Digital key security management method and system based on quantum encryption technology

Abstract

The present invention provides a digital key security management method and system based on quantum encryption technology, wherein the method includes: generating quantum random numbers using a single photon source and a quantum entanglement source; performing quantum key distribution based on quantum random numbers to obtain a shared key; generating an initial digital key using quantum random numbers, and generating a final digital key in combination with user information; encrypting the final digital key using the quantum key distribution shared key, and generating a quantum authentication token; converting the encrypted digital key into a quantum state of a multi-particle entangled state, distributing the divided digital key for storage and periodically refreshing. The present invention adopts quantum encryption technology to effectively improve the security of digital keys and solve the problem that traditional digital keys are easily cracked. Through quantum state storage and distributed management, the security and reliability of digital keys are further enhanced, and it is suitable for digital key application scenarios that require high security.

Description

Technical Field

[0001] The present invention relates to the field of quantum encryption, and in particular to a digital key security management method and system based on quantum encryption technology. Background Art

[0002] With the rapid development of information technology, digital keys are widely used in various application scenarios. Traditional digital key management methods usually use cryptographic algorithms based on cryptography to protect the security of keys. These methods include the use of symmetric encryption, asymmetric encryption, and digital signatures to generate, store, and transmit digital keys. However, with the advancement of quantum computing technology, traditional cryptographic methods face potential security threats. Quantum computers have the potential to crack the currently widely used public key encryption algorithms in polynomial time, which poses a serious challenge to the digital key management systems that rely on these algorithms.

[0003] Although some studies have attempted to apply quantum encryption technology to digital key management, these methods often focus on a single security level, such as using only quantum key distribution to protect the communication process, while ignoring the quantum security of other key links such as key generation, storage and authentication. This one-sided application cannot give full play to the advantages of quantum encryption technology and it is difficult to build a comprehensive quantum security protection system. Summary of the invention

[0004] The main purpose of the present invention is to solve the technical problem that the existing use of quantum key distribution to protect the communication process ignores the quantum security of other key links such as key generation, storage and authentication.

[0005] A first aspect of the present invention provides a digital key security management method based on quantum encryption technology, the digital key security management method based on quantum encryption technology comprising:

[0006] Measuring the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and performing an XOR operation and a debiasing process on the initial random bit sequence to obtain a quantum random number;

[0007] Selecting a quantum state encoding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state encoding parameter, and measuring, base matching, error correction and privacy amplification processing the transmitted quantum state to obtain a quantum key distribution shared key;

[0008] Using the quantum random number as a seed to generate an initial digital key, the initial digital key is mixed with a timestamp, a unique device identifier, and user identity information, and then hashed to obtain a final digital key;

[0009] Encrypting the final digital key using the quantum key distribution shared key, and generating a quantum authentication token based on the user identity information, access rights, and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication;

[0010] The encrypted digital key is converted into a quantum state of a multi-particle entangled state, the converted quantum state is divided, and the division results are stored in multiple nodes of a distributed quantum storage network, and the stored quantum state is periodically refreshed.

[0011] Optionally, in a first implementation of the first aspect of the present invention, the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source are measured to obtain an initial random bit sequence, and the initial random bit sequence is subjected to an XOR operation and debiasing processing to obtain a quantum random number, comprising:

[0012] The single photon emitted by the single photon source is subjected to beam splitting processing, and the photon path is recorded by using a single photon detector to obtain a recording result;

[0013] Converting the recorded result into an initial binary sequence, and performing Bell state measurement on the entangled photon pair generated by the quantum entanglement source to obtain a supplementary random bit sequence;

[0014] Performing a bit-level XOR operation on the initial binary sequence and the supplementary random bit sequence to obtain a mixed random sequence;

[0015] A preset debiasing algorithm is applied to the mixed random sequence to remove statistical deviations in the mixed random sequence to obtain quantum random numbers.

[0016] Optionally, in a second implementation of the first aspect of the present invention, selecting a quantum state encoding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state encoding parameter, and measuring, base matching, error correction, and privacy amplification processing the transmitted quantum state to obtain a quantum key distribution shared key includes:

[0017] Selecting polarization basis information and coding state of photons according to the quantum random number, and performing quantum state coding on the photons according to the polarization basis information and coding state to obtain a quantum state sequence;

[0018] The quantum state sequence is transmitted to a receiver by using a quantum channel, and a random basis measurement is performed on the received quantum state at the receiver to obtain an original measurement result;

[0019] The coding basis information of the sender and the measurement basis information of the receiver are exchanged through a classical communication channel, and the bits measured using the same basis are compared and selected to obtain an initial shared key;

[0020] The initial shared key is subjected to bit error rate estimation and error correction processing, low-density parity check code is used for information coordination to obtain an intermediate key, and a universal hash function is applied to the intermediate key to perform privacy amplification processing to obtain a quantum key distribution shared key.

[0021] Optionally, in a third implementation of the first aspect of the present invention, the using the quantum random number as a seed to generate an initial digital key, mixing the initial digital key with a timestamp, a device unique identifier, and user identity information, and then performing hashing to obtain a final digital key includes:

[0022] Processing the quantum random number in blocks to obtain a plurality of subsequences of equal length, and applying a different pseudo-random function to each subsequence to obtain a set of pseudo-random number sequences;

[0023] Performing a bit-level XOR operation on the pseudo-random number sequence and the timestamp to obtain a time-sensitive intermediate sequence, and performing a cyclic shift operation on the intermediate sequence and the device unique identifier to obtain a device binding sequence;

[0024] A modular addition operation is performed on the device binding sequence and the hash value of the user identity information to obtain an initial digital key associated with the user, and the SHA-3 cryptographic hash function is applied to the initial digital key to perform multiple rounds of iterative processing to obtain a final digital key.

[0025] Optionally, in a fourth implementation of the first aspect of the present invention, the step of encrypting the final digital key using the quantum key distribution shared key, and generating a quantum authentication token based on the user identity information, access rights, and a hash value of the encrypted digital key includes:

[0026] Performing key expansion processing on the quantum key distribution shared key, and generating corresponding encryption keys and authentication keys using a preset key derivation function;

[0027] Using the encryption key to perform AES-256 encryption on the final digital key to obtain the encrypted digital key, and calculating the SHA-256 hash value of the encrypted digital key;

[0028] Concatenate the user identity information, access permission information and the hash value of the encrypted digital key to obtain a concatenation result, and perform hash processing on the concatenation result to obtain an authentication information summary;

[0029] The authentication information summary is quantum signed using the authentication key to obtain a quantum signature result, and the authentication information summary, the quantum signature result and the public key information used for verification are encoded into a preset quantum entangled state to obtain a quantum authentication token.

[0030] Optionally, in a fifth implementation of the first aspect of the present invention, after encrypting the final digital key using the quantum key distribution shared key and generating a quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key, it also includes:

[0031] Perform quantum state encoding on the biometric sample provided by the user to generate a real-time quantum fingerprint, and perform quantum state discrimination between the real-time quantum fingerprint and the pre-stored quantum fingerprint template to obtain a similarity score;

[0032] Determine whether the user identity is verified according to the similarity score, and extract the corresponding quantum authentication token for the user who has passed the identity authentication;

[0033] Use quantum gate operations to decode the extracted quantum authentication token and recover the authentication information summary, quantum signature result and public key information;

[0034] Through the quantum secure multi-party computing protocol, multiple authorized nodes jointly verify the validity of the quantum signature result and the user's access rights, obtain the authorization decision result, and encode the authorization decision result into a quantum state and store it in the quantum tamper-proof log.

[0035] Optionally, in a sixth implementation of the first aspect of the present invention, converting the encrypted digital key into a quantum state of a multi-particle entangled state, dividing the converted quantum state, and storing the division results in multiple nodes of a distributed quantum storage network, and periodically refreshing the stored quantum state includes:

[0036] Generate a multi-particle maximum entangled state using a quantum entanglement source, encode the encrypted digital key into the phase information of the multi-particle entangled state, and obtain a multi-particle entangled state containing key information;

[0037] Applying a quantum secret sharing protocol to the multi-particle entangled state to split it into a plurality of quantum shares, and selecting a plurality of nodes with quantum storage capabilities in a distributed quantum storage network, and transmitting and storing the split quantum shares in the nodes respectively;

[0038] Periodically perform quantum state reconstruction measurement on the quantum shares in each storage node, evaluate the attenuation degree of quantum coherence, and obtain reconstruction measurement results;

[0039] According to the reconstructed measurement results, quantum error correction codes are used to dynamically correct the severely attenuated quantum shares to restore the fidelity of the quantum state.

[0040] At preset time intervals, global entanglement refresh operations are performed on the quantum shares of all storage nodes simultaneously.

[0041] A second aspect of the present invention provides a digital key security management system based on quantum encryption technology, the digital key security management system based on quantum encryption technology comprising:

[0042] A random number generation module is used to measure the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and perform an XOR operation and debiasing process on the initial random bit sequence to obtain a quantum random number;

[0043] A key generation module is used to select a quantum state encoding parameter according to the quantum random number, prepare and transmit the quantum state according to the quantum state encoding parameter, and measure, base compare, correct errors and amplify privacy on the transmitted quantum state to obtain a quantum key distribution shared key;

[0044] A digital key generation module, used to generate an initial digital key using the quantum random number as a seed, and to mix the initial digital key with a timestamp, a device unique identifier, and user identity information and perform hashing to obtain a final digital key;

[0045] A token generation module, used to encrypt the final digital key using the quantum key distribution shared key, and generate a quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication;

[0046] The management module is used to convert the encrypted digital key into a quantum state of a multi-particle entangled state, divide the converted quantum state, store the division results in multiple nodes of a distributed quantum storage network, and periodically refresh the stored quantum state.

[0047] The above-mentioned digital key security management method and system based on quantum encryption technology generates quantum random numbers by using a single photon source and a quantum entanglement source; performs quantum key distribution based on quantum random numbers to obtain a shared key; generates an initial digital key using quantum random numbers, and generates a final digital key in combination with user information; uses quantum key distribution to encrypt the final digital key and generate a quantum authentication token; converts the encrypted digital key into a quantum state of a multi-particle entangled state, distributes it after segmentation, and refreshes it periodically. The present invention adopts quantum encryption technology to effectively improve the security of digital keys and solve the problem that traditional digital keys are easily cracked. Through quantum state storage and distributed management, the security and reliability of digital keys are further enhanced, which is suitable for digital key application scenarios that require high security.

[0048] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description, claims and drawings.

[0049] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is a schematic diagram of a first embodiment of a digital key security management method based on quantum encryption technology in an embodiment of the present invention;

[0051] Figure 2 This is a schematic diagram of an embodiment of a digital key security management system based on quantum encryption technology in an embodiment of the present invention. DETAILED DESCRIPTION

[0052] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0053] The terms "including" and "having" and any variations thereof mentioned in the embodiments of the present invention are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device end including a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or device ends.

[0054] To facilitate understanding of this embodiment, a digital key security management method based on quantum encryption technology disclosed in an embodiment of the present invention is first described in detail. Figure 1 As shown, the method comprises the following steps:

[0055] 101. Measuring the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and performing an XOR operation and a debiasing process on the initial random bit sequence to obtain a quantum random number;

[0056] In one embodiment of the present invention, the photons emitted by the single-photon source and the entangled photon pairs generated by the quantum entanglement source are measured to obtain an initial random bit sequence, and the initial random bit sequence is subjected to an XOR operation and debiasing processing to obtain a quantum random number, including: beam splitting processing of a single photon emitted by the single-photon source, and recording the photon path using a single-photon detector to obtain a recording result; converting the recording result into an initial binary sequence, and performing Bell state measurement on the entangled photon pairs generated by the quantum entanglement source to obtain a supplementary random bit sequence; performing a bit-level XOR operation on the initial binary sequence and the supplementary random bit sequence to obtain a mixed random sequence; applying a preset debiasing algorithm to the mixed random sequence to eliminate statistical deviations in the mixed random sequence to obtain a quantum random number.

[0057] Specifically, we first need to set up two quantum state generation devices: a single photon source and a quantum entanglement source. The single photon source generates single photons by exciting quantum systems such as single atoms or quantum dots. These photons are introduced into a 50 / 50 beam splitter, which divides the incident photons into two possible paths with equal probability. A highly sensitive single photon detector is installed at the end of each path to capture and record the arrival of the photons. When a photon is detected, the detector of the corresponding path generates an electrical signal. These signals are converted into binary numbers: for example, the detection of a photon in the upper path is recorded as "0", and the detection of a photon in the lower path is recorded as "1". By repeating this process continuously, the system generates a string of initial binary sequences. At the same time, a quantum entanglement source (such as a parametric down-conversion crystal) generates pairs of entangled photons. These entangled photon pairs are sent to a Bell state measurement device, which includes a polarization beam splitter and four single photon detectors. By measuring the quantum state of the entangled photon pairs, the system obtains four possible Bell state results, each corresponding to a two-bit binary number. The binary sequence generated by this process serves as a complementary random bit sequence. Next, the system performs a bit-level XOR operation on the initial binary sequence generated by the single photon source and the complementary random bit sequence generated by the quantum entanglement source. The specific operation is to perform an XOR operation on the bits at the same position in the two sequences (0⊕0=0, 0⊕1=1, 1⊕0=1, 1⊕1=0). This step combines the randomness of two different quantum processes to produce a mixed random sequence, which further enhances the randomness. Although the random sequence generated by the quantum process should be unbiased in theory, due to the imperfections of the experimental equipment (such as differences in detector efficiency), the generated sequence may have slight statistical deviations. In order to eliminate these potential deviations, a preset debiasing algorithm is applied to the mixed random sequence. A commonly used debiasing method is the Von Neumann algorithm: divide the random sequence into a group of two bits, if it is "01", output "0"; if it is "10", output "1"; if it is "00" or "11", discard this group. Although this process will reduce the length of the sequence, it can effectively remove the statistical deviation in the sequence. In practical applications, the debiasing algorithm may need to be applied multiple times in iterations until the sequence passes a series of statistical tests to ensure that its randomness meets the requirements. These statistical tests include but are not limited to runs test, sequence correlation test, entropy estimation, etc. Sequences that pass these tests are considered to have high-quality randomness and can be used as true quantum random numbers. Finally, the sequence that has been debiased is the final quantum random number.

[0058] 102. Selecting a quantum state encoding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state encoding parameter, and performing measurement, basis comparison, error correction, and privacy amplification processing on the transmitted quantum state to obtain a quantum key distribution shared key;

[0059] In one embodiment of the present invention, the step of selecting a quantum state coding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state coding parameter, and measuring, base matching, correcting errors, and amplifying privacy on the transmitted quantum state to obtain a quantum key distribution shared key includes: selecting polarization basis information and coding state of a photon according to the quantum random number, and performing quantum state coding on the photon according to the polarization basis information and coding state to obtain a quantum state sequence; transmitting the quantum state sequence to a receiver by using a quantum channel, and performing random basis measurement on the received quantum state at the receiver to obtain an original measurement result; exchanging the coding basis information of the sender and the measurement basis information of the receiver through a classical communication channel, and comparing and screening bits measured using the same basis to obtain an initial shared key; performing bit error rate estimation and error correction on the initial shared key, performing information coordination using a low-density parity check code to obtain an intermediate key, and applying a universal hash function to the intermediate key to perform privacy amplification to obtain a quantum key distribution shared key.

[0060] Specifically, the aforementioned generated quantum random numbers are first used to select the polarization basis information and coding state of the photon. Specifically, the quantum random number sequence is divided into two groups, one for selecting the polarization basis and the other for selecting the coding state. For the selection of the polarization basis, the parity of the quantum random number can be used to determine: if the random bit is 0, the linear polarization basis (horizontal and vertical polarization) is selected, and if it is 1, the diagonal polarization basis (+45° and -45° polarization) is selected. Similarly, for the selection of the coding state, the parity of the random bit can also be used: in the linear basis, 0 represents horizontal polarization and 1 represents vertical polarization; in the diagonal basis, 0 represents +45° polarization and 1 represents -45° polarization. According to the selected polarization basis information and coding state, the sender uses a single photon source to generate a single photon, and modulates the photon through an optical element such as an electro-optical modulator or a wave plate so that its polarization state matches the selected quantum state. This process is repeated until a sufficiently long quantum state sequence is generated. This quantum state sequence contains the encoded random bit information, but due to the non-cloning of quantum states, any attempt to intercept and measure these photons will inevitably introduce perturbations and thus be detected. Next, the sender transmits this quantum state sequence to the receiver through a quantum channel (such as optical fiber or free space). The quantum channel needs to have sufficiently low loss and noise to ensure that most photons can safely reach the receiving end. At the receiving end, the receiver uses its own quantum random number generator to randomly select a measurement basis. For each received photon, the receiver either measures it in a linear basis or in a diagonal basis. This random selection process ensures that even if there is an eavesdropper, it is impossible to know exactly which measurement basis the receiver used. After the measurement is completed, the sender and receiver exchange their respective basis information through a public classical communication channel (such as the Internet). This process does not leak the actual bit value because they only disclose the choice of basis, not the measurement result. Then, the two parties compare their basis choices and only retain those bits whose encoding basis of the sender and the measurement basis of the receiver are the same. These bits constitute the initial shared key. In order to detect whether there is eavesdropping, both parties randomly select a part of the initial shared key for public comparison. If the error rate in these bits exceeds the predetermined threshold, it is considered that eavesdropping exists and the key distribution process will be abandoned. If the error rate is within an acceptable range, the next step of the error correction process is entered. The error correction process uses low-density parity check code (LDPC) for information coordination. The sender divides the initial shared key into multiple data blocks, calculates parity information for each data block, and sends this check information to the receiver through the classical channel. The receiver uses this check information to correct possible errors in its own key. This process requires multiple rounds of iterations until the keys of both parties are exactly the same. Through this step, both parties obtain the same intermediate key. Finally, in order to eliminate some information that may be leaked to the eavesdropper in the previous steps, it is necessary to perform privacy amplification on the intermediate key.This step uses a general-purpose hash function, such as HMAC (Hash-based Message Authentication Code). Specifically, a secure hash function (such as SHA-256) is chosen and the remaining intermediate key is hashed using part of the intermediate key as the key for the hash function. This process compresses the length of the key but significantly reduces the information that an eavesdropper could potentially obtain.

[0061] 103. Generate an initial digital key using the quantum random number as a seed, mix the initial digital key with a timestamp, a unique device identifier, and user identity information, and perform hashing to obtain a final digital key;

[0062] In one embodiment of the present invention, the method of using the quantum random number as a seed to generate an initial digital key, mixing the initial digital key with a timestamp, a device unique identifier and user identity information and performing hashing to obtain a final digital key includes: performing block processing on the quantum random number to obtain multiple equal-length subsequences, and applying a different pseudo-random function to each subsequence to obtain a set of pseudo-random number sequences; performing a bit-level XOR operation on the pseudo-random number sequence and a timestamp to obtain a time-sensitive intermediate sequence, and performing a cyclic shift operation on the intermediate sequence and a device unique identifier to obtain a device binding sequence; performing a modular addition operation on the device binding sequence and a hash value of the user identity information to obtain an initial digital key associated with the user, and applying the SHA-3 cryptographic hash function to the initial digital key for multiple rounds of iterative processing to obtain the final digital key.

[0063] Specifically, first, the quantum random number generated above needs to be used as a seed to generate the initial digital key. This process starts with block processing of the quantum random number, dividing it into multiple subsequences of equal length. The length of the block can be determined according to the system security requirements and performance requirements, and 256 bits or 512 bits are usually selected as the length of a subsequence. For each subsequence, the system will apply different pseudo-random functions for processing. The pseudo-random function here can select cryptographically secure pseudo-random number generators such as AES-CTR mode and ChaCha20. Each subsequence is used as the input of the corresponding pseudo-random function to generate a pseudo-random number output. In this way, by applying a series of different pseudo-random functions, the system obtains a set of pseudo-random number sequences, which inherit the high unpredictability of quantum random numbers and have sufficient length for subsequent processing. Next, the system obtains the current precise timestamp. This timestamp should have a sufficiently high accuracy, such as using a nanosecond UNIX timestamp. Then, the previously generated pseudo-random number sequence is XORed with this timestamp at the bit level. The specific operation is to convert the timestamp into binary form. If the length of the timestamp is less than the length of the pseudo-random number sequence, the timestamp is repeated until the length matches. Then the aligned bits are XORed. The purpose of this step is to incorporate time information into the random sequence so that the generated key is associated with a specific time point, which increases the time sensitivity of the key and helps prevent replay attacks. After obtaining the time-sensitive intermediate sequence, the system will further associate it with the device unique identifier. The device unique identifier can be a hardware serial number, a network MAC address, or a device ID generated specifically for this purpose. The system first converts the device unique identifier into a fixed-length binary sequence, and then uses the value of this sequence to determine the number of bits to cyclically shift the intermediate sequence. For example, each 8 bits of the device identifier can be used as a byte, and the value of this byte can be used as the number of bits to shift, and the intermediate sequence can be cyclically shifted to the left. If the device identifier is short, its value can be reused for multiple shift operations. This step encodes the device information into the sequence, so that the generated key is bound to a specific device, increasing the security of the system. After incorporating time and device information into the sequence, the next step is to introduce user identity information. The system first hashes the user identity information (such as user ID, user name, etc.), and a secure hash algorithm such as SHA-256 can be used. Then, the obtained hash value is modulo-added with the previous device binding sequence. Modulo-addition refers to addition under a fixed modulus, usually a power of 2 (such as 2^256) is selected as the modulus. This operation ensures that the length of the calculation result remains unchanged while effectively mixing the user identity information into the sequence. The sequence obtained after this processing is called the user-associated initial digital key, which combines quantum randomness, time information, device characteristics, and user identity.Finally, to further enhance security and ensure the cryptographic strength of the final key, the system applies multiple rounds of iterative processing to the initial digital key using the SHA-3 cryptographic hash function. SHA-3 is the latest secure hash algorithm standard with good collision resistance and output uniformity. The specific operation of multiple rounds of iteration is to use the initial digital key as the input of SHA-3, and the output is used as the input for the next round of hashing again, and this is repeated many times. The number of iterations can be set according to security requirements, usually between 1,000 and 10,000 times. This process not only increases the difficulty of cracking, but also ensures that even if there are certain weaknesses in the initial input, the final output will show good randomness and unpredictability.

[0064] 104. Encrypt the final digital key using the quantum key distribution shared key, and generate a quantum authentication token based on the user identity information, access rights, and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication;

[0065] In one embodiment of the present invention, the method of encrypting the final digital key using the quantum key distribution shared key and generating a quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key includes: performing key expansion processing on the quantum key distribution shared key, and generating corresponding encryption keys and authentication keys using a preset key derivation function; performing AES-256 encryption on the final digital key using the encryption key to obtain an encrypted digital key, and calculating the SHA-256 hash value of the encrypted digital key; concatenating the user identity information, access rights information and the hash value of the encrypted digital key to obtain a concatenation result, and performing hash processing on the concatenation result to obtain an authentication information summary; performing quantum signing on the authentication information summary using the authentication key to obtain a quantum signature result, and encoding the authentication information summary, the quantum signature result and the public key information used for verification into a preset quantum entangled state to obtain a quantum authentication token.

[0066] Specifically, the shared key obtained through quantum key distribution mentioned above needs to be used first. Since this shared key is usually of limited length, the first step is to perform key expansion processing on it. This process uses a preset key derivation function, such as HKDF (HMAC-based Key Derivation Function). HKDF uses the cryptographically secure pseudo-random function HMAC to take the quantum key distribution shared key as input to generate key material of the required length. In this process, HKDF introduces additional context information and salt values ​​to increase the security of the derived key. Through this step, the system generates two keys: an encryption key for encryption and an authentication key for authentication. Next, the system uses the generated encryption key to encrypt the final digital key. The AES-256 algorithm is used here, which is a widely used symmetric encryption algorithm with high security and efficiency. During the encryption process, the system divides the final digital key into 128-bit data blocks and then encrypts each data block using the encryption key. AES-256 uses 14 rounds of complex transformations, including byte substitution, row shift, column confusion, and round key addition, to ensure the security of the encryption result. After the encryption is completed, the system obtains the encrypted digital key. To further enhance security, the system calculates the SHA-256 hash value of the encrypted digital key. SHA-256 is a cryptographic hash function that converts an input of any length into an output of a fixed length (256 bits). This hash value serves as a unique identifier for the encrypted digital key and is used in the subsequent verification process. Next, the system concatenates the user identity information and access rights information with the hash value of the encrypted digital key just calculated. User identity information includes user ID, user name, etc., while access rights information defines the range of operations that the user can perform. The concatenation operation combines this information into a long string. The concatenation result is then hashed again using SHA-256 or a similar hash function to obtain a fixed-length authentication information summary. This summary represents the combined information of the user's identity, access rights, and the encrypted key. The system then uses the previously generated authentication key to quantum sign the authentication information summary. Quantum signatures use the principles of quantum mechanics to provide higher security than traditional digital signatures. A commonly used quantum signature method is the Lamport signature, which is based on one-way functions and the non-cloning property of quantum states. In this process, the system first converts the authentication information summary into a quantum state, and then uses the authentication key to generate a series of quantum states as a signature. This quantum signature result is unforgeable and difficult to crack even with a quantum computer. Finally, the system encodes the authentication information summary, quantum signature result, and public key information used for verification into a preset quantum entangled state. This step uses the characteristics of quantum entanglement to entangle multiple quantum bits together to form a complex quantum state.The encoding process can use quantum state superposition and entanglement operations to map classical information to the phase or amplitude of the quantum state. This encoding method not only protects the confidentiality of information, but also utilizes the non-locality of quantum entanglement, so that any attempt to measure or interfere with this quantum state will be immediately detected.

[0067] Furthermore, after the final digital key is encrypted using the quantum key distribution shared key, and a quantum authentication token is generated based on the user identity information, access rights and the hash value of the encrypted digital key, the method further includes: quantum state encoding of the biometric sample provided by the user to generate a real-time quantum fingerprint, and quantum state discrimination of the real-time quantum fingerprint with a pre-stored quantum fingerprint template to obtain a similarity score; judging whether the user identity has been verified according to the similarity score, and extracting the corresponding quantum authentication token for the user who has passed the identity authentication; decoding the extracted quantum authentication token using quantum gate operations to restore the authentication information summary, quantum signature result and public key information; through the quantum secure multi-party computing protocol, multiple authorization nodes jointly verify the validity of the quantum signature result and the user's access rights to obtain an authorization decision result, and encoding the authorization decision result into a quantum state and storing it in a quantum anti-tampering log.

[0068] Specifically, the biometric samples provided by the user need to be processed first. When the user provides biometric features (such as fingerprints, irises, or facial features), the system uses quantum state encoding technology to convert these features into quantum states. This process involves mapping the digital representation of the biometric features to the state of the quantum bit, which can use methods such as amplitude encoding or phase encoding. For example, for fingerprint features, the system may extract the position and direction information of the key points and then encode this information into the superposition state of the quantum bit. The quantum state generated in this way is called a real-time quantum fingerprint, which contains the complete information of the user's biometric features, but in quantum form. Next, the system needs to compare this real-time generated quantum fingerprint with the pre-stored quantum fingerprint template. The pre-stored quantum fingerprint template is generated and securely stored when the user registers. The comparison process uses quantum state discrimination technology, which uses the principle of quantum measurement to evaluate the similarity of two quantum states. A commonly used method is quantum fidelity measurement, which can calculate the degree of overlap between two quantum states. The system performs a series of quantum gate operations and measurements, and finally obtains a numerical value representing the similarity of the two quantum fingerprints, namely the similarity score. Based on the obtained similarity score, the system determines whether the user's identity is verified. This judgment is based on a preset threshold. If the similarity score exceeds this threshold, the user's identity authentication is considered to have passed. For users who have passed the identity authentication, the system will extract the corresponding quantum authentication token from the secure storage. This quantum authentication token is generated in the previous step and contains the user's identity information, access rights, and the hash value of the encrypted digital key. After extracting the quantum authentication token, the system needs to decode it to recover the information contained. This process uses a series of quantum gate operations, which are essentially operations on the state of quantum bits, and can include Hadamard gates, CNOT gates, phase gates, etc. The sequence of these quantum gate operations is designed to reverse the encoding process, thereby extracting the original information from the quantum entangled state. Through these operations, the system recovers the authentication information summary, quantum signature results, and public key information used for verification. After recovering this information, the system starts the quantum secure multi-party computing protocol to verify the validity of the quantum signature and the user's access rights. This protocol involves multiple authorized nodes, each of which participates in the calculation but cannot access the complete sensitive information alone. Quantum secure multi-party computing uses the characteristics of quantum entanglement and quantum communication to allow these nodes to complete computing tasks together without leaking their respective inputs. In this process, each authorized node uses part of its own information (which may be a partial key or verification rule) to participate in the calculation. Specifically, the nodes will execute the distributed quantum signature verification algorithm and check whether the user's access rights match the stored information. Through this distributed computing process, multiple authorized nodes jointly come up with an authorization decision result. This result may be binary (pass / fail) or may contain more detailed access level information.To ensure the immutability and traceability of this authorization decision, the system will encode it into a quantum state. This encoding process uses a technique similar to quantum fingerprint encoding to convert the classical decision result into a quantum superposition state. Finally, this encoded quantum state is stored in a quantum tamper-proof log. A quantum tamper-proof log is a secure log system built using the principles of quantum mechanics. It can be based on quantum blockchain technology, where each log entry is stored in the form of a quantum state and linked together through quantum entanglement. This storage method takes advantage of the non-cloning and measurement-perturbation properties of quantum states to ensure the integrity and immutability of the log. Any attempt to modify or access the log will leave a quantum-level trace, allowing unauthorized changes to be detected immediately.

[0069] 105. Convert the encrypted digital key into a quantum state of a multi-particle entangled state, segment the converted quantum state, store the segmentation results in multiple nodes of a distributed quantum storage network, and periodically refresh the stored quantum state.

[0070] In one embodiment of the present invention, the step of converting the encrypted digital key into a quantum state of a multi-particle entangled state, dividing the converted quantum state, and storing the division results in multiple nodes of a distributed quantum storage network, and periodically refreshing the stored quantum state includes: generating a multi-particle maximum entangled state using a quantum entanglement source, encoding the encrypted digital key into the phase information of the multi-particle entangled state, and obtaining a multi-particle entangled state containing key information; dividing the multi-particle entangled state into multiple quantum shares using a quantum secret sharing protocol, and selecting multiple nodes with quantum storage capabilities in the distributed quantum storage network, and transmitting and storing the divided quantum shares in the nodes respectively; periodically performing quantum state reconstruction measurement on the quantum shares in each storage node, evaluating the attenuation degree of quantum coherence, and obtaining a reconstruction measurement result; dynamically correcting the severely attenuated quantum shares using a quantum error correction code according to the reconstruction measurement result to restore the fidelity of the quantum state; and simultaneously performing a global entanglement refresh operation on the quantum shares of all storage nodes within a preset time interval.

[0071] Specifically, to implement this technical solution, it is first necessary to use a quantum entanglement source to generate a multi-particle maximum entangled state. This process usually involves the use of nonlinear optical crystals, such as β-barium borate (BBO) crystals, to generate entangled photon pairs through a parametric down-conversion process. Multi-particle entangled states can be generated by cascading this process or using a multi-photon entangled source. For example, a GHZ state generation circuit can be used, which combines optical elements such as a single photon source, a wave plate, and a polarization beam splitter to create a maximum entangled state of three or more particles. After generating a multi-particle maximum entangled state, the next step is to encode the encrypted digital key into this quantum state. This encoding process focuses on manipulating the phase information of the entangled state. Specifically, the system converts the encrypted digital key into a binary sequence and then uses a quantum phase gate to operate on each quantum bit in the entangled state. For example, for the GHZ state |GHZ> = (|000> + |111>) / √2, information can be encoded by applying a phase rotation to each quantum bit. If the key bit is 0, no phase rotation is applied; if it is 1, a π phase rotation is applied. This method embeds the key information into the phase of the quantum state without changing its entangled nature. After the encoding is completed, the system applies a quantum secret sharing protocol to the multi-particle entangled state containing the key information to split it. A commonly used method is a quantum threshold scheme, such as using a quantum version of Shamir's secret sharing algorithm. This process decomposes the original quantum state into multiple quantum shares, each of which is itself a quantum state. The key is that only when a sufficient number of shares (reaching a preset threshold) are recombined can the original quantum state and the information contained therein be reconstructed. This splitting increases security because a single share does not contain any useful information. After the splitting is completed, the system selects multiple nodes with quantum storage capabilities in the distributed quantum storage network. These nodes need to be equipped with quantum memories, such as quantum memories based on rare earth doped crystals or atomic gas quantum memories. The system transmits the split quantum shares to these nodes separately. The transmission process uses quantum communication technology, such as quantum channels protected by quantum key distribution, to ensure the security of the transmission process. After each node receives the quantum share assigned to it, it stores it in a local quantum memory. In order to maintain the integrity of the stored quantum state, the system needs to periodically perform quantum state reconstruction measurements on the quantum shares in each storage node. This process involves partial measurement of the stored quantum state and then reconstructing the quantum state through quantum state tomography. By comparing the reconstructed quantum state with the ideal state, the system can evaluate the degree of attenuation of quantum coherence. This evaluation result is used to determine whether quantum error correction or refresh operations are required. Based on the reconstruction measurement results, if the fidelity of certain quantum shares is found to drop below a preset threshold, the system will start the quantum error correction procedure.Quantum error correction uses specially designed quantum error correction codes, such as Surface codes or Toric codes, which are able to detect and correct errors without directly measuring quantum information. The error correction process involves encoding quantum information into a larger Hilbert space, and then detecting and correcting errors through the measurement of auxiliary quantum bits without destroying the stored quantum information. In addition to on-demand quantum error correction, the system also performs global entanglement refresh operations on the quantum shares of all storage nodes at preset time intervals. This process aims to restore the strength and quality of quantum entanglement. Global entanglement refresh involves gathering all quantum shares to a central node, reconstructing the complete multi-particle entangled state, and then splitting and redistributing it to the individual storage nodes again. Alternatively, a distributed entanglement purification protocol can be used, allowing remote nodes to improve the quality of entanglement between them through local operations and classical communication.

[0072] In this embodiment, quantum random numbers are generated by using a single photon source and a quantum entanglement source; quantum key distribution is performed based on quantum random numbers to obtain a shared key; an initial digital key is generated using quantum random numbers, and a final digital key is generated in combination with user information; the final digital key is encrypted using a quantum key distribution shared key, and a quantum authentication token is generated; the encrypted digital key is converted into a quantum state of a multi-particle entangled state, divided and distributedly stored, and periodically refreshed. The present invention uses quantum encryption technology to effectively improve the security of digital keys and solve the problem that traditional digital keys are easily cracked. Through quantum state storage and distributed management, the security and reliability of digital keys are further enhanced, and it is suitable for digital key application scenarios that require high security.

[0073] The above describes the digital key security management method based on quantum encryption technology in the embodiment of the present invention. The following describes the digital key security management system based on quantum encryption technology in the embodiment of the present invention. Figure 2 In one embodiment of the present invention, a digital key security management system based on quantum encryption technology includes:

[0074] The random number generation module 201 is used to measure the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and perform an XOR operation and debiasing process on the initial random bit sequence to obtain a quantum random number;

[0075] A key generation module 202 is used to select a quantum state encoding parameter according to the quantum random number, prepare and transmit a quantum state according to the quantum state encoding parameter, and perform measurement, basis comparison, error correction and privacy amplification processing on the transmitted quantum state to obtain a quantum key distribution shared key;

[0076] A digital key generation module 203 is used to generate an initial digital key using the quantum random number as a seed, and to mix the initial digital key with a timestamp, a device unique identifier, and user identity information and perform hashing to obtain a final digital key;

[0077] A token generation module 204 is used to encrypt the final digital key using the quantum key distribution shared key, and generate a quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication;

[0078] The management module 205 is used to convert the encrypted digital key into a quantum state of a multi-particle entangled state, divide the converted quantum state, store the division results in multiple nodes of the distributed quantum storage network, and periodically refresh the stored quantum state.

[0079] In an embodiment of the present invention, the digital key security management system based on quantum encryption technology runs the above-mentioned digital key security management method based on quantum encryption technology. The digital key security management system based on quantum encryption technology generates quantum random numbers by using a single photon source and a quantum entanglement source; performs quantum key distribution based on quantum random numbers to obtain a shared key; generates an initial digital key using quantum random numbers, and generates a final digital key in combination with user information; uses quantum key distribution shared keys to encrypt the final digital key, and generates a quantum authentication token; converts the encrypted digital key into a quantum state of a multi-particle entangled state, divides it, distributes it, and periodically refreshes it. The present invention adopts quantum encryption technology to effectively improve the security of digital keys and solves the problem that traditional digital keys are easily cracked. Through quantum state storage and distributed management, the security and reliability of digital keys are further enhanced, and it is suitable for digital key application scenarios that require high security.

[0080] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system or system or unit described above can refer to the corresponding process in the aforementioned method embodiment and will not be repeated here.

[0081] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or the whole or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0082] As described above, the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features thereof may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A digital key security management method based on quantum encryption technology, It is characterized in that The digital key security management method based on quantum encryption technology includes: Measuring the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and performing an XOR operation and a debiasing process on the initial random bit sequence to obtain a quantum random number; Selecting a quantum state encoding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state encoding parameter, and measuring, base matching, error correction and privacy amplification processing the transmitted quantum state to obtain a quantum key distribution shared key; The initial digital key is generated by using the quantum random number as a seed, and the initial digital key is mixed with a timestamp, a unique device identifier and a user identity information, and then hashed to obtain a final digital key; the initial digital key is generated by using the quantum random number as a seed, and the initial digital key is mixed with a timestamp, a unique device identifier and a user identity information, and then hashed to obtain a final digital key, including: performing block processing on the quantum random number to obtain a plurality of equal-length subsequences, and applying a different pseudo-random function to each subsequence to obtain a set of pseudo-random number sequences; performing a bit-level XOR operation on the pseudo-random number sequence and the timestamp to obtain a time-sensitive intermediate sequence, and performing a cyclic shift operation on the intermediate sequence and the unique device identifier to obtain a device binding sequence; performing a modular addition operation on the device binding sequence and a hash value of the user identity information to obtain a user-associated initial digital key, and applying the SHA-3 cryptographic hash function to the initial digital key, performing multiple rounds of iterative processing to obtain a final digital key; The final digital key is encrypted using the quantum key distribution shared key, and a quantum authentication token is generated based on the user identity information, access rights and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication; the final digital key is encrypted using the quantum key distribution shared key, and the quantum authentication token is generated based on the user identity information, access rights and the hash value of the encrypted digital key, including: performing key expansion processing on the quantum key distribution shared key, and generating a corresponding encryption key and authentication key using a preset key derivation function; performing AES-256 encryption on the final digital key using the encryption key to obtain an encrypted digital key, and calculating a SHA-256 hash value of the encrypted digital key; splicing the user identity information, access rights information and the hash value of the encrypted digital key to obtain a splicing result, and performing hash processing on the splicing result to obtain an authentication information summary; performing quantum signing on the authentication information summary using the authentication key to obtain a quantum signature result, and encoding the authentication information summary, the quantum signature result and the public key information for verification into a preset quantum entangled state to obtain a quantum authentication token; The encrypted digital key is converted into a quantum state of a multi-particle entangled state, the converted quantum state is divided, and the division results are stored in multiple nodes of a distributed quantum storage network, and the stored quantum state is periodically refreshed.

2. According to the digital key security management method based on quantum encryption technology according to claim 1, It is characterized in that The step of measuring the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and performing an XOR operation and a debiasing process on the initial random bit sequence to obtain a quantum random number comprises: The single photon emitted by the single photon source is subjected to beam splitting processing, and the photon path is recorded by using a single photon detector to obtain a recording result; Converting the recorded result into an initial binary sequence, and performing Bell state measurement on the entangled photon pair generated by the quantum entanglement source to obtain a supplementary random bit sequence; Performing a bit-level XOR operation on the initial binary sequence and the supplementary random bit sequence to obtain a mixed random sequence; A preset debiasing algorithm is applied to the mixed random sequence to remove statistical deviations in the mixed random sequence to obtain quantum random numbers.

3. According to the digital key security management method based on quantum encryption technology according to claim 1, It is characterized in that The step of selecting a quantum state encoding parameter according to the quantum random number, preparing and transmitting a quantum state according to the quantum state encoding parameter, and measuring, base matching, error correction, and privacy amplification processing the transmitted quantum state to obtain a quantum key distribution shared key includes: Selecting polarization basis information and coding state of photons according to the quantum random number, and performing quantum state coding on the photons according to the polarization basis information and coding state to obtain a quantum state sequence; The quantum state sequence is transmitted to a receiver by using a quantum channel, and a random basis measurement is performed on the received quantum state at the receiver to obtain an original measurement result; The coding basis information of the sender and the measurement basis information of the receiver are exchanged through a classical communication channel, and the bits measured using the same basis are compared and selected to obtain an initial shared key; The initial shared key is subjected to bit error rate estimation and error correction processing, low-density parity check code is used for information coordination to obtain an intermediate key, and a universal hash function is applied to the intermediate key to perform privacy amplification processing to obtain a quantum key distribution shared key.

4. According to the digital key security management method based on quantum encryption technology according to claim 1, It is characterized in that After the final digital key is encrypted using the quantum key distribution shared key, and a quantum authentication token is generated based on the user identity information, access rights, and the hash value of the encrypted digital key, the method further includes: Perform quantum state encoding on the biometric sample provided by the user to generate a real-time quantum fingerprint, and perform quantum state discrimination between the real-time quantum fingerprint and the pre-stored quantum fingerprint template to obtain a similarity score; Determine whether the user identity is verified according to the similarity score, and extract the corresponding quantum authentication token for the user who has passed the identity authentication; Use quantum gate operations to decode the extracted quantum authentication token and recover the authentication information summary, quantum signature result and public key information; Through the quantum secure multi-party computing protocol, multiple authorized nodes jointly verify the validity of the quantum signature result and the user's access rights, obtain the authorization decision result, and encode the authorization decision result into a quantum state and store it in the quantum tamper-proof log.

5. According to claim 1, the digital key security management method based on quantum encryption technology, It is characterized in that The step of converting the encrypted digital key into a quantum state of a multi-particle entangled state, dividing the converted quantum state, and storing the division results in multiple nodes of a distributed quantum storage network, and periodically refreshing the stored quantum state includes: Generate a multi-particle maximum entangled state using a quantum entanglement source, encode the encrypted digital key into the phase information of the multi-particle entangled state, and obtain a multi-particle entangled state containing key information; Applying a quantum secret sharing protocol to the multi-particle entangled state to split it into a plurality of quantum shares, and selecting a plurality of nodes with quantum storage capabilities in a distributed quantum storage network, and transmitting and storing the split quantum shares in the nodes respectively; Periodically perform quantum state reconstruction measurement on the quantum shares in each storage node, evaluate the attenuation degree of quantum coherence, and obtain reconstruction measurement results; According to the reconstructed measurement results, quantum error correction codes are used to dynamically correct the severely attenuated quantum shares and restore the fidelity of the quantum state. At preset time intervals, global entanglement refresh operations are performed on the quantum shares of all storage nodes simultaneously.

6. A digital key security management system based on quantum encryption technology, It is characterized in that The digital key security management system based on quantum encryption technology includes: A random number generation module is used to measure the photons emitted by the single photon source and the entangled photon pairs generated by the quantum entanglement source to obtain an initial random bit sequence, and perform an XOR operation and debiasing process on the initial random bit sequence to obtain a quantum random number; A key generation module is used to select a quantum state encoding parameter according to the quantum random number, prepare and transmit the quantum state according to the quantum state encoding parameter, and measure, base compare, correct errors and amplify privacy on the transmitted quantum state to obtain a quantum key distribution shared key; A digital key generation module, used to use the quantum random number as a seed to generate an initial digital key, and mix the initial digital key with a timestamp, a unique device identifier and user identity information and then perform hash processing to obtain a final digital key; the use of the quantum random number as a seed to generate an initial digital key, and the initial digital key is mixed with a timestamp, a unique device identifier and user identity information and then perform hash processing to obtain a final digital key, including: performing block processing on the quantum random number to obtain multiple equal-length subsequences, and applying a different pseudo-random function to each subsequence to obtain a set of pseudo-random number sequences; performing a bit-level XOR operation on the pseudo-random number sequence and the timestamp to obtain a time-sensitive intermediate sequence, and performing a cyclic shift operation on the intermediate sequence and the unique device identifier to obtain a device binding sequence; performing a modular addition operation on the device binding sequence and the hash value of the user identity information to obtain a user-associated initial digital key, and applying the SHA-3 cryptographic hash function to the initial digital key, performing multiple rounds of iterative processing to obtain a final digital key; A token generation module is used to encrypt the final digital key using the quantum key distribution shared key, and generate a quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key, wherein the quantum authentication token is used for user identity authentication; the use of the quantum key distribution shared key to encrypt the final digital key, and the generation of the quantum authentication token based on the user identity information, access rights and the hash value of the encrypted digital key includes: performing key expansion processing on the quantum key distribution shared key, and generating corresponding encryption keys and authentication keys using a preset key derivation function; using the encryption key to perform AES-256 encryption on the final digital key to obtain an encrypted digital key, and calculating a SHA-256 hash value of the encrypted digital key; splicing the user identity information, access rights information and the hash value of the encrypted digital key to obtain a splicing result, and performing hash processing on the splicing result to obtain an authentication information summary; using the authentication key to perform quantum signature on the authentication information summary to obtain a quantum signature result, and encoding the authentication information summary, the quantum signature result and the public key information for verification into a preset quantum entangled state to obtain a quantum authentication token; The management module is used to convert the encrypted digital key into a quantum state of a multi-particle entangled state, divide the converted quantum state, store the division results in multiple nodes of a distributed quantum storage network, and periodically refresh the stored quantum state.

Images