A public quantum key service device, system and method

Abstract

The present invention discloses a public quantum key service device, system and method. A public quantum key service device is deployed in public places, which is conducive to the promotion of quantum secure communication: users do not need to add an additional QKD device, there are no problems of high price and high maintenance difficulty, and there is no problem of unclear ownership. The user identity is not bound to the QKD device, and the users of the public quantum key service device are constantly replaced, which is not easy to expose the characteristics and laws of the user's network behavior; at the same time, the identity of the person using the device is identified, which reduces the risk of lawbreakers using the system for confidential communication and committing criminal activities; finally, a public quantum communication platform is provided for various APPs. When the user operates on the public quantum key service device of the present invention, the quantum key is always in the device, which not only ensures the security of the quantum key, but also provides users with a more convenient way to use APPs protected by quantum keys.

Description

Technical Field

[0001] The present invention relates to the field of quantum secure communication, and in particular to a public quantum key service device, system and method. Background Art

[0002] Quantum communication technology is an emerging secure communication technology based on quantum physics. In addition to establishing quantum communication trunk lines, some large-scale metropolitan quantum communication networks have also been successfully built and put into operation. Based on metropolitan quantum communication networks, quantum communication technology has also been initially applied, which can realize applications such as highly confidential video and voice communications. Quantum communication networks such as quantum communication trunk lines and quantum communication metropolitan area networks constitute quantum communication networks, and their essence is quantum key distribution (QKD). Therefore, the quantum communication network established based on QKD technology can be called a QKD network.

[0003] With the rapid development of mobile Internet, the internal business websites of enterprises and institutions are gradually moving towards mobile terminals. In order to facilitate staff to understand the work content at any time, users hope to be able to access the internal website server of the unit through portable mobile terminals. In order to ensure the security of mobile terminals, the interactive information between users and management platforms is usually encrypted to prevent theft. The existing information interaction method based on quantum communication network has high security and can be used for key distribution between users' mobile terminals and management platforms. However, it is difficult to deploy quantum communication networks between mobile terminals and management platforms. At the same time, since it is not realistic for mobile terminals to carry QKD devices for confidential communication, it is also difficult to use QKD devices to protect point-to-point communication between mobile terminals.

[0004] In summary, the existing quantum-based key distribution devices, systems and methods have the following problems:

[0005] 1. In the prior art, access to a quantum secure communication network requires users to be equipped with quantum key distribution (QKD) equipment. The following problems have hindered the promotion of quantum secure communication to a certain extent: users need to add an additional QKD device, which is currently expensive and difficult to operate and maintain, and there are certain issues of unclear ownership (for example, quantum communication network operators can control some behaviors), so the user experience is average; all users need to go to designated quantum communication network operators to access and deregister QKD devices and complete line deployment, and the process is fixed and inconvenient; user identity is bound to the QKD device, and the transmission of the QKD device ID on the network may expose the user's behavior, thereby exposing the characteristics and patterns of the user's network behavior.

[0006] 2. In existing shared products, there is no user identity identification. For example, when a unit shares a QKD device, the identity of each user accessing the network is not differentiated.

[0007] 3. Existing QKD devices provide quantum keys for use by other types of devices. This method has the risk of key leakage during the process of quantum key issuance and use. Summary of the invention

[0008] Purpose of the invention: In order to overcome the above-mentioned defects, the present invention proposes a public quantum key service device, system and method.

[0009] Invention content: A public quantum key service device includes a QKD device, a user identity recognition module, a transaction module and a short-range communication module. The QKD device provides the public quantum key service device with the function of accessing a quantum secure communication network, and uses the QKD device to realize quantum key distribution with any QKD device in the quantum secure communication network; the user identity recognition module is used to identify the user's identity; the transaction module enables the public quantum key service device to provide the user with a payment method, and also has a payment verification function; the short-range communication module provides an interface for the public quantum key service device to issue quantum keys to the user's device end.

[0010] A public quantum key service system includes the above-mentioned public quantum key device and a public quantum key server cluster. The public quantum key server cluster can be used to perform network management and key management on the entire quantum communication network, and to perform identity authentication and billing on users.

[0011] Preferably, the public quantum key device and the public quantum key server cluster are both connected to the quantum secure communication network and the classical communication network; before communicating with the public quantum key server cluster, the public quantum key service device will distribute quantum keys with the QKD device of the public quantum key server cluster through the QKD device to obtain a quantum key that is symmetric with the public quantum key server cluster; the public quantum key service device realizes encrypted communication with the public quantum key server cluster through the quantum key.

[0012] A public quantum key service method is implemented in the above-mentioned public quantum key service system, wherein the public quantum key service device performs identity authentication with the user, and after successful authentication, the users obtain a symmetric first communication key by using the public quantum key service device; the method comprises the following steps:

[0013] S1. The first user agrees in advance to confirm the basic information of the second public quantum key service device used by the second user. The first user completes identity authentication with the first public quantum key service device. The first public quantum key service device encrypts the relevant information input by the first user and sends it to the public quantum key server cluster; the public quantum key server cluster calculates the required fee and encrypts it and sends it back to the first public quantum key service device; the relevant information includes the basic information of the second public quantum key service device, the identity code or identification code of the second user, and the number of quantum keys; the basic information of the second public quantum key service device is used to determine the public quantum key service device that needs to implement quantum key distribution;

[0014] S2. After receiving the required fee, the first public quantum key service device notifies the first user, and the first user selects a payment method provided by the first public quantum key service device to make payment. After the payment is completed, the public quantum key server cluster verifies the transaction and sends a confirmation notification to the first public quantum key service device and the second public quantum key service device after the verification is passed;

[0015] S3, the first public quantum key service device and the second public quantum key service device realize quantum first communication key distribution through the quantum secure communication network; after the quantum first communication key distribution is completed, the first public quantum key service device transmits the first communication key to the first user through the short-distance communication module; the second public quantum key service device temporarily stores the first communication key locally;

[0016] S4, the second user finds the second public quantum key service device and completes identity authentication, and the second public quantum key service device transmits the first communication key temporarily stored locally to the second user through the short-range communication module;

[0017] S5. The first user and the second user obtain a symmetric first communication key, and both parties can transmit corresponding messages or files in an encrypted manner using the first communication key.

[0018] Optionally, the public quantum key service device and the user may perform identity authentication using the following steps:

[0019] S11. The public quantum key service device reads the user identity authentication information and uploads it to the unified authentication service system through quantum key encryption; the quantum key is a symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the unified authentication service system through quantum key issuance;

[0020] S12, after receiving the message, the unified authentication service system uses the quantum key to decrypt and obtain the authentication information, and then authenticates the authentication information after decryption;

[0021] S13, the unified authentication service system authenticates the security of the identity. After the authentication is passed, the unified authentication service system sends the authentication result to the public quantum key service device through quantum key encryption;

[0022] S14. After receiving the message, the public quantum key service device uses the quantum key to decrypt and obtain an authentication result; and determines the authority of the current user to use the device based on the authentication result.

[0023] Optionally, the public quantum key service device and the user may perform identity authentication using the following steps:

[0024] S21, the public quantum key service device reads the user identity authentication information and uploads it to the public quantum key server cluster through the first quantum key encryption; the quantum key is a symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the public quantum key server cluster to issue the quantum key;

[0025] S12. After receiving the message, the public quantum key server cluster uses the first quantum key to decrypt and obtain authentication information. After decryption, the authentication information is encrypted using the second quantum key and sent to the unified authentication service system. The second quantum key is a symmetric key obtained by the public quantum key server cluster through the QKD device and the QKD device of the unified authentication service system for quantum key issuance.

[0026] S23, after receiving the authentication information, the unified authentication service system uses the second quantum key to decrypt and obtain the authentication information, and authenticates the security of the identity. After the authentication is passed, the unified authentication service system encrypts the authentication result with the second quantum key and sends it to the public quantum key service device;

[0027] S24. After receiving the message, the public quantum key service device uses the first quantum key to decrypt and obtain an authentication result; and determines the authority of the current user to use the device according to the authentication result.

[0028] Furthermore, the basic information of the second public quantum key service device in step S1 may be a device code or a geographical location of the second public quantum key service device.

[0029] Preferably, in step S1, the public quantum key server cluster calculates the required fee based on the number of relays and the number of quantum keys.

[0030] A public quantum key service method is implemented in a scenario where a user uses an APP supported in a public quantum key service device through the device, comprising the following steps:

[0031] S31, the third user finds the nearest third public quantum key service device and completes identity authentication, and the third user selects the APP to be used on the public quantum key service device with pre-installed APP;

[0032] S32, the third public quantum key service device sends the APP information selected by the third user to the public quantum key server cluster; the public quantum key server cluster calculates the communication fee according to the number of relays between the third public quantum key service device and the APP manufacturer and encrypts and sends it back to the third public quantum key service device;

[0033] S33. After receiving the communication fee, the third public quantum key service device notifies the third user, and the third user selects a payment method provided by the third public quantum key service device to make payment. After the payment is completed, the public quantum key server cluster verifies the transaction and sends a confirmation notification to the third public quantum key service device and the APP manufacturer after the verification is passed;

[0034] S34, the public quantum key service device and the APP manufacturer realize the distribution of the second quantum communication key through the quantum secure communication network; after the distribution of the second quantum communication key is completed, the third public quantum key service device and the APP manufacturer save the second communication key locally until the end of this use;

[0035] S35. After the quantum key issuance process is completed, the user can use the APP to operate, and the communication between the APP of the third public quantum key service device and the manufacturer is encrypted by the second communication key.

[0036] Beneficial effects:

[0037] 1. In this patent, a public quantum key service device is deployed in public places, which will greatly contribute to the promotion of quantum secure communication: users do not need to add an additional QKD device, there is no problem of high price and operation and maintenance difficulty, and there is no problem of unclear ownership (QKD devices are all controlled by quantum communication network operators, so the user experience is better; users do not need to go to designated quantum communication network operators to access and cancel QKD devices, nor do they need to complete line deployment. Quantum key services can be obtained at any time in a large number of public places, and the process is flexible and convenient; user identity is not bound to the QKD device, and the user of the public quantum key service device is constantly changing, so the transmission of the QKD device ID on the network is not easy to expose the characteristics and laws of the user's network behavior;

[0038] 2. This patent proposes a public quantum key service system that identifies people using the device and excludes users who do not meet the requirements from the user list, thereby reducing the risk of the system being misused.

[0039] 3. The public quantum key service method proposed in this patent provides a public quantum communication platform for various APPs, and users can perform corresponding operations on the public quantum key service device of the present invention. The quantum key is always in this device from generation to abandonment, which not only ensures the security of the quantum key, but also provides users with a more convenient way to use APPs protected by quantum keys. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 This is a schematic diagram of the functional modules of the public quantum key service device of the present invention;

[0041] Figure 2 A schematic diagram of the network topology structure of the public quantum key service system of the present invention;

[0042] Figure 3 This is a schematic diagram of the network topology of the scenario of Embodiment 1 of the present invention;

[0043] Figure 4 This is a schematic diagram of the network topology of the scenario in Embodiment 2 of the present invention;

[0044] Figure 5 This is a schematic diagram of the network topology of the scenario of Embodiment 3 of the present invention;

[0045] Figure 6 This is a schematic diagram of the network topology of the scenario in Example 4 of the present invention. DETAILED DESCRIPTION

[0046] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments. However, it should be understood that the present invention can be implemented in various forms, and some exemplary and non-limiting embodiments shown in the accompanying drawings and described below are not intended to limit the present invention to the specific embodiments described.

[0047] It should be understood that, where technically feasible, the technical features listed above for different embodiments can be combined with each other to form other embodiments within the scope of the present invention. In addition, the specific examples and embodiments described in the present invention are non-limiting, and the structures, steps, and sequences described above can be modified accordingly without departing from the scope of protection of the present invention.

[0048] The present invention is a public quantum key service device and system. The public quantum key service device is installed in various public places. Users can obtain quantum keys through the device to realize quantum key encryption communication.

[0049] The public quantum key service device of the present invention is an operable device having data processing capabilities and normal communication functions. Figure 1As shown, the public quantum key service device also has at least QKD equipment, user identity recognition module, transaction module and short-range communication module.

[0050] The QKD device provides the public quantum key service device with the function of accessing the quantum secure communication network. The public quantum key service device uses the QKD device to implement quantum key distribution with any QKD device in the quantum secure communication network. The sites of the quantum secure communication network are all equipped with QKD devices, and the generation of quantum keys can be achieved through the QKD device between each site. The short-range communication module provides an interface for the public quantum key service device to issue quantum keys to the user's device end. Among them, the short-range communication methods include but are not limited to wired connection, QR code communication, NFC communication, infrared communication, Bluetooth communication, etc. The short-range communication module ensures that the device end is within the controllable range during communication. The transaction module enables the public quantum key service device to provide users with payment methods. The transaction methods include but are not limited to cash, mobile payment, digital RMB, IC card, etc. The transaction module also has a payment verification function to ensure transaction security. The user identity recognition module can identify the user's identity based on the user's eID or physical ID card. eID (Citizen Network Electronic Identity) is a network identity issued to citizens by the "Citizen Network Identity Recognition System" based on cryptographic technology and using smart security chips as carriers. It can remotely identify identities online without leaking identity information. The eID reading module enables the public quantum key service device to have the function of reading eID cards. After the public quantum key service device reads the information in the card through the eID reading module, it authenticates the user's identity information through the eID unified authentication service system, and at the same time identifies dangerous targets through the personnel monitoring service of the regulatory department. If the user uses a physical identity certificate, the public quantum key service device can read the information in the card through the physical ID card reading module, and authenticate the user's identity information through the physical identity certificate unified authentication service system of the regulatory department, and at the same time identify dangerous targets through the personnel monitoring service of the regulatory department.

[0051] like Figure 2 As shown in FIG. 1 , the public quantum key service system includes a public quantum key device and a public quantum key server cluster. The public quantum key server cluster is mainly responsible for network management and key management of the entire quantum communication network, and for user identity authentication and billing. Both the public quantum key device and the public quantum key server cluster are connected to the quantum secure communication network and the classical communication network.

[0052] Before communicating with the public quantum key server cluster, the public quantum key service device will distribute quantum keys with the QKD device of the public quantum key server cluster through the QKD device to obtain a quantum key that is symmetric with the public quantum key server cluster. The public quantum key service device realizes encrypted communication with the public quantum key server cluster through quantum keys.

[0053] Example 1

[0054] This embodiment is implemented in the scenario of identity authentication before a user uses a public quantum key service device. Figure 3 As shown, in this embodiment, taking the user's identity identified by the user's eID as an example, the roles involved in quantum key transactions include the public quantum key service device, the eID card, and the eID unified authentication service system. The eID unified authentication service system is equipped with QKD equipment and connected to the quantum secure communication network. The specific process is as follows:

[0055] 1.1. The user enters the operation interface of the public quantum key service device and needs to be authenticated before use. The user places his or her eID card on the eID card reader of the public quantum key service device.

[0056] 1.2. The public quantum key service device reads the authentication information in the eID card and uploads it to the eID unified authentication service system through quantum key encryption. The quantum key is a symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the eID unified authentication service system.

[0057] 1.3. After receiving the message, the eID unified authentication service system uses the quantum key to decrypt and obtain the authentication information. The eID unified authentication service system authenticates the authentication information and uses the personnel monitoring service of the regulatory department to identify dangerous targets. The eID unified authentication service system encrypts the authentication result with the quantum key and sends it to the public quantum key service device.

[0058] 1.4. After receiving the message, the public quantum key service device uses the quantum key to decrypt and obtain the authentication result. The public quantum key service device determines the current user's authority to use the device based on the authentication result.

[0059] Example 2

[0060] This embodiment implements another authentication communication process for identity authentication before the user uses the public quantum key service device. Figure 4As shown, in this embodiment, taking the user's identity identified by the user's eID as an example, the roles involved in quantum key transactions include a public quantum key service device, a public quantum key server cluster, an eID card, and an eID unified authentication service system. The eID unified authentication service system is equipped with a QKD device and connected to a quantum secure communication network.

[0061] The specific process is as follows:

[0062] 2.1. The user enters the operation interface of the public quantum key service device and needs to be authenticated before use. The user places his or her eID card on the eID card reader of the public quantum key service device.

[0063] 2.2. The public quantum key service device reads the authentication information in the eID card and uploads it to the public quantum key server cluster through the first quantum key encryption. The first quantum key is the symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the public quantum key server cluster to issue the quantum key.

[0064] 2.3. After receiving the message from the public quantum key service device, the public quantum key server cluster decrypts the message with the first quantum key to obtain the authentication information of the user's eID. The authentication information is encrypted with the second quantum key and sent to the eID unified authentication service system. The second quantum key is a symmetric key obtained by the public quantum key server cluster through the QKD device and the QKD device of the eID unified authentication service system.

[0065] 2.4. After receiving the message, the eID unified authentication service system uses the second quantum key to decrypt and obtain the authentication information. The eID unified authentication service system authenticates the authentication information and uses the personnel monitoring service of the regulatory department to identify dangerous targets. The eID unified authentication service system encrypts the authentication result with the second quantum key and sends it to the public quantum key server cluster.

[0066] 2.5. The public quantum key server cluster records the authentication result, decrypts it with the second quantum key, and encrypts it with the first quantum key to forward the message to the public quantum key service device.

[0067] 2.6. After receiving the message, the public quantum key service device uses the first quantum key to decrypt and obtain the authentication result. The public quantum key service device determines the authority of the current user to use the device based on the authentication result.

[0068] Example 3

[0069] The implementation scenario of this embodiment is that users obtain symmetric quantum keys by using a public quantum key service device. Figure 5As shown, the roles involved in the quantum key transaction in this embodiment include public quantum key service device A, public quantum key service device B, public quantum key server cluster, user A and user B. The public quantum key service device used by user A is public quantum key service device A; the public quantum key service device used by user B is public quantum key service device B. The specific process is as follows:

[0070] 3.1. User A and User B agree in advance that User A determines the device code or geographical location of the public quantum key service device B used by User B. The agreed method includes telephone, short message, email, instant messaging software, etc.

[0071] 3.2. User A finds the nearest public quantum key service device A and completes identity authentication. For the identity authentication process, please refer to Example 1 and Example 2. User A enters the device code or geographical location of the public quantum key service device B to determine the public quantum key service device that needs to implement quantum key distribution. And enter the identity code or identification code of user B, the number of quantum keys and other corresponding information.

[0072] 3.3. Public quantum key service device A encrypts the relevant information input by user A and sends it to the public quantum key server cluster. The public quantum key server cluster calculates the required fee based on the number of relays and the number of quantum keys between public quantum key service devices A and B, and encrypts and sends it back to public quantum key service device A.

[0073] 3.4. After receiving the message, the public quantum key service device A displays the required amount on the screen. User A selects a payment method provided by the public quantum key service device A to make the payment. After the payment is completed, if the payment method is cash or other methods, the public quantum key service device A will report the transaction to the public quantum key server cluster after local verification. The public quantum key server cluster confirms the transaction and notifies the public quantum key service device A and the public quantum key service device B of the confirmation message; if the payment method is mobile payment or credit card or other payment methods, the transaction module of the public quantum key service device A will verify the transaction to the public quantum key server cluster, and the public quantum key server cluster will verify the transaction in the corresponding way according to the payment method and notify the public quantum key service device A and the public quantum key service device B.

[0074] 3.5. Public quantum key service device A and public quantum key service device B implement quantum key distribution through a quantum secure communication network. After the quantum key distribution is completed, public quantum key service device A transmits the quantum key to the device of user A through a short-range communication module. Public quantum key service device B temporarily stores the quantum key locally.

[0075] 3.6. User B finds public quantum key service device B and passes the identity verification of public quantum key service device B. Public quantum key service device B transmits the quantum key temporarily stored locally to the device of user B through the short-range communication module.

[0076] 3.7. User A and User B obtain a symmetric quantum key, and both parties can transmit corresponding messages or files through quantum key encryption.

[0077] Example 4

[0078] The implementation scenario of this embodiment is that the user uses the APP supported by the public quantum key service device and completes related services. Figure 6 As shown, the roles involved in quantum key transactions in this embodiment include public quantum key service devices, public quantum key server clusters, APP manufacturers and users. The APP manufacturer has built a QKD device and a server corresponding to the APP, and connected to the quantum secure communication network. The specific process is as follows:

[0079] 4.1. The user finds the nearest public quantum key service device and completes identity authentication. For the identity authentication process, please refer to Example 1 and Example 2. The user selects the APP to be used on the public quantum key service device with pre-installed APP.

[0080] 4.2. The public quantum key service device sends the APP information selected by the user to the public quantum key server cluster. The public quantum key server cluster calculates the required fee based on the number of relays between the public quantum key service device and the APP manufacturer and encrypts and sends it back to the public quantum key service device.

[0081] 4.3. After receiving the message, the public quantum key service device displays the required amount on the screen. The user selects a payment method provided by the public quantum key service device to make the payment. After the payment is completed, if the payment method is cash or other methods, the public quantum key service device will report the transaction to the public quantum key server cluster after local verification. The public quantum key server cluster confirms the transaction and notifies the public quantum key service device and the APP manufacturer of the confirmation message; if the payment method is mobile payment or credit card or other payment methods, the transaction module of the public quantum key service device will verify the transaction to the public quantum key server cluster. The public quantum key server cluster verifies the transaction in the corresponding way according to the payment method and notifies the public quantum key service device and the APP manufacturer.

[0082] 4.4. The public quantum key service device and the APP manufacturer realize quantum key distribution through the quantum secure communication network. After the quantum key distribution is completed, the public quantum key service device and the APP manufacturer will store the quantum key locally until the end of this use.

[0083] 4.5. After the quantum key issuance process is completed, users can use the APP to operate, and the communication between the APP of the public quantum key service device and the manufacturer is encrypted by quantum key.

[0084] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0085] The above-mentioned embodiments only express several implementation methods of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A public quantum key service device, characterized in that: It includes QKD equipment, user identification module, transaction module and short-distance communication module. The QKD equipment provides the public quantum key service device with the function of accessing the quantum secure communication network, and uses the QKD equipment to realize quantum key distribution with any QKD device in the quantum secure communication network; the user identification module is used to identify the user's identity; the transaction module enables the public quantum key service device to provide the user with a payment method, and also has a payment verification function; the short-distance communication module provides an interface for the public quantum key service device to issue quantum keys to the user's device end; The public quantum key service device performs identity authentication with the user. After the authentication is successful, the users obtain a symmetric first communication key by using the public quantum key service device; comprising the following steps: S1. The first user agrees in advance to confirm the basic information of the second public quantum key service device used by the second user. The first user completes identity authentication with the first public quantum key service device. The first public quantum key service device encrypts the relevant information input by the first user and sends it to the public quantum key server cluster; the public quantum key server cluster calculates the required fee and encrypts it and sends it back to the first public quantum key service device; the relevant information includes the basic information of the second public quantum key service device, the identity code or identification code of the second user, and the number of quantum keys; the basic information of the second public quantum key service device is used to determine the public quantum key service device that needs to implement quantum key distribution; S2. After receiving the required fee, the first public quantum key service device notifies the first user, and the first user selects a payment method provided by the first public quantum key service device to make payment. After the payment is completed, the public quantum key server cluster verifies the transaction and sends a confirmation notification to the first public quantum key service device and the second public quantum key service device after the verification is passed; S3, the first public quantum key service device and the second public quantum key service device realize quantum first communication key distribution through the quantum secure communication network; after the quantum first communication key distribution is completed, the first public quantum key service device transmits the first communication key to the first user through the short-distance communication module; the second public quantum key service device temporarily stores the first communication key locally; S4, the second user finds the second public quantum key service device and completes identity authentication, and the second public quantum key service device transmits the first communication key temporarily stored locally to the second user through the short-range communication module; S5. The first user and the second user obtain a symmetric first communication key, and both parties transmit corresponding messages or files in an encrypted manner using the first communication key.

2. A public quantum key service device according to claim 1, characterized in that: The public quantum key service device and the user perform identity authentication using the following steps: S11. The public quantum key service device reads the user identity authentication information and uploads it to the unified authentication service system through quantum key encryption; the quantum key is a symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the unified authentication service system through quantum key issuance; S12, after receiving the message, the unified authentication service system uses the quantum key to decrypt and obtain the authentication information, and then authenticates the authentication information after decryption; S13, the unified authentication service system authenticates the security of the identity. After the authentication is passed, the unified authentication service system sends the authentication result to the public quantum key service device through quantum key encryption; S14, after receiving the message, the public quantum key service device uses the quantum key to decrypt and obtain the authentication result; The authority of the current user to use the device is determined based on the authentication result.

3. A public quantum key service device according to claim 1, characterized in that: The public quantum key service device and the user perform identity authentication using the following steps: S21, the public quantum key service device reads the user identity authentication information and uploads it to the public quantum key server cluster through the first quantum key encryption; the quantum key is a symmetric key obtained by the public quantum key service device through the QKD device and the QKD device of the public quantum key server cluster to issue the quantum key; S12. After receiving the message, the public quantum key server cluster uses the first quantum key to decrypt and obtain authentication information. After decryption, the authentication information is encrypted using the second quantum key and sent to the unified authentication service system. The second quantum key is a symmetric key obtained by the public quantum key server cluster through the QKD device and the QKD device of the unified authentication service system for quantum key issuance. S23, after receiving the authentication information, the unified authentication service system uses the second quantum key to decrypt and obtain the authentication information, and authenticates the security of the identity. After the authentication is passed, the unified authentication service system encrypts the authentication result with the second quantum key and sends it to the public quantum key service device; S24, after receiving the message, the public quantum key service device uses the first quantum key to decrypt and obtain the authentication result; The authority of the current user to use the device is determined based on the authentication result.

4. A public quantum key service device according to any one of claims 2 or 3, characterized in that: The basic information of the second public quantum key service device in step S1 is the device code or geographical location of the second public quantum key service device.

5. A public quantum key service device according to claim 4, characterized in that: In step S1, the public quantum key server cluster calculates the required fee based on the number of relays and the number of quantum keys.

6. A public quantum key service device according to claim 4, characterized in that: The implementation includes the following steps in the scenario where a user uses an APP supported in the device through a public quantum key service device: S31, the third user finds the nearest third public quantum key service device and completes identity authentication, and the third user selects the APP to be used on the public quantum key service device with pre-installed APP; S32, the third public quantum key service device sends the APP information selected by the third user to the public quantum key server cluster; The public quantum key server cluster calculates the communication fee based on the number of relays between the third public quantum key service device and the APP manufacturer and encrypts and sends it back to the third public quantum key service device; S33. After receiving the communication fee, the third public quantum key service device notifies the third user, and the third user selects a payment method provided by the third public quantum key service device to make payment. After the payment is completed, the public quantum key server cluster verifies the transaction and sends a confirmation notification to the third public quantum key service device and the APP manufacturer after the verification is passed; S34, the public quantum key service device and the APP manufacturer realize the distribution of the second quantum communication key through the quantum secure communication network; after the distribution of the second quantum communication key is completed, the third public quantum key service device and the APP manufacturer save the second communication key locally until the end of this use; S35. After the quantum key issuance process is completed, the user uses the APP to operate, and the communication between the APP of the third public quantum key service device and the manufacturer is encrypted by the second communication key.

7. A public quantum key service system, characterized in that: It includes the public quantum key service device and the public quantum key server cluster as described in claim 1, and the public quantum key server cluster is used to perform network management and key management on the entire quantum communication network, and to perform identity authentication and billing on users.

8. A public quantum key service system according to claim 7, characterized in that: Both the public quantum key device and the public quantum key server cluster are connected to the quantum secure communication network and the classical communication network; before communicating with the public quantum key server cluster, the public quantum key service device will distribute quantum keys with the QKD device of the public quantum key server cluster through the QKD device to obtain a quantum key that is symmetric with the public quantum key server cluster; the public quantum key service device realizes encrypted communication with the public quantum key server cluster through quantum keys.

Images