A Quantum Key Distribution Network Charging Method and System Based on Digital Currency

Abstract

The present invention discloses a quantum key distribution network charging method and system based on digital currency. The method includes the following steps: S1. Use a commercial bank to issue corresponding symmetric keys to a first user terminal and a second user terminal respectively; S2. The first user terminal sends a key issuance request to a quantum communication service station corresponding to the second user terminal; S3. The first user terminal sends digital currency to the quantum communication service station corresponding to the first user terminal and stores quantum random numbers as quantum keys; S4. Implement quantum secure communication between the first user terminal and the second user terminal by using a communication method; S5. The quantum communication service station realizes the exchange of digital currency through a currency exchange method. Beneficial effects: The quantum key card in the present invention can be used as a digital currency wallet, combining the two functions into one hardware, which is convenient for users. In addition, the charging mode of the quantum key in the present invention has the advantages of flexibility, simplicity and transparency.

Description

Technical Field

[0001] The present invention relates to the field of secure communication, and in particular, to a quantum key distribution network charging method and system based on digital currency. Background Art

[0002] The core elements of the digital currency D-RMB system of the People's Bank of China are one kind of currency, two types of repositories, and three centers. One kind of currency is "D-RMB" (DC / EP), abbreviated as D currency, which specifically refers to a string of encrypted digital strings representing specific amounts signed by the central bank. Two types of repositories are the issuance repository and the bank repository of D-RMB (Central Bank Digital Currency Database, Commercial Bank Digital Currency Database). Digital currency in the issuance repository is manifested as the central bank's digital currency fund; digital currency in the bank repository is manifested as the commercial bank's inventory digital cash. Three centers: one is the registration center (recording the whole process of currency generation, circulation, checking, and extinction); the other two are authentication centers, namely the CA authentication center (based on the PKI system, centrally managing the certificates of institutions and users, such as CFCA) and the IBC authentication center [i.e., the authentication center established based on identity-based cryptography (Identity-Based Cryptograph)]. Two tables can be designed in the registration center, one is the digital currency ownership registration form, recording the ownership of digital currency, and the other is the transaction flow form.

[0003] The D-RMB system is a hierarchical system, jointly built by the central bank and each commercial bank. The central bank digital currency system is a computer system operated and maintained by the central bank or an institution designated by the central bank to process information about digital currency. Its main functions include being responsible for the issuance and verification monitoring of digital currency. The commercial bank digital currency system is a computer system operated and maintained by a commercial bank or an institution designated by the commercial bank to process information about digital currency. It performs various functions related to currency of existing banks, that is, bank functions, mainly including after applying for digital currency from the central bank, being responsible for directly facing the society and meeting various requirements for providing digital currency circulation services.

[0004] Currently, the prior art has the following defects:

[0005] 1. In the prior art, the charging mode of quantum keys is not flexible enough: generally, it is charged according to the number of quantum keys when issued. The user is charged before using the quantum keys, which may cause the idleness and even waste of quantum keys for the user;

[0006] 2. In the prior art, the charging mode of quantum keys is relatively cumbersome: quantum key distribution and charging are two independent processes and two independent operating systems. The system construction and business logic are relatively complex; there is a cash collection mode in the charging method, which is not convenient for subsequent auditing;

[0007] 3. In the prior art, the charging mode of quantum keys is not transparent enough: users need to query to obtain the charging details of each communication, and the charging details are not refined to the charging situation of each relay node. Summary of the Invention

[0008] In view of the problems in the related art, the present invention provides a charging method and system for a quantum key distribution network based on digital currency to overcome the above-mentioned technical problems existing in the prior related art.

[0009] For this reason, the specific technical solutions adopted by the present invention are as follows:

[0010] According to one aspect of the present invention, there is provided a charging method for a quantum key distribution network based on digital currency, the method comprising the following steps:

[0011] S1. Use commercial banks to issue corresponding symmetric keys to the first user terminal and the second user terminal respectively;

[0012] S2. The first user terminal sends a key issuance request to the quantum communication service station corresponding to the second user terminal;

[0013] S3. The first user terminal sends digital currency to the quantum communication service station corresponding to the first user terminal and stores quantum random numbers as quantum keys;

[0014] S4. Use a communication method to implement quantum secure communication between the first user terminal and the second user terminal;

[0015] S5. The quantum communication service station realizes the exchange of digital currency through a currency exchange method.

[0016] Further, the step of using commercial banks to issue corresponding symmetric keys to the first user terminal and the second user terminal in S1 includes the following steps:

[0017] S11. Use the first commercial bank to issue the first symmetric key to the corresponding first user terminal;

[0018] S12. Use the second commercial bank to issue the second symmetric key to the corresponding second user terminal.

[0019] Further, both the first symmetric key and the second symmetric key are sent in a manner of quantum key distribution encryption or copying, and both the first symmetric key and the second symmetric key are composed of an ID, a currency value, a random number, and a signature, wherein the random number is preferably a quantum random number.

[0020] Further, the specific steps of using the first commercial bank to issue the first symmetric key to the corresponding first user terminal in S11 include the following steps:

[0021] S111. The first commercial bank submits a request for digital currency containing a quantum key to the central bank. The central bank generates a random number, signs it, and then generates a first symmetric key. At the same time, the central bank sends the first symmetric key to the first commercial bank;

[0022] S112. The first commercial bank issues digital currency of various denominations, that is, the first symmetric key, to the first client through a key issuance method. At the same time, the first client pays equivalent digital currency or physical currency to the first commercial bank.

[0023] Further, the specific steps for the second commercial bank to issue a second symmetric key to the corresponding second client in S12 are as follows:

[0024] S121. The second commercial bank submits a request for digital currency containing a quantum key to the central bank. The central bank generates a random number, signs it, and then generates a second symmetric key. At the same time, the central bank sends the second symmetric key to the second commercial bank;

[0025] S122. The second commercial bank issues digital currency of various denominations, that is, the second symmetric key, to the second client through a key issuance method. At the same time, the second client pays equivalent digital currency or physical currency to the second commercial bank.

[0026] Further, the specific steps for the first client to submit a key issuance request to the quantum communication service station corresponding to the second client in S2 are as follows:

[0027] S21. The first client learns from the network message, email, or mobile phone short message sent by the second client that the communication object, the second client, is currently connected to the quantum communication service station corresponding to the second client;

[0028] S22. The first client submits a key issuance request to the quantum communication service station corresponding to the second client from the quantum communication service station corresponding to the first client to which it is currently connected;

[0029] S23. The quantum communication service station corresponding to the first client calculates the key route to determine each relay node and calculates the billing details according to the billing policy;

[0030] S24. The quantum communication service station corresponding to the first client sends the billing details to the first client.

[0031] Further, the specific steps for the first client to send digital currency to the quantum communication service station corresponding to the first client and store the quantum random number as a quantum key in S3 are as follows:

[0032] S31. The first client calculates the total cost according to the billing details and the summation method;

[0033] S32. The first client selects a digital currency whose value is equal to the total cost and has not been used, and combines it with the current time and the information of the remitter to obtain the transaction information;

[0034] S33. Use the private key of the first client to sign the transaction information to obtain the signature information, and send the transaction information, the signature information and the digital certificate of the first client to the quantum communication service station corresponding to the first client;

[0035] S34. The quantum communication service station corresponding to the first client receives the message and verifies the signature and the digital currency. If the verification passes, it trusts the transaction;

[0036] S35. The quantum communication service station corresponding to the first client extracts the quantum random number in the digital currency and uses it as the key between the first client and the second client;

[0037] S36. The quantum communication service station corresponding to the first client relays the transaction information, the signature information and the digital certificate of the first client step by step through the quantum key distribution network and sends them to the quantum communication service station corresponding to the second client. And the quantum communication service stations from the one corresponding to the first client to the one corresponding to the second client all store the transaction information, the signature information and the digital certificate of the first client;

[0038] S37. The quantum communication service station corresponding to the second client extracts the digital currency and the quantum random number in the digital currency from the transaction information, and sends the quantum random number to the second client. The second client stores the quantum random number as the quantum key;

[0039] S38. After the key distribution is completed, the quantum communication service station corresponding to the first client sends a successful message to the first client. The first client deletes the digital currency and stores the quantum random number as the quantum key.

[0040] Further, the digital certificate in S33 is the digital certificate of the first client. Among them, when the signature is based on ID cryptography, no certificate is required.

[0041] Further, the relaying method in S36 includes the following steps: First, generate the quantum key distribution key between two adjacent quantum communication service stations. Then the sender symmetrically encrypts the sending message with the key and sends it to the receiver. Finally, the receiver decrypts the received message with the key.

[0042] According to another aspect of the present invention, a quantum key distribution network charging system based on digital currency is provided. The system includes a central bank digital currency system, a commercial bank digital currency system, and a user terminal. Among them, the user terminal includes a first user terminal and a second user terminal, and the commercial bank digital currency system includes a first commercial bank corresponding to the first user terminal and a second commercial bank corresponding to the second user terminal;

[0043] Both the first commercial bank and the second commercial bank are deployed with quantum communication service stations, and the quantum communication service stations can also be independently deployed separately from the commercial banks. A quantum key distribution network is deployed between the quantum communication service stations. The user terminal has a quantum key card that stores digital currency and can be used to store quantum keys subsequently;

[0044] The first user terminal is connected to the quantum communication service station corresponding to the first user terminal, and the second user terminal is connected to the quantum communication service station corresponding to the second user terminal. Moreover, reliable communication is carried out between the first user terminal and the quantum communication service station corresponding to the first user terminal, and between the second user terminal and the quantum communication service station corresponding to the second user terminal;

[0045] A quantum key distribution network, or a dedicated line network, or encrypted communication using a quantum key card is deployed between the central bank digital currency system, each commercial bank, and the quantum communication service station.

[0046] The beneficial effects of the present invention are as follows:

[0047] 1) In the present invention, the charging mode of quantum keys is relatively flexible: charging is based on the actual quantum communication path and is carried out at the moment when the quantum keys are used, which will not cause the idleness or waste of quantum keys for users;

[0048] 2) In the present invention, the charging mode of quantum keys is relatively simple: quantum key distribution and charging are unified into an independent process and an independent operation system. The system construction and business logic are relatively simple; there is no cash collection mode in the charging method, which is convenient for subsequent auditing;

[0049] 3) In the present invention, the charging mode of quantum keys is relatively transparent: the quantum key distribution network actively sends charging details to users. Users do not need to obtain the charging details of each communication by querying, and the charging details are refined to the charging situation of each relay node;

[0050] 4) In the present invention, the quantum key card can be used as a digital currency wallet, combining two functions into one hardware, which is convenient for users to use. Description of the Drawings

[0051] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required for use in the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.

[0052] Figure 1 FIG. is a flowchart of a quantum key distribution network charging method based on digital currency according to an embodiment of the present invention;

[0053] Figure 2 FIG. is a basic structural diagram of a quantum key distribution network charging system based on digital currency according to an embodiment of the present invention (taking the case where a quantum communication service station is deployed in a commercial bank as an example). Detailed implementation manners

[0054] To further illustrate the embodiments, the present invention provides accompanying drawings, which are a part of the disclosure of the present invention. They are mainly used to illustrate the embodiments and can be used in conjunction with the relevant descriptions in the specification to explain the operation principles of the embodiments. With reference to these contents, those of ordinary skill in the art should be able to understand other possible implementation manners and the advantages of the present invention. The components in the figures are not drawn to scale, and similar component symbols are usually used to represent similar components.

[0055] According to an embodiment of the present invention, a quantum key distribution network charging method and system based on digital currency are provided.

[0056] Now, the present invention will be further described in conjunction with the accompanying drawings and specific implementation manners. As shown in FIG. Figure 1 , according to an embodiment of the present invention, a quantum key distribution network charging method based on digital currency is provided, and the method includes the following steps: Figure 1

[0057] S1. Key issuance (using a commercial bank to issue corresponding symmetric keys to the first user terminal and the second user terminal respectively);

[0058] The commercial bank submits a request for digital currency containing quantum keys to the central bank. The central bank generates a random number, performs central bank signature on it, generates digital currency, and sends the digital currency back to the commercial bank. The sending method can be QKD encrypted sending or copying. The data structure of each symmetric key, that is, digital currency, is shown in the following table and consists of ID, currency value, random number, and signature. Among them, the random number is preferably a quantum random number.

[0059] ID Currency value Random number Signature

[0060] ​Let the commercial bank corresponding to A (the first client) be SA (the first commercial bank). The commercial bank SA issues digital currencies of various denominations, i.e., symmetric keys (the first symmetric keys), to user A, and A pays equivalent digital currencies or physical currencies to SA.

[0061] Let the commercial bank corresponding to B (the second client) be SB (the second commercial bank). The process of the commercial bank SB issuing digital currencies (the second symmetric keys) to user B is the same.

[0062] S2. A sends a key issuance request (the first client sends a key issuance request to the quantum communication service station corresponding to the second client);

[0063] Based on the network message sent by B, or other channels such as email or mobile phone short message, A learns that the communication object B is currently connected to Qn (the quantum communication service station corresponding to the second client).

[0064] A sends a key issuance request to the currently connected quantum communication service station Q1 (the quantum communication service station corresponding to the first client) for a key between Q1 and Qn.

[0065] Q1 calculates the key route to determine each relay node and gives the charging details MD = {Qi||Mi, 1 ≤ i ≤ n} according to the charging policy. Here, Qi is the i-th quantum key distribution node, and Mi is the fee charged by Qi in this quantum key distribution.

[0066] Q1 sends the charging details MD to A.

[0067] S3. A sends digital currencies (the first client sends digital currencies to the quantum communication service station corresponding to the first client and stores the quantum random number as the quantum key);

[0068] A calculates the total fee M = ∑Mi.

[0069] A randomly selects a digital currency AM with a denomination equal to M and that has not been used before, and together with the current time T and the remitter information, forms TX (transaction information). The remitter information includes ID A and the charging details MD.

[0070] Using A's private key SK A signs TX to obtain (the signed information) TXS = SIGN(TX, SK A ), where SIGN(m, sk) represents signing m with the private key sk. Send TX||TXS||CertA (CertA is A's digital certificate, and if the signature is based on ID cryptography, the certificate is not required) to Q1.

[0071] Q1 verifies the signature and the digital currency, and trusts the transaction after verification.

[0072] Q1 extracts the quantum random number AMK in AM as the key between A and B.

[0073] Q1 relays TX||TXS||CertA through the quantum key distribution network step by step and sends it to Qn through nodes such as Q2 and Q3. The relaying method is that adjacent two quantum communication service stations generate the QKD key QK, the sender symmetrically encrypts the sending message with QK and then sends it to the receiver, and the receiver symmetrically decrypts it with QK. Both Q1 to Qn store TX||TXS||CertA.

[0074] Qn extracts the digital currency AM from TX, further extracts the quantum random number AMK in AM, and sends AMK to B. B stores AMK as the quantum key.

[0075] After the key distribution is completed, Q1 sends a successful message to A, and A deletes the digital currency and stores AMK as the quantum key.

[0076] S4. A and B perform quantum secure communication (realize quantum secure communication between the first user terminal and the second user terminal by using the communication method);

[0077] A and B can perform quantum secure communication for various services by using the quantum key AMK described above.

[0078] S5. The members of the quantum key distribution network exchange digital currency (the quantum communication service station realizes the exchange of digital currency through the currency exchange method);

[0079] After the key distribution is completed, each quantum communication service station exchanges the received digital currency. For example, a certain quantum network service station Qi sends the transaction TX to the central bank. The central bank verifies and records the transaction and then generates digital currency with a value of Mi, sends it to Qi and simultaneously notifies the commercial bank that issued the digital currency. Qi verifies and stores the digital currency, and the transaction ends.

[0080] According to another aspect of the present invention, as Figure 2 shown, a quantum key distribution network charging system based on digital currency is provided. The system consists of a central bank digital currency system, commercial bank digital currency systems (in practice, there can be multiple commercial bank digital currency systems), and user terminals. The central bank digital currency system is denoted as S, the commercial bank digital currency systems are denoted as SA and SB, and the user terminals are denoted as A and B.

[0081] Quantum communication service stations are deployed in commercial banks or independently of commercial banks, denoted as Q1, Q2, ……, Qn. There is a QKD (Quantum Key Distribution) network deployed between quantum communication service stations, and secure communication can be carried out through QKD keys. The user side has a quantum key card that stores digital currency and can be used to store quantum keys subsequently.

[0082] Suppose user side A is connected to Q1 and user side B is connected to Qn. Reliable communication is carried out between A and Q1, and between B and Qn, such as short-distance communication, dedicated line communication, or encrypted communication using a quantum key card, to ensure the security of information transmission.

[0083] There is a QKD network or a dedicated line network deployed between the central bank S, each commercial bank and Q1, Q2, ……, Qn, or encrypted communication using a quantum key card is used to ensure secure communication.

[0084] In summary, by means of the above technical solutions of the present invention, in the present invention, the charging mode of quantum keys is relatively flexible: charging is based on the actual quantum communication path and is carried out at the moment when the quantum key is used, which will not cause the quantum key to be idle or even wasted for users; in addition, in the present invention, the charging mode of quantum keys is relatively simple: quantum key distribution and charging are unified into an independent process and an independent operation system, and the system construction and business logic are relatively simple; there is no cash collection mode in the charging method, which is convenient for subsequent auditing; in addition, in the present invention, the charging mode of quantum keys is relatively transparent: the quantum key distribution network actively sends charging details to users, and users do not need to query to obtain the charging details of each communication, and the charging details are refined to the charging situation of each relay node; in addition, in the present invention, the quantum key card can be used as a digital currency wallet, combining two functions into one hardware, which is convenient for users to use.

[0085] The technical features of the above-described embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope described in this specification.

[0086] The above-described embodiments only represent several implementation manners of the present invention. Their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the invention patent. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present invention, several modifications and improvements can still be made, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the present invention patent should be subject to the appended claims.

Claims

1. A quantum key distribution network charging method based on digital currency, characterized in that The method includes the following steps: S1. Use a commercial bank to issue corresponding symmetric keys to the first client and the second client respectively; The step of using a commercial bank to issue corresponding symmetric keys to the first client and the second client respectively in S1 includes the following steps: S11. Use the first commercial bank to issue the first symmetric key to the corresponding first client; S12. Use the second commercial bank to issue the second symmetric key to the corresponding second client; S2. The first client sends a key issuance request to the quantum communication service station corresponding to the second client; The step that the first client sends a key issuance request to the quantum communication service station corresponding to the second client in S2 specifically includes the following steps: S21. The first client learns from the network message, email, or mobile phone short message sent by the second client that the communication object, the second client, is currently connected to the quantum communication service station corresponding to the second client; S22. The first client sends a key issuance request to the quantum communication service station corresponding to the second client to the quantum communication service station corresponding to the first client to which it is currently connected; S23. The quantum communication service station corresponding to the first client calculates the key route to determine each relay node and calculates the charging details according to the charging policy; S24. The quantum communication service station corresponding to the first client sends the charging details to the first client; S3. The first client sends digital currency to the quantum communication service station corresponding to the first client and stores the quantum random number as the quantum key; The step that the first client sends digital currency to the quantum communication service station corresponding to the first client and stores the quantum random number as the quantum key in S3 specifically includes the following steps: S31. The first client calculates the total cost according to the charging details and the summation method; S32. The first client selects a digital currency with a value equal to the total cost and that has not been used, and combines it with the current time and the remitter information to obtain the transaction information; S33. Use the private key of the first client to sign the transaction information to obtain the signature information, and send the transaction information, the signature information, and the digital certificate of the first client to the quantum communication service station corresponding to the first client; S34. The quantum communication service station corresponding to the first client receives the message and verifies the signature and the digital currency. If the verification passes, it trusts the transaction; S35. The quantum communication service station corresponding to the first client extracts the quantum random number in the digital currency and uses it as the key between the first client and the second client; S36. The quantum communication service station corresponding to the first client relays the transaction information, the signature information, and the digital certificate of the first client step by step through the quantum key distribution network and sends them to the quantum communication service station corresponding to the second client. And the quantum communication service stations from the one corresponding to the first client to the one corresponding to the second client all store the transaction information, the signature information, and the digital certificate of the first client; S37. The quantum communication service station corresponding to the second client extracts the digital currency and the quantum random number in the digital currency from the transaction information, and sends the quantum random number to the second client, which stores the quantum random number as a quantum key. S38. After the key distribution is completed, the quantum communication service station corresponding to the first client sends a success message to the first client, and the first client deletes the digital currency and stores the quantum random number as a quantum key. S4. Use the communication method to implement quantum secure communication between the first client and the second client. S5. The quantum communication service station realizes the exchange of digital currency through the currency exchange method.

2. The quantum key distribution network charging method based on digital currency according to claim 1, wherein Both the first symmetric key and the second symmetric key are sent in the form of quantum key distribution encryption or copying, and both the first symmetric key and the second symmetric key are composed of ID, currency value, random number and signature, where the random number is a quantum random number.

3. A quantum key distribution network charging method based on digital currency according to claim 1, characterized in that The specific steps of using the first commercial bank to issue the first symmetric key to the corresponding first client in S11 are as follows: S111. The first commercial bank submits a request for digital currency containing a quantum key to the central bank. The central bank generates a random number, signs it, and then generates the first symmetric key. At the same time, the central bank sends the first symmetric key to the first commercial bank. S112. The first commercial bank issues digital currencies of various currency values, that is, the first symmetric key, to the first client through the key issuance method. At the same time, the first client pays the first commercial bank equivalent digital currency or physical currency.

4. A quantum key distribution network charging method based on digital currency according to claim 1, characterized in that, The specific steps of using the second commercial bank to issue the second symmetric key to the corresponding second client in S12 are as follows: S121. The second commercial bank submits a request for digital currency containing a quantum key to the central bank. The central bank generates a random number, signs it, and then generates the second symmetric key. At the same time, the central bank sends the second symmetric key to the second commercial bank. S122. The second commercial bank issues digital currencies of various currency values, that is, the second symmetric key, to the second client through the key issuance method. At the same time, the second client pays the second commercial bank equivalent digital currency or physical currency.

5. A quantum key distribution network charging method based on digital currency according to claim 1, characterized in that, The digital certificate in S33 is the digital certificate of the first client. When the signature is based on ID cryptography, no certificate is required.

6. A quantum key distribution network charging method based on digital currency according to claim 1, characterized in that, The relay method in S36 includes the following steps: First, generate a quantum key distribution key between two adjacent quantum communication service stations. Then, the sender uses this key to symmetrically encrypt the sending message and send it to the receiver. Finally, the receiver uses the key to decrypt to obtain the sending message.

7. A quantum key distribution network charging system based on digital currency, used to implement the steps of the quantum key distribution network charging method based on digital currency described in any one of claims 1-6, characterized in that, The system includes a central bank digital currency system, a commercial bank digital currency system and a client. Among them, the client includes a first client and a second client, and the commercial bank digital currency system includes a first commercial bank corresponding to the first client and a second commercial bank corresponding to the second client. Both the first commercial bank and the second commercial bank are equipped with quantum communication service stations, and these quantum communication service stations can also be independently deployed separately from the commercial banks. A quantum key distribution network is deployed among the quantum communication service stations. The user terminal has a quantum key card that stores digital currency and can be used to store quantum keys subsequently. The first user terminal is connected to the quantum communication service station corresponding to the first user terminal, and the second user terminal is connected to the quantum communication service station corresponding to the second user terminal. Reliable communication is carried out between the first user terminal and the quantum communication service station corresponding to the first user terminal, and between the second user terminal and the quantum communication service station corresponding to the second user terminal. A quantum key distribution network is deployed between the central bank digital currency system, each commercial bank and the quantum communication service stations, or a dedicated line network is deployed, or encrypted communication is carried out using quantum key cards.

Images