A method and system for verifying traffic billing information based on quantum digital signature

Abstract

The present application provides a method and system for verifying traffic billing information based on quantum digital signatures, which relates to the field of quantum secure communication technology, including: obtaining the billing information of the target tenant; signing the billing information to obtain the first signature information; obtaining the first decryption result of the first signature information by the quantum cloud cryptographic service center, and verifying the first decryption result once; signing the billing information with a third key to obtain the second signature information; obtaining the second decryption result of the second signature information by the target tenant, and performing a second verification on the second decryption result and the decryption result of the first signature information. The method provided by the present application generates billing information by a quantum key billing system and adopts a quantum digital signature, and then the quantum cloud cryptographic service center and the tenant successively perform two-level verification operations, which ensures the authenticity and validity of the quantum key billing information, and realizes the data integrity and authentication non-repudiation of the signature data during the authentication and transmission process.

Description

Technical Field

[0001] The present application relates to the field of quantum secure communication technology, and in particular to a method and system for verifying traffic billing information based on quantum digital signatures. Background Art

[0002] Quantum secure communication is a confidential communication process based on the principles of quantum mechanics through a quantum key distribution (QKD) system. QKD distribution is a process in which two communicating parties negotiate to generate a shared password based on the QKD protocol. The generated password is theoretically unconditionally secure.

[0003] At present, quantum secure communication technology is gradually moving out of the laboratory and has developed to the stage of practical application. Combining quantum cryptography with cloud services is an effective solution to realize the application of quantum technology. This solution mainly centrally generates and classifies quantum keys to realize cryptographic services in cloud environments.

[0004] As we all know, cloud services mostly adopt tenant subscription services, which require billing for the application of quantum keys. However, the existing technologies have different billing standards and rules, which leads to tenants not recognizing the fee list provided by the billing platform. At the same time, because billing information is easily distorted during the communication process, it is difficult to ensure integrity, authenticity and non-repudiation, which greatly reduces the availability and applicability of cloud services. Summary of the invention

[0005] The present application provides a method and system for verifying traffic billing information based on quantum digital signatures, so as to solve the problem that the authenticity of the existing billing system is difficult to ensure, resulting in a low degree of acceptance.

[0006] In a first aspect, the present application provides a method for verifying traffic billing information based on quantum digital signature, including:

[0007] Get the target tenant's billing information;

[0008] The billing information is signed using a first key and a second key to obtain first signature information; the first key and the second key are generated by quantum key distribution technology, the generated first key is stored in the quantum key billing system and the target tenant, and the generated second key is stored in the quantum key billing system and the quantum cloud cryptography service center;

[0009] Obtaining a first decryption result of the first signature information by the quantum cloud cryptography service center using the second key, where the first decryption result includes a first hash value;

[0010] Compare the first Hash value with a preset Hash value to obtain a first comparison result;

[0011] If the first comparison result is the same, the billing information is signed using a third key to obtain second signature information; the third key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange;

[0012] Obtain a second decryption result of the target tenant using a fourth key for the second signature information, where the second decryption result includes a second hash value; the fourth key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange;

[0013] The second hash value is compared with the third hash value to obtain a second comparison result; the third hash value is a third decryption result of the first signature information by the target tenant using the first key; the second comparison result includes signature verification passed or signature verification failed.

[0014] In some feasible embodiments, the step of comparing the second Hash value with the third Hash value to obtain a second comparison result includes:

[0015] Calculate an error rate of the second Hash value and the third Hash value; the error rate is used to identify the ratio of inconsistent data between the second Hash value and the third Hash value to the total length of the data;

[0016] If the error rate is less than a preset threshold, the second comparison result is that the signature verification is passed;

[0017] If the error rate is greater than or equal to a preset threshold, the second comparison result is that the signature verification fails.

[0018] In some feasible embodiments, the preset threshold is in the range of 0-0.5.

[0019] In some feasible embodiments, the method for the quantum cloud cryptography service center and the target tenant to obtain the third key and the fourth key includes:

[0020] Generate a first private key stored in the target tenant through quantum true random numbers, and split the first private key into a first subkey and a second subkey; and generate a second private key stored in the quantum cloud cryptography service center through quantum true random numbers, and split the second private key into a third subkey and a fourth subkey;

[0021] Generate the third key according to the first subkey and the third subkey, and store it in the quantum cloud cryptography service center;

[0022] The fourth key is generated according to the second subkey and the fourth subkey, and is stored in the target tenant.

[0023] In some feasible embodiments, the first subkey and the second subkey are two equal-length copies; the third subkey and the fourth subkey are two equal-length copies.

[0024] In some feasible embodiments, a data position of the first subkey in the first private key is different from a data position of the third subkey in the second private key.

[0025] In some feasible embodiments, the method further includes:

[0026] If the second comparison result is that the signature verification is passed, the feedback information with the signature of the target tenant is stored in the quantum key billing system.

[0027] In a second aspect, the present application provides a traffic billing information verification system based on quantum digital signature, the system comprising:

[0028] The quantum key billing system is configured as follows:

[0029] In response to a billing request sent by a tenant terminal, a first key is generated by quantum key distribution technology and stored in the tenant terminal, and a second key is generated and stored in a quantum cloud cryptography service center;

[0030] Obtain the billing information of the target tenant corresponding to the tenant terminal;

[0031] The billing information is signed using the first key and the second key to obtain first signature information;

[0032] Send the first signature information to the tenant terminal and the quantum cloud cryptography service center respectively;

[0033] The Quantum Cloud Cryptography Service Center is configured as:

[0034] Decrypting the first signature information using the second key to obtain a first decryption result, where the first decryption result includes a first hash value;

[0035] Compare the first Hash value with a preset Hash value to obtain a first comparison result;

[0036] If the first comparison result is the same, the billing information is signed using the third key obtained by the key exchange to obtain second signature information;

[0037] Sending the second signature information to the tenant terminal;

[0038] Tenant terminals are configured as follows:

[0039] Decrypting the second signature information using the first key and a fourth key obtained through key exchange to obtain a second decryption result, where the second decryption result includes a second hash value;

[0040] Decrypting the first signature information using the first key to obtain a third decryption result; the third decryption result includes a third Hash value;

[0041] The second Hash value is compared with the third Hash value to obtain a second comparison result; the second comparison result includes signature verification passing or signature verification failing.

[0042] In some feasible embodiments, it also includes:

[0043] The quantum key service management system is configured to: record the historical information of the tenant's use of the quantum key service and send the historical information to the quantum key billing system; the historical information includes the quantum key service usage time, traffic statistics, number of uses and basic information of the tenant;

[0044] The quantum key billing system is also configured to generate the billing information according to the historical information.

[0045] In some feasible embodiments, the tenant terminal is further configured to:

[0046] Generate a first private key through a quantum true random number, split the first private key into a first subkey and a second subkey, and send the first subkey to a quantum cloud cryptography service center;

[0047] The quantum cloud cryptography service center is also configured as:

[0048] Generate a second private key through a quantum true random number, split the second private key into a third subkey and a fourth subkey, and send the fourth subkey to the tenant terminal;

[0049] The tenant terminal is further configured to: generate the fourth key according to the second subkey and the fourth subkey;

[0050] The quantum cloud cryptography service center is also configured to generate the third key based on the first subkey and the third subkey.

[0051] The method provided in this application is based on the quantum key billing system, the quantum cloud cryptographic service center, and the tenants. The quantum key billing system generates billing information and uses quantum digital signatures. The quantum cloud cryptographic service center and the tenants then perform two-level signature verification operations in succession, thereby ensuring the authenticity and validity of the quantum key billing information and achieving data integrity and authentication non-repudiation of the signature data during the authentication and transmission process.

[0052] This application uses quantum digital signature technology of "quantum symmetric key (between billing system tenants) and "quantum asymmetric key" (between cloud cryptography platform tenants) to ensure the consistency and accuracy of billing information between the key management system and the cloud cryptography service center, which helps to verify data interoperability.

[0053] The quantum key billing solution of the present application effectively solves the dilemma of tenant billing management in the existing cloud cryptographic service center, and is based on existing quantum devices and networks, so there is no need to generate additional hardware costs to achieve quantum security of billing information.

[0054] The present invention is a billing information signature verification method and system with great potential after large-scale application of quantum networks in the future, and has good foresight and innovation. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solution of the present application, the drawings required for use in the embodiments are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0056] Figure 1 An application scenario diagram of a traffic billing information verification method based on quantum digital signature provided in this application;

[0057] Figure 2 A flow chart of a method for verifying traffic billing information based on quantum digital signature provided by this application;

[0058] Figure 3 Schematic diagram of the process of exchanging keys between the target tenant and the quantum key billing system;

[0059] Figure 4 A schematic diagram of splitting a first private key in an embodiment. DETAILED DESCRIPTION

[0060] The following embodiments are described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementation methods described in the following embodiments do not represent all implementation methods consistent with the present application. They are only examples consistent with some aspects of the present application detailed in the claims.

[0061] See also Figure 1 , the application scenario diagram of the traffic billing information verification method based on quantum digital signature provided by this application, the method provided by this application can be applied in practical applications Figure 1 The system shown is completed. The following is an introduction to the composition of the system:

[0062] The quantum key billing system can be used as a part of the quantum key service management system or as an independent system. It can realize the billing standard management, tenant management, billing information generation and other operations of tenants according to the key distribution information recorded by the quantum key management system. At the same time, by analyzing and calculating the information such as the quantum key flow of tenants recorded by the quantum key service management system, billing information can be generated and quantum signature can be performed according to the data such as the quantum key flow of tenants.

[0063] The quantum cloud cryptography service center can be a part of the cloud platform security management system or an independent system. Its main function is to provide a quantum security interface for cloud platform tenants and tenant-affiliated application systems based on the quantum key service management system, quantum cryptography equipment and other equipment. It also includes some key management systems and key usage information (cost information) functions. At the same time, it can also verify the signature and cost of the tenant billing information provided by the quantum key billing system, and store the billing information in the cloud.

[0064] Tenants (also called tenant terminals) are unified identity accounts of the quantum key service management system (billing system) and the quantum cloud cryptography service center. As the applicant of quantum keys, the tenant's identity is used as the unique identifier for key management system key distribution, cloud platform encryption service use, and fee verification. It mainly includes quantum security terminals, key billing system clients, cloud cryptography service center clients, etc. At the same time, it can verify the signature of quantum key traffic information. If the signature verification is passed, it means that it agrees to the deduction operation.

[0065] Based on the above system, this application provides a method for verifying traffic billing information based on quantum digital signature, such as Figure 2 As shown, the method provided by the present application includes:

[0066] S100: Obtaining the billing information of the target tenant;

[0067] In this embodiment, the billing information may include the name of the tenant, the usage time and usage amount of the quantum key, the billing standard, the cost of this usage, and other information; it should be noted that when the quantum key billing system executes the step of obtaining the billing information, it can obtain the name of the tenant, the usage time and usage amount of the quantum key from the quantum key service management system, and then calculate the billing information according to the billing standard configured in the system, or it can directly obtain the billing information from the key service management system.

[0068] In addition, when calculating the fees, the rules followed can be manually specified and input into the system, for example, the fees can be calculated based on the usage time and the fee per time, or based on the number of times used and the fee per time, etc., which is not limited in this embodiment.

[0069] In this embodiment, there are two triggering conditions for step S100. The first is triggered by the tenant's request, that is, when the tenant actively submits a request for payment to the quantum key billing system, the quantum key billing system can define the tenant who sends the request as the target tenant according to the request sent by the tenant, and execute step S100 and subsequent steps to realize the verification process of the billing information. The second is a charging request for the target tenant initiated by a third party. For example, the third party can be a service provider that provides key services. When the agreed time is reached, the third party can submit a charging request to the quantum key billing system. The quantum key billing system can obtain the billing information of the target tenant according to the request sent by the third party, and then remind the target tenant to perform the verification and payment process.

[0070] S200: Use the first key and the second key to sign the billing information to obtain first signature information; the first key and the second key are generated by quantum key distribution technology (QKD), and the generated first key is stored in the quantum key billing system and the target tenant, and the generated second key is stored in the quantum key billing system and the quantum cloud cryptography service center.

[0071] It should be noted that, in this embodiment, the process of generating and distributing the first key and the second key can be triggered immediately after receiving the request from the tenant or the third party, that is, a unique key can be generated accordingly for each request, thereby improving the security of key distribution; in addition, the process of key generation and key distribution can also be directly executed when the tenant or the third party registers in the quantum key billing system, that is, it can be considered that when the tenant sends a request, the client where the tenant is located and the quantum key billing system have obtained the corresponding key. In this way, the steps of key generation and key distribution can be omitted, thereby improving the processing efficiency of the method provided in this embodiment.

[0072] by Figure 1 As an example of the embodiment shown in the figure, the first key is recorded as , the second key is denoted as .

[0073] After the quantum key billing system signs the billing information according to the first key and the second key, the first signature information is sent to the target tenant and the quantum cloud cryptography service center respectively. The quantum cloud cryptography service center first verifies the first signature information, which specifically includes the following steps:

[0074] S300: Obtain a first decryption result of the first signature information by the quantum cloud cryptography service center using the second key, wherein the first decryption result includes a first hash value; wherein the first hash value is a unique identifier used to characterize the billing information, which can be obtained by performing quantum hash calculation on the billing information, which is beneficial to the billing data volume and ensuring data security.

[0075] S400: Compare the first Hash value with a preset Hash value to obtain a first comparison result;

[0076] Specifically, the Quantum Cloud Cryptography Service Center uses the key in its hands The first signature data is decrypted (verified) to obtain m1, and compared with the hash value m2 of the quantum key billing information stored in itself. If the comparison passes, it is considered that the cloud platform has correctly verified the quantum key usage information of the billing system.

[0077] If the first comparison result is the same, then execute the steps:

[0078] S500: Sign the billing information using a third key to obtain second signature information; the third key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange;

[0079] In this embodiment, the key exchange process between tenant C and cloud cryptographic service center B is not known by quantum key billing system A, so A does not know the location of the exchanged key, thereby resisting A's denial. In addition, tenant C and cloud cryptographic service center B randomly exchange their private key parts, which makes tenant C and cloud cryptographic service center B unaware of the part of the key retained by the other party, thus preventing the forgery of the signature.

[0080] When the quantum cloud cryptography service center signs the billing information using the third key and obtains the second signature information, the second signature information can be sent to the target tenant, and the tenant performs a second signature verification operation on the second signature information, which specifically includes the following steps:

[0081] S600: Obtain a second decryption result of the target tenant using a fourth key to decrypt the second signature information, where the second decryption result includes a second hash value; the fourth key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange;

[0082] After the tenant obtains the first signature information and the second signature information from step S200 and step S500, the tenant can decrypt the two signature information to obtain two hash values ​​for comparison. Specifically, the tenant can first use the first key Decrypt the first signature information to obtain the third decryption result, i.e., the first hash value m1, and then use the fourth key Decrypt the second signature information to obtain a second hash value m2;

[0083] S700: Compare the second Hash value with the third Hash value to obtain a second comparison result; the second comparison result includes signature verification passing or signature verification failing.

[0084] In this embodiment, if the tenant passes the verification of the second comparison result, it means that the tenant has no objection to the billing information and can accept the payment according to the content of the billing information, and can subsequently perform related payment and deduction operations.

[0085] It can be seen from the above technical solution that the method provided in this application is based on the quantum key billing system, the quantum cloud cryptographic service center, and the tenants. The quantum key billing system generates billing information and uses quantum digital signatures. The quantum cloud cryptographic service center and the tenants then perform two-level signature verification operations in succession, which ensures the authenticity and validity of the quantum key billing information and realizes the data integrity and authentication non-repudiation of the signature data during the authentication and transmission process.

[0086] Furthermore, in some feasible embodiments, the step of comparing the second Hash value with the third Hash value in the above step S700 to obtain a second comparison result includes:

[0087] Calculate the error rate of the second hash value and the third hash value; the error rate is used to identify the ratio of inconsistent data in the second hash value and the third hash value to the total length of the data; for example, the second hash value is the data string "hgi356mnvian867jukua", and the third hash value is the data string "hgi3b6mnvian867j2kua". After comparing the second hash value and the third hash value, it is found that the fifth data "5" in the second hash value is different from the fifth data "b" in the third hash value, and the seventeenth data "u" in the second hash value is different from the seventeenth data "2" in the third hash value, and the remaining data are the same, then the calculated error rate can be obtained by dividing the number of inconsistent data (2) by the total length of the data (20) to obtain 0.1.

[0088] If the error rate is less than a preset threshold, the second comparison result is that the signature verification is passed;

[0089] If the error rate is greater than or equal to a preset threshold, the second comparison result is that the signature verification fails.

[0090] In this embodiment, the preset threshold can be set according to demand. For example, the preset threshold can be set to a value within the range of 0-0.5. The lower the set threshold, the smaller the allowed error and the higher the security.

[0091] In the embodiment of the present application, before the above step S500, the target tenant can obtain the third key and the fourth key respectively by exchanging keys with the quantum cloud cryptographic service center. The key exchange method is not limited to one. Figure 3 The following are some possible key exchange procedures:

[0092] The method for the quantum cloud cryptography service center and the target tenant to obtain the third key and the fourth key includes:

[0093] Generate a first private key stored in the target tenant through quantum true random numbers, and split the first private key into a first subkey and a second subkey; and generate a second private key stored in the quantum cloud cryptography service center through quantum true random numbers, and split the second private key into a third subkey and a fourth subkey;

[0094] Generate the third key according to the first subkey and the third subkey, and store it in the quantum cloud cryptography service center;

[0095] The fourth key is generated according to the second subkey and the fourth subkey, and is stored in the target tenant.

[0096] The method for splitting the first private key into the first subkey and the second subkey is to split the first private key into two parts with equal data length, namely the first subkey and the second subkey; correspondingly, the second private key can also be split into the third subkey and the fourth subkey with equal data length.

[0097] Since the length of the first subkey and the second subkey are both half of the total length of the first private key, when the target tenant and the quantum key billing system each exchange their half of the key, the total length of the keys obtained is still equal and corresponds to each other.

[0098] In some embodiments, in the process of splitting the first private key into the first subkey and the second subkey, it is not required to use the first half of the data string as the first subkey and the second half of the data string as the second subkey. Figure 4 In the manner shown, one or several segments of the first private key can be combined into the first subkey or the second subkey, and the remaining data segments can be combined into another subkey. This splitting method has more possibilities and further improves data security.

[0099] It should be noted that the above-mentioned splitting process for the first private key is also applicable to the splitting process for the second private key.

[0100] Furthermore, in some embodiments, the splitting rules for the first private key and the second private key may be different, that is, the data position of the first subkey in the first key is different from the data position of the third subkey in the second key; the only thing that needs to be ensured is that no matter how the splitting is performed, the total data length of the third key and the fourth key finally generated must be the same.

[0101] Furthermore, in some other embodiments, when exchanging keys between the target tenant and the quantum cloud cryptography service center, the splitting rules can be set according to the negotiation. For example, the target tenant sends 1 / 3 of the first private key as the first subkey to the quantum cloud cryptography service center, and correspondingly, the quantum cloud cryptography service center also sends 1 / 3 of the second private key as the fourth subkey to the target tenant, thereby completing the exchange process. The split ratio can be set to other ratios according to actual conditions and is not limited here.

[0102] Specifically, the above exchange process can be expressed as:

[0103] The target tenant and the Quantum Cloud Cryptography Service Center first generate the first private key , Second private key ; After key exchange, the target tenant obtains the fourth key , the Quantum Cloud Cryptography Service Center obtains the third secret key ; Since the quantum key is used once and for all, it is necessary to renegotiate the key as the signature key for the secondary confirmation of the billing information between the quantum cloud cryptography service center and the target tenant. The symmetric key method is used to implement the asymmetric key function and is used once and for all.

[0104] The quantum digital signature technology of quantum symmetric key (the first key between the quantum key billing system and the tenant) and "quantum asymmetric key" (the third and fourth keys between the quantum cloud cryptographic service center and the tenant) is adopted in the embodiment of the present application to ensure the consistency and accuracy of the billing information between the key management system and the cloud cryptographic service center, which is helpful for data intercommunication verification.

[0105] Furthermore, in some feasible embodiments, after the tenant has verified the billing information, the tenant can provide feedback to the quantum key billing system to initiate subsequent payment and deduction operations through the quantum key billing system. The method further includes:

[0106] If the second comparison result is that the signature verification is passed, the feedback information with the signature of the target tenant is stored in the quantum key billing system.

[0107] The quantum key billing solution of the present application effectively solves the dilemma of tenant billing management in the existing cloud cryptographic service center, and is based on existing quantum devices and networks, so there is no need to generate additional hardware costs to achieve quantum security of billing information.

[0108] The present invention is a billing information signature verification method and system with great potential after large-scale application of quantum networks in the future, and has good foresight and innovation.

[0109] Corresponding to the above method, the present application also provides a traffic billing information verification system based on quantum digital signature, the system comprising:

[0110] The quantum key billing system is configured as follows:

[0111] In response to a billing request sent by a tenant terminal, a first key is generated by quantum key distribution technology and stored in the tenant terminal, and a second key is generated and stored in a quantum cloud cryptography service center;

[0112] Obtain the billing information of the target tenant corresponding to the tenant terminal;

[0113] The billing information is signed using the first key and the second key to obtain first signature information;

[0114] Send the first signature information to the tenant terminal and the quantum cloud cryptography service center respectively;

[0115] The Quantum Cloud Cryptography Service Center is configured as:

[0116] Decrypting the first signature information using the second key to obtain a first decryption result, where the first decryption result includes a first hash value;

[0117] Compare the first Hash value with a preset Hash value to obtain a first comparison result;

[0118] If the first comparison result is the same, the billing information is signed using the third key obtained by the key exchange to obtain second signature information;

[0119] Sending the second signature information to the tenant terminal;

[0120] Tenant terminals are configured as follows:

[0121] Decrypting the second signature information using the first key and a fourth key obtained through key exchange to obtain a second decryption result, where the second decryption result includes a second hash value;

[0122] Decrypting the first signature information using the first key to obtain a third decryption result; the third decryption result includes a third Hash value;

[0123] The second Hash value is compared with the third Hash value to obtain a second comparison result; the second comparison result includes signature verification passing or signature verification failing.

[0124] In some feasible embodiments, the system further includes:

[0125] The quantum key service management system is configured to: record the historical information of the tenant's use of the quantum key service and send the historical information to the quantum key billing system; the historical information includes the quantum key service usage time, traffic statistics, number of uses and basic information of the tenant;

[0126] The quantum key billing system is also configured to generate the billing information according to the historical information.

[0127] In some feasible embodiments, the tenant terminal is further configured to:

[0128] Generate a first private key through a quantum true random number, split the first private key into a first subkey and a second subkey, and send the first subkey to a quantum cloud cryptography service center;

[0129] The quantum cloud cryptography service center is also configured as:

[0130] Generate a second private key through a quantum true random number, split the second private key into a third subkey and a fourth subkey, and send the fourth subkey to the tenant terminal;

[0131] The tenant terminal is further configured to: generate the fourth key according to the second subkey and the fourth subkey;

[0132] The quantum cloud cryptography service center is also configured to generate the third key based on the first subkey and the third subkey.

[0133] The technical effects produced by the system provided in the present application when applied can be found in the description of the aforementioned method embodiments and will not be elaborated here.

[0134] Similar parts between the embodiments provided in this application can be referenced to each other. The specific implementation methods provided above are only a few examples under the general concept of this application and do not constitute a limitation on the protection scope of this application. For those skilled in the art, any other implementation methods expanded based on the scheme of this application without creative work belong to the protection scope of this application.

Claims

1. A method for verifying traffic billing information based on quantum digital signature, characterized in that: include: Get the target tenant's billing information; The billing information is signed using the first key and the second key to obtain first signature information; The first key and the second key are generated by quantum key distribution technology, the generated first key is stored in the quantum key billing system and the target tenant, and the generated second key is stored in the quantum key billing system and the quantum cloud cryptography service center; Obtaining a first decryption result of the first signature information by the quantum cloud cryptography service center using the second key, where the first decryption result includes a first hash value; Compare the first Hash value with a preset Hash value to obtain a first comparison result; If the first comparison result is the same, the billing information is signed using a third key to obtain second signature information; the third key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange; Obtaining a second decryption result of the second signature information by the target tenant using a fourth key, where the second decryption result includes a second hash value; The fourth key is obtained by the target tenant and the quantum cloud cryptography service center through key exchange; Compare the second Hash value with the third Hash value to obtain a second comparison result; The third hash value is a third decryption result of the target tenant using the first key to decrypt the first signature information; the second comparison result includes signature verification passed or signature verification failed.

2. According to claim 1, a method for verifying traffic billing information based on quantum digital signature is characterized in that: The step of comparing the second Hash value with the third Hash value to obtain a second comparison result includes: Calculate an error rate of the second Hash value and the third Hash value; the error rate is used to identify the ratio of inconsistent data between the second Hash value and the third Hash value to the total length of the data; If the error rate is less than a preset threshold, the second comparison result is that the signature verification is passed; If the error rate is greater than or equal to a preset threshold, the second comparison result is that the signature verification fails.

3. According to claim 1, a method for verifying traffic billing information based on quantum digital signature is characterized in that: The preset threshold is in the range of 0-0.

5.

4. According to claim 1, a method for verifying traffic billing information based on quantum digital signature is characterized in that: The method for the quantum cloud cryptography service center and the target tenant to obtain the third key and the fourth key includes: Generate a first private key stored in the target tenant through quantum true random numbers, and split the first private key into a first subkey and a second subkey; and generate a second private key stored in the quantum cloud cryptography service center through quantum true random numbers, and split the second private key into a third subkey and a fourth subkey; Generate the third key according to the first subkey and the third subkey, and store it in the quantum cloud cryptography service center; The fourth key is generated according to the second subkey and the fourth subkey, and is stored in the target tenant.

5. According to claim 4, a method for verifying traffic billing information based on quantum digital signature is characterized in that: The first subkey and the second subkey are two copies of equal length; the third subkey and the fourth subkey are two copies of equal length.

6. According to claim 5, a method for verifying traffic billing information based on quantum digital signature is characterized in that: A data position of the first subkey in the first private key is different from a data position of the third subkey in the second private key.

7. According to claim 1, a method for verifying traffic billing information based on quantum digital signature is characterized in that: The method further comprises: If the second comparison result is that the signature verification is passed, the feedback information with the signature of the target tenant is stored in the quantum key billing system.

8. A traffic billing information verification system based on quantum digital signature, characterized in that: The system comprises: The quantum key billing system is configured as follows: In response to a billing request sent by a tenant terminal, a first key is generated by quantum key distribution technology and stored in the tenant terminal, and a second key is generated and stored in a quantum cloud cryptography service center; Obtain the billing information of the target tenant corresponding to the tenant terminal; The billing information is signed using the first key and the second key to obtain first signature information; Send the first signature information to the tenant terminal and the quantum cloud cryptography service center respectively; The Quantum Cloud Cryptography Service Center is configured as: Decrypting the first signature information using the second key to obtain a first decryption result, where the first decryption result includes a first hash value; Compare the first Hash value with a preset Hash value to obtain a first comparison result; If the first comparison result is the same, the billing information is signed using the third key obtained by the key exchange to obtain second signature information; Sending the second signature information to the tenant terminal; Tenant terminals are configured as follows: Decrypting the second signature information using the first key and a fourth key obtained through key exchange to obtain a second decryption result, where the second decryption result includes a second hash value; Decrypting the first signature information using the first key to obtain a third decryption result; the third decryption result includes a third Hash value; The second Hash value is compared with the third Hash value to obtain a second comparison result; the second comparison result includes signature verification passing or signature verification failing.

9. A flow metering information verification system based on quantum digital signature according to claim 8, characterized in that: Also includes: The quantum key service management system is configured to: record the historical information of the tenant's use of the quantum key service and send the historical information to the quantum key billing system; the historical information includes the quantum key service usage time, traffic statistics, number of uses and basic information of the tenant; The quantum key billing system is also configured to generate the billing information according to the historical information.

10. A flow metering information verification system based on quantum digital signature according to claim 8, characterized in that: Tenant terminals are also configured to: Generate a first private key through a quantum true random number, split the first private key into a first subkey and a second subkey, and send the first subkey to a quantum cloud cryptography service center; The quantum cloud cryptography service center is also configured as: Generate a second private key through a quantum true random number, split the second private key into a third subkey and a fourth subkey, and send the fourth subkey to the tenant terminal; The tenant terminal is further configured to: generate the fourth key according to the second subkey and the fourth subkey; The quantum cloud cryptography service center is also configured to generate the third key based on the first subkey and the third subkey.

Images