A quantum random number application method and application system

Abstract

The present invention uses a part of the quantum random number generated by the quantum random number generator itself as a key, encrypts a part of the quantum random number used as a secondary quantum key, and sends it to a server that needs the quantum key. The other quantum random numbers generated by the quantum random number generator will not be encrypted but directly sent to the server as a primary quantum random number. The communication key used by the present invention to encrypt the interactive information between the quantum random number generator and the server is a quantum key, which ensures the security of the secondary quantum key during transmission. The primary quantum random number does not undergo an encryption and decryption process during transmission, which simplifies the transmission process while maintaining the high speed of the quantum random number generator. In addition, the secondary key generally accounts for a very small proportion, the encryption requirement is very small, no large expenditure is required, and power consumption is reduced.

Description

Technical Field

[0001] The present invention relates to the field of quantum information technology, and in particular to a quantum random number application method and application system. Background Art

[0002] Among existing technologies, random numbers are widely used in daily life and play a very important role in science and engineering fields such as cryptography, information security and scientific simulation. With the rapid development of electronic information technology and the substantial improvement of computing power, people have higher and higher requirements for random number generators. There is an urgent need to use more advanced technologies to generate random numbers with higher speed and higher security. Quantum random number generators use quantum entropy sources as entropy sources and extract quantum random numbers with randomness extraction algorithms. The generated quantum random numbers have good randomness and uniformity.

[0003] Currently, quantum random number generators can be divided into built-in quantum random number generators and external quantum random number generators. The built-in quantum random number generator is integrated into the system and provides services to the system by directly sending unencrypted quantum random numbers; the external quantum random number generator is connected to the server through an external interface and provides services to the server by directly sending unencrypted quantum random numbers or sending encrypted quantum random numbers through a fixed communication protocol.

[0004] In the current application strategy and architecture of external quantum random number generators, the quantum random number generator sends unencrypted quantum random numbers directly to the server through an external interface. It uses a physical direct connection such as USB to connect to the server, which ensures the high speed of data output. However, there is a possibility of obtaining the output data of the quantum random number generator through non-invasive attacks, and it is difficult to transmit it securely in the network, which limits its application.

[0005] In the current application strategy and architecture of the external quantum random number generator, the quantum random number generator sends encrypted quantum random numbers to the server through a fixed communication protocol. Encrypting the random numbers generated by the quantum random number generator improves the security of data output. However, in order to increase the data transmission rate, the encryption and decryption algorithm is generally implemented in the hardware circuit of the quantum random number generator. This method of encrypting all the output data may use FPGA to implement the encryption algorithm, which inevitably limits the efficiency of quantum random number generation while increasing the hardware and power consumption overhead. Summary of the invention

[0006] To this end, the technical problem to be solved by the present invention is to overcome the problem in the prior art that both the security and efficiency of quantum random number transmission cannot be met simultaneously.

[0007] In order to solve the above technical problems, the present invention provides a quantum random number application method, comprising:

[0008] Get quantum random numbers;

[0009] According to a preset ratio, a portion of the quantum random number is taken as a communication key, a portion is taken as a secondary quantum key, and the rest is taken as a primary quantum random number;

[0010] After the quantum random number generator and the server successfully authenticate each other, the interactive information is encrypted using the communication key, and the communication key is encrypted using the identity identification key, and the interactive information includes the secondary quantum key;

[0011] The primary quantum random number and the encrypted interactive information are sent to the server.

[0012] Preferably, after receiving the primary quantum random number and the encrypted interactive information, the server includes:

[0013] Decrypting the communication key using the identity identification key, and decrypting the encrypted interaction information using the communication key;

[0014] The secondary quantum key is extracted from the decrypted interactive information.

[0015] Preferably, extracting the secondary quantum key from the decrypted interactive information comprises:

[0016] The primary quantum random number and the secondary quantum key are processed secondary to obtain a target quantum key.

[0017] Preferably, the step of obtaining the quantum random number comprises:

[0018] A randomness check is performed on the quantum random number.

[0019] Preferably, the mutual authentication between the quantum random number generator and the server includes:

[0020] The quantum random number generator device information, the identity identification key and the user information are used to authenticate each other with the server.

[0021] Preferably, when external intrusion or illegal access is detected, the quantum random number generator device information, the identity identification key and the user information are destroyed.

[0022] Preferably, the identity identification key is replaced once every preset time interval.

[0023] The present invention also provides a quantum random number application system, comprising:

[0024] Quantum random number generator, including:

[0025] The quantum random number generation module is used to generate quantum random numbers and divide the primary quantum random numbers according to a preset ratio, and the remaining quantum random numbers are sent to the main control chip;

[0026] The main control chip is used to divide the remaining quantum random numbers into a part as a communication key and a part as a secondary quantum key according to a preset ratio;

[0027] A first encryption and decryption module is used to encrypt the interactive information using the communication key and encrypt the communication key using the identity identification key after the quantum random number generator and the server successfully authenticate each other, wherein the interactive information includes the secondary quantum key;

[0028] A confidential storage medium for storing security-sensitive information required for authentication, including quantum random number generator device information, the identity identification key and user information;

[0029] The first information rectification module is used to send the primary quantum random number and the encrypted interactive information to the server.

[0030] Preferably, the quantum random number application system further includes:

[0031] The server side includes:

[0032] A second information rectification module is used to send the received primary quantum random number to the primary quantum random number pool, and send the encrypted interactive information to the second encryption and decryption module;

[0033] A quantum random number pool, used to store quantum random numbers;

[0034] A second encryption and decryption module, used to decrypt the communication key using the identity identification key, and to decrypt the encrypted interaction information using the communication key;

[0035] A quantum random number generator control module is used to extract a secondary quantum key from the decrypted interactive information and send it to a secondary quantum key pool;

[0036] The secondary quantum key pool is used to store the secondary quantum keys.

[0037] Preferably, the server also includes:

[0038] A secondary processing module, used for performing secondary processing on the primary quantum random number and the secondary quantum key to obtain a target quantum key;

[0039] A quantum key pool is used to store the quantum key.

[0040] The above technical solution of the present invention has the following advantages compared with the prior art:

[0041] The present invention uses a part of the quantum random number generated by the quantum random number generator itself as a key, encrypts a part of the quantum random number used as a secondary quantum key, and sends it to a server that needs the quantum key. The other quantum random numbers generated by the quantum random number generator will not be encrypted but directly sent to the server as a primary quantum random number. The communication key used by the present invention to encrypt the interactive information between the quantum random number generator and the server is a quantum key, which ensures the security of the secondary quantum key during transmission. The primary quantum random number does not undergo an encryption and decryption process during transmission, which simplifies the transmission process while maintaining the high speed of the quantum random number generator. In addition, the secondary key generally accounts for a very small proportion, the encryption requirement is very small, no large expenditure is required, and power consumption is reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to make the content of the present invention more clearly understood, the present invention is further described in detail below according to specific embodiments of the present invention in conjunction with the accompanying drawings, wherein:

[0043] Figure 1 It is a flow chart of the implementation of the quantum random number application method of the present invention;

[0044] Figure 2 It is a schematic diagram of the quantum random number application system of the present invention;

[0045] Figure 3 It is a schematic diagram of the application method of the final product of the present invention;

[0046] Figure 4 It is a schematic diagram of a quantum random number application system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0047] The core of the present invention is to provide a quantum random number application method and application system, which can ensure the security of the quantum key obtained by the server without affecting the transmission efficiency of the quantum random number.

[0048] In order to enable those skilled in the art to better understand the scheme of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific implementation methods. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0049] Please refer to Figure 1 , Figure 1 This is a flow chart of the implementation of the quantum random number application method provided by the present invention; the specific operation steps are as follows:

[0050] S101: Obtain quantum random numbers;

[0051] Maintaining randomness verification of the quantum random number;

[0052] S102: taking out a portion of the quantum random number as a communication key, a portion as a secondary quantum key, and the rest as a primary quantum random number according to a preset ratio;

[0053] S103: After the quantum random number generator and the server successfully authenticate each other, the interactive information is encrypted using the communication key, and the communication key is encrypted using the identity identification key, and the interactive information includes the secondary quantum key;

[0054] The quantum random number generator device information, the identity identification key and the user information are mutually authenticated with the server to ensure the security of the quantum random number generator in practical applications;

[0055] When an external intrusion or illegal access is detected, the quantum random number generator device information, the identity identification key and the user information are destroyed, thereby ensuring the security of the quantum random number generator itself;

[0056] The identity identification key is replaced once every preset time interval;

[0057] S104: Send the primary quantum random number and the encrypted interaction information to the server.

[0058] After the server receives the primary quantum random number and the encrypted interactive information:

[0059] Decrypting the communication key using the identity identification key, and decrypting the encrypted interaction information using the communication key;

[0060] Extracting the secondary quantum key from the decrypted interactive information;

[0061] The primary quantum random number and the secondary quantum key are processed secondary to obtain a target quantum key.

[0062] The present invention uses a part of the quantum random number generated by the quantum random number generator itself as a key, encrypts a part of the quantum random number used as a secondary quantum key, and sends it to a server that needs the quantum key. The other quantum random numbers generated by the quantum random number generator will not be encrypted but directly sent to the server as a primary quantum random number. The communication key used by the present invention to encrypt the interactive information between the quantum random number generator and the server is a quantum key, which ensures the security of the secondary quantum key during transmission. The primary quantum random number does not undergo an encryption and decryption process during transmission, which simplifies the transmission process while maintaining the high speed of the quantum random number generator. In addition, the secondary key generally accounts for a very small proportion, the encryption requirement is very small, does not require a large expense, and reduces power consumption. The user can customize the secondary processing algorithm to process the primary quantum random number and the secondary quantum key to obtain the target quantum key. The simultaneous use of the primary quantum random number and the secondary quantum key ensures the randomness and confidentiality of the quantum key finally generated.

[0063] like Figure 2 The present invention also provides a quantum random number application system, comprising:

[0064] A quantum random number generator 100, comprising:

[0065] The quantum random number generation module 101 is used to generate quantum random numbers, and divide the primary quantum random numbers according to a preset ratio and send them to the first information rectification module, and the remaining quantum random numbers are sent to the main control chip; its output is connected to the input of the main control chip and the input of the first information rectification module; the main control chip 102 is used to control the normal operation of the quantum random number generator and interact with the quantum random number generator control module; divide the remaining quantum random numbers according to a preset ratio into a part as a communication key and a part as a secondary quantum key; connect to the confidential storage medium, use the quantum random number generator device information, identity identification key and user information in the confidential storage medium, and authenticate with the server to detect external intrusion or illegal access; control the destruction or change of information in the confidential storage medium; connect to the first encryption and decryption module, and control the first encryption and decryption module to encrypt and decrypt the interactive information with the quantum random number generator control module.

[0066] The first encryption and decryption module 104 is used to encrypt the interactive information using the communication key provided by the main control chip and encrypt the communication key using the identity recognition key after the quantum random number generator and the server successfully authenticate each other, wherein the interactive information includes the secondary quantum key; decrypt the information sent from the quantum random number generator control module to the main control chip; and is connected to the first information rectification module.

[0067] Confidential storage medium 103, used to store security sensitive information required for authentication, including quantum random number generator device information, the identity identification key and user information;

[0068] The first information rectification module 105 is used to combine the primary quantum random number and the encrypted interactive information and send them to the second information rectification module, and send the information obtained from the second information rectification module to the first encryption and decryption module.

[0069] The server 200 includes:

[0070] The second information rectification module 205 is used to send the received primary quantum random number to the primary quantum random number pool, send the encrypted interactive information to the second encryption and decryption module; and send the information obtained from the second encryption and decryption module to the first information rectification module.

[0071] A primary quantum random number pool 301, used to store primary quantum random numbers;

[0072] The second encryption and decryption module 206 is used to decrypt the communication key using the identity recognition key, and to decrypt the encrypted interactive information using the communication key; and to encrypt the information sent from the quantum random number generator control module to the main control chip;

[0073] The quantum random number generator control module 207 is used to obtain the identity key and user information from the server for mutual authentication with the quantum random number generator; control the second encryption and decryption module to encrypt and decrypt the interactive information with the main control chip; extract the secondary quantum key from the decrypted interactive information and send it to the secondary quantum key pool;

[0074] The secondary quantum key pool 302 is used to store secondary quantum keys.

[0075] The second information rectification module 205, the second encryption and decryption module 206, the quantum random number generator control module 207, the primary quantum random number pool 301 and the secondary quantum key pool 302 located in the server 200 may be logic implemented in the form of hardware or in the form of software.

[0076] The connection between the quantum random number generator 100 and the server 200 can be a trusted channel or a traditional network channel.

[0077] like Figure 3 , the above-mentioned server also includes:

[0078] A secondary processing module 303 is used to perform secondary processing on the primary quantum random number and the secondary quantum key to obtain a target quantum key;

[0079] The quantum key pool 304 is used to store the quantum key.

[0080] like Figure 4 Based on the above embodiments, this embodiment cancels the first encryption and decryption module 104 and the second encryption and decryption module 206, and uses the main control chip 102 and the quantum random number generator control module 207 to perform interactive information encryption and decryption. It is more suitable in scenarios where the demand for secondary quantum keys is relatively low.

[0081] Obviously, the above embodiments are merely examples for the purpose of clear explanation and are not intended to limit the implementation methods. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived therefrom are still within the scope of protection of the present invention.

Claims

1. A quantum random number application method, characterized in that: include: Get quantum random numbers; According to a preset ratio, a portion of the quantum random number is taken as a communication key, a portion is taken as a secondary quantum key, and the rest is taken as a primary quantum random number; After the quantum random number generator and the server successfully authenticate each other, the interactive information is encrypted using the communication key, and the communication key is encrypted using the identity identification key, and the interactive information includes the secondary quantum key; The primary quantum random number and the encrypted interactive information are sent to the server.

2. The quantum random number application method according to claim 1, characterized in that: After receiving the primary quantum random number and the encrypted interactive information, the server includes: Decrypting the communication key using the identity identification key, and decrypting the encrypted interaction information using the communication key; The secondary quantum key is extracted from the decrypted interactive information.

3. The quantum random number application method according to claim 2, characterized in that: The step of extracting the secondary quantum key from the decrypted interactive information comprises: The primary quantum random number and the secondary quantum key are processed secondary to obtain a target quantum key.

4. The quantum random number application method according to claim 1, characterized in that: The step of obtaining the quantum random number includes: A randomness check is performed on the quantum random number.

5. The quantum random number application method according to claim 1, characterized in that: The mutual authentication between the quantum random number generator and the server includes: The quantum random number generator device information, the identity identification key and the user information are used to authenticate each other with the server.

6. The quantum random number application method according to claim 5, characterized in that: When an external intrusion or illegal access is detected, the quantum random number generator device information, the identity identification key and the user information are destroyed.

7. The quantum random number application method according to claim 1, characterized in that: The identity recognition key is replaced once every preset time interval.

8. A quantum random number application system, characterized in that: include: Quantum random number generator, including: The quantum random number generation module is used to generate quantum random numbers and divide the primary quantum random numbers according to a preset ratio, and the remaining quantum random numbers are sent to the main control chip; The main control chip is used to divide the remaining quantum random numbers into a part as a communication key and a part as a secondary quantum key according to a preset ratio; A first encryption and decryption module is used to encrypt the interactive information using the communication key and encrypt the communication key using the identity identification key after the quantum random number generator and the server successfully authenticate each other, wherein the interactive information includes the secondary quantum key; A confidential storage medium for storing security-sensitive information required for authentication, including quantum random number generator device information, the identity identification key and user information; The first information rectification module is used to send the primary quantum random number and the encrypted interactive information to the server.

9. A quantum random number application system according to claim 8, characterized in that: include: The server side includes: A second information rectification module is used to send the received primary quantum random number to the primary quantum random number pool, and send the encrypted interactive information to the second encryption and decryption module; A quantum random number pool, used to store quantum random numbers; A second encryption and decryption module, used to decrypt the communication key using the identity identification key, and to decrypt the encrypted interaction information using the communication key; A quantum random number generator control module is used to extract a secondary quantum key from the decrypted interactive information and send it to a secondary quantum key pool; The secondary quantum key pool is used to store the secondary quantum keys.

10. A quantum random number application system according to claim 8, characterized in that: The server also includes: A secondary processing module, used for performing secondary processing on the primary quantum random number and the secondary quantum key to obtain a target quantum key; A quantum key pool is used to store the quantum key.

Images