A Quantum Secure Communication Network Charging Method and System Based on Digital Currency

Abstract

The present invention discloses a quantum secure communication network charging method and system based on digital currency. The method includes the following steps: S1. Use a pre-deployed quantum communication service station to respectively issue corresponding symmetric keys to a first user terminal and a second user terminal; S2. Use the charging method to implement the charging for the first user terminal to log in to the first quantum communication service station and the second user terminal to log in to the second quantum communication service station; S3. Through the charging method, implement the charging for the identity authentication between the first user terminal and the second user terminal; S4. Use the communication method to implement the quantum secure communication between the first user terminal and the second user terminal. Beneficial effects: The present invention can not only realize digital currency transactions based on quantum secure communication, but also the quantum key card can be used as a digital currency wallet, combining the two functions into one hardware, which is convenient for users. In addition, the charging mode of the quantum key in the present invention has the advantages of simplicity, flexibility and transparency.

Description

Technical Field

[0001] The present invention relates to the field of secure communication, and particularly to a quantum secure communication network charging method and system based on digital currency. Background Art

[0002] The core elements of the digital currency D-RMB system of the People's Bank of China are one kind of currency, two types of repositories, and three centers. One kind of currency, namely "D-RMB" (DC / EP), abbreviated as D-currency, specifically refers to a string of encrypted digital strings representing specific amounts signed by the central bank. Two types of repositories: the issuance repository of D-RMB and the bank repository (central bank digital currency database, commercial bank digital currency database). Digital currency in the issuance repository is manifested as the central bank's digital currency fund; digital currency in the bank repository is manifested as the inventory digital cash of commercial banks. Three centers: one is the registration center (recording the whole process of currency generation, circulation, checking, and extinction); the other two are authentication centers, namely the CA authentication center (based on the PKI system, centrally managing institutional and user certificates, such as CFCA) and the IBC authentication center [i.e., the authentication center established based on identity-based cryptography (Identity-Based Cryptograph)]. Two tables can be designed in the registration center. One is the digital currency ownership registration form, recording the ownership of digital currency, and the other is the transaction flow form.

[0003] The D-RMB system is a hierarchical system, jointly built by the central bank and each commercial bank. The central bank digital currency system is a computer system operated and maintained by the central bank or an institution designated by the central bank to process information about digital currency. Its main functions include being responsible for the issuance and verification monitoring of digital currency. The commercial bank digital currency system is a computer system operated and maintained by commercial banks or institutions designated by commercial banks to process information about digital currency. It performs various functions related to currency of existing banks, that is, bank functions, mainly including after applying for digital currency from the central bank, being responsible for directly facing the society and meeting various requirements for providing digital currency circulation services.

[0004] Currently, the prior art has the following defects:

[0005] 1. In the prior art, the charging mode of quantum keys is not flexible enough: generally, it is charged according to the number of quantum keys when issued, without distinguishing between the charging of the communication initiator and the communication receiver; users are charged before they even use the quantum keys, which may cause the quantum keys to be idle or even wasted for users;

[0006] 2. In the prior art, the charging mode of quantum keys is relatively cumbersome: the use and charging of quantum keys are two independent processes and two sets of independent operating systems; there is a cash collection mode in the charging method, which is not convenient for subsequent auditing;

[0007] 3. In the prior art, the billing model of quantum keys is not transparent enough: users need to query to obtain the billing details of each communication. SUMMARY OF THE INVENTION

[0008] In view of the problems in the related art, the present invention provides a quantum secure communication network billing method and system based on digital currency to overcome the above technical problems existing in the prior related art.

[0009] For this purpose, the specific technical solutions adopted by the present invention are as follows:

[0010] According to one aspect of the present invention, there is provided a quantum secure communication network billing method based on digital currency, the method comprising the following steps:

[0011] S1. Use a pre-deployed quantum communication service station to issue corresponding symmetric keys to the first user terminal and the second user terminal respectively;

[0012] S2. Use the billing method to implement the billing for the first user terminal to log in to the first quantum communication service station and the second user terminal to log in to the second quantum communication service station;

[0013] S3. Implement the billing for the identity authentication between the first user terminal and the second user terminal through the billing method;

[0014] S4. Use the communication method to implement the quantum secure communication between the first user terminal and the second user terminal.

[0015] Further, the step of using a pre-deployed quantum communication service station to issue corresponding symmetric keys to the first user terminal and the second user terminal in S1 includes the following steps:

[0016] S11. Use the pre-deployed first quantum communication service station to issue the first symmetric key to the corresponding first user terminal;

[0017] S12. Use the pre-deployed second quantum communication service station to issue the second symmetric key to the corresponding second user terminal.

[0018] Further, the step of using the pre-deployed first quantum communication service station to issue the first symmetric key to the corresponding first user terminal in S11 specifically includes the following steps:

[0019] S111. The first commercial bank sends a request for the first symmetric key to the central bank. The central bank generates a random number, signs it, and then generates the first symmetric key. At the same time, the central bank sends the first symmetric key to the first commercial bank;

[0020] S112. Deploy a first quantum communication service station at the first commercial bank. The first quantum communication service station issues a first symmetric key to the first client through a key issuance method. At the same time, the first client pays equivalent digital currency or physical currency to the first quantum communication service station;

[0021] S113. The first client forms a first symmetric key pool of various denominations and stores it in the first quantum key card. At the same time, the first quantum communication service station locally stores the first symmetric key pool.

[0022] Further, the step of using the pre-deployed second quantum communication service station to issue a second symmetric key to the corresponding second client in S12 specifically includes the following steps:

[0023] S121. The second commercial bank sends a request to the central bank to apply for a second symmetric key. The central bank generates a random number, signs it, and then generates a second symmetric key. At the same time, the central bank sends the second symmetric key to the second commercial bank;

[0024] S122. Deploy a second quantum communication service station at the second commercial bank. The second quantum communication service station issues a second symmetric key to the second client through a key issuance method. At the same time, the second client pays equivalent digital currency or physical currency to the second quantum communication service station;

[0025] S123. The second client forms a second symmetric key pool of various denominations and stores it in the second quantum key card. At the same time, the second quantum communication service station locally stores the second symmetric key pool.

[0026] Further, both the first symmetric key and the second symmetric key are sent in the form of quantum key distribution encryption or copying, and both the first symmetric key and the second symmetric key are composed of an ID, a denomination, a random number, and a signature. Among them, the random number is preferably a quantum random number.

[0027] Further, the step of using a charging method to implement the charging for the first client to log in to the first quantum communication service station and the second client to log in to the second quantum communication service station in S2 specifically includes the following steps:

[0028] S21. The first client randomly selects a quantum key whose denomination is equal to the identity authentication cost between the first quantum communication service station and the first client, discloses its key ID, and performs two-way challenge-response identity authentication with the first quantum communication service station. After the authentication is completed, the first client and the first quantum communication service station negotiate to obtain a first session key and complete the login;

[0029] S22. The first client deletes the used quantum key and updates the digital currency balance;

[0030] S23. The first quantum communication service station notifies the central bank to change the ownership of the quantum key from the first client to the first quantum communication service station and updates the digital currency balance;

[0031] S24. The second client randomly selects a quantum key with a currency value equal to the identity authentication cost between the second quantum communication service station and the second client, discloses its key ID, and conducts two-way challenge-response identity authentication with the second quantum communication service station. After the authentication is completed, the second client and the second quantum communication service station negotiate to obtain the second session key and complete the login;

[0032] S25. The second client deletes the used quantum key and updates the digital currency balance;

[0033] S26. The second quantum communication service station notifies the central bank to change the ownership of the quantum key from the second client to the second quantum communication service station and updates the digital currency balance.

[0034] Further, the charging for the identity authentication between the first client and the second client in S3 through the charging method includes the following steps:

[0035] S31. Use the charging method to implement the identity authentication charging between the first quantum communication service station and the first client;

[0036] S32. Use the charging method to implement the identity authentication charging between the first quantum communication service station and the second quantum communication service station;

[0037] S33. Use the charging method to implement the identity authentication charging between the second quantum communication service station and the second client.

[0038] Further, the specific steps for using the charging method to implement the identity authentication charging between the first quantum communication service station and the second quantum communication service station in S32 are as follows:

[0039] S321. The first client uses the first session key to send the request for identity authentication with the second client, the ID of the first client, and the ID of the second client to the first quantum communication service station. The first quantum communication service station retrieves a quantum key with a preset currency value between the first quantum communication service station and the first client from the first symmetric key pool of the first client;

[0040] S322. The first quantum communication service station negotiates with the second quantum communication service station to obtain a corresponding quantum key, and uses this quantum key to encrypt the authentication request, the ID of the first client, the ID of the second client, and the quantum key between the first quantum communication service station and the first client to obtain encrypted information and send it to the second quantum communication service station;

[0041] S333. The first quantum communication service station notifies the central bank to modify the ownership of the quantum key between the first quantum communication service station and the first client from the first client to the first quantum communication service station, and confirms the transaction through the central bank. After the transaction confirmation is completed, the first quantum communication service station updates the digital currency balance;

[0042] S334. The first quantum communication service station sends the ID of the quantum key between the first quantum communication service station and the first client to the first client. The first client stores this quantum key as the key for identity authentication with the second client. At the same time, the first client deletes the quantum key in the first symmetric key pool and updates the digital currency balance;

[0043] S335. The second quantum communication service station receives the encrypted information, decrypts it to obtain the authentication request, the ID of the first client, the ID of the second client, and the quantum key between the first quantum communication service station and the first client, and determines whether the second client has logged in according to the ID of the second client;

[0044] S336. The second quantum communication service station retrieves the quantum key between the second quantum communication service station and the second client with another preset currency value from the second symmetric key pool of the second client;

[0045] S337. The second quantum communication service station notifies the central bank to modify the ownership of the quantum key between the second quantum communication service station and the second client from the second client to the second quantum communication service station, and confirms the transaction through the central bank. After the transaction confirmation is completed, the second quantum communication service station updates the digital currency balance;

[0046] S338. The second quantum communication service station uses the second session key to send the ID of the quantum key between the second quantum communication service station and the second client, the encrypted quantum key obtained by encrypting the quantum key between the first quantum communication service station and the first client with the quantum key between the second quantum communication service station and the second client, the authentication request, and the ID of the first client to the second client. After receiving it, the second client decrypts it to obtain the quantum key between the first quantum communication service station and the first client and stores it as the key for identity authentication with the first client. At the same time, the second client deletes the quantum key in the second symmetric key pool and updates the digital currency balance.

[0047] According to another aspect of the present invention, there is provided a quantum secure communication network charging system based on digital currency, which system includes a central bank digital currency system, a commercial bank digital currency system and a user terminal. Among them, the user terminal includes a first user terminal and a second user terminal. The commercial bank digital currency system includes a first commercial bank corresponding to the first user terminal and a second commercial bank corresponding to the second user terminal. The first commercial bank deploys a first quantum communication service station, and the second commercial bank deploys a second quantum communication service station.

[0048] Further, a quantum key distribution network is deployed between the first quantum communication service station and the second quantum communication service station. A quantum key distribution network or a dedicated line network is deployed between the central bank digital currency system and the first quantum communication service station and between the central bank digital currency system and the second quantum communication service station. A first symmetric key pool is shared between the first quantum communication service station and the first user terminal, and a second symmetric key pool is shared between the second quantum communication service station and the second user terminal.

[0049] The beneficial effects of the present invention are as follows:

[0050] 1), in the present invention, the charging mode of quantum keys is relatively flexible: charging is based on the actual quantum communication path, and the charging ratio between the communication initiator and the communication receiver can be allocated in any ratio; charging is carried out at the moment when the quantum key is used, which will not cause the quantum key to be idle or even wasted for users;

[0051] 2), in the present invention, the charging mode of quantum keys is relatively simple: the use and charging of quantum keys are unified into an independent process and an independent operating system; there is no cash collection mode in the charging method, which is convenient for subsequent auditing;

[0052] 3), in the present invention, the charging mode of quantum keys is relatively transparent: users do not need to query to obtain the charging details of each communication. Since the present invention binds the quantum key with its corresponding value, when users consume the quantum key, they consume the corresponding value. Therefore, users can clarify the specific amount of each communication, that is, each transaction, and users can locally save the transaction records of each time without going to the service provider to query the charging details;

[0053] 4), in the present invention, the quantum key card can be used as a digital currency wallet, combining two functions into one hardware, which is convenient for users to use;

[0054] 5), in the present invention, digital currency transactions based on quantum secure communication can be realized, and the security can resist quantum computing. Description of the Drawings

[0055] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required in the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.

[0056] Figure 1 is a flowchart of a quantum secure communication network charging method based on digital currency according to an embodiment of the present invention;

[0057] Figure 2 is a schematic structural diagram of a quantum secure communication network charging system based on digital currency according to an embodiment of the present invention. Detailed implementation manners

[0058] To further illustrate the embodiments, the present invention provides accompanying drawings. These accompanying drawings are part of the disclosure of the present invention, mainly used to illustrate the embodiments, and can be used in conjunction with the relevant descriptions in the specification to explain the operating principles of the embodiments. With reference to these contents, those of ordinary skill in the art should be able to understand other possible implementation manners and the advantages of the present invention. The components in the drawings are not drawn to scale, and similar component symbols are usually used to represent similar components.

[0059] According to an embodiment of the present invention, a quantum secure communication network charging method and system based on digital currency are provided.

[0060] Now, the present invention will be further described in conjunction with the accompanying drawings and specific implementation manners. As Figure 1 shown, according to an embodiment of the present invention, a quantum secure communication network charging method based on digital currency is provided. The method includes the following steps:

[0061] S1. Key issuance (using a pre-deployed quantum communication service station to issue corresponding symmetric keys to the first user terminal and the second user terminal respectively);

[0062] The commercial bank submits a request for digital currency to the central bank. The central bank generates a random number, performs a central bank signature on it, generates digital currency, and sends the digital currency back to the commercial bank. The sending method can be encrypted sending or copying via QKD (Quantum Key Distribution). The data structure of each symmetric key, that is, digital currency, is shown in the following table and consists of ID, currency value, random number, and signature. Among them, the random number is preferably a quantum random number.

[0063] Among them, the composition schematic diagram of digital currency is shown in the following table:

[0064] ID Currency value Random number Signature

[0065] A quantum communication service station QA (first quantum communication service station) is deployed in a commercial bank (first commercial bank). QA issues digital currencies of various values, namely symmetric keys (first symmetric keys) to user A (first user terminal), and A pays QA with equivalent digital currency or physical currency. A forms a symmetric key pool (first symmetric key pool) with symmetric keys of various values ​​and stores it in the quantum key card. At the same time, QA also saves the symmetric key pool locally.

[0066] The process of a commercial bank (second commercial bank) that has deployed a quantum communication service station QB (second quantum communication service station) issuing digital currency to user B (second user terminal) is similar.

[0067] S2, billing of A logging into QA and B logging into QB (using the billing method to implement the billing of the first user terminal logging into the first quantum communication service station and the second user terminal logging into the second quantum communication service station);

[0068] The cost of each identity authentication between QA and A is V QA-A .

[0069] A randomly selects a coin with a value equal to V QA-A The quantum key K QA-A , disclose its key ID, and conduct a two-way challenge-response identity authentication with QA. QA can find the quantum key used by A based on A's ID and key ID. After the identity authentication is completed, A and QA negotiate the session key KS QA-A , complete the login QA.

[0070] A will use the K QA-A Delete and update the digital currency balance.

[0071] QA notifies the central bank that K QA-A The ownership of is changed from A to QA. That is, QA receives the billing income of this identity authentication and updates the digital currency balance.

[0072] Similarly, after B logs in to QB, he spends a coin equal to V QB-B The quantum key K QB-B , B and QB negotiate the session key KS QB-B .

[0073] S3, billing for identity authentication between A and B (billing for identity authentication between the first user terminal and the second user terminal is implemented through a billing method);

[0074] Billing is divided into three sections. The first section is QA-A (payment has been collected), the second section is QA-QB (not paid), and the third section is QB-B (payment has been collected). The first and third sections are charged according to step 2. The following only describes the charging principle of the second section.

[0075] In the QKD network, the quantum secure communication members are QA, QB, QC, …, QN. Direct or indirect QKD key negotiation can be performed between any two quantum secure communication members to generate quantum keys pairwise, but the cost of quantum key negotiation between two quantum secure communication members with different communication distances is different. For example, assume that the costs of quantum key negotiation between QA and QB, QC, …, QN are V QA-QB , V QA-QC , …, V QA-QN . The cost of quantum key negotiation between different sites is public data and can be queried by anyone.

[0076] Assume that the proportion borne by the sender for the quantum key negotiation cost of a certain communication is R (0 ≤ R ≤ 1), and the proportion borne by the receiver is (1 - R).

[0077] A sends a request REQ for identity authentication and IDs QA-A , ID A , ID B to QA under the protection of the session key KS QA-QB . QA extracts a quantum key K QA-A with a value equal to R * V

[0078] from A's symmetric key pool. QA-QB QA negotiates with QB to obtain the quantum key K A and uses this key to encrypt REQ||ID B ||K QA-A to obtain {REQ||ID A ||ID B ||K QA-A}K QA-QB and sends it to QB.

[0079] 3.1. Transactions on the QA side;

[0080] QA notifies the central bank to change the ownership of K QA-A from A to QA, and the central bank confirms the transaction. That is, QA receives the billing income for this identity authentication and updates the digital currency balance.

[0081] QA sends the ID of K QA-A to A, and A stores K QA-A as the key for identity authentication with B. A deletes K QA-A from the key pool and updates the digital currency balance.

[0082] 3.2. Transactions on the QB side;

[0083] QB receives {REQ||ID A ||IDB ||K QA-A}K QA-QB Then, use K QA-QB Decrypt it to get REQ||ID A ||ID B ||K QA-A . According to ID B Determine whether B is online, that is, whether he has logged in. If he has logged in, continue.

[0084] QB takes a coin from B's symmetric key pool with a value equal to (1-R)*V QA-QB The quantum key K QB-B .

[0085] QB notifies the central bank that K QB-B The ownership of the token is changed from B to QB, and the central bank confirms the transaction. That is, QB receives the billing income from this identity authentication and updates the digital currency balance.

[0086] QB will K QB-B ID, use K QB-B Encryption K QA-A The obtained {K QA-A}K QB-B and REQ||ID A The session key KS QB-B After receiving it, B uses KS QB-B After decryption, according to K QB-B The ID takes out K from the key pool QB-B , decrypted to get K QA-A . B will K QA-A Stored as the key for identity authentication with A. B deletes K from the key pool QB-B , and update the digital currency balance.

[0087] S4. A and B perform quantum secure communication (using a communication method to achieve quantum secure communication between the first user terminal and the second user terminal);

[0088] A and B can use the K QA-A Conduct quantum secure communications for various businesses.

[0089] As a special case, A and B can conduct digital currency transactions: Since the quantum key is the digital currency, it can be directly used for normal transactions as digital currency. After the transaction, both parties delete the quantum key and notify the corresponding quantum communication service station to delete the quantum key. Preferably, the two parties use the process described above to obtain the key for identity authentication, conduct identity authentication and form a session key, encrypt the transaction process between the two parties with the session key, and since the communication between both parties and their corresponding quantum communication service stations is quantum secure communication, the entire communication system becomes a digital currency transaction system of quantum secure communication. The digital certificates, digital signatures, etc. in the communication process of this system cannot be cracked by quantum computers after being encrypted.

[0090] According to another aspect of the present invention, as Figure 2 shown, a quantum secure communication network charging system based on digital currency is provided. This system consists of a central bank digital currency system, commercial bank digital currency systems (which can be multiple commercial bank digital currency systems in practice), and user terminals. The central bank digital currency system is denoted as S, and the user terminals are denoted as A and B. Quantum communication service stations QA and QB are respectively deployed in commercial banks SA and SB, and a QKD network is deployed between the quantum communication service stations, enabling secure communication through QKD keys; a QKD network or a dedicated line network is deployed between S and SA, SB to ensure secure communication. There is a shared symmetric key pool between QA and A. There is a shared symmetric key pool between QB and B.

[0091] In summary, with the above technical solutions of the present invention, the charging mode of the quantum key in the present invention is relatively flexible: charging is based on the actual quantum communication path, and the charging ratio between the communication initiator and the communication receiver can be allocated in any proportion; charging is carried out at the moment when the quantum key is used, which will not cause the quantum key to be idle or wasted for users;

[0092] At the same time, the charging mode of the quantum key in the present invention is relatively simple: the use and charging of the quantum key are unified into an independent process and an independent operating system; there is no cash collection mode in the charging method, which is convenient for subsequent auditing;

[0093] At the same time, the charging mode of the quantum key in the present invention is relatively transparent: users do not need to query to obtain the charging details of each communication. Since the present invention binds the quantum key with its corresponding value, when users consume the quantum key, they consume the corresponding value. Therefore, users can clarify the specific amount of each communication, that is, each transaction, and users can locally save the transaction records of each time without having to query the charging details at the service side;

[0094] At the same time, the quantum key card in the present invention can be used as a digital currency wallet, combining the two functions into one hardware, which is convenient for users to use;

[0095] Meanwhile, in the present invention, digital currency transactions based on quantum secure communication can be realized, and the security can resist quantum computing.

[0096] The technical features of the above-described embodiments can be combined arbitrarily. For the sake of concise description, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope described in this specification.

[0097] The above-described embodiments merely represent several implementation manners of the present invention. The description thereof is relatively specific and detailed, but it should not be construed as a limitation on the scope of the invention patent. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present invention, several modifications and improvements can still be made, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the invention patent should be subject to the appended claims.

Claims

1. A charging method for a quantum secure communication network based on digital currency, characterized in that, The method includes the following steps: S1. Use a pre-deployed quantum communication service station to issue corresponding symmetric keys to the first client and the second client respectively; The step of using a pre-deployed quantum communication service station to issue corresponding symmetric keys to the first client and the second client respectively in S1 includes the following steps: S11. Use a pre-deployed first quantum communication service station to issue a first symmetric key to the corresponding first client; The step of using a pre-deployed first quantum communication service station to issue a first symmetric key to the corresponding first client in S11 specifically includes the following steps: S111. The first commercial bank sends a request for the first symmetric key to the central bank. The central bank generates a random number, signs it, and then generates the first symmetric key. At the same time, the central bank sends the first symmetric key to the first commercial bank; S112. Deploy a first quantum communication service station in the first commercial bank. The first quantum communication service station issues the first symmetric key to the first client through a key issuance method. At the same time, the first client pays equivalent digital currency or physical currency to the first quantum communication service station; S113. The first client forms a first symmetric key pool of various denominations of the first symmetric key and stores it in the first quantum key card. At the same time, the first quantum communication service station locally stores the first symmetric key pool; S12. Use a pre-deployed second quantum communication service station to issue a second symmetric key to the corresponding second client; The step of using a pre-deployed second quantum communication service station to issue a second symmetric key to the corresponding second client in S12 specifically includes the following steps: S121. The second commercial bank sends a request for the second symmetric key to the central bank. The central bank generates a random number, signs it, and then generates the second symmetric key. At the same time, the central bank sends the second symmetric key to the second commercial bank; S122. Deploy a second quantum communication service station in the second commercial bank. The second quantum communication service station issues the second symmetric key to the second client through a key issuance method. At the same time, the second client pays equivalent digital currency or physical currency to the second quantum communication service station; S123. The second client forms a second symmetric key pool of various denominations of the second symmetric key and stores it in the second quantum key card. At the same time, the second quantum communication service station locally stores the second symmetric key pool; S2. Use a billing method to implement the billing for the first client to log in to the first quantum communication service station and the second client to log in to the second quantum communication service station; The step of using a billing method to implement the billing for the first client to log in to the first quantum communication service station and the second client to log in to the second quantum communication service station in S2 specifically includes the following steps: S21. The first client randomly selects a quantum key whose value is equal to the identity authentication cost between the first quantum communication service station and the first client, discloses its key ID, and performs two-way challenge-response identity authentication with the first quantum communication service station. After the authentication is completed, the first client and the first quantum communication service station negotiate to obtain a first session key and complete the login; S22. The first client deletes the used quantum key and updates the digital currency balance; S23. The first quantum communication service station notifies the central bank to modify the ownership of the quantum key from the first client to the first quantum communication service station and updates the digital currency balance; S24. The second client randomly selects a quantum key with a value equal to the identity authentication cost between the second quantum communication service station and the second client, discloses its key ID, and performs two-way challenge-response identity authentication with the second quantum communication service station. After the authentication is completed, the second client and the second quantum communication service station negotiate to obtain the second session key and complete the login; S25. The second client deletes the used quantum key and updates the digital currency balance; S26. The second quantum communication service station notifies the central bank to modify the ownership of the quantum key from the second client to the second quantum communication service station and updates the digital currency balance; S3. Implement the billing for the identity authentication between the first client and the second client through the billing method; The implementation of the billing for the identity authentication between the first client and the second client through the billing method in S3 includes the following steps: S31. Use the billing method to implement the identity authentication billing between the first quantum communication service station and the first client; S32. Use the billing method to implement the identity authentication billing between the first quantum communication service station and the second quantum communication service station; The specific implementation of the identity authentication billing between the first quantum communication service station and the second quantum communication service station using the billing method in S32 includes the following steps: S321. The first client uses the first session key to send the request for identity authentication with the second client, the ID of the first client, and the ID of the second client to the first quantum communication service station. The first quantum communication service station retrieves a quantum key with a preset value between the first quantum communication service station and the first client from the first symmetric key pool of the first client; S322. The first quantum communication service station negotiates with the second quantum communication service station to obtain the corresponding quantum key, and uses this quantum key to encrypt the authentication request, the ID of the first client, the ID of the second client, and the quantum key between the first quantum communication service station and the first client to obtain the encrypted information and send it to the second quantum communication service station; S333. The first quantum communication service station notifies the central bank to modify the ownership of the quantum key between the first quantum communication service station and the first client from the first client to the first quantum communication service station, and confirms the transaction through the central bank. After the transaction confirmation is completed, the first quantum communication service station updates the digital currency balance; S334. The first quantum communication service station sends the ID of the quantum key between the first quantum communication service station and the first client to the first client. The first client stores this quantum key as the key for identity authentication with the second client. At the same time, the first client deletes the quantum key in the first symmetric key pool and updates the digital currency balance; S335. The second quantum communication service station receives the encrypted information, decrypts it to obtain the authentication request, the ID of the first client, the ID of the second client, and the quantum key between the first quantum communication service station and the first client, and determines whether the second client has logged in according to the ID of the second client; S336. The second quantum communication service station retrieves the quantum key between the second quantum communication service station and the second client with another preset currency value from the second symmetric key pool of the second client; S337. The second quantum communication service station notifies the central bank to modify the ownership of the quantum key between the second quantum communication service station and the second client from the second client to the second quantum communication service station, and confirms the transaction through the central bank. After the transaction confirmation is completed, the second quantum communication service station updates the digital currency balance; S338. The second quantum communication service station uses the second session key to send the ID of the quantum key between the second quantum communication service station and the second client, the encrypted quantum key obtained by encrypting the quantum key between the first quantum communication service station and the first client with the quantum key between the second quantum communication service station and the second client, the authentication request, and the ID of the first client to the second client. After receiving it, the second client decrypts it to obtain the quantum key between the first quantum communication service station and the first client and stores it as the key for identity authentication with the first client. At the same time, the second client deletes the quantum key in the second symmetric key pool and updates the digital currency balance; S33. Implement the identity authentication charging between the second quantum communication service station and the second client using the charging method; S4. Implement the quantum secure communication between the first client and the second client using the communication method.

2. The quantum secure communication network charging method based on digital currency according to claim 1, characterized in that Both the first symmetric key and the second symmetric key are sent in the form of quantum key distribution encryption or copying, and both the first symmetric key and the second symmetric key are composed of an ID, a currency value, a random number, and a signature, where the random number is a quantum random number.

3. A quantum secure communication network charging system based on digital currency, which is used to implement the steps of the quantum secure communication network charging method based on digital currency described in any one of claims 1-2, characterized in that, The system includes a central bank digital currency system, a commercial bank digital currency system, and client terminals. Among them, the client terminals include a first client terminal and a second client terminal. The commercial bank digital currency system includes a first commercial bank corresponding to the first client terminal and a second commercial bank corresponding to the second client terminal. The first commercial bank deploys a first quantum communication service station, and the second commercial bank deploys a second quantum communication service station.

4. The quantum secure communication network charging system based on digital currency according to claim 3, wherein A quantum key distribution network is deployed between the first quantum communication service station and the second quantum communication service station. A quantum key distribution network or a dedicated line network is deployed between the central bank digital currency system and the first quantum communication service station and between the central bank digital currency system and the second quantum communication service station. A first symmetric key pool is shared between the first quantum communication service station and the first client terminal, and a second symmetric key pool is shared between the second quantum communication service station and the second client terminal.

Images