Quantum-resistant security enhancement method for secure channel protocol of cryptographic devices

Abstract

The present application discloses a method for enhancing the anti-quantum security of a secure channel protocol of a cryptographic device of a communication network. The method includes: performing key negotiation with a second network device to obtain an initial session key. Obtaining a first quantum key and a quantum key identifier from a service node connected to the first network device. Performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device. Performing decryption processing on the second encryption result received and sent by the second network device to obtain a second decryption result. A final session key is generated based on the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt the communication between the first network device and the second network device. The first network device and the second network device encrypt the communication using a post-quantum cryptographic algorithm and a quantum key distribution technology, significantly enhancing the ability to resist quantum computing attacks.

Description

Technical Field

[0001] The present application relates to the field of network security, and more specifically, to a method for enhancing the anti-quantum security of a secure channel protocol of a cryptographic device of a communication network. Background Art

[0002] The leap in computing power represented by quantum computing has a significant impact on the security of related algorithms in classical cryptography. Understandably, with the realization of large-scale quantum computers, it will have a certain impact on key negotiation, encryption, signature and other applications in classical cryptography. Therefore, providing cryptographic technology that can resist quantum computing attacks has become an urgent problem to be solved. Summary of the invention

[0003] The present application provides a method for enhancing the anti-quantum security of a secure channel protocol of a cryptographic device in a communication network.

[0004] The embodiment of the present application provides a method for enhancing the anti-quantum security of a cryptographic device secure channel protocol of a communication network, wherein the communication network includes a first network device and a second network device, and the method is used for the first network device, and the method includes:

[0005] Performing key negotiation with the second network device to obtain an initial session key;

[0006] Acquire a first quantum key and a quantum key identifier from a service node connected to the first network device;

[0007] Performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device;

[0008] decrypting the received second encryption result sent by the second network device to obtain a second decryption result, where the second encryption result is obtained by the second network device performing post-quantum encryption on the first decryption result, and the first decryption result is obtained by the second network device performing decryption on the first encryption result;

[0009] A final session key is generated according to the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt communication between the first network device and the second network device.

[0010] In this way, during the communication process between the first network device and the second network device, the first network device and the second network device perform key negotiation to obtain an initial session key. Subsequently, the first network device and the second network device apply for a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key identifier to generate a first encryption result that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device obtains a second decryption result by decrypting the second encryption result sent by the second network device. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result and the quantum key to encrypt the communication between the first network device and the second network device. In this way, the quantum key distribution technology and the post-quantum cryptographic algorithm enhance the ability of the first network device to resist quantum computing attacks in the communication process of applying for access to the resources of the second network device.

[0011] In certain embodiments, the method further comprises:

[0012] Perform identity authentication with the second network device to obtain a second identity identifier of the second network device.

[0013] In this way, the first network device performs identity authentication with the second network device to obtain the second identity of the second network device. In this way, the first network device obtains the second identity of the second network device, which can be used to generate a first signature message for verifying the source of the message in a subsequent process.

[0014] In some implementations, the obtaining the first quantum key and the quantum key identifier from the service node connected to the first network device includes:

[0015] Using a service node to inject multiple keys into a cryptographic module of the first network device;

[0016] Sending a quantum key application to the service node, wherein the quantum key application is protected by a protection key, and the protection key is a randomly used one from a plurality of keys injected into the cryptographic module;

[0017] receiving a quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key, where the first quantum key is generated by a first network node connected to the service node and distributed to the service node, and the quantum key identifier is obtained by the first network node identifying the first quantum key according to an identification code of the first network node;

[0018] The quantum key encryption result is decrypted to obtain the first quantum key and the quantum key identifier.

[0019] In this way, the first network device uses the service node to charge multiple keys into the cryptographic module of the first network device. Then, the first network device sends a quantum key application to the service node based on the authorization code received and sent by the second network device. The quantum key application is protected by a protection key, which is a randomly used one of the multiple keys charged into the cryptographic module. Then, the first network device receives the quantum key encryption result obtained by the service node by encrypting the first quantum key according to the protection key. The first quantum key is generated by the first network node accessing the service node and distributed to the service node. Finally, the first network device decrypts the quantum key encryption result to obtain the first quantum key. The first network device obtains the first quantum key and the quantum key identifier, which can be used to subsequently generate keys with stronger resistance to quantum computing attacks.

[0020] In some embodiments, performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device, includes:

[0021] Concatenating the quantum key identifier and a first random number randomly generated by the first network device to obtain a first concatenated body;

[0022] Performing XOR processing on the first concatenated body and the initial session key to obtain a first XOR message;

[0023] Performing post-quantum encryption processing on the first XOR message to obtain a first encryption key;

[0024] Performing post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in a first temporary encryption result;

[0025] Concatenating the quantum key identifier, the first identity of the first network device, and the second identity to obtain a first verification concatenation;

[0026] Performing post-quantum signature processing on the first verification splice to obtain a first signature message in a first temporary encryption result;

[0027] Encrypting the first temporary encryption result according to the initial session key to obtain the first encryption result;

[0028] The first encryption result is sent to the second network device.

[0029] In this way, the first network device performs a splicing process on the quantum key identifier and the first random number randomly generated by the first network device to obtain a first splicing body. Then, the first network device performs an XOR process on the first splicing body and the initial session key to obtain a first XOR message. Then, the first network device performs a post-quantum encryption process on the first XOR message to obtain a first encryption key. And the first XOR message is subjected to a post-quantum encryption encapsulation process to obtain a first encapsulated message in the first temporary encryption result. The first network device then performs a splicing process on the quantum key identifier, the first identity identifier of the first network device, and the second identity identifier to obtain a first verification splicing body. And the first verification splicing body is subjected to a post-quantum signature process to obtain a first signature message in the first temporary encryption result. Subsequently, the first network device performs an encryption process on the first temporary encryption result according to the initial session key to obtain a first encryption result. Finally, the first network device sends the first encryption result to the second network device. In this way, the first network device obtains a first encryption key with good quantum resistance by using the quantum key identifier, the randomly generated first random number, and the initial session key, which can be used to generate a subsequent final session key. A first signature message is also generated that can be used to verify the source and correctness of the message, which is used to prevent unauthorized access and tampering of the data during transmission. In addition, the first encryption result is sent to the second network device under the protection of the initial session key, which enhances the confidentiality of the first encryption result.

[0030] In some implementations, the decrypting the received second encryption result sent by the second network device to obtain the second decryption result includes:

[0031] Receiving the second encryption result sent by the second network device;

[0032] Decrypting the second encryption result according to the initial session key to obtain a second temporary encryption result;

[0033] The second temporary encryption result is decrypted to obtain a second decryption result, where the second decryption result includes a second encrypted encapsulation message and a second signature message.

[0034] In this way, the first network device receives the second encryption result sent by the second network device. Then, the first network device decrypts the second encryption result according to the initial session key to obtain the second temporary encryption result. The second temporary encryption result is decrypted to obtain the second decryption result, and the second decryption result includes the second encrypted encapsulation message and the second signature message. In this way, the first network device determines the availability of the channel for communication with the second network device, and obtains the second encrypted encapsulation message and the second signature message. The second encryption key can be obtained according to the second encrypted encapsulation message to generate the final session key, and the second signature message can be used to verify the correctness of the second encryption result.

[0035] In certain embodiments, the method further comprises:

[0036] Obtain a second XOR message according to the second encrypted encapsulated message;

[0037] Performing post-quantum encryption processing on the second XOR message to obtain a second encryption key;

[0038] Performing XOR processing on the second XOR message and the initial session key to obtain a second concatenated body;

[0039] A quantum key identifier is obtained according to the second spliced ​​body.

[0040] In this way, the first network device obtains the second XOR message according to the second encrypted encapsulated message. Then, the first network device performs post-quantum encryption processing on the second XOR message to obtain the second encryption key. The first network device then performs XOR processing on the second XOR message and the initial session key to obtain the second splice. Finally, the first network device obtains the quantum key identifier according to the second splice. In this way, the first network device obtains the second encryption key used to generate the final session key, and the second encryption key has good quantum resistance. And a quantum key identifier is obtained, which can be used to confirm that the quantum key identifier received by the second network device is correct.

[0041] In certain embodiments, the method further comprises:

[0042] Obtain a second verification concatenation according to the second signature message;

[0043] The second signature message is subjected to post-quantum cryptographic signature verification to confirm the correctness of the second verification splice, where the second verification splice is obtained by splicing the quantum key identifier, the first identity, and the second identity by the second network device.

[0044] In this way, the first network device obtains the second verification splice according to the second signature message. The second signature message is subjected to post-quantum cryptographic signature verification to confirm the correctness of the second verification splice, which is obtained by the second network device splicing the quantum key identifier, the first identity identifier, and the second identity identifier. In this way, by performing post-quantum cryptographic signature verification on the second signature message, the correctness of the quantum key identifier, the first identity identifier, and the second identity identifier sent by the second network device received by the first network device is determined, providing security for subsequent data transmission.

[0045] In some embodiments, generating a final session key according to the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt communication between the first network device and the second network device includes:

[0046] The initial session key, the first encryption key, the second encryption key and the first quantum key are XOR-ed to obtain a final session key to encrypt communication between the first network device and the second network device.

[0047] In this way, the first network device performs XOR processing on the initial session key, the first encryption key, the second encryption key and the first quantum key to obtain the final session key to encrypt the communication between the first network device and the second network device. In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key is generated, which can enhance the ability of the communication between the first network device and the second network device to resist quantum computing attacks and protect the data transmitted during the communication process.

[0048] In certain embodiments, the method further comprises:

[0049] Receiving a second session key verification message sent by the second network device;

[0050] Calculating the first verification concatenation according to the final session key to obtain a first session key verification message;

[0051] The first session key verification message and the second session key verification message are compared and processed to determine whether a final session key obtained by the first network device is consistent with a final session key obtained by the second network device.

[0052] In this way, the first network device receives the second session key verification message sent by the second network device. Then, the first network device calculates the first verification concatenation according to the final session key to obtain the first session key verification message. Finally, the first network device compares the first session key verification message with the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device. In this way, by calculating the first session key verification message and comparing it with the second session key verification message, it is determined that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device, thereby avoiding communication failure.

[0053] The embodiment of the present application provides a method for enhancing the anti-quantum security of a cryptographic device secure channel protocol of a communication network, wherein the communication network includes a first network device and a second network device, and the method is used for the second network device, and the method includes:

[0054] Performing key negotiation with the first network device to obtain an initial session key;

[0055] receiving a first encryption result of post-quantum cryptographic encryption processing performed by the first network device on a quantum key identifier, where the quantum key identifier is obtained by the first network device from a service node connected to the first network device;

[0056] Decrypting the first encryption result to obtain a first decryption result;

[0057] Performing post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device;

[0058] A final session key is generated according to the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt communication between the first network device and the second network device.

[0059] In this way, during the communication process between the first network device and the second network device, the first network device and the second network device perform key negotiation to obtain an initial session key. Subsequently, the first network device and the second network device apply for a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key identifier to generate a first encryption result that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device obtains a second decryption result by decrypting the second encryption result sent by the second network device. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result and the quantum key to encrypt the communication between the first network device and the second network device. In this way, the quantum key distribution technology and the post-quantum cryptographic algorithm enhance the ability of the first network device to resist quantum computing attacks in the communication process of applying for access to the resources of the second network device.

[0060] In certain embodiments, the method further comprises:

[0061] accessing a second network node through a pre-established channel;

[0062] Load the security certificate of the first network device or the security certificate of the second network device.

[0063] In this way, the second network device accesses the second network node through the pre-established channel. Then, the second network device loads the security certificate of the first network device or the security certificate of the second network device. In this way, the second network device accesses the network node through the channel and can obtain the second quantum key. In addition, the second network device also obtains the security certificate for encrypting and decrypting the data information transmitted during the communication process.

[0064] In certain embodiments, the method further comprises:

[0065] Perform identity authentication with the first network device to obtain a first identity identifier of the first network device.

[0066] In this way, the second network device performs identity authentication with the first network device and obtains the first identity of the first network device. In this way, the second network device obtains the first identity of the first network device, which can be used in subsequent processes to verify the signature of the first signature message and generate a subsequent second session key verification message.

[0067] In some embodiments, the first decryption result includes a first encrypted encapsulated message, and the method further includes:

[0068] Obtain a first XOR message according to the first encrypted encapsulated message;

[0069] Performing post-quantum encryption processing on the first XOR message to obtain a first encryption key;

[0070] The quantum key identifier is obtained for the first XOR message and the initial session key.

[0071] In this way, the second network device obtains the first XOR message according to the first encrypted encapsulated message. Then, the second network device performs post-quantum encryption processing on the first XOR message to obtain the first encryption key. The second network device then obtains the quantum key identifier for the first XOR message and the initial session key. In this way, the second network device obtains the first encryption key, which can be used to subsequently generate the final session key with good quantum resistance. And obtains the quantum key identifier, which is used to subsequently apply for the second quantum key.

[0072] In some embodiments, the first decryption result includes a first signed message, and the method further includes:

[0073] Obtain a first verification splice according to the first signed message;

[0074] Performing post-quantum cryptographic signature verification on the first signature message to confirm that a correct first verification splice is obtained, where the first verification splice is obtained by the second network device splicing the quantum key identifier, the first identity, and the second identity of the second network device;

[0075] When the quantum key identifier is correct, sending a quantum key application to the second network node according to the quantum key identifier;

[0076] Receive a second quantum key sent by the second network node according to the quantum key application.

[0077] In this way, the second network device obtains the first verification splice according to the first signature message. Then, the second network device performs post-quantum cryptographic signature verification on the first signature message to confirm that the correct first verification splice is obtained. The first verification splice is obtained by the second network device splicing the quantum key identifier, the first identity identifier and the second identity identifier of the second network device. Then, if the obtained quantum key identifier is correct, the second network device sends a quantum key application to the second network node according to the quantum key identifier. Finally, the second network device receives the second quantum key sent by the second network node according to the quantum key application. In this way, the second network device confirms that the data information sent by the first network device is correct and has not been unauthorizedly accessed by performing post-quantum cryptographic signature verification on the first signature message. In addition, a second quantum key matching the first quantum key is obtained by applying to the second network node through the quantum key identifier. The second quantum key has good resistance to quantum computing attacks and can be used to generate the final session key later.

[0078] In some embodiments, performing post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device, includes:

[0079] Concatenating the quantum key identifier and a second random number randomly generated by the second network device to obtain a second concatenated body;

[0080] Performing XOR processing on the second concatenated body and the initial session key to obtain a second XOR message;

[0081] Performing post-quantum encryption processing on the second XOR message to obtain a second encryption key;

[0082] Performing post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in a second temporary encryption result;

[0083] Concatenating the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenation;

[0084] Performing post-quantum signature processing on the second verification splice to obtain a second signature message in a second temporary encryption result;

[0085] Encrypting the second temporary encryption result according to the initial session key to obtain the second encryption result;

[0086] The second encryption result is sent to the first network device.

[0087] In this way, the second network device performs a splicing process on the quantum key identifier and the second random number randomly generated by the second network device to obtain a second splicing body. Then, the second network device performs an XOR process on the second splicing body and the initial session key to obtain a second XOR message. Then, the second network device performs a post-quantum encryption process on the second XOR message to obtain a second encryption key. And the second XOR message is subjected to a post-quantum encryption encapsulation process to obtain a second encapsulated message in the second temporary encryption result. Subsequently, the second network device performs a splicing process on the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification splicing body. The second network device then performs a post-quantum signature process on the second verification splicing body to obtain a second signature message in the second temporary encryption result. Subsequently, the second network device performs an encryption process on the second temporary encryption result according to the initial session key to obtain a second encryption result. Finally, the second network device sends the second encryption result to the first network device. In this way, the second network device obtains a second encryption key with good quantum resistance by using the quantum key identifier, the randomly generated second random number, and the initial session key, which can be used to generate a subsequent final session key. A second signature message is also generated that can be used to verify the source and correctness of the message, and is used to prevent unauthorized access and tampering of data during transmission.

[0088] In some embodiments, generating a final session key according to the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first network device and the second network device includes:

[0089] The initial session key, the first encryption key, the second encryption key and the second quantum key are XOR-ed to obtain a final session key to encrypt communication between the first network device and the second network device.

[0090] In this way, the second network device performs XOR processing on the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain a final session key to encrypt the communication between the first network device and the second network device. In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key is generated, which can enhance the ability of the communication between the first network device and the second network device to resist quantum computing attacks and protect the data transmitted during the communication process.

[0091] In certain embodiments, the method further comprises:

[0092] Encrypting the second verification concatenation according to the final session key to obtain a second session key verification message;

[0093] The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

[0094] In this way, the second network device encrypts the second verification concatenation according to the final session key to obtain a second session key verification message. The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key. In this way, the second network device sends the generated second session key verification message to the first network device under the protection of the initial session key, so that the first network device can verify the consistency of the final session key generated by the first network device and the final session key generated by the second network device according to the second session key verification message.

[0095] Additional aspects and advantages of the embodiments of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the embodiments of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0096] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0097] Figure 1 It is one of the flow charts of the method of the implementation mode of the present application;

[0098] Figure 2 It is an architectural diagram of a method for implementing the present application;

[0099] Figure 3 is a signaling diagram of a method according to an embodiment of the present application;

[0100] Figure 4 This is the second flow chart of the method of the implementation mode of the present application;

[0101] Figure 5 This is the third flow chart of the method of the implementation mode of the present application;

[0102] Figure 6 This is the fourth flow chart of the method of the implementation mode of the present application;

[0103] Figure 7 This is the fifth flow chart of the method of the implementation mode of the present application;

[0104] Figure 8 This is the sixth flow chart of the method of the implementation mode of the present application;

[0105] Fig. 9 This is the seventh flow chart of the method of the implementation mode of the present application;

[0106] Fig.10 This is the eighth flow chart of the method of the implementation mode of the present application;

[0107] Fig.11 This is the ninth flow chart of the method of the implementation mode of the present application;

[0108] Fig.12 This is the tenth flowchart of the method of the implementation mode of the present application;

[0109] Fig.13 This is the eleventh flow chart of the method of the implementation mode of the present application;

[0110] Fig.14 This is the twelfth flow chart of the method of the implementation mode of the present application;

[0111] Fig.15 This is the thirteenth flow chart of the method of the implementation mode of the present application;

[0112] Fig.16 This is the fourteenth flow chart of the method of the implementation mode of the present application;

[0113] Fig.17 This is the fifteenth flowchart of the method of the implementation mode of the present application;

[0114] Fig.18 This is the sixteenth flow chart of the method of the implementation mode of the present application;

[0115] Fig.19 This is the seventeenth flow chart of the method of the implementation method of the present application. DETAILED DESCRIPTION

[0116] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals represent the same or similar elements or elements having the same or similar functions from beginning to end. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the embodiments of the present application, and cannot be understood as limiting the embodiments of the present application.

[0117] The leap in computing power represented by quantum computing has a significant impact on the security of related algorithms in classical cryptography. In other words, quantum computing poses a more direct and urgent threat to classical cryptography. For example, Shor's quantum algorithm can solve complex mathematical problems such as large integer decomposition and discrete logarithm solution in polynomial time, and quickly crack widely used public key cryptographic algorithms such as RSA, ECC, DSA, ElGamal, etc. Understandably, with the realization of large-scale quantum computers, it will have a certain impact on key negotiation, encryption, signature and other applications in classical cryptography.

[0118] As a result, the security of the Internet, which uses classical cryptographic algorithms to protect the communication process, is deeply threatened by quantum computing attacks. For example, the cryptographic device secure channel protocol defined in GM / T0050 "Technical Specifications for Cryptographic Device Management" is used for secure communication between cryptographic devices and device management centers. The cryptographic device secure channel protocol uses the SM2 digital signature algorithm and the SM2 asymmetric encryption and decryption algorithm to perform identity authentication and key exchange negotiation between the two communicating parties, providing relatively strong security and forward secrecy, but SM2 is still an elliptic curve algorithm and lacks the ability to resist quantum computing.

[0119] At present, the international technologies for dealing with the threat of quantum computing attacks are mainly divided into two categories: one is to use asymmetric algorithms for (symmetric) key negotiation and then encrypt and transmit through symmetric algorithms, and study the use of quantum key distribution (QKD) networks for symmetric key negotiation to protect the security of keys; the other is to study post-quantum cryptography (PQC) algorithms to directly replace existing asymmetric algorithms. Quantum key distribution technology uses the principles of quantum mechanics to generate keys that cannot be stolen by third parties, ensuring the security of key transmission. It is particularly suitable for key exchange scenarios and can replace existing asymmetric key negotiation algorithms, such as RSA or ECC, to improve the security of keys. However, quantum key distribution technology cannot currently completely replace all applications of asymmetric algorithms. For example, scenarios such as signature verification, integrity protection, and non-repudiation still require the use of asymmetric algorithms.

[0120] Post-quantum cryptographic algorithms are asymmetric cryptographic algorithms designed based on new mathematical problems, aiming to resist the possible threats posed by quantum computers. NIST has announced the first batch of four post-quantum cryptographic algorithms to be standardized, including Kyber, Dilithium, Falcon, and SPHINCS+. These algorithms cover a variety of technical routes to reduce the risk of a single technology being cracked. Post-quantum cryptographic algorithms can theoretically replace all asymmetric algorithms and are more general. However, the security of post-quantum cryptographic algorithms still depends on the complexity of computational problems, and may face new cracking methods in the future or become unsafe as computing power increases. In addition, the post-quantum cryptographic algorithm standard has not yet been officially announced, and the production and certification of related products also take time, so its large-scale application still requires a long period of time.

[0121] Both post-quantum cryptographic algorithms and quantum key distribution technologies have the ability to resist quantum computing attacks, but each has its limitations. Therefore, providing relatively low-cost and highly secure cryptographic technology that can resist quantum computing attacks has become an urgent problem to be solved.

[0122] Based on the above questions, please refer to Figure 1 The embodiment of the present application provides a method for enhancing the anti-quantum security of a cryptographic device secure channel protocol of a communication network, wherein the communication network includes a first network device and a second network device, and the method is used for the first network device, and the method includes:

[0123] 011: Perform key negotiation with the second network device to obtain an initial session key;

[0124] 012: Obtaining a first quantum key and a quantum key identifier from a service node connected to the first network device;

[0125] 013: Perform post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and send the first encryption result to the second network device;

[0126] 014: decrypting the second encryption result received and sent by the second network device to obtain a second decryption result;

[0127] 015: Generate a final session key according to the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt the communication between the first network device and the second network device.

[0128] The embodiment of the present application also provides a first network device, including a memory and a processor. The method of the embodiment of the present application can be implemented by the first network device of the embodiment of the present application. Specifically, a computer program is stored in the memory, and the processor is used to negotiate a key with the second network device to obtain an initial session key, and obtain a first quantum key and a quantum key identifier from a service node connected to the first network device. And the quantum key identifier is subjected to post-quantum cryptographic encryption processing to obtain a first encryption result, and the first encryption result is sent to the second network device. The processor is also used to decrypt the second encryption result received by the second network device to obtain a second decryption result. The processor is also used to generate a final session key based on the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt the communication between the first network device and the second network device.

[0129] The embodiment of the present application also provides a first network device anti-quantum security enhancement device. The method of the embodiment of the present application can be implemented by the first network device anti-quantum security enhancement device of the embodiment of the present application. Specifically, the first network device anti-quantum security enhancement device includes a negotiation module, an acquisition module, an encryption module, a decryption module and a derivation module. The negotiation module is used to negotiate a key with the second network device to obtain an initial session key. The acquisition module is used to obtain a first quantum key and a quantum key identifier from a service node connected to the first network device. The encryption module is used to perform post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and send the first encryption result to the second network device. The decryption module is used to decrypt the second encryption result received by the second network device to obtain a second decryption result. The derivation module is used to generate a final session key based on the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt the communication between the first network device and the second network device.

[0130] The present application provides a communication system based on a cryptographic device secure channel protocol, the communication system comprising a first network device, a second network device and a quantum key distribution network of the above-mentioned implementation mode, the quantum key distribution network being configured to distribute quantum keys to the first network device or the second network device.

[0131] Specifically, the quantum key distribution network includes network nodes and a quantum network link control center. Network nodes are used to store and distribute quantum keys in the quantum key distribution network. The quantum network link center can establish quantum key distribution and relay links between network nodes according to the names of network nodes. Quantum key distribution and relay links are used for functions such as data transfer. The quantum key distribution network is used to realize services such as quantum key generation, quantum key relay, and quantum key provision.

[0132] See also Figure 2In some embodiments, the first network device and the second network device communicate through a secure channel, which refers to an encrypted communication path for securely transmitting data, instructions and control information between the first network device and the second network device. This channel ensures the confidentiality, integrity and authenticity of the data during transmission, and prevents unauthorized access and data leakage. The first network device accesses a service node, which is a transfer station for the first network device to connect to the network node, and is used to inject keys into the first network device and transfer and store quantum keys. When the first network device sends a quantum key application, the network node sends the quantum key generated by the quantum key distribution network to the service node connected to the first network device, and the service node sends the quantum key to the first network device. The simple process of the first network device and the second network device obtaining the quantum key is as follows: First, the first network device sends a quantum key application to the service node connected to the first network device. Then, the service node applies for a quantum key from the first network node connected to the service node. Then, the first network node distributes the quantum key generated according to the quantum key application to the service node, and the service node distributes the quantum key to the first network device. At the same time, the quantum network link control center synchronizes the second network node connected to the second network device to generate a quantum key, but the quantum key will not be immediately distributed to the second network device, but will be stored in the network node first. The corresponding relationship between the first network device, the second network device, the service node and the network node is provided by the management and control platform.

[0133] It should be noted that the implementation method of this application uses FIPS203 Module-Lattice-based Key-Encapsulation Mechanism Standard as the PQC key encapsulation algorithm and FIPS 204 Module-Lattice-Based Digital Signature Standard as the PQC digital signature algorithm for example for explanation and description. The following descriptions of operations related to the PQC algorithm refer to the above FIPS standards. Of course, in other implementations, other algorithms such as the NewHope algorithm, the Sidh algorithm, the HQC algorithm, etc. can also be used as PQC related algorithms. It should also be noted that the embodiments of this application are directed to the cryptographic device secure channel protocol defined in GM / T0050 "Technical Specifications for Cryptographic Device Management", hereinafter referred to as the secure channel protocol.

[0134] Specifically, the first network device and the second network device perform key negotiation, and both obtain an initial session key. Next, the first network device sends a quantum key application to the first network node connected to the first network device, and then obtains a first quantum key and a quantum key identifier from the first network node. The first quantum key and the quantum key identifier can be used to generate a key that is resistant to quantum computing attacks, and the quantum key identifier helps to use and manage the quantum key. After obtaining the first quantum key and the quantum key identifier, the first network device performs post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and sends the first encryption result to the second network device. By performing post-quantum cryptographic encryption processing on the quantum key identifier, the quantum key distribution technology is combined with the post-quantum cryptographic algorithm to improve the complexity of the key, and the encryption result is sent to the second network device for sharing so that the communication data of the first network device and the second network device in the communication network remain consistent.

[0135] Then, the second network device receives the first encryption result sent by the first network device, and decrypts the first encryption result to obtain the first decryption result. The second network device then performs post-quantum cryptographic encryption on the first decryption result to obtain the second encryption result. After obtaining the second encryption result, the second network device sends the second encryption result to the first network device so that the first network device can also share the second network device information and the generated key. The second network device then generates a final session key based on the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt the communication between the first network device and the second network device.

[0136] At the same time, the first network device receives the second encryption result sent by the second network device, and decrypts the second encryption result to obtain a second decryption result. The first network device then generates a final session key based on the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt the communication between the first network device and the second network device.

[0137] The following is an example to illustrate the method of implementing the present application. In the embodiments of the present application, the first network device is a managed cryptographic device, hereinafter referred to as the cryptographic device. The cryptographic device exchanges messages with the device management center through the device management agent running on the cryptographic device. It should be emphasized that in the embodiments of the present application, the communication between the cryptographic device and the device management center is completed by running the device management agent on the cryptographic device. The second network device is the device management center, which is used to query the basic configuration and operation information of the cryptographic device and send specific management instructions to the cryptographic device. The quantum network node is a network node, which stores and provides the generated quantum key to the device management center through a trusted channel or provides the generated quantum key to the cryptographic device through a key service node. The key service node is a service node, which is used to connect to the quantum network node and provide pre-shared key injection and quantum key services for multiple cryptographic devices.

[0138] See also Figure 3 , the cryptographic device and the device management center conduct key negotiation according to the secure channel protocol process, and both obtain the initial session key H1 shared by both parties, that is, the session key in the secure channel protocol. Next, the cryptographic device sends a quantum key application to the first quantum network node connected to the cryptographic device, and then obtains the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK from the first quantum network node. The first quantum key QK_UUID-1 and the quantum key identifier UUID_QK can be used to generate a key that is resistant to quantum computing attacks, and the quantum key identifier UUID_QK helps to use and manage quantum keys. After obtaining the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK, the cryptographic device performs post-quantum cryptographic encryption on the quantum key identifier UUID_QK to obtain a first encryption result, and sends the first encryption result to the device management center. By performing post-quantum cryptographic encryption on the quantum key identifier UUID_QK, the quantum key distribution technology is combined with the post-quantum cryptographic algorithm to improve the complexity of the key, and the encryption result is sent to the device management center for sharing to keep the communication data between the cryptographic device and the device management center consistent in the communication network.

[0139] Then, the device management center receives the first encryption result sent by the cryptographic device, and decrypts the first encryption result to obtain the first decryption result. The device management center then performs post-quantum cryptographic encryption on the first decryption result to obtain the second encryption result. After obtaining the second encryption result, the device management center sends the second encryption result to the cryptographic device so that the cryptographic device can also share the device management center information and the generated key. The device management center then generates the final session key based on the initial session key H1, the first decryption result, the second encryption result and the second quantum key to encrypt the communication between the cryptographic device and the device management center.

[0140] At the same time, the cryptographic device receives the second encryption result sent by the device management center, and decrypts the second encryption result to obtain a second decryption result. The cryptographic device then generates a final session key based on the initial session key H1, the first encryption result, the second decryption result and the first quantum key QK_UUID-1 to encrypt the communication between the cryptographic device and the device management center.

[0141] In summary, in the anti-quantum security enhancement method, communication system, first network device and second network device of the cryptographic device secure channel protocol of the communication network of the implementation mode of the present application, for the communication process between the first network device and the second network device, the first network device and the second network device perform key negotiation to obtain the initial session key. Subsequently, the first network device and the second network device apply for a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key identifier to generate a first encryption result that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device obtains a second decryption result by decrypting the second encryption result sent by the second network device. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result and the quantum key to encrypt the communication between the first network device and the second network device. In this way, the anti-quantum computing attack capability of the communication process in which the first network device applies to access the resources of the second network device is enhanced by quantum key distribution technology and post-quantum cryptographic algorithms.

[0142] See also Figure 4 In some embodiments, the method further comprises:

[0143] 016: Perform identity authentication with the second network device to obtain a second identity identifier of the second network device.

[0144] In some implementations, the acquisition module is used to perform identity authentication with the second network device to obtain a second identity identifier of the second network device.

[0145] In some implementations, the processor is further configured to perform identity authentication with the second network device to obtain a second identity identifier of the second network device.

[0146] Specifically, the first network device performs identity authentication with the second network device to obtain the second identity of the second network device. In this way, the first network device obtains the second identity of the second network device, which can be used to generate a first signature message for verifying the source of the message in a subsequent process.

[0147] Continuing with the above example, identity authentication includes certificate authentication and identity authentication, and the second identity identifier is the device management center identifier ID_Center. Figure 3 The cryptographic device and the device management center perform certificate authentication and identity authentication according to the secure channel protocol process, and the cryptographic device obtains the device management center identifier ID_Center of the device management center.

[0148] In this way, the cryptographic device obtains the device management center identifier ID_Center of the device management center, which can be used to generate a first signature message for verifying the source of the message in a subsequent process.

[0149] See also Figure 5 In some embodiments, step 012 (obtaining a first quantum key and a quantum key identifier from a service node connected to the first network device) includes:

[0150] 0121: Using the service node to inject multiple keys into the cryptographic module of the first network device;

[0151] 0122: Send quantum key request to service node;

[0152] 0123: receiving a quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key;

[0153] 0124: Decrypt the quantum key encryption result to obtain a first quantum key and a quantum key identifier.

[0154] In some embodiments, the charging module is used to charge a plurality of keys into the cryptographic module of the first network device using the service node. The sending module is used to send a quantum key application to the service node. The receiving module is used to receive a quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key. The decryption module is used to decrypt the quantum key encryption result to obtain the first quantum key and the quantum key identifier.

[0155] In some embodiments, the processor is further configured to use the service node to inject multiple keys into the cryptographic module of the first network device, and send a quantum key application to the service node. The processor is also configured to receive a quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key, and decrypt the quantum key encryption result to obtain the first quantum key and the quantum key identifier.

[0156] Specifically, the first network device uses the service node to inject multiple keys into the cryptographic module of the first network device. Then, the first network device sends a quantum key application to the service node based on the authorization code received and sent by the second network device. The quantum key application is protected by a protection key, which is a randomly used one of the multiple keys injected into the cryptographic module. Then, the first network device receives the quantum key encryption result obtained by the service node by encrypting the first quantum key according to the protection key. The first quantum key is generated by the first network node accessing the service node and distributed to the service node. Finally, the first network device decrypts the quantum key encryption result to obtain the first quantum key. The first network device obtains the first quantum key and the quantum key identifier, which can be used to subsequently generate keys with stronger resistance to quantum computing attacks.

[0157] Continuing with the above example, please refer again to Figure 3 , the cryptographic device uses the cryptographic service node to pre-charge the personal cryptographic module of the cryptographic device, with a total of 1M bits of 128-bit keys. The personal cryptographic module includes but is not limited to the smart cryptographic key (HSM) and the virtual security module (VSM). Then, the cryptographic device sends a quantum key application to the cryptographic service node, and randomly uses a key in the smart cryptographic key as the protection key. The cryptographic device performs a hash operation (Hash-based Message Authentication Code, HMAC) on the key ID and the application content by using the SM3 algorithm and the protection key. Afterwards, the cryptographic service node also performs a hash operation on the key ID and the application content by using the SM3 algorithm and the protection key to verify the integrity and authenticity of the data. HMAC is a method that uses hash functions and keys to provide data integrity and source authentication.

[0158] After the quantum key application is successful, the cryptographic device receives the quantum key encryption result obtained by the cryptographic service node by encrypting the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK according to the protection key. The first quantum key QK_UUID-1 is generated by the first quantum network node connected to the cryptographic service node and distributed to the cryptographic service node. The quantum key identifier UUID_QK is obtained by the first quantum network node identifying the first quantum key according to the first quantum network node's universal unique identifier. The cryptographic device then decrypts the quantum key encryption result according to the protection key to obtain the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK.

[0159] In this way, the cryptographic device obtains the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK, which can be used to subsequently generate keys that are more resistant to quantum computing attacks.

[0160] See also Figure 6 In some embodiments, step 013 (performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device) includes:

[0161] 0131: concatenate the quantum key identifier and the first random number randomly generated by the first network device to obtain a first concatenation;

[0162] 0132: performing XOR processing on the first concatenated body and the initial session key to obtain a first XOR message;

[0163] 0133: Perform post-quantum encryption processing on the first XOR message to obtain a first encryption key;

[0164] 0134: performing post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in a first temporary encryption result;

[0165] 0135: Concatenate the quantum key identifier, the first identity identifier of the first network device, and the second identity identifier to obtain a first verification concatenation;

[0166] 0136: Perform post-quantum signature processing on the first verification splice to obtain a first signature message in a first temporary encryption result;

[0167] 0137: Encrypt the first temporary encryption result according to the initial session key to obtain a first encryption result;

[0168] 0138: Send the first encryption result to the second network device.

[0169] In some embodiments, the splicing module is used to splice the quantum key identifier and the first random number randomly generated by the first network device to obtain a first splicing body. The processing module is used to perform XOR processing on the first splicing body and the initial session key to obtain a first XOR message. The encryption module is used to perform post-quantum encryption processing on the first XOR message to obtain a first encryption key. The encryption encapsulation module is used to perform post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in a first temporary encryption result. The splicing module is also used to splice the quantum key identifier, the first identity identifier and the second identity identifier of the first network device to obtain a first verification splicing body. The signature module is also used to perform post-quantum signature processing on the first verification splicing body to obtain a first signature message in the first temporary encryption result. The encryption module is also used to encrypt the first temporary encryption result according to the initial session key to obtain a first encryption result. The sending module is used to send the first encryption result to the second network device.

[0170] In some embodiments, the processor is also used to perform splicing processing on the quantum key identifier and the first random number randomly generated by the first network device to obtain a first splicing body. And perform XOR processing on the first splicing body and the initial session key to obtain a first XOR message. And perform post-quantum encryption processing on the first XOR message to obtain a first encryption key. The processor is also used to perform post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in the first encryption result. And perform splicing processing on the quantum key identifier, the first identity identifier and the second identity identifier of the first network device to obtain a first verification splicing body. The processor is also used to perform post-quantum signature processing on the first verification splicing body to obtain a first signature message in the first encryption result. And perform encryption processing on the first temporary encryption result according to the initial session key to obtain a first encryption result. And send the first encryption result to the second network device.

[0171] Specifically, the first network device performs a splicing process on the quantum key identifier and the first random number randomly generated by the first network device to obtain a first splicing body. Then, the first network device performs an XOR process on the first splicing body and the initial session key to obtain a first XOR message. Then, the first network device performs a post-quantum encryption process on the first XOR message to obtain a first encryption key. And the first XOR message is subjected to a post-quantum encryption encapsulation process to obtain a first encapsulated message in the first temporary encryption result. The first network device then performs a splicing process on the quantum key identifier, the first identity identifier of the first network device, and the second identity identifier to obtain a first verification splicing body. And the first verification splicing body is subjected to a post-quantum signature process to obtain a first signature message in the first temporary encryption result. Finally, the first network device sends the first encryption result to the second network device, and the first encryption result is encrypted and protected by the initial session key. In this way, the first network device obtains a first encryption key with good quantum resistance by using the quantum key identifier, the randomly generated first random number, and the initial session key, which can be used to generate a subsequent final session key. A first signature message that can be used to verify the source and correctness of the message is also generated to prevent data from being unauthorized access and tampering during transmission. Furthermore, the first encryption result is sent to the second network device under the protection of the initial session key, thereby enhancing the confidentiality of the first encryption result.

[0172] Continuing with the above example, the first identity of the cryptographic device is the cryptographic device identifier ID_Device. Figure 3, the cryptographic device concatenates the 128-bit quantum key identifier UUID_QK and the 128-bit first random number R1 randomly generated by the cryptographic device to obtain the first concatenation P1, that is, UUID_QK|R1. Next, the cryptographic device performs XOR processing on the first concatenation P1 and the initial session key H1 to obtain the first XOR message Y1, that is, P1⊕H1. Then, the cryptographic device performs post-quantum encryption processing on the first XOR message Y1 to obtain the first encryption key K1. And the first XOR message Y1 is subjected to post-quantum encryption encapsulation processing to obtain the first encapsulated message F1 in the first temporary encryption result. The cryptographic device then concatenates the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device and the device management center identifier ID_Center to obtain the first verification concatenation P2, that is, UUID_QK|ID_Center|ID_Device. And the first verification concatenation P2 is subjected to post-quantum signature processing to obtain the first signature message M1 in the first temporary encryption result. Subsequently, the cryptographic device uses the initial session key H1 and the SM4 block cipher algorithm to symmetrically encrypt the first temporary encryption result to obtain the first encryption result, that is, the first encrypted encapsulated message and the first signed message are symmetrically encrypted using the initial session key H1 and the SM4 block cipher algorithm. Finally, the cryptographic device sends the first encryption result to the device management center.

[0173] In this way, the cryptographic device obtains the first encryption key K1 with good quantum resistance by using the quantum key identifier UUID_QK, the randomly generated first random number R1 and the initial session key H1, which can be used to generate the subsequent final session key. It also generates a first signature message M1 that can be used to verify the source and correctness of the message, which is used to prevent data from being unauthorized access and tampering during transmission.

[0174] See also Figure 7 In some implementations, step 014 (decrypting the second encryption result received and sent by the second network device to obtain a second decryption result) includes:

[0175] 0141: receiving a second encryption result sent by a second network device;

[0176] 0142: decrypt the second encryption result according to the initial session key to obtain a second temporary encryption result;

[0177] 0143: Decrypt the second temporary encryption result to obtain a second decryption result.

[0178] In some embodiments, the receiving module is used to receive the second encryption result sent by the second network device. The decryption module is used to decrypt the second encryption result according to the initial session key to obtain the second temporary encryption result. The decryption module is also used to decrypt the second temporary encryption result to obtain the second decryption result.

[0179] In some embodiments, the processor is further configured to receive a second encryption result sent by the second network device, decrypt the second encryption result according to the initial session key to obtain a second temporary encryption result, and decrypt the second temporary encryption result to obtain a second decrypted result, wherein the second decrypted result includes a second encrypted encapsulation message and a second signature message.

[0180] Specifically, the first network device receives the second encryption result sent by the second network device. Then, the first network device decrypts the second encryption result according to the initial session key to obtain the second temporary encryption result. The second temporary encryption result is decrypted to obtain the second decryption result, and the second decryption result includes the second encrypted encapsulation message and the second signature message. In this way, the first network device determines the availability of the channel for communication with the second network device, and obtains the second encrypted encapsulation message and the second signature message. The second encryption key can be obtained according to the second encrypted encapsulation message to generate the final session key, and the second signature message can be used to verify the correctness of the second encryption result.

[0181] Continuing with the above example, the cryptographic device receives the second encryption result sent by the device management center. Then, the cryptographic device decrypts the second encryption result according to the initial session key H1 to obtain a second temporary encryption result. The second temporary encryption result is decrypted to obtain a second decrypted result, which includes the second encrypted encapsulation message F2 and the second signature message M2.

[0182] In this way, the cryptographic device determines the availability of the channel for communication with the device management center, and obtains the second encrypted encapsulated message F2 and the second signed message M2. The second encryption key K2 can be obtained based on the second encrypted encapsulated message to generate the final session key. The second signed message M2 can be used to verify the correctness of the second encryption result.

[0183] See also Figure 8 In some embodiments, the method further comprises:

[0184] 017: Obtain a second XOR message according to the second encrypted encapsulation message;

[0185] 018: Perform post-quantum encryption processing on the second XOR message to obtain a second encryption key;

[0186] 019: XOR the second XOR message and the initial session key to obtain a second concatenated body;

[0187] 020: Obtain a quantum key identifier according to the second spliced ​​body.

[0188] In some embodiments, the processing module is used to obtain a second XOR message according to the second encrypted encapsulated message. The encryption module is used to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processing module is also used to perform XOR processing on the second XOR message and the initial session key to obtain a second concatenated body symbol. And obtain a quantum key identifier according to the second concatenated body.

[0189] In some embodiments, the processor is further configured to obtain a second XOR message based on the second encrypted encapsulated message, and perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processor is further configured to perform XOR processing on the second XOR message and the initial session key to obtain a second concatenation. And obtain a quantum key identifier based on the second concatenation.

[0190] Specifically, the first network device obtains the second XOR message according to the second encrypted encapsulation message. Then, the first network device performs post-quantum encryption processing on the second XOR message to obtain the second encryption key. The first network device then performs XOR processing on the second XOR message and the initial session key to obtain the second splice. Finally, the first network device obtains the quantum key identifier according to the second splice. In this way, the first network device obtains the second encryption key for generating the final session key, and the second encryption key has good quantum resistance. And a quantum key identifier is obtained, which can be used to confirm that the quantum key identifier received by the second network device is correct.

[0191] Continuing with the above example, please refer again to Figure 3 , the cryptographic device obtains the second XOR message Y2 according to the second encrypted encapsulated message F2. Then, the cryptographic device performs post-quantum encryption processing on the second XOR message Y2 to obtain the second encryption key K2. The cryptographic device then performs XOR processing on the second XOR message Y2 and the initial session key H1 to obtain the second splice P3. Finally, the cryptographic device obtains the quantum key identifier UUID_QK according to the second splice P3.

[0192] In this way, the cryptographic device obtains the second encryption key K2 used to generate the final session key, and the second encryption key K2 has good quantum resistance. It also obtains the quantum key identifier UUID_QK, which can be used to confirm that the quantum key identifier UUIID_QK received by the device management center is correct.

[0193] See also Fig. 9 In some embodiments, the method further comprises:

[0194] 021: Obtain a second verification splice according to the second signature message;

[0195] 022: Perform post-quantum cryptographic signature verification on the second signature message to confirm the correctness of the second verification splice.

[0196] In some embodiments, the processing module is further used to obtain a second verification splice according to the second signature message, and the signature verification module is used to perform post-quantum cryptographic signature verification on the second signature message to confirm the correctness of the second verification splice.

[0197] In some embodiments, the processor is further configured to obtain a second verification splice based on the second signature message, and perform post-quantum cryptographic signature verification on the second signature message to confirm the correctness of the second verification splice.

[0198] Specifically, the first network device obtains the second verification splice according to the second signature message. The second signature message is subjected to post-quantum cryptographic signature verification to confirm the correctness of the second verification splice, which is obtained by the second network device splicing the quantum key identifier, the first identity identifier, and the second identity identifier. In this way, by performing post-quantum cryptographic signature verification on the second signature message, the correctness of the quantum key identifier, the first identity identifier, and the second identity identifier sent by the second network device and received by the first network device is determined, providing security for subsequent data transmission.

[0199] Continuing with the above example, please refer again to Figure 3 , the cryptographic device obtains the second verification splice P4 according to the second signature message M2. The second signature message M2 is subjected to post-quantum cryptographic signature verification to confirm the correctness of the second verification splice P4, which is obtained by the device management center by splicing the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device, and the device management center identifier ID_Center.

[0200] In this way, by performing post-quantum cryptographic signature verification on the second signature message M2, the correctness of the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device and the device management center identifier ID_Center sent by the device management center and received by the cryptographic device is determined, providing security for subsequent data transmission.

[0201] See also Fig.10 In some embodiments, step 015 (generating a final session key according to the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt communication between the first network device and the second network device) includes:

[0202] 0151: Perform XOR processing on the initial session key, the first encryption key, the second encryption key and the first quantum key to obtain a final session key to encrypt the communication between the first network device and the second network device.

[0203] In some embodiments, the derivation module is further used to perform XOR processing on the initial session key, the first encryption key, the second encryption key and the first quantum key to obtain a final session key to encrypt communication between the first network device and the second network device.

[0204] In some embodiments, the processor is further configured to perform an XOR process on the initial session key, the first encryption key, the second encryption key, and the first quantum key to obtain a final session key to encrypt communication between the first network device and the second network device.

[0205] Specifically, the first network device performs XOR processing on the initial session key, the first encryption key, the second encryption key and the first quantum key to obtain the final session key to encrypt the communication between the first network device and the second network device. In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key is generated, which can enhance the ability of the communication between the first network device and the second network device to resist quantum computing attacks and protect the data transmitted during the communication process.

[0206] Continuing with the above example, the cryptographic device performs XOR processing on the initial session key H1, the first encryption key K1, the second encryption key K2 and the first quantum key QK_UUID-1 to obtain the final session key H2, that is, H2=H1⊕K1⊕K2⊕QK_UUID-1. The generated final session key H2 is used to encrypt the communication between the cryptographic device and the device management center.

[0207] In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key H2 is generated, which can enhance the ability of communication between cryptographic devices and device management centers to resist quantum computing attacks and protect the data transmitted during the communication process.

[0208] See also Fig.11 In some embodiments, the method further comprises:

[0209] 023: Receive a second session key verification message sent by the second network device;

[0210] 024: Calculate the first verification concatenation according to the final session key to obtain a first session key verification message;

[0211] 025: Compare and process the first session key verification message and the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device.

[0212] In some embodiments, the receiving module is further configured to receive a second session key verification message sent by the second network device. The calculating module is configured to calculate the first verification concatenation according to the final session key to obtain the first session key verification message. The processing module is further configured to compare the first session key verification message with the second session key verification message to determine whether the final session key obtained by the first network device is consistent with the final session key obtained by the second network device.

[0213] In some embodiments, the processor is further configured to receive a second session key verification message sent by the second network device, and to calculate the first verification concatenation according to the final session key to obtain the first session key verification message, and to compare the first session key verification message with the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device.

[0214] Specifically, the first network device receives the second session key verification message sent by the second network device. Then, the first network device calculates the first verification concatenation according to the final session key to obtain the first session key verification message. Finally, the first network device compares the first session key verification message with the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device. In this way, by calculating the first session key verification message and comparing it with the second session key verification message, it is determined that the final session key finally obtained by the first network device and the final session key obtained by the second network device are consistent and can be used for communication.

[0215] Continuing with the above example, see Figure 3 , the cryptographic device receives the second session key verification message Z2 sent by the device management center. Then, the cryptographic device calculates the first verification splice P2 according to the final session key H2 to obtain the first session key verification message Z1. Finally, the cryptographic device compares the first session key verification message Z1 with the second session key verification message Z2 to determine that the final session key H2 obtained by the cryptographic device is consistent with the final session key H2 obtained by the device management center.

[0216] In this way, the first session key verification message Z1 is obtained by calculation and compared with the second session key verification message Z2 to determine whether the final session key H2 obtained by the cryptographic device is consistent with the final session key H2 obtained by the device management center, thereby avoiding communication failure.

[0217] See also Fig.12The embodiment of the present application provides a method for enhancing the anti-quantum security of a cryptographic device secure channel protocol of a communication network, wherein the communication network includes a first network device and a second network device, and the method is used for the second network device, and the method includes:

[0218] 031: Perform key negotiation with the first network device to obtain an initial session key;

[0219] 032: receiving a first encryption result of post-quantum cryptographic encryption processing performed by the first network device on the quantum key identifier;

[0220] 033: Decrypt the first encryption result to obtain a first decryption result;

[0221] 034: Perform post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device;

[0222] 035: Generate a final session key according to the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt the communication between the first network device and the second network device.

[0223] The embodiment of the present application also provides a second network device, including a memory and a processor. The method of the embodiment of the present application can be implemented by the second network device of the embodiment of the present application. Specifically, a computer program is stored in the memory, and the processor is used to negotiate a key with the first network device to obtain an initial session key. And receive the first encryption result of the first network device performing post-quantum cryptographic encryption processing on the quantum key identifier. The processor is also used to decrypt the first encryption result to obtain a first decryption result. And perform post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device. And generate a final session key based on the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt the communication between the first network device and the second network device.

[0224] The embodiment of the present application also provides a second network device anti-quantum security enhancement device. The method of the embodiment of the present application can be implemented by the second network device anti-quantum security enhancement device of the embodiment of the present application. Specifically, the second network device anti-quantum security enhancement device includes a negotiation module, a receiving module, a decryption module, an encryption module and a derivation module. The negotiation module is used to negotiate a key with the first network device to obtain an initial session key. The receiving module is used to receive the first encryption result of the first network device performing post-quantum cryptographic encryption processing on the quantum key identifier. The decryption module is used to decrypt the first encryption result to obtain a first decryption result. The encryption module is used to perform post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device. The derivation module is used to generate a final session key based on the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt the communication between the first network device and the second network device.

[0225] Specifically, the anti-quantum security enhancement method of this embodiment is basically the same as the anti-quantum security enhancement method of the aforementioned embodiment with the first network device as the execution object. For details, please refer to the explanation of the corresponding part. The difference is that this embodiment takes the second network device as the execution object, which will not be repeated here.

[0226] In summary, in the anti-quantum security enhancement method, communication system, second network device and first network device of the cryptographic device secure channel protocol of the communication network of the implementation mode of the present application, for the communication process between the first network device and the second network device, the first network device and the second network device perform key negotiation to obtain the initial session key. Subsequently, the first network device and the second network device apply for a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key identifier to generate a first encryption result that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Then, the first network device obtains a second decryption result by decrypting the second encryption result sent by the second network device. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result and the quantum key to encrypt the communication between the first network device and the second network device. In this way, the anti-quantum computing attack capability of the communication process in which the first network device applies to access the resources of the second network device is enhanced by quantum key distribution technology and post-quantum cryptographic algorithms.

[0227] See also Fig.13 In some embodiments, the method further comprises:

[0228] 036: Access the second network node through the pre-established channel;

[0229] 037: Load the security certificate of the first network device or the security certificate of the second network device.

[0230] In some implementations, the access module is used to access the second network node through a pre-established channel. The loading module is used to load the security certificate of the first network device or the security certificate of the second network device.

[0231] In some embodiments, the processor is further configured to access the second network node through a pre-established channel and load the security certificate of the first network device or the security certificate of the second network device.

[0232] Specifically, the second network device accesses the second network node through a pre-established channel. Then, the second network device loads the security certificate of the first network device or the security certificate of the second network device. In this way, the second network device accesses the network node through the channel and can obtain the second quantum key. In addition, the second network device also obtains the security certificate for encrypting and decrypting the data information transmitted during the communication process.

[0233] Continuing with the above example, see Figure 3 Before communicating with the cryptographic device, the device management center accesses the second quantum network node that is physically closest and authorized through a trusted channel. A trusted channel refers to a mechanism or protocol that provides a secure communication path between two communicating entities. One way to establish it is to place the authentication server and the second quantum network node in the same cabinet and connect them directly with a shielded network cable. This channel ensures the confidentiality, integrity and availability of data during transmission, preventing unauthorized access, tampering or eavesdropping. Next, the device management center and the cryptographic device import and load each other's PQC public key (encryption public key and signature public key) or PQC certificate (encryption certificate and signature certificate issued by the certificate system) offline or online.

[0234] In this way, the device management center can access the second quantum network node through the channel and obtain the second quantum key. In addition, the device management center also obtains a security certificate for encryption and decryption of data information transmitted during the communication process.

[0235] See also Fig.14 In some embodiments, the method further comprises:

[0236] 038: Perform identity authentication with the first network device to obtain a first identity identifier of the first network device.

[0237] In some implementations, the processing module is further configured to perform identity authentication with the first network device to obtain a first identity identifier of the first network device.

[0238] In some implementations, the processor is further configured to perform identity authentication with the first network device to obtain a first identity identifier of the first network device.

[0239] Specifically, the second network device performs identity authentication with the first network device to obtain the first identity of the first network device. In this way, the second network device obtains the first identity of the first network device, which can be used in subsequent processes to verify the signature of the first signature message and generate a subsequent second session key verification message.

[0240] Continuing with the above example, see Figure 3 , the device management center performs identity authentication with the cryptographic device and obtains the first identity identifier of the cryptographic device.

[0241] In this way, the device management center obtains the cryptographic device identification ID_Device of the cryptographic device, which can be used in subsequent processes to verify the signature of the first signature message M1 and generate a subsequent second session key verification message Z2.

[0242] See also Fig.15 In some embodiments, the first decryption result includes a first encrypted encapsulated message, and the method further includes:

[0243] 039: Obtain a first XOR message according to the first encrypted encapsulation message;

[0244] 040: Perform post-quantum encryption processing on the first XOR message to obtain a first encryption key;

[0245] 041: Obtain a quantum key identifier for the first XOR message and the initial session key.

[0246] In some embodiments, the processing module obtains a first XOR message based on the first encrypted encapsulated message. The encryption module is also used to perform post-quantum encryption processing on the first XOR message to obtain a first encryption key. The processing module is used to obtain a quantum key identifier for the first XOR message and the initial session key.

[0247] In some embodiments, the processor is further configured to obtain a first XOR message based on the first encrypted encapsulated message, perform post-quantum encryption processing on the first XOR message to obtain a first encryption key, and obtain a quantum key identifier for the first XOR message and the initial session key.

[0248] Specifically, the second network device obtains the first XOR message according to the first encrypted encapsulated message. Then, the second network device performs post-quantum encryption processing on the first XOR message to obtain the first encryption key. The second network device then obtains a quantum key identifier for the first XOR message and the initial session key. In this way, the second network device obtains the first encryption key, which can be used to subsequently generate a final session key with good quantum resistance. And obtains a quantum key identifier for subsequent application to obtain a second quantum key.

[0249] Continuing with the above example, see Figure 3 , the device management center obtains the first XOR message Y1 according to the first encrypted encapsulated message F1. Then, the device management center performs post-quantum encryption processing on the first XOR message Y1 to obtain the first encryption key K1. The device management center then obtains the quantum key identifier UUID_QK from the first XOR message Y1 and the initial session key H1.

[0250] In this way, the device management center obtains the first encryption key K1, which can be used to subsequently generate the final session key with good quantum resistance. It also obtains the quantum key identifier UUID_QK, which is used to subsequently apply for the second quantum key.

[0251] See also Fig.16 In some embodiments, the first decryption result includes a first signed message, and the method further includes:

[0252] 042: Obtain a first verification splice according to the first signature message;

[0253] 043: Perform post-quantum cryptographic signature verification on the first signature message to confirm that a correct first verification splice is obtained;

[0254] 044: When the quantum key identifier is correct, sending a quantum key application to the second network node according to the quantum key identifier;

[0255] 045: Receive a second quantum key sent by the second network node according to the quantum key application.

[0256] In some embodiments, the processing module is used to obtain a first verification splice according to the first signature message. The signature verification module is used to perform post-quantum cryptographic signature verification processing on the first signature message to confirm that the correct first verification splice is obtained. The sending module is used to send a quantum key application to the second network node according to the quantum key identifier when the quantum key identifier is correct. The receiving module is used to receive a second quantum key sent by the second network node according to the quantum key application.

[0257] In some embodiments, the processor is further configured to obtain a first verification splice according to the first signature message, and perform post-quantum cryptographic signature verification on the first signature message to confirm that a correct first verification splice is obtained. The processor is further configured to send a quantum key application to a second network node according to the quantum key identifier when the quantum key identifier is correct, and receive a second quantum key sent by the second network node according to the quantum key application.

[0258] Specifically, the second network device obtains the first verification splice according to the first signature message. Then, the second network device performs post-quantum cryptographic signature verification on the first signature message to confirm that the correct first verification splice is obtained. The first verification splice is obtained by the second network device splicing the quantum key identifier, the first identity identifier and the second identity identifier of the second network device. Then, if the obtained quantum key identifier is correct, the second network device sends a quantum key application to the second network node according to the quantum key identifier. Finally, the second network device receives the second quantum key sent by the second network node according to the quantum key application. In this way, the second network device confirms that the data information sent by the first network device is correct and has not been unauthorizedly accessed by performing post-quantum cryptographic signature verification on the first signature message. In addition, a second quantum key matching the first quantum key is obtained by applying to the second network node through the quantum key identifier. The second quantum key has good resistance to quantum computing attacks and can be used to generate the final session key later.

[0259] Continuing with the above example, please refer again to Figure 3 , the device management center obtains the first verification splice P2 according to the first signature message M1. Then, the device management center performs post-quantum cryptographic signature verification on the first signature message M1 to confirm that the correct first verification splice P2 is obtained. The first verification splice P2 is obtained by the device management center by splicing the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device and the device management center identifier ID_Center. Then, when the obtained quantum key identifier UUID_QK is correct, the device management center sends a quantum key application to the second quantum network node according to the quantum key identifier. Finally, the device management center receives the second quantum key QK_UUID-2 sent by the second quantum network node according to the quantum key application.

[0260] In this way, the device management center performs post-quantum cryptographic signature verification on the first signature message M1 to confirm that the data information sent by the received cryptographic device is correct and has not been accessed without authorization. In addition, the second quantum key QK_UUID-2 matching the first quantum key QK_UUID-1 is obtained by applying to the second quantum network node through the quantum key identifier UUID_QK. The second quantum key QK_UUID-2 has good resistance to quantum computing attacks and can be used to generate the final session key later.

[0261] See also Fig.17 In some embodiments, the first decryption result includes a second handshake message, and step 034 (performing post-quantum cryptographic encryption processing on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device) includes:

[0262] 0341: concatenate the quantum key identifier and the second random number randomly generated by the second network device to obtain a second concatenation;

[0263] 0342: Perform XOR processing on the second concatenated body and the initial session key to obtain a second XOR message;

[0264] 0343: Perform post-quantum encryption processing on the second XOR message to obtain a second encryption key;

[0265] 0344: Perform post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in a second temporary encryption result;

[0266] 0345: Concatenate the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenation;

[0267] 0346: Perform post-quantum signature processing on the second verification splice to obtain a second signature message in the second temporary encryption result;

[0268] 0347: Encrypt the second temporary encryption result according to the initial session key to obtain a second encryption result;

[0269] 0348: Send the second encryption result to the first network device.

[0270] In some embodiments, the splicing module is used to splice the quantum key identifier and the second random number randomly generated by the second network device to obtain a second splicing body. The processing module is used to perform XOR processing on the second splicing body and the initial session key to obtain a second XOR message. The encryption module is used to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The encryption encapsulation module is used to perform post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in the second temporary encryption result. The splicing module is also used to splice the quantum key identifier, the first identity identifier and the second identity identifier to obtain a second verification splicing body. The signature module is also used to perform post-quantum signature processing on the second verification splicing body to obtain a second signature message in the second temporary encryption result. The encryption module is also used to encrypt the second temporary encryption result according to the initial session key to obtain a second encryption result. The sending module is used to send the second encryption result to the first network device.

[0271] In some embodiments, the processor is also used to perform splicing processing on the quantum key identifier and the second random number randomly generated by the second network device to obtain a second splicing body. And perform XOR processing on the second splicing body and the initial session key to obtain a second XOR message. And perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processor is also used to perform post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in a second temporary encryption result. And perform splicing processing on the quantum key identifier, the first identity identifier and the second identity identifier to obtain a second verification splicing body. The processor is also used to perform post-quantum signature processing on the second verification splicing body to obtain a second signature message in a second temporary encryption result. And perform encryption processing on the second temporary encryption result according to the initial session key to obtain a second encryption result. And send the second encryption result to the first network device.

[0272] Specifically, the second network device performs a splicing process on the quantum key identifier and the second random number randomly generated by the second network device to obtain a second splicing body. Then, the second network device performs an XOR process on the second splicing body and the initial session key to obtain a second XOR message. Then, the second network device performs a post-quantum encryption process on the second XOR message to obtain a second encryption key. And the second XOR message is subjected to a post-quantum encryption encapsulation process to obtain a second encapsulated message in the second temporary encryption result. Subsequently, the second network device performs a splicing process on the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification splicing body. The second network device then performs a post-quantum signature process on the second verification splicing body to obtain a second signature message in the second temporary encryption result. Subsequently, the second network device performs an encryption process on the second temporary encryption result according to the initial session key to obtain a second encryption result. Finally, the second network device sends the second encryption result to the first network device. In this way, the second network device obtains a second encryption key with good quantum resistance by using the quantum key identifier, the randomly generated second random number, and the initial session key, which can be used to generate a subsequent final session key. A second signature message is also generated that can be used to verify the source and correctness of the message, and is used to prevent unauthorized access and tampering of data during transmission.

[0273] Continuing with the above example, see Figure 3 , the device management center concatenates the quantum key identifier UUID_QK and the 128-bit second random number R2 randomly generated by the device management center to obtain the second concatenation P3, that is, UUID_QK|R2. Next, the device management center performs XOR processing on the second concatenation P3 and the initial session key H1 to obtain the second XOR message Y2, that is, P3⊕H1. Then, the device management center performs post-quantum encryption processing on the second XOR message Y2 to obtain the second encryption key K2. And the second XOR message Y2 is subjected to post-quantum encryption encapsulation processing to obtain the second encapsulated message F2 in the second temporary encryption result. Subsequently, the device management center concatenates the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device and the device management center identifier ID_Center to obtain the second verification concatenation P4, that is, UUID_QK|ID_Center|ID_Device. The device management center then performs post-quantum signature processing on the second verification concatenation P4 to obtain the second signature message M2 in the second temporary encryption result. Subsequently, the cryptographic device uses the initial session key H1 and the SM4 block cipher algorithm to symmetrically encrypt the second temporary encryption result to obtain the second encryption result, that is, the second encrypted encapsulated message and the second signed message are symmetrically encrypted using the initial session key H1 and the SM4 block cipher algorithm. Finally, the device management center sends the second encryption result to the cryptographic device.

[0274] In this way, the device management center obtains a second encryption key K2 with good quantum resistance by using the quantum key identifier UUID_QK, the randomly generated second random number R2 and the initial session key H1, which can be used to generate the subsequent final session key. A second signature message M2 is also generated to verify the source and correctness of the message, which is used to prevent unauthorized access and tampering of data during transmission.

[0275] See also Fig.18 In some embodiments, step 035 (generating a final session key according to the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first network device and the second network device) includes:

[0276] 0351: Perform XOR processing on the initial session key, the first encryption key, the second encryption key and the second quantum key to obtain a final session key to encrypt the communication between the first network device and the second network device.

[0277] In some embodiments, the derivation module is used to perform XOR processing on the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain a final session key to encrypt communication between the first network device and the second network device.

[0278] In some embodiments, the processor is further configured to perform XOR processing on the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain a final session key to encrypt communication between the first network device and the second network device.

[0279] Specifically, the second network device performs XOR processing on the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain a final session key to encrypt the communication between the first network device and the second network device. In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key is generated, which can enhance the ability of the communication between the first network device and the second network device to resist quantum computing attacks and protect the data transmitted during the communication process.

[0280] Continuing with the above example, see Figure 3 The device management center performs XOR processing on the initial session key H1, the first encryption key K1, the second encryption key K2, and the second quantum key QK_UUID-2 to obtain the final session key H2, that is, H2=H1⊕K1⊕K2⊕QK_UUID-2. The generated final session key H2 is used to encrypt the communication between the cryptographic device and the device management center.

[0281] In this way, by combining quantum key distribution technology and post-quantum cryptography technology, the final session key H2 is generated, which can enhance the ability of communication between cryptographic devices and device management centers to resist quantum computing attacks and protect data transmitted during the communication process.

[0282] See also Fig.19 In some embodiments, the method further comprises:

[0283] 046: Encrypt the second verification concatenation according to the final session key to obtain a second session key verification message;

[0284] 047: Send the second session key verification message to the first network device, where the second session key verification message is encrypted and protected by the initial session key.

[0285] In some embodiments, the encryption module is used to encrypt the second verification concatenation according to the final session key to obtain a second session key verification message. The sending module is used to send the second session key verification message to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

[0286] In some embodiments, the processor is further configured to encrypt the second verification concatenation according to the final session key to obtain a second session key verification message, and send the second session key verification message to the first network device, wherein the second session key verification message is encrypted and protected by the initial session key.

[0287] Specifically, the second network device encrypts the second verification concatenation according to the final session key to obtain a second session key verification message. The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key. In this way, the second network device sends the generated second session key verification message to the first network device under the protection of the initial session key, so that the first network device can verify the consistency of the final session key generated by the first network device and the final session key generated by the second network device according to the second session key verification message.

[0288] Continuing with the above example, see Figure 3 The device management center encrypts the second verification splice p4 according to the final session key H2 to obtain a second session key verification message Z2. The second session key verification message Z2 is sent to the cryptographic device and is encrypted and protected by the initial session key H1.

[0289] In this way, the device management center sends the generated second session key verification message Z2 to the cryptographic device under the protection of the initial session key H1, so that the cryptographic device can verify the consistency of the final session key H2 generated by the cryptographic device and the final session key H2 generated by the device management center based on the second session key verification message Z2.

[0290] The present application also provides a computer-readable storage medium containing a computer program. When the computer program is executed by one or more processors, the one or more processors execute the method of the present application.

[0291] It is understood that a computer program includes computer program code. The computer program code may be in source code form, object code form, executable file or some intermediate form. Computer readable storage media may include: any entity or device capable of carrying computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution medium.

[0292] In the description of this specification, the descriptions with reference to the terms "specifically", "further", "particularly", "understandably", etc. are intended to mean that the specific features, structures, materials or characteristics described in conjunction with the embodiments or examples are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms are not intended to refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.

[0293] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a specific logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0294] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limitations on the present application. Ordinary technicians in this field can change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A method for enhancing quantum security of a cryptographic device secure channel protocol of a communication network, characterized in that: The communication network includes a first network device and a second network device, the method is used for the first network device, and the method includes: Performing key negotiation with the second network device to obtain an initial session key; Acquire a first quantum key and a quantum key identifier from a service node connected to the first network device; Based on a post-quantum cryptographic algorithm, obtain a first encryption result according to a first random number randomly generated by the first network device, the initial session key, a first identity of the first network device, and the quantum key identifier, and send the first encryption result to the second network device; Decrypting the received second encryption result sent by the second network device to obtain a second decryption result, wherein the second network device performs post-quantum cryptographic encryption processing based on a post-quantum cryptographic algorithm according to a second random number randomly generated by the second network device, the initial session key, the second identity of the second network device, and the first decryption result to obtain the second encryption result; A final session key is generated according to the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt communication between the first network device and the second network device.

2. The method according to claim 1, characterized in that The method further comprises: Perform identity authentication with the second network device to obtain the second identity identifier.

3. The method according to claim 1, characterized in that The obtaining of the first quantum key and the quantum key identifier by the service node accessing the first network device includes: Using a service node to inject multiple keys into a cryptographic module of the first network device; Sending a quantum key application to the service node, wherein the quantum key application is protected by a protection key, and the protection key is a randomly used one from a plurality of keys injected into the cryptographic module; receiving a quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key, where the first quantum key is generated by a first network node connected to the service node and distributed to the service node, and the quantum key identifier is obtained by the first network node identifying the first quantum key according to an identification code of the first network node; The quantum key encryption result is decrypted to obtain the first quantum key and the quantum key identifier.

4. The method according to claim 2, characterized in that: The method of obtaining a first encryption result based on a post-quantum cryptographic algorithm according to a first random number randomly generated by the first network device, the initial session key, a first identity of the first network device, and the quantum key identifier, and sending the first encryption result to the second network device includes: Concatenating the quantum key identifier and the first random number to obtain a first concatenated body; Performing XOR processing on the first concatenated body and the initial session key to obtain a first XOR message; Performing post-quantum encryption processing on the first XOR message to obtain a first encryption key; Performing post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in a first temporary encryption result; Concatenating the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a first verification concatenation; Performing post-quantum signature processing on the first verification splice to obtain a first signature message in a first temporary encryption result; Encrypting the first temporary encryption result according to the initial session key to obtain the first encryption result; The first encryption result is sent to the second network device.

5. The method according to claim 4, characterized in that The decrypting the received second encryption result sent by the second network device to obtain the second decryption result includes: Receiving the second encryption result sent by the second network device; Decrypting the second encryption result according to the initial session key to obtain a second temporary encryption result; The second temporary encryption result is decrypted to obtain the second decryption result, where the second decryption result includes a second encrypted encapsulation message and a second signature message.

6. The method according to claim 5, characterized in that The method further comprises: Obtain a second XOR message according to the second encrypted encapsulated message; Performing post-quantum encryption processing on the second XOR message to obtain a second encryption key; Performing XOR processing on the second XOR message and the initial session key to obtain a second concatenated body; The quantum key identifier is obtained according to the second spliced ​​body.

7. The method according to claim 5, characterized in that The method further comprises: Obtain a second verification concatenation according to the second signature message; The second signature message is subjected to post-quantum cryptographic signature verification to confirm the correctness of the second verification splice, where the second verification splice is obtained by splicing the quantum key identifier, the first identity, and the second identity by the second network device.

8. The method according to claim 6, characterized in that The generating a final session key according to the initial session key, the first encryption result, the second decryption result and the first quantum key to encrypt communication between the first network device and the second network device includes: The initial session key, the first encryption key, the second encryption key and the first quantum key are XOR-ed to obtain the final session key to encrypt communication between the first network device and the second network device.

9. The method according to claim 8, characterized in that The method further comprises: Receiving a second session key verification message sent by the second network device; Calculating the first verification concatenation according to the final session key to obtain a first session key verification message; The first session key verification message and the second session key verification message are compared and processed to determine whether a final session key obtained by the first network device is consistent with a final session key obtained by the second network device.

10. A method for enhancing quantum security of a cryptographic device secure channel protocol of a communication network, characterized in that: The communication network includes a first network device and a second network device, the method is used for the second network device, and the method includes: Performing key negotiation with the first network device to obtain an initial session key; receiving a first encryption result sent by the first network device, wherein the first network device obtains the first encryption result based on a post-quantum cryptographic algorithm according to a first random number randomly generated by the first network device, the initial session key, a first identity of the first network device, and a quantum key identifier, and the quantum key identifier is obtained by the first network device from a service node connected to the first network device; Decrypting the first encryption result to obtain a first decryption result; Based on a post-quantum cryptographic algorithm, perform post-quantum cryptographic encryption processing according to a second random number randomly generated by the second network device, the initial session key, the second identity of the second network device, and the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device; A final session key is generated according to the initial session key, the first decryption result, the second encryption result and the second quantum key to encrypt communication between the first network device and the second network device.

11. The method according to claim 10, characterized in that The method further comprises: accessing a second network node through a pre-established channel; Load the security certificate of the first network device or the security certificate of the second network device.

12. The method according to claim 11, characterized in that The method further comprises: Perform identity authentication with the first network device to obtain the first identity identifier.

13. The method according to claim 12, characterized in that The first decryption result includes a first encrypted encapsulated message, and the method further includes: Obtain a first XOR message according to the first encrypted encapsulated message; Performing post-quantum encryption processing on the first XOR message to obtain a first encryption key; The quantum key identifier is obtained according to the first XOR message and the initial session key.

14. The method according to claim 13, characterized in that The first decryption result includes a first signed message, and the method further includes: Obtain a first verification splice according to the first signed message; Performing post-quantum cryptographic signature verification on the first signature message to confirm that a correct first verification splice is obtained, where the first verification splice is obtained by the second network device splicing the quantum key identifier, the first identity identifier, and the second identity identifier; When the quantum key identifier is correct, sending a quantum key application to the second network node according to the quantum key identifier; Receive a second quantum key sent by the second network node according to the quantum key application.

15. The method according to claim 14, characterized in that The method of performing post-quantum cryptographic encryption processing based on a post-quantum cryptographic algorithm according to a second random number randomly generated by the second network device, the initial session key, the second identity of the second network device, and the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device, includes: Concatenating the quantum key identifier and the second random number to obtain a second concatenated body; Performing XOR processing on the second concatenated body and the initial session key to obtain a second XOR message; Performing post-quantum encryption processing on the second XOR message to obtain a second encryption key; Performing post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in a second temporary encryption result; Concatenating the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenation; Performing post-quantum signature processing on the second verification splice to obtain a second signature message in a second temporary encryption result; Encrypting the second temporary encryption result according to the initial session key to obtain the second encryption result; The second encryption result is sent to the first network device.

16. The method according to claim 15, characterized in that The generating a final session key according to the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device includes: The initial session key, the first encryption key, the second encryption key and the second quantum key are XOR-ed to obtain the final session key to encrypt communication between the first network device and the second network device.

17. The method according to claim 16, characterized in that The method further comprises: Encrypting the second verification concatenation according to the final session key to obtain a second session key verification message; The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

Images