A Quantum Communication Encryption Method for Sensitive Data in Power Distribution

Abstract

The present invention provides a quantum communication encryption method for sensitive data in power distribution. A communication channel is established between communication node A and communication node B; quantum-based identity authentication and key distribution are carried out; data encryption and transmission are carried out; data decryption and verification are carried out. This method utilizes quantum key distribution and quantum encryption technologies to achieve the secure transmission and confidentiality protection of sensitive data in the power distribution system, improving the information security and stability of the power system.

Description

Technical Field

[0001] The present invention relates to the technical field of distribution network information security. Specifically, it relates to a quantum communication encryption method for sensitive data in power distribution. This method utilizes quantum key distribution and quantum encryption technologies to achieve the secure transmission and confidentiality protection of sensitive data in the power distribution system, improving the information security and stability of the power system. Background Art

[0002] With the rapid development of the power distribution system, a large amount of sensitive data needs to be transmitted in the system, such as the power consumption of power users, the operating status of power equipment, etc. The security and confidentiality of this data are crucial for the stable operation of the power system. Traditional data encryption methods are mainly based on public key cryptosystems, which have problems such as complex public key management and being easily cracked. Therefore, a more secure and efficient encryption method is needed to meet the data security requirements of the power distribution system.

[0003] The encryption technology of quantum communication plays an important role in protecting information security and can effectively prevent information theft and tampering. Technologies such as quantum key distribution, quantum encryption, and quantum random number generation provide reliable means for protecting the confidentiality and integrity of communication. With the continuous development of quantum communication technology, quantum encryption technology will play an even more important role in future communication fields. Summary of the Invention

[0004] The purpose of the present invention is to solve the problems existing in the above-mentioned prior art, and provide a quantum communication encryption method for sensitive data in power distribution, improving the information security and stability of the power system.

[0005] To achieve the above purpose, the present invention provides a quantum communication encryption method for sensitive data in power distribution, which is characterized in that:

[0006] Step S1: Establish a communication channel between communication node A and communication node B;

[0007] Step S2: Quantum-based identity authentication and key distribution;

[0008] Step S3: Perform data encryption and transmission;

[0009] Step S4: Perform data decryption and verification.

[0010] Preferably, the step S1 includes a traditional channel and a quantum channel. The quantum channel is used for the transmission of confidential information, and the traditional channel is used for the transmission of encrypted data.

[0011] Preferably, the step S2 further includes:

[0012] The identity authentication between the communication node A and the communication node B is completed through the quantum channel, and a set of quantum secret keys Q = {|Q> 1 , |Q> 2 , …, |Q> M} is transmitted. The communication node A and the communication node B measure to obtain the confidential secret key according to the agreed measurement method

[0013] Preferably, the step S3 further includes:

[0014] Step S3.1 Distribution sensitive data processing. Let the distribution sensitive data to be transmitted be S = {s 1 , s 2 , …, s X}. The data is processed into P strings with a fixed length L. If the length of the last string is less than L, specific characters are supplemented to make the length L,

[0015]

[0016] where P*L - L < X ≤ P*L;

[0017] Step S3.2 Select the data encryption secret key.

[0018] Preferably, the step S3.2 further includes:

[0019] Step S3.2.1: Determine the position of the encryption secret key in the secret key matrix K AB through the confidential secret key transmitted through the quantum channel; Take the first string {s 1 , s 2 , …, s L} as an example and process it in the following way:

[0020] Randomly generate a binary string {a 1 , a 2 , …, a I} with a length of I, where 2 I > M;

[0021] Determine a secret key selection value from the confidential secret key sent through the quantum channel to select the data encryption secret key in the secret key matrix K AB ;

[0022] The starting position of the confidential secret key sent through the quantum channel is r, and U values are sequentially selected backward, which need to satisfy 2 U > V;

[0023] r = mod(Val({a 1 , a 2 , …, aI}), M), where the Val() function calculates the value of a string and the mod() function calculates the remainder;

[0024] Denote the selected quantum secret key as When selecting, if has not reached U yet, then continue to select from onwards.

[0025] Preferably, the step S3.2 further includes:

[0026] Step S3.2.2: Select a data encryption key; select a group of keys in the key matrix K AB to encrypt the string {s 1 , s 2 , …, s L}, and denote the position of the key as ind * .

[0027]

[0028] According to the key position ind * , determine the key as ind * ∈{1, 2, …, V}, and the round() function is a rounding function.

[0029] Preferably, the step S3.2 further includes:

[0030] Step S3.2.3: Perform data encryption on the power distribution sensitive data;

[0031] Calculate 's hash value {h 1 , h 2 , …, h d} according to the shared one-way hash function H: {0, 1} * →{0, 1} d for calculation;

[0032] Use the determined key to encrypt the string {{s 1 , s 2 , …, s L}, {h 1 , h 2 , …, h d}} and denote it as the encrypted string Z = {z 1 , z 2 , …, z J}.

[0033] Preferably, the step S3.2 further includes:

[0034] Step S3.2.4 transmits the encrypted data to the target node through the traditional channel;

[0035] The communication node A transmits the string {{a 1 ,a 2 ,…,a I},{z 1 ,z 2 ,…,z J}} to the communication node B through the traditional channel, where {a 1 ,a 2 ,…,a I} is the randomly generated binary sequence described above for determining the encryption key; {z 1 ,z 2 ,…,z J} is the encrypted value of {{s 1 ,s 2 ,…,s L},{h 1 ,h 2 ,…,h d}}.

[0036] Preferably, the step S4 further includes:

[0037] Step S4.1: Determine the encryption key; After receiving the string {{a 1 ,a 2 ,…,a I},{z 1 ,z 2 ,…,z J}}, take out the first I bits and determine according to the method of step 3.2 Further determine the encryption key

[0038] Step S4.2: Check the data to determine the communication security;

[0039] According to the determined encryption key, decrypt {z 1 ,z 2 ,…,z J} according to the corresponding decryption algorithm, and the decrypted value {{s′ 1 ,s′ 2 ,…,s′ L},{h′ 1 ,h′ 2 ,…,h′ d}};

[0040] According to the shared one-way hash function H: {0,1} * →{0,1}d , calculate the hash value of {h″ 1 , h″ 2 , …, h″ d};

[0041] Compare the information of {h″ 1 , h″ 2 , …, h″ d} and {h′ 1 , h′ 2 , …, h′ d}. If the two are the same, it means that the information transmitted through this channel is secure;

[0042] If the data of the two is different, it means that the data has been tampered with and the communication content is not secure, then re - transmit;

[0043] Perform in the above - mentioned manner until the entire data transmission is completed.

[0044] On the other hand, the present invention provides a quantum communication encryption system for power distribution sensitive data, which is used to execute the above - mentioned method.

[0045] Compared with the prior art, the beneficial effects of the present invention are:

[0046] 1) Only by using the quantum secret key transmission once, the secure transmission of power distribution sensitive data between two nodes can be achieved. It can not only make full use of the physical security of quantum encryption, but also give full play to the advantages of large transmission bandwidth and low cost of traditional channels;

[0047] 2) In the algorithm design, the secret key transmitted through the quantum channel is always known only to the communication nodes themselves and is not transmitted through the traditional channel. This information is used as a calculation and verification value, and the one - way security of the hash function is utilized to achieve secure encryption based on the traditional channel;

[0048] 3) The transmitted power distribution sensitive data is segmented, and each segment is encrypted, decrypted and verified separately, ensuring the high complexity of the algorithm and making it difficult for the data to be tampered with and cracked. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is a schematic diagram of a quantum communication encryption method for power distribution sensitive data according to Embodiment 1 of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0050] The present invention will be further described in detail below with reference to the drawings:

[0051] To better understand the present invention, the embodiments of the present invention will be explained in detail below with reference to the drawings.

[0052] Power-sensitive data exists in many aspects such as power grid operation control, maintenance management, and security monitoring, and is important data related to the safe operation of the power grid. Therefore, in the communication of power-sensitive data, the impact of communication security should be fully considered to ensure the safe and stable operation of the power grid.

[0053] Embodiment 1 of the present invention provides a quantum communication encryption method for power distribution sensitive data, as shown in the appendix Figure 1 as follows.

[0054] Quantum encryption communication mainly transmits data based on a traditional channel, and the quantum channel is mainly used for secret key transmission.

[0055] Under normal circumstances, quantum key distribution has the inherent properties of being unstealable and unforgeable. However, when transmitting between two nodes, a third party may steal the secret key through other means. Therefore, although the secret key transmission process has extremely high security, a method still needs to be designed to continuously verify whether there is any secret stealing or tampering during the communication process.

[0056] Taking the power distribution sensitive data communication between node A and node B as an example, the quantum encryption communication method will be described:

[0057] First, a bit string matrix K is contributed between the communication nodes AB as the secret key matrix:

[0058]

[0059] At the same time, a one-way hash function H: {0, 1} * →{0, 1} d is shared, which can output a hash value of length d for the data string, such as MD5, SHA-1, SHA-256, etc.

[0060] Step S1: Establish a communication channel between communication nodes A and B.

[0061] It includes a traditional channel and a quantum channel. The quantum channel is mainly used for the transmission of confidential information, such as secret keys, identity authentication information, etc.; the traditional channel is used for the transmission of encrypted data.

[0062] Step S2: Quantum-based identity authentication and secret key distribution.

[0063] The identity authentication between nodes A and B is completed through the quantum channel, and a set of quantum secret keys Q = {|Q> 1 , |Q> 2 , …, |Q> M} are transmitted. Both communication nodes measure according to the agreed measurement method to obtain the confidential secret key

[0064] Step S3: Data encryption and transmission

[0065] Step S3.1 Distribution sensitive data processing

[0066] Let the distribution sensitive data to be transmitted be S = {s 1 , s 2 , …, s X}. Process the data into P strings of fixed length L. If the length of the last string is less than L, supplement it with specific characters until the length reaches L:

[0067]

[0068] where P*L - L < X ≤ P*L.

[0069] Step S3.2 Select a data encryption key.

[0070] Step S3.2.1 Determine the position of the encryption key in the key matrix K through the confidential key transmitted via the quantum channel AB in

[0071] Take the first string {s 1 , s 2 , …, s L} as an example and process it as follows:

[0072] First, randomly generate a binary string {a 1 , a 2 , …, a I} of length I, where 2 I > M. Then determine a key selection value from the confidential key transmitted via the quantum channel to select a data encryption key in the key matrix K AB .

[0073] The starting position of the confidential key transmitted via the quantum channel is r, and sequentially select U values backward, which needs to satisfy 2 U > V.

[0074] r = mod(Val({a 1 , a 2 , …, a I}), M)

[0075] where the Val() function is to calculate the value of the string, and the mod() function is to calculate the remainder.

[0076] Denote the selected quantum key as When selecting, if the selected has not reached U yet, continue to select from onward.

[0077] Step S3.2.2 Select a data encryption key.

[0078] Select a group of keys from the key matrix K AB to encrypt the string {s 1 , s 2 , …, s L}. The position of the key is denoted as ind *

[0079]

[0080] According to the key position ind * , determine that the key is ind * ∈ {1, 2, …, V}. The round() function is a rounding function.

[0081] Step S3.2.3 Encrypt the power distribution sensitive data.

[0082] First, calculate the hash values {h 1 , h 2 , …, h d} according to the shared one-way hash function H: {0, 1} * → {0, 1} d for calculation.

[0083] Then use the determined key to encrypt the string {{s 1 , s 2 , …, s L}, {h 1 , h 2 , …, h d}} and denote it as the encrypted string Z = {z 1 , z 2 , …, z J}

[0084] Step S3.2.4 Transmit the encrypted data to the target node through the traditional channel.

[0085] Node A transmits the string {{a 1 , a 2 , …, a I}, {z 1 , z 2 , …, z J}} to node B through the traditional channel. Among them, {a 1 , a 2 , …, a I} is the randomly generated binary sequence described above for determining the encryption key; {z1 , z 2 , …, z J}, which is the encrypted value of {{s 1 , s 2 , …, s L}, {h 1 , h 2 , …, h d}}.

[0086] Step S4: Data Decryption and Verification

[0087] Step S4.1 Determine the encryption key.

[0088] After receiving the string {{a 1 , a 2 , …, a I}, {z 1 , z 2 , …, z J}}, take the first I bits and determine according to the method in step 3.2 Further determine the encryption key

[0089] Step S4.2 Verify the data to determine the communication security.

[0090] According to the determined encryption key, decrypt {z 1 , z 2 , …, z J} using the corresponding decryption algorithm. The decrypted value is {{s′ 1 , s′ 2 , …, s′ L}, {h′ 1 , h′ 2 ,, h′ d}}. Since this value may be tampered with, a superscript is added for distinction.

[0091] According to the shared one-way hash function H: {0, 1} * →{0, 1} d , calculate the hash value {h″ 1 , h″ 2 , …, h″ d}.

[0092] Compare {h″ 1 , h″ 2 , …, h″ d} and {h′ 1 , h′ 2 , …, h′ d} information. If they are the same, it indicates that the information transmitted through the channel is secure. If the data is different, it means the data has been tampered with, the communication content is insecure, and retransmission is required.

[0093] In the above manner until the entire data transmission is completed. Then, secure transmission between nodes A and B is achieved.

[0094] On the other hand, the present invention provides a quantum communication encryption system for power distribution sensitive data, which is used to execute the above encryption method.

[0095] In the description of the present invention, it should be noted that unless otherwise clearly specified and defined, the terms "connected" and "coupled" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0096] In the description of the present invention, unless otherwise stated, the orientation or positional relationship indicated by the terms "upper", "lower", "left", "right", "inner", "outer", etc. is based on the orientation or positional relationship shown in the drawings. It is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and thus should not be construed as a limitation to the present invention.

[0097] Finally, it should be noted that the above technical solution is only one implementation manner of the present invention. For those skilled in the art, based on the disclosed application methods and principles of the present invention, various types of improvements or deformations can be easily made, not limited to the methods described in the above specific implementation manners of the present invention. Therefore, the above-described manner is only preferred and does not have a restrictive meaning.

Claims

1. A quantum communication encryption method for sensitive data of power distribution, characterized by: Step S1: establishing a communication channel between communication node A and communication node B; Step S2: Quantum-based identity authentication and key distribution; Step S3: encrypt and transmit data; Step S4: decrypt and verify data; The step S1 includes a traditional channel and a quantum channel, wherein the quantum channel is used for confidential information transmission and the traditional channel is used for encrypted data transmission; The step S2 further comprises: the communication node A and the communication node B complete identity authentication through the quantum channel, and transmit a set of quantum keys Q = {|Q>1,|Q>2,…,|Q> M }, the communication node A and the communication node B measure and obtain the confidentiality key according to the agreed measurement method The step S3 further includes: step S3.1 power distribution sensitive data processing, assuming that the power distribution sensitive data to be transmitted is S = {s1, s2, ..., s X }, process the data into P strings of fixed length L. If the length of the last string is less than L, add specific characters to the length L. Where, P*LL<X≤P*L; Step S3.2: Select a data encryption key.

2. The method according to claim 1, characterized in that The step S3.2 further comprises: Step S3.2.1: Determine the encryption key in the key matrix K using the secret key transmitted through the quantum channel AB The position in the string {s1,s2,…,s L } as an example, and process it as follows: Randomly generate a binary string of length I {a1, a2, ..., a I }, where 2 I >M; Secret keys sent over quantum channels Determine a secret key selection value in the secret key matrix K AB Select the data encryption key in; The starting position of the secret key sent from the quantum channel is r, and U values ​​are selected in sequence, which needs to satisfy 2 U >V; r=mod(Val({a1,a2,…,a I }),M), where the Val() function is used to calculate the value of the string, and the mod() function is used to calculate the remainder; The selected quantum key is When selecting, if you select If there are not U yet, then Continue to select.

3. The method according to claim 2, characterized in that The step S3.2 further comprises: Step S3.2.2: Select a data encryption key; in the key matrix K AB Select a set of secret keys from the L } is encrypted, and the location of the secret key is recorded as ind * , According to the secret key position ind * , determine the secret key is ind * ∈{1,2,…,V}, the round() function is a four-in-five-into-round function.

4. The method according to claim 3, characterized in that The step S3.2 further comprises: Step S3.2.3: Encrypting power distribution sensitive data; calculate The hash value of {h1,h2,…,h d }, according to the shared one-way hash function H:{0,1} * →{0,1} d Perform calculations; Using a Determined Key For the string {{s1,s2,…,s L },{h1,h2,…,h d }} is encrypted, recorded as encrypted string Z = {z1,z2,…,z J }.

5. The method according to claim 4, characterized in that The step S3.2 further comprises: Step S3.2.4 transmits the encrypted data to the target node via a conventional channel; The communication node A transmits the string {{a1, a2, ..., a I },{z1,z2,…,z J }} is transmitted to the communication node B, where {a1, a2, …, a I } is the randomly generated binary sequence mentioned above, which is used to determine the encryption key; {z1,z2,…,z J } is {{s1,s2,…,s L },{h1,h2,…,h d }}The encrypted value of .

6. The method according to claim 5, characterized in that The step S4 further comprises: Step S4.1: Determine the encryption key; receive the string {{a1, a2, ..., a I },{z1,z2,…,z J }}, take out the first I bits and determine according to step 3.2 Further determine the encryption key Step S4.2: Verify the data to determine the communication security; According to the determined encryption key, {z1,z2,…,z J } to decrypt, the decrypted value is {{s′1,s′2,…,s′ L },{h′1,h′2,…,h′ d }}; According to the shared one-way hash function H:{0,1} * →{0,1} d ,calculate The hash value of {h″1,h″2,…,h″ d }; Compare {h″1,h″2,…,h″ d } and {h′1,h′2,…,h′ d } information, if the two are the same, it means that the information transmitted by the channel is secure; If the two data are different, it means that the data has been tampered with and the information transmitted through the channel is not safe, so retransmission is required; Follow the steps S4.1 and S4.2 until the entire process is completed. Transmission of data.

7. A quantum communication encryption system for sensitive data of power distribution, characterized in that Used to execute the method according to any one of claims 1 to 6.

Images