communication link between the key server and the first mobile terminal is the identification information of the first seed key sent by the first mobile terminal, and what is sent to the second mobile terminal on the communication link between the key server and the second mobile terminal is the first seed key, the session key will not be leaked even if data in any one of the two communication links is lost.

[0172] Based on this, in one embodiment, the first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network;

[0173] The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes:

[0174] The first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; uses the third shared quantum key to encrypt the first seed key identifier of the first seed key, and sends the encrypted first seed key identifier and the third quantum key identifier to the second key server.

[0175] The second key server may refer to a key server in a quantum key distribution network to which the first mobile terminal is bound.

[0176] Here, the first seed key may refer to a seed key preset in the first mobile terminal by a first key server in a quantum key distribution network. The first quantum key identifier may refer to a seed key identifier preset in the first mobile terminal by a first key server in a quantum key distribution network.

[0177] In actual application, the second key server can store the correspondence between the seed key identifier and the seed key. In this way, after the second key server receives the encrypted first seed key identifier sent by the first mobile terminal and decrypts the encrypted first seed key identifier to obtain the first seed key identifier, it can use the correspondence between the seed key identifier and the seed key to determine the first seed key corresponding to the first seed key identifier.

[0178] Based on this, in one embodiment, the key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including:

[0179] The second key server receives the encrypted first seed key identifier and the third quantum key identifier; uses the third quantum key identifier to determine the corresponding third shared quantum key; and uses the third shared quantum key to decrypt the encrypted first seed key identifier to obtain the decrypted first seed key.

[0180] Here, before the first key server receives the encrypted first seed key identifier and the first quantum key identifier sent by the first mobile terminal, it is also necessary to complete the processes of quantum key distribution network networking, mobile terminal binding, mobile terminal communication initiation, and session key negotiation initiation, which are specifically described as follows:

[0181] (1) Quantum key distribution network

[0182] Figure 2 is a schematic diagram of a quantum key distribution network, such as Figure 2 As shown, the quantum key distribution network is networked and includes several key servers, such as SC and SD. Quantum keys are distributed and shared between key servers in the quantum key distribution network through the quantum key distribution network, and have ideal security. For example, SC and SD are used to represent two key servers in the quantum key distribution network, and the key server SC shares the communication session key KCD with the key server SD.

[0183] (2) Mobile terminal binding

[0184] The mobile terminal can be bound to a key server through registration. The bound mobile terminal can charge the quantum key through the key server. After the charging is completed, the key server and the mobile terminal jointly hold several quantum keys. A small part of this quantum key is used for communication between the mobile terminal and the key server, and most of it is used for session key negotiation with other mobile terminals. The key server in the quantum key distribution network provides key services to mobile terminals. Mobile terminals register and bind to specific key servers, such as Figure 2 As shown, the mobile terminal UA is bound to the key server SC, and the communication session key KAC is shared between the mobile terminal UA and the key server SC; the mobile terminal UB is bound to the key server SD, and the communication session key KBD is shared between the mobile terminal UB and the key server SD; the mobile terminal UE is bound to the key server SD, and the communication session key KED is shared between the mobile terminal and the key server SD. Among them, the key server bound to the mobile terminal UA and the mobile terminal UB is an inter-domain key server, and the key server bound to the mobile terminal UB and the mobile terminal UE is an intra-domain server.

[0185] (3) Mobile terminal communication initiation

[0186] Assume that the first mobile terminal uses Figure 2 UB in the figure indicates that the second mobile terminal uses Figure 2 The UE in the figure indicates that the mobile terminal UB sends a communication request to the key server to which it is bound. The key server queries whether the mobile terminal UE is currently reachable and the key server to which the mobile terminal UE is bound through the quantum key distribution network. If the other end is unreachable, the session key negotiation fails.

[0187] Specifically, when two mobile terminals are bound to the same key server, Figure 2 As shown, both the mobile terminal UB and the mobile terminal UE are bound to the key server SD. UB initiates a communication request with the UE through the SD, and the SD checks whether the UE is reachable in the current state. If the UE is not reachable, it enters the failure state; if the UE is reachable, it enters the session key negotiation initiation state.

[0188] (4) Session key negotiation initiated

[0189] Mobile terminal 1 initiates a session key negotiation request through its bound key server, and mobile terminal 2 responds to the key negotiation request of mobile terminal 1 through its bound key server, and then the session key negotiation is initiated; if the number of failed attempts is exceeded, the session key negotiation fails.

[0190] In one example, if Figure 6As shown, taking two mobile terminals bound to different key servers as an example, the process of initiating inter-domain session key negotiation is described, including the following steps:

[0191] Step 601: The mobile terminal UA and the mobile terminal UB are bound to the key server SC, and send a session request to the key server SC for session communication with the mobile terminal UB:

[0192] Here, the mobile terminal UA selects the session key KAC with the key server SC, encrypts the session request and authenticates the message, that is, calculates and sends:

[0193] Enc({UA,UB}||Req,KAC)||KIAC,MAC({UA,UB}||KIAC||Req,KAC),

[0194] Among them, Enc represents the symmetric encryption algorithm, MAC represents the message authentication code algorithm, {UA, UB} represents the communication between the mobile terminal UA and the mobile terminal UB, Req represents the specific content of the request (generally including the communication request information, and including the time, sequence number, etc. to prevent replay), KAC and KIAC represent the session key and identifier of UA and SC.

[0195] Step 602: The key server SC checks and verifies the session request sent by the mobile terminal UA. If the verification is successful, step 603 is executed.

[0196] Specifically, first, the corresponding key KAC is found according to KIAC, and then the received data is decrypted and the message is authenticated using KAC. If the verification fails, the request is rejected.

[0197] Step 603: The key server SC forwards the session request of the mobile terminal UA to the key server SD bound to the mobile terminal UB.

[0198] Here, the key server SC selects the session key KCD with the key server SD, and encrypts and authenticates the session request data, that is, calculates and sends:

[0199] Enc({UA,UB}||Req,KCD)||KICD,MAC({UA,UB}||KICD||Req,KCD),

[0200] Among them, KCD and KICD represent the session key and identifier of the key server SC and the key server SD.

[0201] Step 604: The key server SD checks and verifies the data sent by the key server SC. If the verification is successful, execute step 605.

[0202] Specifically, the corresponding key KCD is first searched according to KICD, and then the received data is decrypted and the message is authenticated using KCD. If the verification fails, the request is rejected.

[0203] Step 605: The key server SD forwards the session request of the mobile terminal UA to the mobile terminal UB.

[0204] Specifically, the key server SD selects the session key KBD with the mobile terminal UB, and encrypts and authenticates the session request data, that is, calculates and sends:

[0205] Enc({UA,UB}||Req,KBD)||KIBD,MAC({UA,UB}||KIBD||Req,KBD),

[0206] Among them, KBD and KIBD represent the session key and identifier of SD and UB.

[0207] Step 606: The mobile terminal UB checks and verifies the session request sent by the key server SD. If the verification is successful, the communication request of the UA is approved and step 607 is executed.

[0208] Specifically, the corresponding key KBD is first searched according to KIBD, and then the received data is decrypted and the message is authenticated using KBD. If the authentication fails, the request is rejected.

[0209] Step 607: The mobile terminal UB sends a response of agreeing to communicate with the mobile terminal UA to the key server SD bound to itself. The mobile terminal UB selects the session key KBD with SD and encrypts and authenticates the response data, that is, calculates and sends:

[0210] Enc({UA,UB}||Rep,KBD)||KIBD,MAC({UA,UB}||KIBD||Rep,KBD),

[0211] Rep represents the specific content of the response (generally including communication response information, and including time, sequence number and other information).

[0212] Step 608: The key server SD checks and verifies the received response data, and executes step 609 after the verification is passed.

[0213] Specifically, firstly, the corresponding key KBD is searched according to KIBD, and then the received data is decrypted and the message is authenticated using KBD.

[0214] Step 609: The key server SD sends the received response data to the key server SC.

[0215] Specifically, the key server SD selects the session key KCD with the key server SC, encrypts the response data and authenticates the message, and calculates and sends:

[0216] Enc({UA,UB}||Rep,KCD)||KICD,MAC({UA,UB}||KICD||Rep,KCD).

[0217] Step 610: The key server SC checks and verifies the received response data, and executes step 611 after the verification is passed.

[0218] Specifically, firstly, the corresponding key KCD is searched according to the key identifier KICD, and then the received data is decrypted and the message is authenticated using the KCD.

[0219] Step 611: The key server SC sends the received response data to the mobile terminal UA.

[0220] Specifically, the key server SC selects the session key KAC with the mobile terminal UA, and encrypts and authenticates the response data, that is, calculates and sends:

[0221] Enc({UA,UB}||Rep,KAC)||KIAC,MAC({UA,UB}||KIAC||Rep,KAC).

[0222] Step 612: The mobile terminal UA checks and verifies the received response data.

[0223] Specifically, first, the corresponding key KAC is found according to KIAC, and then the received data is decrypted and the message is authenticated using KAC. After the verification is passed, the inter-domain session key negotiation initiation process is terminated and the inter-domain session key negotiation process is entered.

[0224] In actual application, in order to ensure that the loss of part of the data provided by the first mobile terminal will not lead to the leakage of the session key, the second key server receives the first seed key identifier sent by the first mobile terminal and determines the first seed key corresponding to the first seed key identifier. Then, the first seed key can be sent to the second key server bound to the second mobile terminal, and the first seed key can be sent to the second mobile terminal through the second key server.

[0225] Based on this, in one embodiment, sending the decrypted first seed key to the second mobile terminal includes:

[0226] The second key server sends the decrypted first seed key to the third key server;

[0227] The third key server receives the first seed key; determines the fourth quantum key and the corresponding fourth quantum key identification information between itself and the second mobile terminal; encrypts the first seed key using the fourth quantum key, and sends the encrypted first seed key and the fourth quantum key identification to the second mobile terminal.

[0228] Among them, the third key server may refer to a key server in a quantum key distribution network bound to the second mobile terminal.

[0229] In actual application, the second mobile terminal may store the correspondence between the quantum key identifier and the quantum key. In this way, after the second mobile terminal receives the encrypted first seed key and the fourth quantum key identifier sent by the third key server, the second mobile terminal may use the correspondence between the quantum key identifier and the quantum key to determine the fourth quantum key corresponding to the fourth quantum key identifier. In this way, the encrypted first seed key may be decrypted using the fourth quantum key to obtain the first seed key.

[0230] Based on this, in one embodiment, the second mobile terminal receives the first seed key, including:

[0231] The second mobile terminal receives the encrypted first seed key and the fourth quantum key identifier sent by the third key server; determines the corresponding fourth quantum key according to the fourth quantum key identifier; and uses the fourth quantum key to decrypt the encrypted first seed key to obtain the first seed key.

[0232] In actual application, after the second mobile terminal calculates the session key based on the first seed key and the second seed key, in order to ensure that the second mobile terminal can participate in the generation process of the session key, the second mobile terminal can provide the first mobile terminal with partial data for generating the session key, that is, the second mobile terminal sends the second seed key to the first mobile terminal through the quantum key distribution network.

[0233] Based on this, in one embodiment, the method further includes:

[0234] The second mobile terminal determines a second seed key identifier corresponding to the second seed key, and sends the second seed key identifier to the key server;

[0235] The key server receives the second seed key identifier; determines a second seed key corresponding to the second seed key identifier; and sends the second seed key to the first mobile terminal;

[0236] The first mobile terminal receives the second seed key; and determines the session key using the first seed key and the second seed key.

[0237] It should be noted that the process of the second mobile terminal sending the second seed key to the first mobile terminal through the quantum key distribution network is similar to the process of the first mobile terminal sending the first seed key to the second mobile terminal through the quantum key distribution network, which will not be repeated here.

[0238] In one example, if Figure 7 As shown, taking inter-domain negotiation as an example, a process of negotiating a session key between a first mobile terminal and a second mobile terminal is described, including:

[0239] Step 701: The mobile terminal UA uses the quantum key KAC with the key server SC to encrypt the key identifier KI1 of the selected seed key K1, and sends the encrypted seed key identifier KI1 and the quantum key identifier KIAC of the quantum key KAC to the key server SC bound to itself.

[0240] The first mobile terminal may be a mobile terminal UA, and the second mobile terminal may be a mobile terminal UB. The mobile terminal UA is bound to a key server SC, and the mobile terminal UB is bound to a key server SD, and an inter-domain session key negotiation is performed through the key server SC and the key server SD.

[0241] Specifically, the mobile terminal UA uses the quantum key KAC with the key server SC to encrypt and authenticate the sent data, that is, calculate and send:

[0242] Enc({UA,UB}||KI1,KAC)||KIAC,MAC({UA,UB}||KI1||KIAC,KAC),

[0243] Among them, Enc represents a symmetric encryption algorithm, MAC represents a message authentication code algorithm, {UA, UB} represents the session key negotiation between the mobile terminal UA and the mobile terminal UB, KI1 represents the seed key identifier of the seed key K1 selected by the mobile terminal UA for the session with the mobile terminal UB, and KAC and KIAC represent the quantum key and identifier of the mobile terminal UA and the key server SC.

[0244] Step 702: The key server SC checks and verifies the data sent by the mobile terminal UA. If the verification is successful, the seed key K1 is obtained by querying according to the seed key identifier KIAB.

[0245] Specifically, the corresponding quantum key KAC is first searched according to the quantum key identifier KIAC, and then the received data is decrypted and the message is authenticated using the quantum key KAC. If the verification fails, the request is rejected.

[0246] Step 703: The key server SC uses the quantum key distribution network to send the seed key K1 of the mobile terminal UA to the key server SD bound to the mobile terminal UB.

[0247] Step 704: The key server SD receives the seed key K1 of the mobile terminal UA using the quantum key distribution network.

[0248] Step 705: The key server SD forwards the seed key K1 of the mobile terminal UA to the mobile terminal UB.

[0249] Specifically, the key server SD selects the quantum key KBD of the mobile terminal UB and encrypts the data and authenticates the message, that is, calculates and sends:

[0250] Enc({UA,UB}||K1,KBD)||KIBD,MAC({UA,UB}||K1||KIBD,KBD),

[0251] Among them, KBD and KIBD represent the session key and identifier of SD and UB.

[0252] Step 706: The mobile terminal UB checks and verifies the data sent by the key server SD. If the verification is successful, the seed key K1 is decrypted and step 707 is executed.

[0253] Specifically, the corresponding quantum key KBD is first searched according to the quantum key identifier KIBD, and then the received data is decrypted and the message is authenticated using the quantum key KBD. If the verification fails, the request is rejected.

[0254] Step 707: The mobile terminal selects the seed key K2 from the stored keys and calculates the final session key SKAB.

[0255] SKAB=F(K1,K2),

[0256] Among them, F() represents a one-way function, which should have strong one-wayness and randomness, and cannot be easily inverted. Cryptographic hash functions, key expansion algorithms, etc. can be used.

[0257] In one example, if Figure 8 As shown, taking inter-domain negotiation as an example, a process of negotiating a session key between a second mobile terminal and a first mobile terminal is described, including:

[0258] Step 801: The mobile terminal UB uses the quantum key KBD of the key server SD bound to itself to encrypt the seed key identifier KI2 of the selected seed key K2, and sends the encrypted seed key identifier KI2 and quantum key identifier KIBD to the key server SD.

[0259] Specifically, the mobile terminal UB encrypts the sent data and authenticates the message, that is, calculates and sends:

[0260] Enc({UA,UB}||KI2,KBD)||KIBD,MAC({UA,UB}||KI2||KIBD,KBD)

[0261] Step 802: The key server SD checks and verifies the data sent by the mobile terminal UB. If the verification is successful, the seed key K2 is obtained according to the seed key identifier KI2.

[0262] Specifically, first, the corresponding quantum key KBD is searched according to the quantum key identifier KIBD, and then the received data is decrypted and the message is authenticated using the quantum key KBD. If the verification fails, the request is rejected.

[0263] Step 803: The key server SD uses the quantum key distribution network to send the seed key K2 of the mobile terminal UB to the key server SC bound to the terminal UA.

[0264] Step 804: The key server SC receives the seed key K2 of the mobile terminal UB using the quantum key distribution network.

[0265] Step 805: The key server SC forwards the seed key K2 of the mobile terminal UB to the mobile terminal UA.

[0266] Specifically, the key server SC selects the quantum key KAC of the mobile terminal UA to encrypt the data and authenticate the message, that is, calculate and send:

[0267] Enc({UA,UB}||K2,KAC)||KIAC,MAC({UA,UB}||K2||KIAC,KAC).

[0268] Step 806: The mobile terminal UA checks and verifies the data sent by the key server SC. If the verification is successful, it decrypts to obtain K2 and executes step 807.

[0269] Specifically, first, the corresponding quantum key KAC is found according to the quantum key identifier KIAC, and then the received data is decrypted and the message is authenticated using KAC. If the verification fails, the request is rejected.

[0270] Step 807: The mobile terminal UA calculates the final session key SKAB.

[0271] SKAB=F(K1,K2).

[0272] Here, the first mobile terminal and the second mobile terminal perform inter-domain session key negotiation through their respective bound key servers, which has the following advantages:

[0273] (1) Provide a method and process for a mobile terminal to negotiate and generate a session key with the assistance of a quantum key distribution network. The session key is negotiated and determined by both mobile terminals. The centralized node such as the quantum key distribution network only serves as an intermediate communication medium for key negotiation and cannot specify the final session key.

[0274] (2) The two communicating parties each select a seed key and use the two seed keys as input to calculate the final session key through the F() function. Since the two seed keys will not be transmitted in the same link at the same time, that is, the identifier of the first seed key is transmitted on the communication link between the first mobile terminal and the key server, and the first seed key is transmitted on the communication link between the second mobile terminal and the key server, it can effectively avoid the key leakage caused by the seed key being stolen in the link.

[0275] (3) The session key is generated by calculating a portion of data provided by both mobile terminals. Any portion of data only appears in the classic communication link of one mobile terminal. Even if the portion of data transmitted by the communication line of one mobile terminal is lost, it will not lead to the leakage of the session key, which has stronger security.

[0276] (4) When processing data, the quantum key identification information is transmitted, and the quantum key corresponding to the quantum key identification is used to encrypt and protect the integrity of the transmitted content, thereby avoiding the key from being directly transmitted in the communication link and effectively preventing the key from being leaked.

[0277] By adopting the technical solution of the embodiment of the present invention, the first mobile terminal provides data for generating a session key to the second mobile terminal through a key server. In this way, the second mobile terminal can generate a session key according to the seed key provided by the first mobile terminal through the key server. Compared with the related art in which the mobile terminal can only passively receive the session key sent by the central node in the quantum key distribution network, resulting in a relatively single key generation method, it can ensure that the first mobile terminal participates in the session key generation process.

[0278] In order to implement the key negotiation method of the embodiment of the present invention, the embodiment of the present invention also provides a key negotiation system. Fig. 9 FIG. 1 is a schematic diagram of the structure of a key agreement system according to an embodiment of the present invention; Fig. 9As shown, the system comprises:

[0279] The first mobile terminal 91 is used to determine a first seed key; encrypt the first seed key and send the encrypted first seed key to a key server in a quantum key distribution network; the first seed key is used as a session key for the key server to negotiate with the second mobile terminal for communication;

[0280] The key server 92 is configured to receive the encrypted first seed key, decrypt the encrypted first seed key to obtain a decrypted first seed key, and send the decrypted first seed key to the second mobile terminal;

[0281] The second mobile terminal 93 is used to receive the first seed key and determine the second seed key; and determine the session key using the first seed key and the second seed key.

[0282] Here, the implementation process of the first mobile terminal, the second mobile terminal and the key server has been described above and will not be repeated here.

[0283] The embodiment of the present invention also provides a key negotiation method, which is applied to a first mobile terminal, such as Fig.10 As shown, including:

[0284] Step 1001: Determine a first seed key identifier corresponding to a first seed key; the first seed key is used by a second mobile terminal to determine a session key used for communicating with the first mobile terminal;

[0285] Step 1002: Encrypt the first seed key identifier, and send the encrypted first seed key identifier to a key server in the quantum key distribution network;

[0286] The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key.

[0287] Based on this, in one embodiment, the first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network;

[0288] The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes:

[0289] The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; encrypts the first seed key identifier of the first seed key by using the first quantum key, and sends the encrypted first seed key identifier and the first quantum key identifier to the first key server.

[0290] Based on this, in one embodiment, the first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network;

[0291] The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes:

[0292] The first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; uses the third shared quantum key to encrypt the first seed key identifier of the first seed key, and sends the encrypted first seed key identifier and the third quantum key identifier to the second key server.

[0293] By adopting the technical solution of the embodiment of the present invention, the first mobile terminal provides data for generating a session key to the second mobile terminal through a key server. In this way, the second mobile terminal can generate a session key according to the seed key provided by the first mobile terminal through the key server. Compared with the related art in which the mobile terminal can only passively receive the session key sent by the central node in the quantum key distribution network, resulting in a relatively single key generation method, it can ensure that the first mobile terminal participates in the session key generation process.

[0294] In order to implement the key negotiation method of the embodiment of the present invention, the embodiment of the present invention also provides a key negotiation device. Fig.11 FIG. 1 is a schematic diagram of the structure of a key agreement device according to an embodiment of the present invention; Fig.11 As shown, the device comprises:

[0295] The first processing unit 111 is used to determine a first seed key identifier corresponding to a first seed key; the first seed key is used by the second mobile terminal to determine a session key used for communicating with the first mobile terminal;

[0296] A second processing unit 112 is used to encrypt the first seed key identifier and send the encrypted first seed key identifier to a key server in the quantum key distribution network;

[0297] The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key.

[0298] In addition, according to at least one embodiment of the present invention, the second processing unit 112 is specifically configured to:

[0299] The first mobile terminal and the second mobile terminal are both bound to a first key server in a quantum key distribution network; the first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; the first seed key identifier of the first seed key is encrypted using the first quantum key, and the encrypted first seed key identifier and the first quantum key identifier are sent to the first key server.

[0300] In addition, according to at least one embodiment of the present invention, the second processing unit 112 is specifically configured to:

[0301] The first mobile terminal is bound to a second key server in a quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network; the first mobile terminal determines a third shared quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; the first seed key identifier of the first seed key is encrypting by using the third shared quantum key, and the encrypted first seed key identifier and the third quantum key identifier are sent to the second key server.

[0302] In actual application, the first processing unit 112 and the second processing unit 112 may be implemented by a processor in a key negotiation device.

[0303] It should be noted that: the key negotiation device provided in the above embodiment only uses the division of the above program modules as an example when performing key negotiation. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the above-described processing. In addition, the key negotiation device provided in the above embodiment and the key negotiation method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0304] The embodiment of the present invention also provides a mobile terminal, such as Fig.12 As shown, including:

[0305] Communication interface 121, capable of exchanging information with other devices;

[0306] The processor 122 is connected to the communication interface 121 and is used to execute the method provided by one or more technical solutions on the smart device side when running the computer program. The computer program is stored in the first memory 123.

[0307] It should be noted that the specific processing process of the processor 122 and the communication interface 121 is detailed in the method embodiment and will not be repeated here.

[0308] Of course, in actual application, the various components in the network device are coupled together through the bus system 124. It is understandable that the bus system 124 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 124 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Fig.12 Various buses are labeled as bus system 124 .

[0309] The memory 123 in the embodiment of the present application is used to store various types of data to support the operation of the network device. Examples of such data include: any computer program used to operate on the network device.

[0310] The method disclosed in the above embodiment of the present application can be applied to the processor 122, or implemented by the processor 122. The processor 122 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of the hardware in the processor 122 or an instruction in the form of software. The above-mentioned processor 122 may be a general-purpose processor, a digital data processor (DSP, Digital Signal Processor), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The processor 122 can implement or execute the various methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiment of the present application, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, which is located in the memory 123, and the processor 122 reads the information in the memory 123 and completes the steps of the above method in combination with its hardware.

[0311] In an exemplary embodiment, the mobile terminal 120 may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), field programmable gate array (FPGA), general processor, controller, microcontroller (MCU), microprocessor, or other electronic components to execute the aforementioned method.

[0312] It can be understood that the memory (memory 123) of the embodiment of the present application can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a ferromagnetic random access memory, a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAMbus random access memory (DRRAM, Direct Rambus Random Access Memory).The memories described in the embodiments of the present application are intended to include, but are not limited to, these and any other suitable types of memories.

[0313] In an exemplary embodiment, the embodiment of the present invention further provides a storage medium, namely a computer storage medium, specifically a computer-readable storage medium, for example, including a memory 123 storing a computer program, and the computer program can be executed by the processor 122 of the mobile terminal 120 to complete the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface storage, optical disk, or CD-ROM.

[0314] It should be noted that: "first", "second", etc. are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0315] In addition, the technical solutions described in the embodiments of the present invention can be arbitrarily combined without conflict.

[0316] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention.

Claims

1. A key negotiation method, characterized in that: The method comprises: The first mobile terminal determines a first seed key; encrypts the first seed key and sends the encrypted first seed key to a key server in a quantum key distribution network; the first seed key is used for the key server to negotiate a session key for communication with the second mobile terminal; the encryption is performed based on the first quantum key; The key server receives the encrypted first seed key, decrypts the encrypted first seed key to obtain a decrypted first seed key, and sends the decrypted first seed key to the second mobile terminal; the decryption is performed according to the first quantum key; The second mobile terminal receives the first seed key and determines a second seed key; and determines the session key using the first seed key and the second seed key; Wherein, the method further comprises: The second mobile terminal determines a second seed key identifier corresponding to the second seed key, and sends the second seed key identifier to the key server; The key server receives the second seed key identifier; determines a second seed key corresponding to the second seed key identifier; and sends the second seed key to the first mobile terminal; The first mobile terminal receives the second seed key; and determines the session key using the first seed key and the second seed key.

2. The method according to claim 1, characterized in that The first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network; The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes: The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; The first seed key identifier of the first seed key is encrypted by using the first quantum key, and the encrypted first seed key identifier and the first quantum key identifier are sent to the first key server.

3. The method according to claim 2, characterized in that The key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including: The first key server receives the encrypted first seed key identifier and the first quantum key identifier; determines a first quantum key corresponding to the first quantum key identifier, and uses the first quantum key to decrypt the encrypted first seed key identifier to obtain a decrypted first seed key.

4. The method according to claim 3, characterized in that The sending the decrypted first seed key to the second mobile terminal includes: The first key server determines a second quantum key and a corresponding second quantum key identifier between itself and the second mobile terminal; encrypts the decrypted first seed key using the second quantum key, and sends the encrypted first seed key and the second quantum key identifier to the second mobile terminal.

5. The method according to claim 4, characterized in that The second mobile terminal receiving the first seed key includes: The second mobile terminal receives the encrypted first seed key and the second quantum key identifier; determines the corresponding second quantum key according to the second quantum key identifier; and decrypts the encrypted first seed key using the second quantum key to obtain the decrypted first seed key.

6. The method according to claim 2, characterized in that The first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network; The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes: The first mobile terminal determines a third quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; The first seed key identifier of the first seed key is encrypted using the third quantum key, and the encrypted first seed key identifier and the third quantum key identifier are sent to the second key server.

7. The method according to claim 6, characterized in that The key server receives the encrypted first seed key identifier, decrypts the encrypted first seed key identifier, and obtains the decrypted first seed key, including: The second key server receives the encrypted first seed key identifier and the third quantum key identifier; uses the third quantum key identifier to determine the corresponding third quantum key; and uses the third quantum key to decrypt the encrypted first seed key identifier to obtain a decrypted first seed key.

8. The method according to claim 7, characterized in that The sending the decrypted first seed key to the second mobile terminal includes: The second key server sends the decrypted first seed key to the third key server; The third key server receives the first seed key; determines the fourth quantum key and the corresponding fourth quantum key identification information between itself and the second mobile terminal; encrypts the first seed key using the fourth quantum key, and sends the encrypted first seed key and the fourth quantum key identification to the second mobile terminal.

9. The method according to claim 8, characterized in that The second mobile terminal receiving the first seed key includes: The second mobile terminal receives the encrypted first seed key and the fourth quantum key identifier sent by the third key server; determines the corresponding fourth quantum key according to the fourth quantum key identifier; and uses the fourth quantum key to decrypt the encrypted first seed key to obtain the first seed key.

10. A key negotiation method, characterized in that: Applied to a first mobile terminal, the method includes: Determine a first seed key identifier corresponding to a first seed key; the first seed key is used by the second mobile terminal to determine a session key used for communicating with the first mobile terminal; Encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network; the encryption is performed based on the first quantum key; The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key; The first mobile terminal receives the second seed key, and determines the session key using the first seed key and the second seed key; wherein the second seed key is determined by the key server according to the received second seed key identifier, the second seed key corresponds to the second seed key identifier, and the second seed key is sent by the key server to the first mobile terminal; the second seed key identifier is determined by the second mobile terminal, the second seed key identifier corresponds to the second seed key, and the second seed key identifier is sent by the second mobile terminal to the key server.

11. The method according to claim 10, characterized in that The first mobile terminal and the second mobile terminal are both bound to a first key server in the quantum key distribution network; The encrypting the first seed key and sending the encrypted first seed key to a key server in the quantum key distribution network includes: The first mobile terminal determines a first quantum key and a corresponding first quantum key identifier between the first mobile terminal and the first key server; The first seed key identifier of the first seed key is encrypted by using the first quantum key, and the encrypted first seed key identifier and the first quantum key identifier are sent to the first key server.

12. The method according to claim 10, characterized in that The first mobile terminal is bound to a second key server in the quantum key distribution network, and the second mobile terminal is bound to a third key server in the quantum key distribution network; The step of encrypting the first seed key identifier and sending the encrypted first seed key identifier to a key server in a quantum key distribution network includes: The first mobile terminal determines a third quantum key and a corresponding third quantum key identifier between the first mobile terminal and the second key server; The first seed key identifier of the first seed key is encrypted using the third quantum key, and the encrypted first seed key identifier and the third quantum key identifier are sent to the second key server.

13. A key negotiation device, characterized in that: Applied to a first mobile terminal, comprising: A first processing unit, configured to determine a first seed key identifier corresponding to a first seed key; the first seed key is used by the second mobile terminal to determine a session key used for communicating with the first mobile terminal; A second processing unit is used to encrypt the first seed key identifier and send the encrypted first seed key identifier to a key server in the quantum key distribution network; the encryption is performed according to the first quantum key; The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key; a third processing unit, configured to receive a second seed key, and determine the session key using the first seed key and the second seed key; wherein the second seed key is determined by the key server according to a received second seed key identifier, the second seed key corresponds to the second seed key identifier, and the second seed key is sent by the key server to the first mobile terminal; the second seed key identifier is determined by the second mobile terminal, the second seed key identifier corresponds to the second seed key, and the second seed key identifier is sent by the second mobile terminal to the key server.

14. A first mobile terminal, characterized in that: include: Communication interface and processor, The processor is configured to determine a first seed key identifier corresponding to the first seed key; The first seed key is used for the second mobile terminal to determine a session key used for communicating with the first mobile terminal; the first seed key identifier is encrypted, and the encrypted first seed key identifier is sent to a key server in a quantum key distribution network; the encryption is performed based on the first quantum key; The encrypted first seed key identifier is used by the key server to send the first seed key to the second mobile terminal to generate the session key; The communication interface is used to receive a second seed key; The processor is further used to determine the session key using the first seed key and the second seed key; wherein the second seed key is determined by the key server according to a received second seed key identifier, the second seed key corresponds to the second seed key identifier, and the second seed key is sent by the key server to the first mobile terminal; the second seed key identifier is determined by the second mobile terminal, the second seed key identifier corresponds to the second seed key, and the second seed key identifier is sent by the second mobile terminal to the key server.

15. A mobile terminal, characterized in that: comprising a processor and a memory for storing a computer program capable of being executed on the processor, Wherein, when the processor is used to run the computer program, it executes the steps of the method described in any one of claims 10 to 12.

16. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 10 to 12 are implemented.

Images