Communication method and device based on quantum key, storage medium and electronic device

Abstract

The disclosed embodiments provide a communication method and device based on quantum key, a storage medium and an electronic device, and relate to the field of satellite communication technology. The method includes: a first quantum communication satellite generates a communication key in response to a call request initiated by a first terminal within the service range, encrypts the communication key using a first quantum key, obtains a first encryption key and sends it to the first terminal; the first terminal decrypts the first encryption key using the first quantum key to obtain a communication key, encrypts the communication information using the communication key to obtain a communication information ciphertext, and sends the communication information ciphertext to the second terminal through the first quantum communication satellite; the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information. The method combines quantum key technology with the communication technology of the terminal directly connected to the satellite, and uses quantum key technology to encrypt and securely transmit the interactive information between the satellite and the terminal to ensure information security.

Description

Technical Field

[0001] The present disclosure relates to the field of satellite communication technology, and in particular, to a communication method based on quantum keys, a communication device based on quantum keys, an electronic device, a computer-readable storage medium, and a computer program product. Background Art

[0002] Terminal direct satellite communication technology allows ground user terminals (i.e. user terminals used in ground communication systems) to communicate directly with satellite systems, enabling users to roam between ground and space networks. However, this technology faces information security challenges in actual applications, including the risk of information leakage and tampering during data transmission, which affects user information security.

[0003] Quantum key distribution technology uses the principles of physics to ensure the secure distribution of keys between two locations, becoming a powerful tool for protecting communication security. This technology meets information security requirements and is mature. In particular, satellite quantum key distribution technology based on free space has expanded the distance of quantum key distribution, making it possible to distribute keys over long distances and with high security, and can work with satellite systems to ensure information security.

[0004] However, since quantum satellites and communication satellites usually form their own independent network systems, the comprehensive security of terminal direct satellite communications often requires the assistance of ground-based quantum networks. However, the construction of ground-based quantum networks is complex and costly, and there are many technical and practical difficulties in covering a wide area, which to some extent limits the application of quantum key distribution technology in satellite communications.

[0005] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field. Summary of the invention

[0006] The embodiments of the present disclosure provide a communication method based on quantum key, a communication device based on quantum key, an electronic device, a computer-readable storage medium, and a computer program product, which combine quantum key technology with communication technology for directly connecting a terminal to a satellite, and use quantum key technology to encrypt and securely transmit interactive information between the satellite and the terminal to ensure information security.

[0007] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by the practice of the present disclosure.

[0008] According to one aspect of the present disclosure, a communication method based on quantum keys is provided, which is executed by a first quantum communication satellite, and the method includes: in response to a call request initiated by a first terminal, obtaining a first quantum key of the first terminal, generating a communication key corresponding to the call request, and encrypting the communication key by using the first quantum key to obtain a first encryption key; the first terminal is within the service range of the first quantum communication satellite; sending the first encryption key to the first terminal, so that the first terminal decrypts the first encryption key by using the first quantum key to obtain the communication key; receiving a communication information ciphertext sent by the first terminal; the communication information ciphertext is obtained by the first terminal encrypting the communication information by using the communication key; sending the communication information ciphertext to a second terminal, so that the second terminal decrypts the communication information ciphertext by using the second quantum key to obtain the communication information.

[0009] In some embodiments of the present disclosure, the second terminal is within the service range of the first quantum communication satellite, and the method further includes: receiving information of the second terminal sent by the first terminal, and establishing a connection with the second terminal according to the information of the second terminal; obtaining the second quantum key of the second terminal, and encrypting the communication key using the second quantum key to obtain a second encryption key.

[0010] In some embodiments of the present disclosure, sending the communication information ciphertext to the second terminal so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information includes: sending the second encryption key and the communication information ciphertext to the second terminal so that the second terminal decrypts the second encryption key using the second quantum key to obtain the communication key, and then decrypting the communication information ciphertext using the communication key to obtain the communication information.

[0011] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal and the second terminal; the method also includes: performing quantum key distribution with the first ground center to generate the first quantum key and the second quantum key shared with the first ground center; wherein, the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; and the first ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0012] In some embodiments of the present disclosure, the second terminal is within the service range of a second quantum communication satellite, and the method further includes: receiving information of the second terminal sent by the first terminal, and determining the second quantum communication satellite according to the information of the second terminal; sending a quantum key relay request to a quantum communication satellite relay station; the quantum key relay request is used to request to share a quantum key with the second quantum communication satellite; receiving a third encryption key sent by the quantum communication satellite relay station; the third encryption key is obtained by the quantum communication satellite relay station encrypting a fourth quantum key using the third quantum key; decrypting the third encryption key using the third quantum key to obtain the fourth quantum key; encrypting the communication key using the fourth quantum key to obtain the fourth encryption key.

[0013] In some embodiments of the present disclosure, the third quantum key is generated by key distribution between the first quantum communication satellite and the quantum communication satellite relay station, and the first quantum communication satellite and the quantum communication satellite relay station share the third quantum key; the fourth quantum key is generated by key distribution between the second quantum communication satellite and the quantum communication satellite relay station, and the second quantum communication satellite and the quantum communication satellite relay station share the fourth quantum key.

[0014] In some embodiments of the present disclosure, the method further includes: sending the fourth encryption key and the communication information ciphertext to the second quantum communication satellite, so that the second quantum communication satellite decrypts the fourth encryption key using the fourth quantum key to obtain the communication key, and then encrypts the communication key using the second quantum key to obtain the second encryption key, and sends the second encryption key to the second terminal.

[0015] In some embodiments of the present disclosure, sending the communication information ciphertext to the second terminal so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information includes: sending the communication information ciphertext to the second terminal through the second quantum communication satellite so that the second terminal decrypts the second encryption key using the second quantum key to obtain the communication key, and then decrypting the communication information ciphertext using the communication key to obtain the communication information.

[0016] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal, and the second ground center provides registration and charging services for the second terminal; the first quantum key is generated by quantum key distribution between the first quantum communication satellite and the first ground center, the first quantum communication satellite and the first ground center share the first quantum key, and the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; the second quantum key is generated by quantum key distribution between the second quantum communication satellite and the second ground center, the second quantum communication satellite and the second ground center share the second quantum key, and the second ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0017] According to another aspect of the present disclosure, a communication method based on quantum keys is provided, which is performed by a first terminal, and the method includes: sending a call request to a first quantum communication satellite, and receiving a first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, the first encryption key is obtained by the first quantum communication satellite using the first quantum key of the first terminal to encrypt a communication key, and the communication key is a key generated by the first quantum communication satellite according to the call request; decrypting the first encryption key using the first quantum key to obtain the communication key; encrypting communication information using the communication key to obtain a communication information ciphertext, and sending the communication information ciphertext to the first quantum communication satellite; sending the communication information ciphertext to a second terminal through the first quantum communication satellite, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0018] According to another aspect of the present disclosure, a communication method based on quantum key is provided, which is executed by a second terminal, and the method includes: receiving a communication information ciphertext sent by a first terminal via a first quantum communication satellite; the communication information ciphertext is obtained by encrypting the communication information using a communication key, and the communication key is generated by the first quantum communication satellite in response to a call request initiated by the first terminal; receiving a second encryption key; the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using a second quantum key of the second terminal; decrypting the second encryption key using the second quantum key to obtain the communication key, and then decrypting the communication information ciphertext using the communication key to obtain the communication information.

[0019] According to another aspect of the present disclosure, a communication device based on quantum keys is provided, the device comprising: a first key interaction module, used to respond to a call request initiated by a first terminal, obtain a first quantum key of the first terminal, generate a communication key corresponding to the call request, and encrypt the communication key using the first quantum key to obtain a first encryption key; the first terminal is within the service range of the first quantum communication satellite; a first communication module, used to send the first encryption key to the first terminal, so that the first terminal decrypts the first encryption key using the first quantum key to obtain the communication key; receive a communication information ciphertext sent by the first terminal, the communication information ciphertext is obtained by the first terminal encrypting the communication information using the communication key; send the communication information ciphertext to a second terminal, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0020] According to another aspect of the present disclosure, a communication device based on quantum keys is provided, the device comprising: a second communication module, used to send a call request to a first quantum communication satellite, and receive a first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, the first encryption key is obtained by the first quantum communication satellite using the first quantum key of the first terminal to encrypt a communication key, and the communication key is a key generated by the first quantum communication satellite according to the call request; a second key interaction module, used to decrypt the first encryption key using the first quantum key to obtain the communication key; the second communication module is also used to encrypt communication information using the communication key to obtain a communication information ciphertext, and send the communication information ciphertext to the first quantum communication satellite; the communication information ciphertext is sent to the second terminal through the first quantum communication satellite, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0021] According to another aspect of the present disclosure, a communication device based on quantum key is provided, the device comprising: a third communication module, used to receive a communication information ciphertext sent by a first terminal through a first quantum communication satellite, the communication information ciphertext is obtained by encrypting the communication information using a communication key, and the communication key is generated by the first quantum communication satellite in response to a call request initiated by the first terminal; receiving a second encryption key, the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using a second quantum key of the second terminal; a third key interaction module, used to decrypt the second encryption key using the second quantum key to obtain the communication key; the third communication module is also used to decrypt the communication information ciphertext using the communication key to obtain the communication information.

[0022] According to another aspect of the present disclosure, an electronic device is provided, comprising: one or more processors; and a storage device configured to store one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the quantum key-based communication method as described in the above embodiments.

[0023] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, the quantum key-based communication method as described in the above embodiment is implemented.

[0024] According to another aspect of the present disclosure, a computer program product is also provided, including a computer program, which, when executed by a processor, implements the quantum key-based communication method as described in the above embodiment.

[0025] The quantum key-based communication method provided by the embodiment of the present disclosure dynamically generates a communication key for a call request, and encrypts the communication key using a pre-distributed first quantum key. This dynamic generation and encryption method ensures that the key for each call is unique, thereby increasing communication security. Since the secure distribution of quantum keys is protected by the non-cloning principle of quantum mechanics, it has high security. The method of encrypting the communication key with a quantum key and then transmitting it can ensure that the communication key is not stolen or tampered with during transmission.

[0026] The first quantum communication satellite uses the first quantum key to encrypt the communication key to obtain the first encryption key, and then sends the first encryption key to the first terminal, which uses the first quantum key it holds to decrypt, thereby recovering the communication key, and then uses the communication key to encrypt the communication information to obtain the communication information ciphertext. The first terminal sends the communication information ciphertext to the second terminal through the first quantum communication satellite, and the second terminal uses the second quantum key it holds to decrypt the communication information ciphertext. This process reflects the encryption protection role of quantum keys in the communication process, and is an important manifestation of the combination of quantum key technology and communication technology. It uses quantum key technology to encrypt and securely transmit the interactive information between the satellite and the terminal to ensure information security, and also realizes end-to-end secure communication, ensuring the security of information during transmission.

[0027] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The drawings herein are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the description are used to explain the principles of the present disclosure, and do not constitute improper limitations on the present disclosure.

[0029] Figure 1 A system architecture diagram of a communication system to which the embodiments of the present disclosure are applicable is shown.

[0030] Figure 2 A system architecture diagram of another communication system to which the embodiments of the present disclosure are applicable is shown.

[0031] Figure 3 A flow chart of a communication method based on quantum keys according to an embodiment of the present disclosure is shown.

[0032] Figure 4 The process of the first quantum communication satellite in the embodiment of the present disclosure relaying the quantum key with the second quantum communication satellite through the quantum communication satellite relay station is shown.

[0033] Figure 5 A flowchart of a quantum key-based communication method according to another embodiment of the present disclosure is shown.

[0034] Figure 6 A flowchart of a quantum key-based communication method according to another embodiment of the present disclosure is shown.

[0035] Figure 7 A schematic structural diagram of a quantum key-based communication device according to an embodiment of the present disclosure is shown.

[0036] Figure 8A schematic structural diagram of a quantum key-based communication device according to an embodiment of the present disclosure is shown.

[0037] Fig. 9 A schematic structural diagram of a quantum key-based communication device according to an embodiment of the present disclosure is shown.

[0038] Fig.10 A structural block diagram of an electronic device in an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0039] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the disclosure will be more comprehensive and complete and to fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0040] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0041] It should be noted that the ordinal numbers such as "first" and "second" mentioned in the embodiments of the present disclosure are used to distinguish multiple objects, and are not used to limit the order, timing, priority or importance of multiple objects, and the descriptions of "first" and "second" do not limit the objects to be different.

[0042] Figure 1 A system architecture diagram of a communication system according to an embodiment of the present disclosure is shown. Figure 1 The system architecture shown includes a terminal 110 , a terminal 120 , a quantum communication satellite 130 and a ground center 140 .

[0043] like Figure 1 As shown, the quantum communication satellite 130 communicates with the ground center 140, the terminal 110 and the terminal 120 respectively, and may include a quantum key distribution module 131, a key interaction module 132 and a communication module 133, to realize functions such as quantum key distribution between the satellite and the ground, key interaction between the satellite and the directly connected terminal, and information encryption and decryption forwarding.

[0044] The quantum key distribution module 131 performs optical communication with the quantum key distribution ground receiving station 141 of the ground center 140, and realizes secure quantum symmetric key distribution between the satellite and the ground receiving station through quantum key distribution technology. The key interaction module 132 is used to store the quantum key obtained in the quantum key distribution process; the key interaction module 132 has a built-in quantum random number module to generate the key required for communication, and has the key encryption and decryption function to realize secure encrypted transmission of communication keys with the terminal 110 and the terminal 120. The communication module 133 is used to perform data encryption and decryption communication and information forwarding with the terminal 110 and the terminal 120.

[0045] The ground center 140 communicates with the quantum communication satellite 130 to realize satellite-to-ground quantum key distribution, issues cards for the terminals 110 and 120 and injects quantum keys, which may include a quantum key distribution ground receiving station 141 and a registration and card issuance module 142.

[0046] The quantum key distribution ground receiving station 141 is used to perform optical communication with the quantum communication satellite 130, and realizes secure quantum symmetric key distribution through quantum key distribution technology. The registration and card issuance module 142 is used to perform card issuance registration and quantum key charging for the terminal 110 and the terminal 120, and the charged key is subsequently used for secure transmission of communication keys with the quantum communication satellite 130.

[0047] The terminal 110 can act as an active initiator of communication, actively apply for a communication key from the quantum communication satellite 130, and forward information via the quantum communication satellite 130 to achieve information communication with the terminal 120, and may include a registration and charging module 111, a key interaction module 112 and a communication module 113.

[0048] Among them, the registration and charging module 111 communicates with the ground center 140 to realize the terminal network authentication and quantum key charging and storage functions. The key interaction module 112 has the key encryption and decryption function to realize the secure interaction of communication keys with the quantum communication satellite 130. The communication module 113 uses the communication key obtained by interacting with the quantum communication satellite 130 to encrypt the communication data and send it to the quantum communication satellite 130, and receives the communication data forwarded from the quantum communication satellite 130 and decrypts it to realize communication security.

[0049] The terminal 120 can serve as the called party of the communication, receive the communication key and forwarded communication data from the quantum communication satellite 130, and realize secure information communication with the terminal 110, and may include a registration and charging module 121, a key interaction module 122 and a communication module 123.

[0050] Among them, the registration and charging module 121 communicates with the ground center 140 to realize the terminal network authentication and quantum key charging and storage functions. The key interaction module 122 has the key encryption and decryption function to realize the secure interaction of communication keys with the quantum communication satellite 130. The communication module 123 uses the communication key encrypted and sent by the quantum communication satellite 130 to decrypt the data of the calling terminal forwarded by the quantum communication satellite 130, and uses the communication key to encrypt the interactive communication data and send it to the quantum communication satellite 1301, which is forwarded by the quantum communication satellite 130 to realize secure communication with the first terminal 110.

[0051] In the process of terminal communication, cross-domain problems are often encountered, such as the calling device and the called device are not in the service range of the same satellite, and the card issuance and recharge of the calling device and the called device are not served by the same ground center. Based on the above scenarios, a quantum communication satellite relay station is added to the communication system, and the relay station is used to relay quantum keys between quantum communication satellites.

[0052] Figure 2 FIG. 2 shows a system architecture diagram of another communication system to which the embodiment of the present disclosure is applicable. Figure 2 The system architecture shown includes terminal 210, terminal 220, quantum communication satellite 230, quantum communication satellite 240, ground center 250, ground center 260 and quantum communication satellite relay station 270. Among them, terminal 210 directly communicates with quantum communication satellite 230, terminal 220 directly communicates with quantum communication satellite 240, ground center 250 provides card issuance registration and key charging services for terminal 210, and ground center 260 provides card issuance registration and key charging services for terminal 220.

[0053] like Figure 2 As shown, the quantum communication satellite 230 communicates with the ground center 250 and the terminal 210 respectively, and may include a quantum key distribution module 231, a key interaction module 232 and a communication module 233, to realize functions such as quantum key distribution between the satellite and the ground, key interaction between the satellite and the directly connected terminal, and information encryption and decryption forwarding.

[0054] The quantum communication satellite 240 communicates with the ground center 260 and the terminal 220 respectively, and may include a quantum key distribution module 241, a key interaction module 242 and a communication module 243, to realize functions such as quantum key distribution between the satellite and the ground, key interaction between the satellite and the directly connected terminal, and information encryption and decryption forwarding.

[0055] The ground center 250 communicates with the quantum communication satellite 230 to realize satellite-to-ground quantum key distribution, issues cards for the terminal 210 and injects quantum keys, which may include a quantum key distribution ground receiving station 251 and a registration and card issuance module 252.

[0056] The ground center 260 communicates with the quantum communication satellite 240 to realize satellite-to-ground quantum key distribution, issues cards for the terminal 220 and injects quantum keys, which may include a quantum key distribution ground receiving station 261 and a registration and card issuance module 262.

[0057] The terminal 210 can act as an active initiator of communication, actively apply for a communication key from the quantum communication satellite 230, and forward information via the quantum communication satellite 230 and the quantum communication satellite 240 to achieve information communication with the terminal 220, which may include a registration and charging module 211, a key interaction module 212 and a communication module 213.

[0058] Terminal 220 can serve as the called party of communication, receive communication keys and forwarded communication data from quantum communication satellite 230 and quantum communication satellite 240, and realize secure information communication with terminal 210, and can include a registration and charging module 221, a key interaction module 222 and a communication module 223.

[0059] The quantum communication satellite relay station 270 serves as a relay site for quantum key distribution, communicates with the quantum communication satellite 230 and the quantum communication satellite 240 respectively, and relays quantum keys between the quantum communication satellite 230 and the quantum communication satellite 240, and may include a quantum key distribution ground receiving station 271, a quantum key management and control system 272, and a quantum key interaction module 273.

[0060] Among them, the quantum key distribution ground receiving station 271 is used to perform optical communication with the quantum key distribution modules of different quantum communication satellites, and realize secure quantum symmetric key distribution through quantum key distribution technology. The quantum key management and control system 272 is used to realize the life cycle management of quantum keys and control the key relay between different quantum communication satellites. The quantum key interaction module 273 is used to perform quantum key relay between different satellites in a one-time pad manner according to the relay request of the quantum communication satellite.

[0061] The terminal in the embodiment of the present disclosure may be a variety of electronic devices, which may be deployed on land, including indoors or outdoors, handheld, wearable or vehicle-mounted; may also be deployed on the water surface; may also be deployed in the air, etc. Optionally, the client of the application installed in different terminals is the same, or the client of the same type of application based on different operating systems. Based on the different terminal platforms, the specific form of the client of the application may also be different, for example, the application client may be a mobile client, a computer client, etc.

[0062] In the disclosed embodiment, terminal 110 and terminal 210 can serve as the first terminal in the communication method based on quantum key, that is, the satellite direct terminal calling terminal, terminal 120 and terminal 220 can serve as the second terminal in the communication method based on quantum key, that is, the satellite direct terminal called terminal, quantum communication satellite 130 and quantum communication satellite 230 can serve as the first quantum communication satellite in the communication method based on quantum key, quantum communication satellite 240 can serve as the second quantum communication location in the communication method based on quantum key, ground center 140 and ground center 250 can serve as the first ground center in the communication method based on quantum key, and ground center 260 can serve as the second ground center in the communication method based on quantum key.

[0063] In addition, it should be noted that Figure 1 and Figure 2 What is shown is only one application environment of the quantum key-based communication method provided by the present disclosure. Figure 1 and Figure 2 The number of terminals, quantum communication satellites, ground centers and quantum communication satellite relay stations in the figure is only illustrative, and any number of terminals, quantum communication satellites, ground centers and quantum communication satellite relay stations may be provided according to actual needs.

[0064] In order to enable ordinary persons in the art to better understand the technical solution of the present disclosure, the various steps of the quantum key-based communication method in the exemplary embodiment of the present disclosure will be described in more detail below with reference to the accompanying drawings and embodiments.

[0065] Figure 3 A flow chart of a communication method based on quantum keys according to an embodiment of the present disclosure is shown. Figure 3 The quantum key-based communication method provided in the embodiment can be executed by the first quantum communication satellite, such as Figure 1 The quantum communication satellite 130, Figure 2 Quantum communication satellite 230 in. See Figure 3 The communication method based on quantum key specifically includes the following steps S310 to S340.

[0066] Step S310, in response to a call request initiated by the first terminal, obtaining a first quantum key of the first terminal, generating a communication key corresponding to the call request, encrypting the communication key using the first quantum key, and obtaining a first encryption key; the first terminal is within the service range of the first quantum communication satellite.

[0067] In the disclosed embodiment, the first quantum key is a pre-distributed quantum key, and the first quantum key is injected into the first terminal. The quantum key may be a key generated by a quantum key distribution (QKD) method, which is a technology that uses the principles of quantum mechanics to achieve secure key exchange.

[0068] Among them, the first terminal is within the service range of the first quantum communication satellite, the first quantum key can be a quantum key obtained by the first quantum communication satellite and a ground center that provides services for the first terminal through a quantum key distribution process, the first quantum communication satellite and the ground center share the first quantum key, and the first quantum key is injected into the first terminal, so that the first terminal has the key required for secure communication with the first quantum communication satellite.

[0069] In step S310, when the first terminal is within the service range of the first quantum communication satellite and initiates a call request to the first quantum communication satellite, the first quantum communication satellite starts to process the request and obtains a pre-distributed first quantum key. In response to the call request, a real-time key, i.e., a communication key corresponding to the call request, is generated by a quantum random number module built into the key interaction module, and the communication key is encrypted once and for all using the first quantum key to obtain a first encryption key.

[0070] Step S320: Send the first encryption key to the first terminal, so that the first terminal decrypts the first encryption key using the first quantum key to obtain a communication key.

[0071] After obtaining the first encryption key, the first quantum communication satellite sends the first encryption key to the first terminal. After receiving the first encryption key (i.e., the encrypted communication key), the first terminal uses its own first quantum key (the same as the key used for encryption by the first quantum communication satellite) to decrypt, thereby recovering the communication key.

[0072] Step S330, receiving the communication information ciphertext sent by the first terminal; the communication information ciphertext is obtained by the first terminal encrypting the communication information using the communication key.

[0073] Step S340: Send the communication information ciphertext to the second terminal, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0074] After obtaining the communication key, the first terminal uses the communication key to encrypt the communication information to be sent, obtains the communication information ciphertext, and sends the communication information ciphertext to the first quantum communication satellite. After receiving the communication information ciphertext, the first quantum communication satellite forwards the communication information ciphertext to the second terminal.

[0075] After receiving the communication information ciphertext, the second terminal uses the second quantum key to decrypt the communication information ciphertext to obtain the communication information. Since the communication information ciphertext is obtained by encrypting the communication key, the second terminal uses the second quantum key to obtain the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0076] In the disclosed embodiment, the second quantum key is a pre-distributed quantum key, and the second quantum key is injected into the second terminal.

[0077] If the second terminal is within the service range of the first quantum communication satellite, the second quantum key can be a quantum key obtained by the second communication satellite and the ground center that provides services for the second terminal through a quantum key distribution process. The first quantum communication satellite shares the second quantum key with the ground center, and the first quantum key is injected into the second terminal. In this way, the second terminal has the key required for secure communication with the first quantum communication satellite. In this scenario, the first terminal forwards the communication information ciphertext to the second terminal through the first quantum communication satellite. The second terminal obtains the communication key using the second quantum key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information.

[0078] If the second terminal is within the service range of the second quantum communication satellite, the second quantum key can be a quantum key obtained by the second communication satellite and the ground center providing services for the second terminal through a quantum key distribution process. The second quantum communication satellite shares the second quantum key with the ground center, and the second quantum key is injected into the second terminal. In this way, the second terminal has the key required for secure communication with the second quantum communication satellite. In this scenario, since the second terminal and the first terminal are within the service range of different quantum communication satellites, the first quantum communication satellite and the second quantum communication satellite perform quantum key relay. The first terminal forwards the communication information ciphertext to the second terminal through the first quantum communication satellite and the second quantum communication satellite. The second terminal obtains the communication key using the second quantum key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information.

[0079] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal and the second terminal, and the method also includes: performing quantum key distribution with the first ground center to generate a first quantum key and a second quantum key shared with the first ground center; wherein the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; and the first ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0080] In the disclosed embodiment, if the first terminal and the second terminal are within the service range of the first quantum communication satellite and both are provided with registration and charging services by the first ground center, then the first quantum communication satellite and the first ground center perform a quantum key distribution process, and the first quantum communication satellite and the first ground center simultaneously obtain the first quantum key and the second quantum key.

[0081] The first terminal and the second terminal register at the first ground center. The registration and card issuance module of the first ground center registers the first terminal and the second terminal for network access. After successful registration, the first quantum key and the second quantum key requested from the quantum key distribution ground receiving station are injected into a mobile medium compatible with the terminal, such as a SIM card. The first quantum key is injected into the mobile medium of the first terminal, and the second quantum key is injected into the mobile medium of the second terminal.

[0082] by Figure 1 For example, the terminal 110 is a satellite direct terminal calling terminal, i.e., the first terminal. The first quantum key k1 is obtained by the quantum key distribution module 131 of the quantum communication satellite 130 and the quantum key distribution ground receiving station 141 of the ground center 140 through optical communication, and the secure quantum symmetric key distribution between the satellite and the ground receiving station is achieved through the quantum key distribution technology. The ground center 140 injects the first quantum key k1 into the terminal 110, so that the terminal 110 has the key required for secure communication with the quantum communication satellite 130.

[0083] Figure 1 In the example, terminal 120 is the satellite direct terminal called terminal, i.e., the second terminal. Terminal 120 is within the service range of quantum communication satellite 130, and the ground center 140 provides services for terminal 120. In this scenario, the second quantum key k2 is obtained by optical communication between quantum key distribution module 131 of quantum communication satellite 130 and quantum key distribution ground receiving station 141 of ground center 140, and by quantum key distribution technology to achieve secure quantum symmetric key distribution between satellite and ground receiving station. Ground center 140 injects the second quantum key k2 into terminal 120, so that terminal 120 has the key required for secure communication with quantum communication satellite 130.

[0084] In some embodiments of the present disclosure, the second terminal is within the service range of the first quantum communication satellite, and the method further includes: receiving information of the second terminal sent by the first terminal, establishing a connection with the second terminal according to the information of the second terminal; obtaining a second quantum key of the second terminal, and encrypting the communication key using the second quantum key to obtain a second encryption key.

[0085] In addition to sending the communication information ciphertext to the first quantum communication satellite, the first terminal also sends the information of the second terminal to the first quantum communication satellite, such as the number and IP address of the second terminal. After receiving the information of the second terminal, the first quantum communication satellite confirms that the second terminal is within its service range and establishes a connection with the second terminal based on the information of the second terminal. The first quantum communication satellite obtains the pre-distributed second quantum key, encrypts the communication key with the second quantum key, and obtains the second encryption key.

[0086] In some embodiments of the present disclosure, the above-mentioned step S340 of sending the communication information ciphertext to the second terminal so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information may include: sending the second encryption key and the communication information ciphertext to the second terminal so that the second terminal decrypts the second encryption key using the second quantum key to obtain the communication key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information.

[0087] The first quantum communication satellite forwards the communication information ciphertext sent by the first terminal to the second terminal, and sends the generated second encryption key (i.e., the encrypted communication key) to the second terminal. After receiving the communication information ciphertext and the second encryption key, the second terminal uses its own second quantum key (the same key used for encryption by the first quantum communication satellite) to decrypt, thereby recovering the communication key. Then, the second terminal uses the communication key to decrypt the communication information ciphertext and obtain the communication information.

[0088] by Figure 1 For example, after receiving the call request from the terminal 110, the quantum communication satellite 130 obtains the first quantum key k1 from the quantum key distribution module 131, generates the communication key k by the quantum random number module built into the key interaction module 132, encrypts the communication key k with the first quantum key k1 once and for all, obtains the first encryption key (k⊕k1), and then sends the first encryption key (k⊕k1) to the terminal 110. After receiving the first encryption key (k⊕k1), the key interaction module 112 of the terminal 110 uses the first quantum key k1 obtained from the registration and charging module 111 to decrypt and obtain the communication key k.

[0089] After the terminal 110 obtains the communication key k, it encrypts the communication information M1 through the communication module 113 according to the agreed encryption algorithm to obtain the communication information ciphertext C=E(M1,k), and transmits it together with the information of the terminal 120, including but not limited to the mobile phone number, IP address, etc., to the quantum communication satellite 130 for forwarding.

[0090] The quantum communication satellite 130 receives the communication information ciphertext C sent by the terminal 110 and the information of the terminal 120, and establishes a connection with the terminal 120 according to the information of the terminal 120. The key interaction module 132 of the quantum communication satellite 130 uses the second quantum key k2 obtained from the quantum key distribution module 131 to encrypt the communication key k once and obtain the second encryption key (k⊕k2).

[0091] The quantum communication satellite 130 sends the communication information ciphertext C sent by the terminal 110 and the generated second encryption key (k⊕k2) to the terminal 120. After receiving the second encryption key (k⊕k2), the terminal 120 decrypts the second quantum key k2 through the key interaction module 122 to obtain the communication key k. Then, the terminal 120 decrypts the communication information ciphertext C=E(M1,k) through the communication module 123 using the communication key k to obtain the communication information M1.

[0092] In the embodiment of the present disclosure, if the first terminal and the second terminal are in interactive communication, after the second terminal obtains the communication information, it obtains the response information, encrypts the response information with the communication key, obtains the response information ciphertext, and forwards the response information ciphertext to the first terminal via the first quantum communication satellite. Figure 1 For example, if terminal 110 and terminal 120 need interactive communication, terminal 120 generates a response message M2, encrypts the response message M2 using the communication key k to obtain a response message ciphertext, and then forwards it to terminal 110 via the quantum communication satellite 130. Terminal 110 decrypts the response message M2 using the communication key k.

[0093] In the disclosed embodiment, if the first terminal and the second terminal are within the service range of the first quantum communication satellite, and the first ground center provides registration and charging services for the first terminal and the second terminal, in this scenario, the first quantum communication satellite and the first ground center perform a quantum key distribution process and simultaneously obtain the first quantum key and the second quantum key. After the terminal successfully registers for network access, the first ground center charges the first quantum key to the first terminal and the second quantum key to the second terminal, so that the first terminal and the second terminal have the keys required for secure communication with the first quantum communication satellite.

[0094] Moreover, after receiving the call request from the first terminal, the first quantum communication satellite dynamically generates a communication key for the call request and encrypts the communication key using the pre-distributed first quantum key. This dynamic generation and encryption method ensures that the key for each call is unique, thereby increasing communication security.

[0095] The first quantum communication satellite uses the first quantum key to encrypt the communication key and sends it to the first terminal, and uses the second quantum key to encrypt the communication key and sends it to the second terminal. Since the secure distribution of quantum keys is protected by the non-cloning principle of quantum mechanics, it has high security. The method of encrypting the communication key with the quantum key and then transmitting it can ensure that the communication key will not be stolen or tampered with during the transmission process.

[0096] In addition, the first quantum communication satellite uses the first quantum key to encrypt the communication key to obtain the first encryption key, and then sends the first encryption key to the first terminal, which uses the first quantum key it holds to decrypt, thereby recovering the communication key, and then uses the communication key to encrypt the communication information to obtain the communication information ciphertext. The first terminal sends the communication information ciphertext to the second terminal through the first quantum communication satellite, and the second terminal uses the second quantum key it holds to decrypt the communication information ciphertext. This process reflects the encryption protection role of quantum keys in the communication process, and is an important manifestation of the combination of quantum key technology and communication technology. It uses quantum key technology to encrypt and securely transmit the interactive information between the satellite and the terminal to ensure information security, and also realizes end-to-end secure communication, ensuring the security of information during transmission.

[0097] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal, and the second ground center provides registration and charging services for the second terminal; the first quantum key is generated by the first quantum communication satellite and the first ground center through quantum key distribution, the first quantum communication satellite and the first ground center share the first quantum key, and the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; the second quantum key is generated by the second quantum communication satellite and the second ground center through quantum key distribution, the second quantum communication satellite and the second ground center share the second quantum key, and the second ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0098] In the disclosed embodiment, if the first terminal is within the service range of the first quantum communication satellite, and the first terminal is provided with registration and charging services by the first ground center, then the first quantum communication satellite and the first ground center perform a quantum key distribution process, and the first quantum communication satellite and the first ground center simultaneously obtain the first quantum key. The first terminal registers at the first ground center, and the registration and card issuance module of the first ground center registers the first terminal for network access. After successful registration, the first quantum key requested from the quantum key distribution ground receiving station is charged into a mobile medium compatible with the terminal, such as a SIM card.

[0099] If the second terminal is within the service range of the second quantum communication satellite, and the second terminal is provided with registration and charging services by the second ground center, the second quantum communication satellite and the second ground center will carry out the quantum key distribution process, and the second quantum communication satellite and the second ground center will obtain the second quantum key at the same time. The second terminal will register at the second ground center, and the registration and card issuance module of the second ground center will register the second terminal for network access. After the registration is successful, the second quantum key requested from the quantum key distribution ground receiving station will be charged into a mobile medium compatible with the terminal, such as a SIM card.

[0100] by Figure 2 For example, the terminal 210 is a satellite direct terminal calling terminal, i.e., the first terminal. The first quantum key k1 is obtained by the quantum key distribution module 231 of the quantum communication satellite 230 and the quantum key distribution ground receiving station 251 of the ground center 250 through optical communication, and the secure quantum symmetric key distribution between the satellite and the ground receiving station is achieved through the quantum key distribution technology. The ground center 250 injects the first quantum key k1 into the terminal 210, so that the terminal 210 has the key required for secure communication with the quantum communication satellite 230.

[0101] Figure 2 In the example, terminal 220 is the satellite direct terminal called terminal, i.e., the second terminal. Terminal 220 is within the service range of quantum communication satellite 240, and the ground center 260 provides services for terminal 220. In this scenario, the second quantum key k2 is obtained by optical communication between quantum key distribution module 241 of quantum communication satellite 240 and quantum key distribution ground receiving station 261 of ground center 260, and by quantum key distribution technology to achieve secure quantum symmetric key distribution between satellite and ground receiving station. Ground center 260 injects the second quantum key k2 into terminal 220, so that terminal 220 has the key required for secure communication with quantum communication satellite 240.

[0102] Figure 4 The process of the first quantum communication satellite of the embodiment of the present disclosure relaying the quantum key with the second quantum communication satellite through the quantum communication satellite relay station is shown. Figure 4 , the process of relaying quantum keys can include the following steps.

[0103] Step S410: The first quantum communication satellite receives information of the second terminal sent by the first terminal, and determines a second quantum communication satellite according to the information of the second terminal; the second terminal is within the service range of the second quantum communication satellite.

[0104] In addition to sending the communication information ciphertext to the first quantum communication satellite, the first terminal also sends the information of the second terminal to the first quantum communication satellite, such as the number and IP address of the second terminal. After receiving the information of the second terminal, the first quantum communication satellite confirms that the second terminal is not within its service range, and finds out that the second terminal is within the service range of the second quantum communication satellite.

[0105] Step S420: the first quantum communication satellite sends a quantum key relay request to the quantum communication satellite relay station; the quantum key relay request is used to request to share the quantum key with the second quantum communication satellite.

[0106] The first quantum communication satellite sends a quantum key relay request to the quantum communication satellite repeater to apply for sharing the quantum key with the second quantum communication satellite.

[0107] Step S430, the first quantum communication satellite receives the third encryption key sent by the quantum communication satellite relay station; the third encryption key is obtained by the quantum communication satellite relay station by encrypting the fourth quantum key using the third quantum key.

[0108] After receiving the quantum key relay request sent by the first quantum communication satellite, the quantum communication satellite relay station encrypts the fourth quantum key using the third quantum key in a one-time pad manner to obtain a third encryption key.

[0109] In some embodiments of the present disclosure, the third quantum key is generated by key distribution between the first quantum communication satellite and the quantum communication satellite relay station, and the first quantum communication satellite and the quantum communication satellite relay station share the third quantum key; the fourth quantum key is generated by key distribution between the second quantum communication satellite and the quantum communication satellite relay station, and the second quantum communication satellite and the quantum communication satellite relay station share the fourth quantum key.

[0110] In the disclosed embodiment, the third quantum key and the fourth quantum key are pre-distributed quantum keys. The first quantum communication satellite performs a quantum key distribution process with the quantum communication satellite relay station, and simultaneously obtains the third quantum key. The second quantum communication satellite performs a quantum key distribution process with the quantum communication satellite relay station, and simultaneously obtains the fourth quantum key.

[0111] It can be seen that the quantum communication satellite relay station has the third quantum key and the fourth quantum key, the first quantum communication satellite has the third quantum key, and the second quantum communication satellite has the fourth quantum key.

[0112] by Figure 2Taking an example to illustrate, the quantum key distribution module 231 of the quantum communication satellite 230 performs optical communication with the quantum key distribution ground receiving station 271 of the quantum communication satellite relay station 270, and the quantum key distribution technology is used to realize the secure quantum symmetric key distribution between the satellite and the ground receiving station to obtain the third quantum key k3, that is, the quantum communication satellite 230 and the quantum communication satellite relay station 270 obtain the third quantum key k3 at the same time.

[0113] The quantum key distribution module 241 of the quantum communication satellite 240 performs optical communication with the quantum key distribution ground receiving station 271 of the quantum communication satellite relay station 270, and realizes secure quantum symmetric key distribution between the satellite and the ground receiving station through quantum key distribution technology to obtain the fourth quantum key k4, that is, the quantum communication satellite 240 and the quantum communication satellite relay station 270 obtain the fourth quantum key k4 at the same time.

[0114] Step S440: The first quantum communication satellite decrypts the third encryption key using the third quantum key to obtain a fourth quantum key.

[0115] After the first quantum communication satellite receives the third encryption key sent by the quantum communication satellite relay station, it uses the third quantum key it possesses to decrypt the third encryption key and obtain the fourth quantum key.

[0116] Step S450: The first quantum communication satellite encrypts the communication key using the fourth quantum key to obtain a fourth encryption key.

[0117] After the first quantum communication satellite obtains the fourth quantum key, it uses the fourth quantum key to encrypt the communication key to obtain a fourth encryption key, and then sends the fourth encryption key to the second quantum communication satellite, so that the second quantum communication satellite uses its fourth quantum key to decrypt the fourth encryption key and obtain the communication key.

[0118] In the disclosed embodiment, if the first terminal and the second terminal that need to communicate are within the service range of different quantum communication satellites, the quantum key can be relayed between different quantum communication satellites through the quantum communication satellite relay station, so that the first quantum communication satellite can obtain the fourth quantum key of the second quantum communication satellite, and the communication key is encrypted and transmitted using the fourth quantum key, so that the second quantum communication satellite can obtain the communication key, and then the communication key is encrypted and transmitted to the second terminal within the service range, so that the second terminal can use the communication key for decryption. It can be seen that through the quantum communication satellite relay station, cross-regional quantum secure communication can be realized, and the first terminal and the second terminal can communicate securely even if they are located in different geographical locations as long as they are within the coverage of the quantum communication network.

[0119] It can be understood that if the next-hop satellite of the first quantum communication satellite is not the second quantum communication satellite, that is, the information transmission between the first quantum communication satellite and the second quantum communication satellite requires the intermediate quantum communication satellite to forward, then the first quantum communication satellite can apply to the first quantum communication satellite ground relay station to share the quantum key with the intermediate quantum communication satellite, so that the intermediate quantum communication satellite obtains the communication key, and then the intermediate quantum communication satellite can apply to the second quantum communication satellite ground relay station to share the quantum key with the second quantum communication satellite, so that the second quantum communication satellite obtains the communication key. In the above scenario, the first quantum communication satellite ground relay station and the second quantum communication satellite ground relay station can be the same or different, and the embodiments of the present disclosure do not limit this.

[0120] In some embodiments of the present disclosure, the method further includes: sending a fourth encryption key and a communication information ciphertext to a second quantum communication satellite, so that the second quantum communication satellite decrypts the fourth encryption key using the fourth quantum key to obtain a communication key, and then encrypts the communication key using the second quantum key to obtain a second encryption key, and sends the second encryption key to the second terminal.

[0121] The first quantum communication satellite sends the communication information ciphertext sent by the first terminal to the second quantum communication satellite, and sends the generated fourth encryption key (i.e., the encrypted communication key) to the second quantum communication satellite. After receiving the communication information ciphertext and the fourth encryption key, the second quantum communication satellite uses its own fourth quantum key (the same key used for encryption by the first quantum communication satellite) to decrypt, thereby recovering the communication key. Then, the second quantum communication satellite uses the second quantum key (the second terminal has the quantum key) to encrypt the communication key and obtain the second encryption key.

[0122] In some embodiments of the present disclosure, the above-mentioned step S340 of sending a communication information ciphertext to a second terminal so that the second terminal decrypts the communication information ciphertext using a second quantum key to obtain the communication information includes: sending the communication information ciphertext to the second terminal through a second quantum communication satellite so that the second terminal decrypts the second encryption key using the second quantum key to obtain the communication key, and then decrypting the communication information ciphertext using the communication key to obtain the communication information.

[0123] The first quantum communication satellite forwards the communication information ciphertext sent by the first terminal to the second terminal through the second quantum communication satellite. In addition, the second quantum communication satellite sends the generated second encryption key (i.e., the encrypted communication key) to the second terminal. After receiving the communication information ciphertext and the second encryption key, the second terminal uses its own second quantum key (the same key used for encryption by the second quantum communication satellite) to decrypt, thereby recovering the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0124] by Figure 2 For example, after receiving the call request from the terminal 210, the quantum communication satellite 230 obtains the first quantum key k1, generates the communication key k, encrypts the communication key k with the first quantum key k1, obtains the first encryption key (k⊕k1), and then sends the first encryption key (k⊕k1) to the terminal 210. After receiving the first encryption key (k⊕k1), the terminal 210 decrypts it with the first quantum key k1 stored therein to obtain the communication key k.

[0125] After the terminal 210 obtains the communication key k, it encrypts the communication information M1 through the agreed encryption algorithm to obtain the communication information ciphertext C=E(M1,k), and transmits it together with the information of the terminal 220, including but not limited to the mobile phone number, IP address, etc., to the quantum communication satellite 230 for forwarding.

[0126] The quantum communication satellite 230 receives the communication information ciphertext C sent by the terminal 210 and the information of the terminal 220, queries the next hop quantum communication satellite 240 according to the information of the terminal 220, and confirms that the terminal 220 is within the service range of the quantum communication satellite 240. The quantum communication satellite 230 applies to the quantum communication satellite relay station 270 to share the quantum key with the quantum communication satellite 240.

[0127] After receiving the key relay request from the quantum communication satellite 230, the quantum communication satellite relay station 270 controls the quantum key interaction module 273 to obtain the third quantum key k3 and the fourth quantum key k4 from the quantum key distribution ground receiving station 271 through the quantum key management and control system 272 according to the relevant information of the quantum communication satellite 240, and encrypts the fourth quantum key k4 with the third quantum key k3 in a one-time pad manner to obtain a third encryption key (k3⊕k4), and sends the third encryption key (k3⊕k4) to the key interaction module 232 of the quantum communication satellite 230. The key interaction module 232 of the quantum communication satellite 230 uses the third quantum key k3 obtained from the quantum key distribution module 231 to decrypt and obtain the fourth quantum key k4.

[0128] The key interaction module 232 of the quantum communication satellite 230 uses the fourth quantum key k4 obtained by decryption to encrypt the communication key k once and for all, obtains the fourth encryption key (k⊕k4), and transmits the fourth encryption key (k⊕k4) to the quantum communication satellite 240. At the same time, the communication module 233 of the quantum communication satellite 230 forwards the communication information ciphertext C=E(M1,k) to the quantum key communication satellite 240.

[0129] After the quantum communication satellite 240 receives the encrypted information C forwarded from the quantum communication satellite 230, the information of the terminal 220 and the fourth encryption key (k⊕k4), its key interaction module 242 uses the fourth quantum key k4 obtained from the quantum key distribution module 241 to decrypt the fourth encryption key (k⊕k4) to obtain the communication key k.

[0130] The quantum communication satellite 240 establishes a connection with the terminal 220 according to the information of the terminal 220, encrypts the communication key k once and for all using the second quantum key k2 obtained from the quantum key distribution module 241, obtains the second encryption key (k⊕k2), and transmits the second encryption key (k⊕k2) to the terminal 220. At the same time, the communication module 243 of the quantum communication satellite 240 forwards the communication information ciphertext C=E(M1,k) to the terminal 220.

[0131] Terminal 220 receives the second encryption key (k⊕k2) and the communication information ciphertext C sent by quantum communication satellite 240, and decrypts it using the second quantum key k2 stored therein to obtain the communication key k. Then, terminal 220 decrypts the communication information ciphertext C=E(M1,k) using the communication key k to obtain the communication information M1.

[0132] In the embodiment of the present disclosure, if the first terminal and the second terminal are in interactive communication, after the second terminal obtains the communication information, it obtains the response information, encrypts the response information with the communication key, obtains the response information ciphertext, and forwards the response information ciphertext to the first terminal through the second quantum communication satellite and the first quantum communication satellite. Figure 2 Taking an example to illustrate, if terminal 210 and terminal 220 need interactive communication, terminal 220 generates a response message M2, encrypts the response message M2 using the communication key k to obtain a response message ciphertext, and then forwards it to terminal 210 via quantum communication satellite 240 and quantum communication satellite 230. Terminal 210 decrypts the response message M2 using the communication key k.

[0133] In the disclosed embodiment, if the first terminal and the second terminal are within the service range of different quantum communication satellites, and the registration and charging services are provided by different ground centers. In this scenario, the first quantum communication satellite performs a quantum key distribution process with the first ground center and obtains the first quantum key at the same time. After the terminal successfully registers for network access, the first ground center charges the first quantum key to the first terminal, so that the first terminal has the key required for secure communication with the first quantum communication satellite.

[0134] The second quantum communication satellite conducts a quantum key distribution process with the second ground center and obtains the second quantum key at the same time. After the terminal successfully registers on the network, the second ground center injects the second quantum key into the second terminal, so that the second terminal has the key required for secure communication with the second quantum communication satellite.

[0135] The first quantum communication satellite and the second quantum communication satellite respectively perform quantum key distribution processes with the quantum communication satellite relay station, so that the quantum communication satellite relay station has the third quantum key and the fourth quantum key, the first quantum communication satellite has the third quantum key, and the second quantum communication satellite has the fourth quantum key. In this way, the first quantum communication satellite and the second quantum communication satellite can apply for shared quantum keys through the quantum communication satellite relay station.

[0136] Moreover, after receiving the call request from the first terminal, the first quantum communication satellite dynamically generates a communication key for the call request and encrypts the communication key using the pre-distributed first quantum key. This dynamic generation and encryption method ensures that the key for each call is unique, thereby increasing communication security.

[0137] In addition, the first quantum communication satellite uses the first quantum key to encrypt the communication key to obtain the first encryption key, and then sends the first encryption key to the first terminal, which uses the first quantum key it holds to decrypt, thereby recovering the communication key, and then uses the communication key to encrypt the communication information to obtain the communication information ciphertext, and the first terminal sends the communication information ciphertext to the second terminal through the first quantum communication satellite. The first quantum communication satellite applies to the quantum communication satellite relay station to share the quantum key with the second quantum communication satellite, so that the second quantum communication satellite can obtain the communication key. Then the second quantum communication satellite uses the pre-distributed second quantum key to encrypt the communication key and sends it to the second terminal, and forwards the communication information ciphertext sent by the first terminal through the first quantum communication satellite to the second terminal. In this way, the second terminal uses the second quantum key it holds to decrypt the communication information ciphertext. This process reflects the encryption protection role of quantum keys in the communication process, and is an important manifestation of the combination of quantum key technology and communication technology. The interactive information between the satellite and the terminal is encrypted and securely transmitted using quantum key technology to ensure information security, and end-to-end secure communication is also realized to ensure the security of information during transmission.

[0138] Figure 5 A flowchart of a quantum key-based communication method according to another embodiment of the present disclosure is shown. Figure 5 The quantum key-based communication method provided in the embodiment can be executed by the first terminal, that is, the satellite direct connection terminal calling terminal, such as Figure 1 The terminal 110 in Figure 2 Terminal 210 in. Figure 5 The communication method based on quantum key specifically includes the following steps S510 to S540.

[0139] Step S510, sending a call request to the first quantum communication satellite, and receiving a first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, the first encryption key is obtained by the first quantum communication satellite encrypting the communication key using the first quantum key of the first terminal, and the communication key is a key generated by the first quantum communication satellite according to the call request.

[0140] Step S520: Decrypt the first encryption key using the first quantum key to obtain a communication key.

[0141] Step S530, encrypt the communication information using the communication key to obtain the communication information ciphertext, and send the communication information ciphertext to the first quantum communication satellite.

[0142] Step S540: sending the communication information ciphertext to the second terminal via the first quantum communication satellite, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0143] The first terminal is within the service range of the first quantum communication satellite. When the first terminal initiates a call request to the first quantum communication satellite, the first quantum communication satellite starts to process the request and obtains the first quantum key distributed in advance. In response to the call request, the first quantum communication satellite generates a real-time key, i.e., the communication key corresponding to the call request, through the quantum random number module built into the key interaction module, and encrypts the communication key once and for all using the first quantum key to obtain the first encryption key, and sends the first encryption key to the first terminal. After receiving the first encryption key (i.e., the encrypted communication key), the first terminal uses its own first quantum key (the same as the key used by the first quantum communication satellite for encryption) to decrypt, thereby recovering the communication key.

[0144] The first terminal uses the communication key to encrypt the communication information to be sent, obtains the communication information ciphertext, and sends the communication information ciphertext to the first quantum communication satellite. After receiving the communication information ciphertext, the first quantum communication satellite forwards the communication information ciphertext to the second terminal. After receiving the communication information ciphertext, the second terminal uses the second quantum key to decrypt the communication information ciphertext to obtain the communication information. Since the communication information ciphertext is obtained by encrypting the communication key, the second terminal uses the second quantum key to obtain the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0145] Since the principle of solving the problem in the embodiment of the communication method based on quantum key is similar to that in the above method embodiment, the implementation of the embodiment of the communication method based on quantum key can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0146] Figure 6 A flowchart of a quantum key-based communication method according to another embodiment of the present disclosure is shown. Figure 6 The quantum key-based communication method provided in the embodiment can be executed by the second terminal, that is, the satellite direct connection terminal called terminal, such as Figure 1 Terminal 120 in Figure 2 Terminal 220 in. Figure 6 The communication method based on quantum key specifically includes the following steps S610 to S630.

[0147] Step S610, receiving a communication information ciphertext sent by the first terminal via the first quantum communication satellite; the communication information ciphertext is obtained by encrypting the communication information using a communication key, and the communication key is generated by the first quantum communication satellite in response to a call request initiated by the first terminal.

[0148] The second terminal receives the communication information ciphertext sent by the first terminal through the first quantum communication satellite. The generation process of the communication information ciphertext is as follows: when the first terminal initiates a call request to the first quantum communication satellite, the first quantum communication satellite starts to process the request, obtains the pre-distributed first quantum key, generates a real-time key through the quantum random number module built into the key interaction module, that is, the communication key corresponding to the call request, encrypts the communication key once and for all using the first quantum key, obtains the first encryption key, and sends the first encryption key to the first terminal; after receiving the first encryption key, the first terminal uses its own first quantum key to decrypt, thereby recovering the communication key; the first terminal uses the communication key to encrypt the communication information to be sent, and obtains the communication information ciphertext.

[0149] In the disclosed embodiment, if the second terminal is within the service range of the first quantum communication satellite, the first quantum communication satellite can directly forward the communication information ciphertext to the second terminal. If the second terminal is within the service range of the second quantum communication satellite, the first quantum communication satellite forwards the communication information ciphertext to the second terminal via the second quantum communication satellite.

[0150] Step S620, receiving a second encryption key; the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using the second quantum key of the second terminal.

[0151] In the disclosed embodiment, if the second terminal is within the service range of the first quantum communication satellite, the second encryption key is generated by the first quantum communication satellite. If the second terminal is within the service range of the second quantum communication satellite, the second encryption key is generated by the second quantum communication satellite. This has been described in detail in the above embodiment and will not be repeated here.

[0152] Step S630, use the second quantum key to decrypt the second encryption key to obtain the communication key, and then use the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0153] After receiving the second encryption key and the communication information ciphertext, the second terminal uses the second quantum key to encrypt the second encryption key to obtain the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0154] Since the principle of solving the problem in the embodiment of the communication method based on quantum key is similar to that in the above method embodiment, the implementation of the embodiment of the communication method based on quantum key can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0155] Figure 7FIG. 1 is a schematic diagram showing a structure of a communication device based on quantum key according to an embodiment of the present disclosure. Figure 7 As shown, the device 700 includes a first key interaction module 710 and a first communication module 720.

[0156] Among them, the first key interaction module 710 is used to: respond to a call request initiated by the first terminal, obtain the first quantum key of the first terminal, generate a communication key corresponding to the call request, encrypt the communication key using the first quantum key, and obtain a first encryption key; wherein the first terminal is within the service range of the first quantum communication satellite.

[0157] The first communication module 720 is used to: send a first encryption key to the first terminal, so that the first terminal decrypts the first encryption key using the first quantum key to obtain a communication key; receive a communication information ciphertext sent by the first terminal, wherein the communication information ciphertext is obtained by the first terminal encrypting the communication information using the communication key; send the communication information ciphertext to the second terminal, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0158] In some embodiments of the present disclosure, the second terminal is within the service range of the first quantum communication satellite, and the first communication module 720 is further used to: receive information of the second terminal sent by the first terminal, and establish a connection with the second terminal according to the information of the second terminal; the first key interaction module 710 is further used to: obtain a second quantum key of the second terminal, encrypt the communication key using the second quantum key, and obtain a second encryption key.

[0159] In some embodiments of the present disclosure, the first communication module 720 is also used to: send a second encryption key and a communication information ciphertext to a second terminal, so that the second terminal uses the second quantum key to decrypt the second encryption key to obtain the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0160] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal and the second terminal. The device 700 also includes a first quantum key distribution module 730, which is used to: perform quantum key distribution with the first ground center, and generate a first quantum key and a second quantum key shared with the first ground center; wherein the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; and the first ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0161] In some embodiments of the present disclosure, the second terminal is within the service range of the second quantum communication satellite, and the first communication module 720 is further used to: receive information of the second terminal sent by the first terminal, and determine the second quantum communication satellite according to the information of the second terminal; the first key interaction module 710 is further used to: send a quantum key relay request to the quantum communication satellite relay station, wherein the quantum key relay request is used to request to share the quantum key with the second quantum communication satellite; receive a third encryption key sent by the quantum communication satellite relay station, wherein the third encryption key is obtained by the quantum communication satellite relay station by encrypting a fourth quantum key using the third quantum key; decrypt the third encryption key using the third quantum key to obtain a fourth quantum key; and encrypt the communication key using the fourth quantum key to obtain a fourth encryption key.

[0162] In some embodiments of the present disclosure, the third quantum key is generated by key distribution between the first quantum communication satellite and the quantum communication satellite relay station, and the first quantum communication satellite and the quantum communication satellite relay station share the third quantum key; the fourth quantum key is generated by key distribution between the second quantum communication satellite and the quantum communication satellite relay station, and the second quantum communication satellite and the quantum communication satellite relay station share the fourth quantum key.

[0163] In some embodiments of the present disclosure, the first communication module 720 is also used to: send a fourth encryption key and a communication information ciphertext to a second quantum communication satellite, so that the second quantum communication satellite uses the fourth quantum key to decrypt the fourth encryption key to obtain a communication key, and then uses the second quantum key to encrypt the communication key to obtain a second encryption key, and sends the second encryption key to the second terminal.

[0164] In some embodiments of the present disclosure, the first communication module 720 is also used to: send a communication information ciphertext to a second terminal through a second quantum communication satellite, so that the second terminal uses a second quantum key to decrypt a second encryption key to obtain a communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information.

[0165] In some embodiments of the present disclosure, the first ground center provides registration and charging services for the first terminal, and the second ground center provides registration and charging services for the second terminal; the first quantum key is generated by the first quantum communication satellite and the first ground center through quantum key distribution, the first quantum communication satellite and the first ground center share the first quantum key, and the first ground center charges the first quantum key to the first terminal after the first terminal successfully registers on the network; the second quantum key is generated by the second quantum communication satellite and the second ground center through quantum key distribution, the second quantum communication satellite and the second ground center share the second quantum key, and the second ground center charges the second quantum key to the second terminal after the second terminal successfully registers on the network.

[0166] Figure 8 FIG. 1 is a schematic diagram showing a structure of a communication device based on quantum key according to an embodiment of the present disclosure. Figure 8 As shown, the device 800 includes a second communication module 810 and a second key interaction module 820.

[0167] Among them, the second communication module 810 is used to: send a call request to the first quantum communication satellite, and receive the first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, and the first encryption key is obtained by the first quantum communication satellite using the first quantum key of the first terminal to encrypt the communication key, and the communication key is the key generated by the first quantum communication satellite according to the call request. The second key interaction module 820 is used to: decrypt the first encryption key using the first quantum key to obtain the communication key. The second communication module 810 is also used to: encrypt the communication information using the communication key to obtain the communication information ciphertext, and send the communication information ciphertext to the first quantum communication satellite; send the communication information ciphertext to the second terminal through the first quantum communication satellite, so that the second terminal decrypts the communication information ciphertext using the second quantum key to obtain the communication information.

[0168] Fig. 9 FIG. 1 is a schematic diagram showing a structure of a communication device based on quantum key according to an embodiment of the present disclosure. Fig. 9 As shown, the device 900 includes a third communication module 910 and a third key interaction module 920 .

[0169] Among them, the third communication module 910 is used to: receive the communication information ciphertext sent by the first terminal through the first quantum communication satellite, the communication information ciphertext is obtained by encrypting the communication information using the communication key, and the communication key is generated by the first quantum communication satellite in response to the call request initiated by the first terminal; receive the second encryption key, the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using the second quantum key of the second terminal. The third key interaction module 920 is used to: decrypt the second encryption key using the second quantum key to obtain the communication key. The third communication module 910 is also used to: decrypt the communication information ciphertext using the communication key to obtain the communication information.

[0170] Since the principle of solving the problem in the embodiment of the communication device based on quantum key is similar to that in the above method embodiment, the implementation of the embodiment of the communication device based on quantum key can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0171] Fig.10 FIG. 1 shows a structural block diagram of an electronic device in an embodiment of the present disclosure. It should be noted that: Fig.10The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0172] like Fig.10 As shown, the electronic device 1000 includes a central processing unit (CPU) 1001, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 1002 or a program loaded from a storage part 1008 into a random access memory (RAM) 1003. In the RAM 1003, various programs and data required for the operation of the electronic device 1000 are also stored. The CPU 1001, the ROM 1002, and the RAM 1003 are connected to each other via a bus 1004. An input / output (I / O) interface 1005 is also connected to the bus 1004.

[0173] The following components are connected to the I / O interface 1005: an input section 1006 including a keyboard, a mouse, etc.; an output section 1007 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 1008 including a hard disk, etc.; and a communication section 1009 including a network interface card such as a LAN card, a modem, etc. The communication section 1009 performs communication processing via a network such as the Internet. A drive 1010 is also connected to the I / O interface 1005 as needed. A removable medium 1011, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1010 as needed, so that a computer program read therefrom is installed into the storage section 1008 as needed.

[0174] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through the communication part 1009, and / or installed from a removable medium 1011. When the computer program is executed by the central processing unit (CPU) 1001, the above-mentioned functions defined in the system of the present disclosure are executed.

[0175] It should be noted that the computer-readable medium shown in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, terminal device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, a terminal device or a device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, a terminal device or a device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0176] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0177] The modules involved in the embodiments described in the present disclosure may be implemented by software or by hardware. The modules described may also be provided in a processor, for example, may be described as: a processor includes a first key interaction module and a first communication module. Among them, the names of these modules do not constitute a limitation on the module itself in some cases, for example, the first key interaction module may also be described as "a module that obtains the first quantum key of the first terminal in response to a call request initiated by the first terminal, generates a communication key corresponding to the call request, encrypts the communication key using the first quantum key, and obtains a first encryption key".

[0178] As another aspect, the present disclosure further provides a computer-readable storage medium, which may be included in the electronic device described in the above embodiments; or may exist independently without being assembled into the electronic device. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed by an electronic device, the electronic device implements the method described in the following embodiments. For example, the electronic device may implement the following Figure 3 The steps shown.

[0179] According to one aspect of the present disclosure, a computer program product or a computer program is provided, the computer program product or the computer program including computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided in various optional implementations of the above-mentioned embodiments.

[0180] It should be understood that any number of elements in the drawings of the present disclosure is for illustration rather than limitation, and any naming is only for distinction rather than having any limiting meaning.

[0181] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0182] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A communication method based on quantum key, characterized in that: Executed by a first quantum communication satellite, the method comprises: In response to a call request initiated by a first terminal, a first quantum key of the first terminal is obtained, a communication key corresponding to the call request is generated, and the communication key is encrypting by using the first quantum key to obtain a first encryption key; the first terminal is within the service range of the first quantum communication satellite; Sending the first encryption key to the first terminal, so that the first terminal decrypts the first encryption key using the first quantum key to obtain the communication key; receiving a communication information ciphertext sent by the first terminal; the communication information ciphertext is obtained by the first terminal encrypting the communication information using the communication key; A second encryption key and the communication information ciphertext are sent to the second terminal or sent to the second terminal via a second quantum communication satellite, so that the second terminal decrypts the second encryption key using the second quantum key of the second terminal to obtain the communication key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information; the second encryption key is obtained by encrypting the communication key using the second quantum key.

2. The method according to claim 1, characterized in that The second terminal is within the service range of the first quantum communication satellite, and the method further includes: receiving information of the second terminal sent by the first terminal, and establishing a connection with the second terminal according to the information of the second terminal; The second quantum key of the second terminal is obtained, and the communication key is encrypting by using the second quantum key to obtain a second encryption key.

3. The method according to claim 1 or 2, characterized in that: The first ground center provides registration and charging services for the first terminal and the second terminal; the method further includes: Performing quantum key distribution with the first ground center to generate the first quantum key and the second quantum key shared with the first ground center; Among them, the first ground center injects the first quantum key into the first terminal after the first terminal successfully registers on the network; the first ground center injects the second quantum key into the second terminal after the second terminal successfully registers on the network.

4. The method according to claim 1, characterized in that The second terminal is within the service range of the second quantum communication satellite, and the method further includes: receiving information of the second terminal sent by the first terminal, and determining the second quantum communication satellite according to the information of the second terminal; Sending a quantum key relay request to a quantum communication satellite relay station; the quantum key relay request is used to request to share a quantum key with the second quantum communication satellite; receiving a third encryption key sent by the quantum communication satellite relay station; the third encryption key is obtained by the quantum communication satellite relay station by encrypting a fourth quantum key using the third quantum key; the third quantum key is a quantum key shared by the first quantum communication satellite and the quantum communication satellite relay station, and the fourth quantum key is a quantum key shared by the second quantum communication satellite and the quantum communication satellite relay station; decrypting the third encryption key using the third quantum key to obtain the fourth quantum key; Encrypting the communication key using the fourth quantum key to obtain a fourth encryption key; The fourth encryption key and the communication information ciphertext are sent to the second quantum communication satellite, so that the second quantum communication satellite uses the fourth quantum key to decrypt the fourth encryption key to obtain the communication key, and then uses the second quantum key to encrypt the communication key to obtain the second encryption key.

5. The method according to claim 4, characterized in that The third quantum key is generated by key distribution between the first quantum communication satellite and the quantum communication satellite relay station; The fourth quantum key is generated by key distribution between the second quantum communication satellite and the quantum communication satellite relay station.

6. The method according to any one of claims 1, 4 and 5, characterized in that: The first ground center provides registration and charging services for the first terminal, and the second ground center provides registration and charging services for the second terminal; The first quantum key is generated by quantum key distribution between the first quantum communication satellite and the first ground center, the first quantum communication satellite and the first ground center share the first quantum key, and the first ground center injects the first quantum key into the first terminal after the first terminal successfully registers on the network; The second quantum key is generated by quantum key distribution between the second quantum communication satellite and the second ground center. The second quantum communication satellite and the second ground center share the second quantum key. The second ground center injects the second quantum key into the second terminal after the second terminal successfully registers on the network.

7. A communication method based on quantum key, characterized in that: The method is performed by a first terminal and includes: sending a call request to a first quantum communication satellite, and receiving a first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, the first encryption key is obtained by the first quantum communication satellite encrypting a communication key using the first quantum key of the first terminal, and the communication key is a key generated by the first quantum communication satellite according to the call request; Decrypting the first encryption key using the first quantum key to obtain the communication key; encrypting the communication information using the communication key to obtain a ciphertext of the communication information, and sending the ciphertext of the communication information to the first quantum communication satellite; The second encryption key and the communication information ciphertext are sent to the second terminal through the first quantum communication satellite, so that the second terminal decrypts the second encryption key using the second quantum key of the second terminal to obtain the communication key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information; the second encryption key is obtained by encrypting the communication key using the second quantum key.

8. A communication method based on quantum key, characterized in that: The method is performed by the second terminal, and includes: receiving a communication information ciphertext sent by a first terminal through a first quantum communication satellite; the communication information ciphertext is generated according to the following process: the first terminal initiates a call request to the first quantum communication satellite, the first quantum communication satellite processes the call request, obtains a first quantum key, generates a communication key corresponding to the call request, encrypts the communication key by using the first quantum key, obtains a first encryption key, and sends the first encryption key to the first terminal; after receiving the first encryption key, the first terminal uses the first quantum key to decrypt and obtain the communication key; the first terminal uses the communication key to encrypt the communication information and obtain the communication information ciphertext; receiving a second encryption key; the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using the second quantum key of the second terminal; The second encryption key is decrypted using the second quantum key to obtain the communication key, and then the communication information ciphertext is decrypted using the communication key to obtain the communication information.

9. A communication device based on quantum key, characterized in that: The device comprises: A first key interaction module is used to respond to a call request initiated by a first terminal, obtain a first quantum key of the first terminal, generate a communication key corresponding to the call request, and encrypt the communication key using the first quantum key to obtain a first encryption key; the first terminal is within the service range of the first quantum communication satellite; The first communication module is used to send the first encryption key to the first terminal, so that the first terminal decrypts the first encryption key using the first quantum key to obtain the communication key; receive the communication information ciphertext sent by the first terminal, where the communication information ciphertext is obtained by the first terminal encrypting the communication information using the communication key; send the second encryption key and the communication information ciphertext to the second terminal or send the second encryption key and the communication information ciphertext to the second terminal via the second quantum communication satellite, so that the second terminal decrypts the second encryption key using the second quantum key of the second terminal to obtain the communication key, and then decrypts the communication information ciphertext using the communication key to obtain the communication information; the second encryption key is obtained by encrypting the communication key using the second quantum key.

10. A communication device based on quantum key, characterized in that: The device comprises: The second communication module is used to send a call request to the first quantum communication satellite, and receive a first encryption key returned by the first quantum communication satellite in response to the call request; the first terminal is within the service range of the first quantum communication satellite, the first encryption key is obtained by the first quantum communication satellite encrypting the communication key using the first quantum key of the first terminal, and the communication key is a key generated by the first quantum communication satellite according to the call request; A second key interaction module, configured to decrypt the first encryption key using the first quantum key to obtain the communication key; The second communication module is further used to encrypt the communication information using the communication key to obtain the communication information ciphertext, and send the communication information ciphertext to the first quantum communication satellite; send the second encryption key and the communication information ciphertext to the second terminal through the first quantum communication satellite, so that the second terminal uses the second quantum key of the second terminal to decrypt the second encryption key to obtain the communication key, and then uses the communication key to decrypt the communication information ciphertext to obtain the communication information; the second encryption key is obtained by encrypting the communication key using the second quantum key.

11. A communication device based on quantum key, characterized in that: The device comprises: A third communication module is used to receive a communication information ciphertext sent by the first terminal through the first quantum communication satellite; receive a second encryption key, where the second encryption key is sent by the first quantum communication satellite or the second quantum communication satellite, and the second encryption key is obtained by encrypting the communication key using the second quantum key of the second terminal; A third key interaction module, configured to decrypt the second encryption key using the second quantum key to obtain the communication key; The third communication module is further used to decrypt the communication information ciphertext using the communication key to obtain the communication information; The communication information ciphertext is generated according to the following process: the first terminal initiates a call request to the first quantum communication satellite, the first quantum communication satellite processes the call request, obtains a first quantum key, generates a communication key corresponding to the call request, encrypts the communication key using the first quantum key, obtains a first encryption key, and sends the first encryption key to the first terminal; after receiving the first encryption key, the first terminal uses the first quantum key to decrypt and obtain the communication key; the first terminal uses the communication key to encrypt the communication information and obtain the communication information ciphertext.

12. An electronic device, characterized in that: include: one or more processors; A storage device configured to store one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the quantum key-based communication method as described in any one of claims 1 to 6, or implement the quantum key-based communication method as described in claim 7, or implement the quantum key-based communication method as described in claim 8.

13. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, it implements the quantum key-based communication method as described in any one of claims 1 to 6, or implements the quantum key-based communication method as described in claim 7, or implements the quantum key-based communication method as described in claim 8.

14. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements the quantum key-based communication method according to any one of claims 1 to 6, or the quantum key-based communication method according to claim 7, or the quantum key-based communication method according to claim 8.

Images