A video stream secure transmission system based on quantum random numbers

Abstract

The present invention discloses a video stream security transmission system based on quantum random numbers, comprising: a first quantum random number unit, used to generate and / or store at least one group of first quantum random number sequences; a first security storage unit, used to store a first identity authentication key; a first main control unit, used to access the first identity authentication key stored in the first security storage unit through a handle, and based on obtaining a group of first quantum random number sequences and the first identity authentication key from the first quantum random number unit, using a symmetric encryption algorithm mechanism to perform identity authentication with a video receiver; also used to obtain a group of first quantum random number sequences from the first quantum random number unit, and negotiate a video encryption and decryption key with the video receiver based on the group of first quantum random number sequences; and also used to encrypt a digital video signal based on the video encryption and decryption key. The present invention uses encryption technology combined with quantum random numbers to improve the security requirements of video transmission.

Description

Technical Field

[0001] The present invention relates to the field of video transmission and information security, and in particular to a video stream security transmission system based on quantum random numbers. Background Art

[0002] Video surveillance systems are widely used in various industries in society, such as transportation, security, and industry. While video data is widely used, it faces huge security risks of information leakage. At present, the hidden dangers of video surveillance data mainly manifest in two forms. One is the theft of video information on the line during video data transmission; the other is the theft of video information from the video acquisition end and storage end. The adverse effects of these two common information theft methods cannot be ignored and have become an urgent problem to be solved in the current information security field. While providing convenient services, the video data acquisition system needs to further improve its own communication data security.

[0003] In order to enhance the risk resistance of equipment, the encryption technology of video data is constantly being innovated. At present, there are two common encryption technologies for video transmission. The first is to enhance security based on user security authentication such as user and password, and classify the permissions of valid users. This common mode, simple username and password method is very easy to obtain or crack by brute force, and this method cannot effectively prevent the hidden danger of information leakage. The second is to encrypt the video transmission content using traditional encryption algorithms based on the deployment of network monitoring systems, combined with network technologies such as network cameras. The encryption parameters such as keys used in this algorithm are pseudo-random numbers generated by software simulation, and there are rules to follow. With the improvement of computing power, the encrypted information in this way is still likely to be cracked. Summary of the invention

[0004] The present invention provides a video stream security transmission system based on quantum random numbers, which is used to at least solve the problem in the prior art that encryption using pseudo-random numbers generated by software simulation is easy to crack.

[0005] A video stream secure transmission system based on quantum random numbers according to an embodiment of the present invention includes:

[0006] A video acquisition unit, used for acquiring analog video signals and converting the analog video signals into digital video signals;

[0007] A first quantum random number unit, used to generate and / or store at least one set of first quantum random number sequences;

[0008] A first secure storage unit, used to store a first identity authentication key;

[0009] A first main control unit is used to access the first identity authentication key stored in the first security storage unit through a handle, and based on obtaining a group of first quantum random number sequences and the first identity authentication key from the first quantum random number unit, perform identity authentication with the video receiver using a symmetric encryption algorithm mechanism; it is also used to obtain a group of first quantum random number sequences from the first quantum random number unit, and negotiate a video encryption and decryption key with the video receiver based on the group of first quantum random number sequences; it is also used to obtain the digital video signal from the video acquisition unit, and encrypt the digital video signal based on the video encryption and decryption key;

[0010] The encrypted data interface unit is used to send the encrypted digital video signal to the video receiver.

[0011] According to some embodiments of the present invention, the mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

[0012] According to some embodiments of the present invention, a set of first quantum random number sequences is obtained from the first quantum random number unit by the first main control unit, and is used as the first identity authentication key of the first secure storage unit.

[0013] According to some embodiments of the present invention, the first main control unit is used to:

[0014] receiving and decrypting the first negotiation information sent by the video receiver to obtain the second quantum random number sequence of the video receiver, and using the second quantum random sequence as a video encryption and decryption key; or,

[0015] A group of first quantum random number sequences is obtained from the first quantum random number unit, and second negotiation information is encrypted and constructed based on the group of first quantum random number sequences, and sent to the video receiver, using the group of first quantum random sequences as video encryption and decryption keys.

[0016] According to some embodiments of the present invention, the first main control unit is further configured to:

[0017] Obtaining a set of first quantum random number sequences from the first quantum random number unit, and negotiating a data integrity verification key with the video receiver based on the set of first quantum random number sequences;

[0018] Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

[0019] According to some embodiments of the present invention, the first quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

[0020] A video stream secure transmission system based on quantum random numbers according to an embodiment of the present invention includes:

[0021] A decryption data interface unit, used for receiving an encrypted digital video signal sent by a video sender;

[0022] A second quantum random number unit, used to generate and / or store at least one set of second quantum random number sequences;

[0023] A second secure storage unit, used to store a second identity authentication key;

[0024] A second main control unit is used to access the second identity authentication key stored in the second security storage unit through a handle, and based on obtaining a set of second quantum random number sequences and the second identity authentication key from the second quantum random number unit, perform identity authentication with the video sender using a symmetric encryption algorithm; it is also used to obtain a set of second quantum random number sequences from the second quantum random number unit, and negotiate a video encryption and decryption key with the video sender based on the set of second quantum random number sequences; it is also used to decrypt the encrypted digital video signal based on the video encryption and decryption key;

[0025] The video output unit is used to output the decrypted digital video signal.

[0026] According to some embodiments of the present invention, the mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

[0027] According to some embodiments of the present invention, a set of second quantum random number sequences is obtained from the second quantum random number unit by the second main control unit, and is used as the second identity authentication key of the second secure storage unit.

[0028] According to some embodiments of the present invention, the second main control unit is used to:

[0029] Obtain a set of second quantum random number sequences from the second quantum random number unit, and encrypt and construct first negotiation information based on the set of second quantum random number sequences, and send the first negotiation information to the video sender, using the set of second quantum random sequence as a video encryption and decryption key; or,

[0030] Receive and decrypt the second negotiation information sent by the video sender to obtain the first quantum random number sequence of the video sender, and use the first quantum random sequence as a video encryption and decryption key.

[0031] According to some embodiments of the present invention, the second main control unit is further used for:

[0032] Obtaining a set of second quantum random number sequences from the second quantum random number unit, and negotiating a data integrity verification key with the video sender based on the set of second quantum random number sequences;

[0033] Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

[0034] According to some embodiments of the present invention, further comprising: a display device or a storage device;

[0035] The video output unit outputs the decrypted video stream to the display device or the storage device.

[0036] According to some embodiments of the present invention, the second quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

[0037] By adopting the embodiment of the present invention, the first identity authentication key stored in the first secure storage unit is accessed through a handle to authenticate the video receiver. The key can only be accessed through the handle and cannot be directly read in plain text, which can improve security. The video encryption and decryption keys are negotiated based on the quantum random number sequence. By taking advantage of the high stability and unpredictability of the quantum random number itself, the video is encrypted using the encryption key generated through negotiation, thereby improving the security requirements for video transmission and making the encrypted video difficult to crack.

[0038] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Various other advantages and benefits will become apparent to those skilled in the art by reading the detailed description of the embodiments below. The accompanying drawings are only used to illustrate the preferred embodiments and are not to be considered as limiting the present invention. In the accompanying drawings:

[0040] Figure 1 is a schematic diagram of the structure of a video stream security transmission system based on quantum random numbers in an embodiment of the present invention;

[0041] Figure 2 is a flow chart of identity authentication in an embodiment of the present invention;

[0042] Figure 3 Schematic diagram of a three-way authentication mechanism in identity authentication in an embodiment of the present invention;

[0043] Figure 4is a schematic diagram of a sender and a receiver negotiating and generating an encryption key in an embodiment of the present invention;

[0044] Figure 5 It is a schematic diagram of the process of video encryption and decryption in an embodiment of the present invention. DETAILED DESCRIPTION

[0045] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0046] A video stream secure transmission system based on quantum random numbers according to an embodiment of the present invention includes:

[0047] The video acquisition unit is used to acquire analog video signals and convert the analog video signals into digital video signals. For example, the video acquisition unit can be a road monitoring camera, a community monitoring camera, a video conferencing system, etc., and the analog video signals are converted into digital video signals through the video encoding algorithm configured by the camera. Of course, a digital camera can also be used to directly acquire video signals.

[0048] The first quantum random number unit is used to generate and / or store at least one set of first quantum random number sequences. For example, the first quantum random number unit can be a quantum random number sequence generator that can generate quantum random number sequences in real time; or a storage module for injecting quantum random numbers; or a storage module for quantum keys generated by a quantum key distribution device.

[0049] The quantum random number generator generates random sequences based on the intrinsic properties of quantum mechanics. It is currently the only random number generator that can theoretically prove its true randomness. The intrinsic properties of quantum mechanics fundamentally guarantee the unpredictability of random sequences and naturally meet all requirements of true randomness. The random numbers generated by the quantum random number unit are considered to be true random numbers, which meet the requirements of fields with high information security.

[0050] The first secure storage unit is used to store the first identity authentication key. For example, the first secure storage unit may be a module or a secure chip having secure authentication and encryption storage functions.

[0051] The first main control unit is used to access the first identity authentication key stored in the first security storage unit through a handle, and based on obtaining a set of first quantum random number sequences and the first identity authentication key from the first quantum random number unit, perform identity authentication with the video receiver using a symmetric encryption algorithm. It is also used to obtain a set of first quantum random number sequences from the first quantum random number unit, and negotiate a video encryption and decryption key with the video receiver based on the set of first quantum random number sequences. It is also used to obtain the digital video signal from the video acquisition unit, and encrypt the digital video signal based on the video encryption and decryption key.

[0052] The encrypted data interface unit is used to send the encrypted digital video signal to the video receiver. For example, the encrypted data interface unit can be a network interface or a USB interface.

[0053] By adopting the embodiment of the present invention, the first identity authentication key stored in the first security storage unit is accessed through a handle, and a set of first quantum random number sequences are obtained from the first quantum random number unit to authenticate the identity of the video receiver, so that security can be improved, and video encryption and decryption keys are negotiated based on the quantum random number sequence. Through the high stability and unpredictability of the quantum random number itself, the encryption key generated by negotiation is used to encrypt the video, thereby improving the security requirements of video transmission, making the encrypted video not easy to be cracked.

[0054] On the basis of the above-mentioned embodiments, various variant embodiments are further proposed. It should be noted that, in order to make the description concise, only the differences from the above-mentioned embodiments are described in each variant embodiment.

[0055] According to some embodiments of the present invention, the encoding algorithm of the video stream may be an H.265 or H.264 video encoding and decoding algorithm.

[0056] According to some embodiments of the present invention, the encrypted data interface unit may be a network interface or a USB interface.

[0057] According to some embodiments of the present invention, the mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

[0058] According to some embodiments of the present invention, a set of first quantum random number sequences is obtained from the first quantum random number unit by the first main control unit, and is used as the first identity authentication key of the first secure storage unit.

[0059] According to some embodiments of the present invention, the first main control unit is used to:

[0060] receiving and decrypting the first negotiation information sent by the video receiver to obtain the second quantum random number sequence of the video receiver, and using the second quantum random sequence as a video encryption and decryption key; or,

[0061] A group of first quantum random number sequences is obtained from the first quantum random number unit, and second negotiation information is encrypted and constructed based on the group of first quantum random number sequences, and sent to the video receiver, using the group of first quantum random sequences as video encryption and decryption keys.

[0062] According to some embodiments of the present invention, the first main control unit is further configured to:

[0063] Obtaining a set of first quantum random number sequences from the first quantum random number unit, and negotiating a data integrity verification key with the video receiver based on the set of first quantum random number sequences;

[0064] Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

[0065] According to some embodiments of the present invention, the first quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

[0066] A video stream secure transmission system based on quantum random numbers according to an embodiment of the present invention includes:

[0067] The decryption data interface unit is used to receive the encrypted digital video signal sent by the video sender. For example, the decryption data interface unit can be a network interface or a USB interface.

[0068] The second quantum random number unit is used to generate and / or store at least one set of second quantum random number sequences. For example, the second quantum random number unit can be a quantum random number sequence generator that can generate quantum random number sequences in real time, or a storage module for injecting quantum random numbers; or a storage module for quantum keys generated by a quantum key distribution device.

[0069] The quantum random number generator generates random sequences based on the intrinsic properties of quantum mechanics. It is currently the only random number generator that can theoretically prove its true randomness. The intrinsic properties of quantum mechanics fundamentally guarantee the unpredictability of random sequences and naturally meet all requirements of true randomness. The random numbers generated by the quantum random number unit are considered to be true random numbers, which meet the requirements of fields with high information security.

[0070] The second secure storage unit is used to store the second identity authentication key. For example, the second secure storage unit may be a module or a security chip having secure authentication and encryption storage functions.

[0071] The second main control unit is used to access the second identity authentication key stored in the second security storage unit through the handle, and based on obtaining a set of second quantum random number sequences and the second identity authentication key from the second quantum random number unit, use the mechanism of the symmetric encryption algorithm to authenticate the identity with the video sender. It is also used to obtain a set of second quantum random number sequences from the second quantum random number unit, and negotiate the video encryption and decryption key with the video sender based on the set of second quantum random number sequences. It is also used to decrypt the encrypted digital video signal based on the video encryption and decryption key.

[0072] The video output unit is used to output the decrypted digital video signal.

[0073] By adopting the embodiment of the present invention, the second identity authentication key stored in the second security storage unit is accessed through a handle, and a set of second quantum random number sequences are obtained from the second quantum random number unit to authenticate the identity of the video sender, so that security can be improved, and video encryption and decryption keys are negotiated based on the quantum random number sequence. Through the high stability and unpredictability of the quantum random number itself, the encryption key generated by negotiation is used to encrypt the video, thereby improving the security requirements of video transmission, making the encrypted video not easily cracked.

[0074] On the basis of the above-mentioned embodiments, various variant embodiments are further proposed. It should be noted that, in order to make the description concise, only the differences from the above-mentioned embodiments are described in each variant embodiment.

[0075] According to some embodiments of the present invention, the decoding algorithm of the video stream may be an H.265 or H.264 video codec algorithm.

[0076] According to some embodiments of the present invention, the decryption data interface unit may be a network interface or a USB interface.

[0077] According to some embodiments of the present invention, the mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

[0078] According to some embodiments of the present invention, a set of second quantum random number sequences is obtained from the second quantum random number unit by the second main control unit, and is used as the second identity authentication key of the second secure storage unit.

[0079] According to some embodiments of the present invention, the second main control unit is used to:

[0080] Obtain a set of second quantum random number sequences from the second quantum random number unit, and encrypt and construct first negotiation information based on the set of second quantum random number sequences, and send the first negotiation information to the video sender, using the set of second quantum random sequence as a video encryption and decryption key; or,

[0081] Receive and decrypt the second negotiation information sent by the video sender to obtain the first quantum random number sequence of the video sender, and use the first quantum random sequence as a video encryption and decryption key.

[0082] According to some embodiments of the present invention, the second main control unit is further used for:

[0083] Obtaining a set of second quantum random number sequences from the second quantum random number unit, and negotiating a data integrity verification key with the video sender based on the set of second quantum random number sequences;

[0084] Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

[0085] According to some embodiments of the present invention, further comprising: a display device or a storage device;

[0086] The video output unit outputs the decrypted video stream to the display device or the storage device.

[0087] According to some embodiments of the present invention, the second quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

[0088] The following is a detailed description of a video stream secure transmission system based on quantum random numbers using a specific embodiment. It is worth noting that the following description is only an exemplary description and not a specific limitation of the present invention. All similar structures and similar variations of the present invention should be included in the protection scope of the present invention.

[0089] like Figure 1 As shown, the video stream secure transmission system based on quantum random numbers according to an embodiment of the present invention includes: a video stream sender, a video stream receiver, and a transmission line.

[0090] The video stream sender and the video stream receiver are connected via a transmission line;

[0091] The video stream sender includes: a video acquisition unit, a first main control unit, a first quantum random number unit, a first secure storage unit, and an encrypted data interface unit;

[0092] The video stream receiver includes: a second main control unit, a video output unit, a second secure storage unit, a second quantum random number unit, and a decryption data interface unit.

[0093] The video acquisition unit is a video input device that converts analog video signals into digital video signals through a video encoding algorithm. The video acquisition unit can be a camera or a video conferencing system.

[0094] The first quantum random number unit and the second quantum random number unit are devices for real-time generation and / or storage of quantum random numbers, and are used to generate video stream encryption and decryption keys and data integrity verification keys, as well as encryption keys for key updates. For example, they can be quantum random number generators, or storage modules for injecting quantum random numbers; or storage modules for quantum keys generated by quantum key distribution devices.

[0095] The first quantum random number unit and the second quantum random number unit can be quantum random number generators that can generate quantum random numbers in real time. The random number generator generates random sequences based on the intrinsic properties of quantum mechanics and is currently the only random number generator that can theoretically prove its true randomness. The intrinsic properties of quantum mechanics fundamentally guarantee the unpredictability of random sequences and naturally meet all requirements for true randomness. The random numbers generated by the quantum random number unit are considered to be true random numbers, which meet the requirements of fields with high information security requirements.

[0096] The first secure storage unit and the second secure storage unit are key storage devices for storing identity authentication keys. The identity authentication key can be one or more groups of keys. The keys stored in the first secure storage unit and the second secure storage unit can only be accessed through a handle and cannot be directly read in plain text.

[0097] The first secure storage unit and the second secure storage unit may be modules or security chips having security authentication and encryption storage functions.

[0098] The entity authentication of the identity authentication between the first main control unit and the second main control unit adopts a three-pass authentication mechanism based on quantum random numbers to confirm the legitimacy of the communicating parties.

[0099] The encrypted data interface unit is a communication transmission interface of the video stream sender, which is used to output the encrypted video stream data and update the video stream encryption key. The video stream encoding and decoding algorithm can be H.265 or H.264 video encoding and decoding algorithm. The encryption and decryption algorithms of the video stream can be standard symmetric encryption algorithms and encryption algorithms recognized by the State Cryptography Administration, such as AES encryption and decryption algorithms or SM4 encryption and decryption algorithms.

[0100] The decryption data interface unit is a communication transmission interface of the video stream receiver, which is used to receive encrypted video stream data and update the video stream encryption key.

[0101] The encryption data interface unit and the decryption data interface unit may be a network interface or a USB interface.

[0102] The video output unit is used to output the decrypted video stream.

[0103] The transmission line is used for transmitting video stream information. The transmission line adopts Ethernet, optical fiber, USB link or other communication lines.

[0104] The workflow of the video stream secure transmission system based on quantum random numbers in the embodiment of the present invention includes:

[0105] The first main control unit reads the video stream data from the video acquisition unit and decodes it to complete the parsing of the video stream data.

[0106] The first main control unit accesses the identity authentication key of the first secure storage unit through a handle, and the second main control unit accesses the identity authentication key of the second secure storage unit through a handle to perform an identity authentication process and confirm the legitimacy of the communicating parties.

[0107] After completing the identity authentication, the first main control unit obtains a set of first quantum random sequences from the first quantum random number unit, and the second main control unit obtains a set of second quantum random sequences from the first quantum random number unit, and generates a set of session keys based on the two sets of quantum random sequences. The session keys include video stream encryption and decryption keys and data integrity verification keys.

[0108] The first main control unit uses the video stream encryption and decryption key and a symmetric encryption algorithm to encrypt and encode the video stream data, and uses the data integrity verification key and a data integrity verification algorithm to perform data integrity verification on the video stream.

[0109] The first main control unit outputs the encrypted video stream to the communication line through the encryption data interface unit and transmits it to the video stream receiver, and receives it through the decryption data interface unit.

[0110] The second main control unit receives the encrypted video stream transmitted by the video stream sender through the decryption data interface unit.

[0111] The video stream data is obtained from the transmission line through the decryption data interface unit.

[0112] The second main control unit uses the video stream encryption and decryption key to decrypt the video stream data through the symmetric encryption and decryption algorithm, and uses the key for data integrity verification to verify the data integrity of the video stream. The second main control unit outputs the decrypted video stream through the video output unit.

[0113] The video output unit outputs the decrypted video stream to a display device or a storage device.

[0114] Specifically, refer to Figure 5 As shown, the video stream encryption and decryption process of the video stream secure transmission system based on quantum random numbers in an embodiment of the present invention includes:

[0115] Step S501: The video stream sender and the video stream receiver perform identity authentication.

[0116] Step S502: After the identity authentication in step S501 is successful, the negotiation of the session key is completed, and the session key for this connection (video encryption and decryption key A and data integrity verification key B) is generated.

[0117] Step S503: The video stream sender completes the collection of video information.

[0118] Step S504: the first main control unit of the video stream sender analyzes the collected video stream.

[0119] Step S505: The first main control unit of the video stream sender obtains the video stream encryption and decryption key A based on quantum random numbers generated by negotiation in step S502.

[0120] Step S506: Encrypt the video stream data parsed in step S504 using the video encryption / decryption key A in step S505 and an encryption algorithm.

[0121] Step S507: The first main control unit of the video stream sender obtains the data integrity verification key B based on quantum random numbers generated by negotiation in step S502.

[0122] Step S508: Perform integrity check on the video stream data encrypted in step S506 using the data integrity check key B in step S507.

[0123] Step S509: The encrypted video stream data after integrity check in step S508 is transmitted to the video stream receiver through the encrypted data interface unit and the transmission line to perform video parsing, decryption and output.

[0124] Step S510: the video stream receiver receives the encrypted video stream transmitted by the video stream sender through a decryption data interface unit.

[0125] Step S511: The second main control unit of the video stream receiver obtains the data integrity verification key B based on quantum random numbers generated by negotiation in step S502.

[0126] Step S512: The second main control unit of the video stream receiver uses the data integrity check key B of step S511 to perform integrity check on the encrypted video stream of step S510.

[0127] Step S513: The second main control unit of the video stream receiver obtains the video stream encryption and decryption key A based on quantum random numbers generated by the negotiation in step S502.

[0128] Step S514: the second main control unit of the video stream receiver uses the video stream encryption and decryption key A of step S513 to decrypt the encrypted video data successfully verified in step S512.

[0129] Step S515: the second main control unit of the video stream receiver decodes and outputs the decrypted data for display or storage by an external device.

[0130] Preferably, a symmetric encryption algorithm is used when the session key is used to encrypt and decrypt data.

[0131] Preferably, the encryption and decryption algorithms of the video stream may be standard symmetric encryption algorithms and encryption algorithms approved by the State Cryptography Administration, such as AES encryption and decryption algorithms or SM4 encryption and decryption algorithms.

[0132] Preferably, the data integrity check uses the integrity check key for calculation and processing to obtain an integrity check value. The encrypted video data can be calculated using a hash algorithm with a key to obtain a hash value as a credential for integrity verification, and the encrypted data stream after integrity verification is obtained. For example, the first main control unit of the video stream sender uses the integrity check key of step S507 for calculation and processing to obtain an integrity check value C. The second main control unit of the video stream receiver uses the integrity check key of step S511 for calculation and processing to obtain an integrity check value D, and compares it with the check value C. If the comparison is consistent, the verification is successful, indicating that the data has not been tampered with and the data integrity is guaranteed. On the contrary, if the data comparison verification fails, the data has been tampered with and subsequent operations cannot be performed.

[0133] like Figure 2 As shown in FIG. 1 , the identity authentication workflow of the video stream sender and the video stream receiver includes:

[0134] Step S201: the video stream sender is powered on and completes a status self-check and device initialization. Meanwhile, a communication connection is established between the first main control unit and the second main control unit.

[0135] Step S202: The first main control unit of the video stream sender accesses a set of first identity authentication keys in the first secure storage unit through a handle.

[0136] Step S203: the second main control unit of the video stream receiver accesses a set of second identity authentication keys in the second secure storage unit through the handle.

[0137] Step S204: The video stream sender and the video stream receiver complete entity authentication based on the three-pass authentication mechanism of quantum random numbers to confirm the legitimacy of the encryption and decryption units of the two communicating parties.

[0138] Step S205: If the identity authentication is successful, the video stream sender and the video stream receiver can establish a link to perform video encryption and decryption operations.

[0139] Step S206: Identity authentication fails, the video stream sender and the video stream receiver cannot establish a link, and video encryption and decryption operations cannot be performed.

[0140] Step S207: After the identity authentication is successful, the communicating parties negotiate to generate a video stream encryption and decryption key based on quantum random numbers, as well as a data integrity verification key.

[0141] The identity authentication in this example is based on the three-pass authentication mechanism of quantum random numbers. In this mechanism, the uniqueness and timeliness are controlled by generating and verifying random numbers. Figure 3 As shown, the three-pass mutual authentication method for the identity authentication of the video stream sender and the video stream receiver includes:

[0142] Step S301: The video stream receiver sends a set of quantum random numbers R generated by the second quantum random number unit to the video stream sender. B And a text field Text1.

[0143] Step S302: The video stream sender generates a set of first quantum random numbers R from the first quantum random number unit A , and then use the symmetric encryption algorithm eKAB to generate Token AB , and sent to the video stream receiver.

[0144] Token AB =Text3||eKAB(R A ||R B ||B||Text2)

[0145] Text2 and Text3 represent text fields.

[0146] Step S303: Once the Token is received AB The video stream receiving device decrypts the encrypted part and verifies the correctness of the distinguishable device unique identifier B and the R sent to the video stream sender in step S301. B Is it related to TokenAB The random number contained in the Token is consistent, thereby verifying the Token AB .

[0147] Step S304: The video stream receiver generates and sends a Token to the video stream sender BA .

[0148] Token BA =Text5||eKAB(R B ||R A ||Text4)

[0149] Text4 and Text5 represent text fields.

[0150] Step S305: Once the Token is received BA The video stream sending device decrypts the encrypted part and verifies the R received from the video stream receiver in step S301. B Is it related to Token BA The random number contained in the video stream is consistent with the R sent to the video stream receiver in step S302. A Is it related to Token BA The random number in matches.

[0151] Preferably, the symmetric encryption algorithm eKAB can be a standard encryption algorithm and an encryption algorithm approved by the State Cryptography Administration, such as an AES encryption and decryption algorithm or an SM4 encryption and decryption algorithm.

[0152] like Figure 4 As shown, the session key negotiation steps between the video stream sender and the video stream receiver include:

[0153] Step S401: The video stream sender and the video stream receiver perform identity authentication.

[0154] Step S402: The quantum random number unit of the video stream sender generates a random number sequence (M0, M1, M2...Mk).

[0155] Step S403: The quantum random number unit of the video stream receiver generates a random number sequence (N0, N1, N2...Nk).

[0156] Step S404: the video stream sender encrypts the random number sequence in step S402 using a preset key and an encryption algorithm eK and sends it to the video stream receiver.

[0157] Step S405: The video stream receiver encrypts the random number sequence in step S403 using a preset key and an encryption algorithm eK and sends it to the video stream sender.

[0158] Step S406: The video stream sender uses the encryption algorithm eK to decrypt the received encrypted random number sequence to obtain a random number sequence, and uses the algorithm rules that comply with security authentication to process the decrypted random number sequence and the locally generated random number sequence to generate the negotiated session key (A, B). At the same time, the video stream receiver uses the same steps and algorithms as the video stream sender to generate the negotiated session key (A, B).

[0159] Preferably, the length of the generated random number sequence is not less than the minimum length specified by the cryptographic standards recognized by the National Cryptography Administration.

[0160] Preferably, the algorithm rule that complies with security authentication and is used for session negotiation may be a standard algorithm, such as an XOR algorithm.

[0161] Preferably, the encryption / decryption algorithm eK uses a symmetric encryption algorithm when encrypting / decrypting data.

[0162] Preferably, the encryption and decryption algorithm eK can be a standard symmetric encryption algorithm and an encryption algorithm approved by the State Cryptography Administration, such as an AES encryption and decryption algorithm or an SM4 encryption and decryption algorithm.

[0163] The video stream secure transmission system based on quantum random numbers in the embodiment of the present invention has the following beneficial effects:

[0164] (1) The key of this example is derived from quantum random numbers (true random numbers), which have the characteristics of high stability and unpredictability.

[0165] (2) The present invention verifies the legitimacy of the video stream using the data integrity verification key generated by negotiation between the communicating parties to ensure the security of the communicating parties. As long as the data is stolen or forged, the original video data cannot be obtained after the integrity verification fails, thus achieving the purpose of communication security.

[0166] (3) The video stream sender and video stream receiver of this example are characterized by being embedded, miniaturized, low in power consumption, and highly stable, and are therefore easy to integrate into a higher-level security protection system and can be quickly deployed and implemented.

[0167] Through the description of the specific implementation methods, one should be able to have a more in-depth and specific understanding of the technical means and effects adopted by the present invention to achieve the predetermined purpose. However, the accompanying drawings are only for reference and illustration purposes and are not intended to limit the present invention.

[0168] It should be noted that, in the description of this specification, well-known methods, structures and techniques are not shown in detail so as not to obscure the understanding of this specification.

Claims

1. A video stream secure transmission system based on quantum random numbers, characterized in that: include: A video acquisition unit, used for acquiring analog video signals and converting the analog video signals into digital video signals; A first quantum random number unit, used to generate and / or store at least one set of first quantum random number sequences; A first secure storage unit, used to store a first identity authentication key; A first main control unit is used to access the first identity authentication key stored in the first security storage unit through a handle, and based on obtaining a group of first quantum random number sequences and the first identity authentication key from the first quantum random number unit, perform identity authentication with the video receiver using a symmetric encryption algorithm mechanism; it is also used to obtain a group of first quantum random number sequences from the first quantum random number unit, and negotiate a video encryption and decryption key with the video receiver based on the group of first quantum random number sequences; it is also used to obtain the digital video signal from the video acquisition unit, and encrypt the digital video signal based on the video encryption and decryption key; The encrypted data interface unit is used to send the encrypted digital video signal to the video receiver.

2. The video stream secure transmission system based on quantum random numbers as claimed in claim 1, characterized in that: The mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

3. The video stream secure transmission system based on quantum random numbers as claimed in claim 2, characterized in that: A set of first quantum random number sequences is obtained from the first quantum random number unit through the first main control unit, and is used as the first identity authentication key of the first secure storage unit.

4. The video stream secure transmission system based on quantum random numbers as claimed in claim 1, characterized in that: The first main control unit is used for: receiving and decrypting the first negotiation information sent by the video receiver to obtain the second quantum random number sequence of the video receiver, and using the second quantum random sequence as a video encryption and decryption key; or, A group of first quantum random number sequences is obtained from the first quantum random number unit, and second negotiation information is encrypted and constructed based on the group of first quantum random number sequences, and sent to the video receiver, using the group of first quantum random sequences as video encryption and decryption keys.

5. The video stream secure transmission system based on quantum random numbers as claimed in claim 1, characterized in that: The first main control unit is further used for: Obtaining a set of first quantum random number sequences from the first quantum random number unit, and negotiating a data integrity verification key with the video receiver based on the set of first quantum random number sequences; Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

6. The video stream secure transmission system based on quantum random numbers according to any one of claims 1 to 5, characterized in that: The first quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

7. A video stream secure transmission system based on quantum random numbers, characterized in that: include: A decryption data interface unit, used for receiving an encrypted digital video signal sent by a video sender; A second quantum random number unit, used to generate and / or store at least one set of second quantum random number sequences; A second secure storage unit, used to store a second identity authentication key; A second main control unit is used to access the second identity authentication key stored in the second security storage unit through a handle, and based on obtaining a set of second quantum random number sequences and the second identity authentication key from the second quantum random number unit, perform identity authentication with the video sender using a symmetric encryption algorithm; it is also used to obtain a set of second quantum random number sequences from the second quantum random number unit, and negotiate a video encryption and decryption key with the video sender based on the set of second quantum random number sequences; it is also used to decrypt the encrypted digital video signal based on the video encryption and decryption key; The video output unit is used to output the decrypted digital video signal.

8. The video stream secure transmission system based on quantum random numbers as claimed in claim 7, characterized in that: The mechanism using the symmetric encryption algorithm is a three-pass authentication mechanism.

9. The video stream secure transmission system based on quantum random numbers as claimed in claim 8, characterized in that: A set of second quantum random number sequences is obtained from the second quantum random number unit through the second main control unit, and is used as the second identity authentication key of the second secure storage unit.

10. The video stream secure transmission system based on quantum random numbers as claimed in claim 7, characterized in that: The second main control unit is used for: Obtain a set of second quantum random number sequences from the second quantum random number unit, and encrypt and construct first negotiation information based on the set of second quantum random number sequences, and send the first negotiation information to the video sender, using the set of second quantum random sequence as a video encryption and decryption key; or, Receive and decrypt the second negotiation information sent by the video sender to obtain the first quantum random number sequence of the video sender, and use the first quantum random sequence as a video encryption and decryption key.

11. The video stream secure transmission system based on quantum random numbers as claimed in claim 7, characterized in that: The second main control unit is further used for: Obtaining a set of second quantum random number sequences from the second quantum random number unit, and negotiating a data integrity verification key with the video sender based on the set of second quantum random number sequences; Based on the data integrity check key, an integrity check is performed on the encrypted digital video signal.

12. The video stream secure transmission system based on quantum random numbers as claimed in claim 7, characterized in that: Also includes: Display device or storage device; The video output unit outputs the decrypted video stream to the display device or the storage device.

13. The video stream secure transmission system based on quantum random numbers according to any one of claims 7 to 12, characterized in that: The second quantum random number unit is a quantum random number generator, or a storage module for injecting quantum random numbers, or a storage module for quantum keys generated by a quantum key distribution device.

Images