Quantum cryptography security system and method based on 5GC-MANO

Abstract

The invention discloses a quantum cryptography security system and method based on 5GC-MANO. The system comprises a client, a quantum encryption component, a 5G core network module, a virtualized network function management module and a database. The client is used for sharing a randomly generated quantum key through a quantum channel and acquiring sensitive data to be encrypted; the quantum encryption component is used for automatically encrypting and decrypting the sensitive data to be encrypted and ensuring the safety of the data in the storage and transmission process; the 5G core network module is used for providing high-speed, low-delay and high-reliability network services; the virtualized network function management module is used for managing and arranging the life cycle of a virtual network function and coordinating resources and services of the whole NFV infrastructure; and the database is used for storing the data by using a quantum encryption technology. According to the invention, efficient and safe quantum encryption communication and data storage are realized by integrating the client, quantum encryption, the 5G network, virtualization management and the database.

Description

Technical Field

[0001] The present invention relates to the field of quantum secure communication technology, and in particular to a quantum cryptography security system and method based on 5GC-MANO. Background Art

[0002] With the rapid development of 5G networks, the types of services they carry are becoming increasingly diverse, including ultra-high-definition video transmission, the Internet of Things, telemedicine, and autonomous driving. These services have put forward higher requirements for network security. However, traditional encryption technology faces the risk of being cracked in the context of the rapid development of quantum computers. Therefore, seeking more secure encryption technology has become an urgent need to ensure the security of 5G networks.

[0003] Quantum cryptography is a technology that uses the principles of quantum mechanics for encryption and decryption. Its core advantage lies in its security based on the basic principles of quantum mechanics, such as the uncertainty principle and the non-cloning of quantum states, which makes quantum cryptography theoretically unbreakable. Specifically, quantum cryptography can securely generate and distribute keys between communicating parties through the quantum key distribution (QKD) protocol, and then use these keys to encrypt and decrypt transmitted data.

[0004] Traditional encryption algorithms based on mathematical problems (such as RSA, ECC, etc.) are at risk of being quickly cracked. Quantum computing can significantly shorten the time required to crack these algorithms, thus threatening the security of existing cryptographic systems. Although quantum computing is not yet fully mature, its potential threat to cryptographic technology cannot be ignored, and we need to seek more secure quantum encryption technology to meet future challenges. Summary of the invention

[0005] The purpose of the present invention is to overcome the shortcomings of the prior art. To achieve the above purpose, a quantum cryptography security system and method based on 5GC-MANO is adopted to solve the problems raised in the above background technology.

[0006] A quantum cryptographic security system based on 5GC-MANO, the system comprising a client, a quantum encryption component, a 5G core network module, a virtualized network function management module, and a database;

[0007] The client is used to share a randomly generated quantum key through a quantum channel to obtain sensitive data to be encrypted;

[0008] The quantum encryption component is used to automatically encrypt and decrypt sensitive data to be encrypted, ensuring the security of the data during storage and transmission;

[0009] The 5G core network module is responsible for providing high-speed, low-latency, and high-reliability network services;

[0010] The virtualized network function management module is used to manage and orchestrate the life cycle of virtual network functions and coordinate the resources and services of the entire NFV infrastructure;

[0011] The database is used to store data using quantum encryption technology.

[0012] As a further solution of the present invention: the client establishes a connection with the 5G core network module through a secure communication protocol for data transmission in a 5G network environment;

[0013] The client interacts with the quantum encryption component, requests the generation and distribution of quantum keys, and uses these keys to encrypt and decrypt data;

[0014] The client also interacts with the database directly or through an intermediate layer to perform data query and storage.

[0015] As a further solution of the present invention: the quantum encryption component is integrated with the 5G core network module to achieve the distribution of quantum keys and the establishment of encrypted communications through the 5G network;

[0016] The quantum encryption component cooperates with the virtualized network function management module to ensure flexible deployment and dynamic adjustment of quantum encryption functions;

[0017] The quantum encryption component is connected to the database for interaction to protect sensitive data in the database from unauthorized access and tampering.

[0018] As a further solution of the present invention: the 5G core network module establishes a connection with a client to provide high-speed, low-latency communication services;

[0019] The 5G core network module is tightly integrated with the quantum encryption component to ensure quantum encryption communication in the 5G network environment;

[0020] The 5G core network module is connected to the virtualized network function management module to support the virtualization and flexible deployment of network functions.

[0021] As a further solution of the present invention: the virtualized network function management module is connected to the 5G core network module, and is used to dynamically deploy and adjust network functions according to business needs;

[0022] The virtualized network function management module is interactively connected with the quantum encryption component to ensure flexible deployment and efficient operation of the quantum encryption function;

[0023] The virtualized network function management module is interactively connected to a database.

[0024] A technical solution in another aspect: a method for a quantum cryptographic security system based on 5GC-MANO as described in any one of the above, comprising the following steps:

[0025] Step S1: System initialization and configuration

[0026] System startup: First, the 5G core network module, virtualized network function management module, quantum encryption component and database are started in sequence, and self-check and initialized;

[0027] Network configuration: The 5G core network module configures network parameters, establishes a communication link with the client, and prepares to accept user connections;

[0028] Virtualized resource deployment: The virtualized network function management module dynamically deploys necessary virtualized network functions, such as firewalls and load balancers, according to system requirements to ensure network security and efficiency;

[0029] Quantum encryption component initialization: The quantum encryption component generates an initial quantum key pair and prepares for key distribution and encryption operations;

[0030] Database preparation: The database loads necessary user information, system configuration and other data, and is ready to accept query and storage requests from clients;

[0031] Step S2: User authentication and key distribution

[0032] User authentication: The client initiates a connection request to the system through the 5G core network module and submits user authentication information; after the 5G core network module verifies the user's identity, it allows the client to access the system;

[0033] Key request: The client initiates a key request to the quantum encryption component to request the generation of a new quantum key pair;

[0034] Key distribution: After the quantum encryption component generates a key pair, it distributes the public key to the client through the 5G core network module, while retaining the private key for subsequent decryption operations;

[0035] Step S3: Data encryption and transmission

[0036] Data encryption: The client uses the received public key to encrypt sensitive data and generate encrypted data;

[0037] Data transmission: Encrypted data is transmitted to the target recipient through the 5G core network module. During the transmission process, the data remains encrypted to ensure confidentiality;

[0038] Step S4: Data decryption and storage

[0039] Data reception: After receiving the encrypted data through the 5G core network module, the target recipient initiates a decryption request to the quantum encryption component;

[0040] Decryption operation: The quantum encryption component uses the private key to decrypt the encrypted data and restore the original data;

[0041] Data storage: The decrypted data is stored in the database as required; the database may encrypt the data again during the storage process to ensure the security of the data in a static storage state;

[0042] Step S5: System monitoring and maintenance

[0043] Performance monitoring: The virtualized network function management module monitors the system's performance indicators in real time, such as network latency and throughput, to ensure stable system operation;

[0044] Security audit: The system records and audits all user operations to track potential security threats and abnormal behaviors;

[0045] Key management: Quantum encryption components regularly update and rotate key pairs to prevent security risks caused by key leakage and expiration;

[0046] Fault recovery: When a system failure or abnormality occurs, the system can automatically recover from the fault or notify the administrator for manual intervention.

[0047] Compared with the prior art, the present invention has the following technical effects:

[0048] By adopting the above technical solution, a highly secure and efficient cryptographic security system is jointly constructed by integrating the client, quantum encryption components, 5G core network module, virtualized network function management module and database. The system ensures the absolute security of data transmission and storage through quantum encryption technology, and provides high-speed and low-latency communication services using the 5G core network. The virtualized network function management module flexibly deploys network resources and optimizes system performance. The database is responsible for securely storing user information, encryption keys and business data. The client serves as a user interaction interface to implement functions such as encrypted communication requests, data query and storage. Overall, the system not only improves the security of data transmission and storage, but also improves the system's operating efficiency and user experience through high integration and flexible deployment, providing reliable protection for the confidential transmission and storage of various sensitive information. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] The specific embodiments of the present invention are described in detail below in conjunction with the accompanying drawings:

[0050] Figure 1 This is a schematic diagram of the modules of the security system according to the embodiment disclosed in the present application. DETAILED DESCRIPTION

[0051] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0052] Please refer to Figure 1 ,In an embodiment of the present invention, a quantum cryptographic security system based on 5GC-MANO, the system includes a client, a quantum encryption component, a 5G core network module, a virtualized network function management module, and a database;

[0053] The client is used to share the randomly generated quantum key through the quantum channel to obtain sensitive data to be encrypted;

[0054] Quantum encryption components, which are used to automatically encrypt and decrypt sensitive data to ensure data security during storage and transmission;

[0055] 5G core network module, responsible for providing high-speed, low-latency, and high-reliability network services;

[0056] Virtualized network function management module, which is used to manage and orchestrate the life cycle of virtual network functions and coordinate resources and services of the entire NFV infrastructure;

[0057] Database used to store data using quantum encryption technology.

[0058] In this embodiment, the client establishes a connection with the 5G core network module through a secure communication protocol for data transmission in a 5G network environment;

[0059] The client interacts with the quantum cryptography component, requests the generation and distribution of quantum keys, and uses these keys to encrypt and decrypt data;

[0060] The client also interacts with the database directly or through a middle tier to perform data queries and storage.

[0061] In this embodiment, the quantum encryption component is integrated with the 5G core network module to achieve the distribution of quantum keys and the establishment of encrypted communications through the 5G network;

[0062] The quantum encryption component works with the virtualized network function management module to ensure flexible deployment and dynamic adjustment of quantum encryption functions;

[0063] The quantum encryption component is connected to the database to interact and protect sensitive data in the database from unauthorized access and tampering.

[0064] In this embodiment, the 5G core network module establishes a connection with the client to provide high-speed, low-latency communication services;

[0065] The 5G core network module is tightly integrated with the quantum encryption component to ensure quantum encryption communication in the 5G network environment;

[0066] The 5G core network module is connected to the virtualized network function management module to support the virtualization and flexible deployment of network functions.

[0067] In this embodiment, the virtualized network function management module is connected to the 5G core network module and is used to dynamically deploy and adjust network functions according to business needs;

[0068] The virtualized network function management module interacts with the quantum encryption component to ensure the flexible deployment and efficient operation of quantum encryption functions;

[0069] The virtualized network function management module is interactively connected to the database.

[0070] A technical solution in another aspect: a method for a quantum cryptographic security system based on 5GC-MANO as described in any one of the above, comprising the following steps:

[0071] Step S1: System initialization and configuration

[0072] System startup: First, the 5G core network module, virtualized network function management module, quantum encryption component and database are started in sequence, and self-check and initialized;

[0073] Network configuration: The 5G core network module configures network parameters, establishes a communication link with the client, and prepares to accept user connections;

[0074] Virtualized resource deployment: The virtualized network function management module dynamically deploys necessary virtualized network functions, such as firewalls and load balancers, according to system requirements to ensure network security and efficiency;

[0075] Quantum encryption component initialization: The quantum encryption component generates an initial quantum key pair and prepares for key distribution and encryption operations;

[0076] Database preparation: The database loads necessary user information, system configuration and other data, and is ready to accept query and storage requests from clients;

[0077] Step S2: User authentication and key distribution

[0078] User authentication: The client initiates a connection request to the system through the 5G core network module and submits user authentication information; after the 5G core network module verifies the user's identity, it allows the client to access the system;

[0079] Key request: The client initiates a key request to the quantum encryption component to request the generation of a new quantum key pair;

[0080] Key distribution: After the quantum encryption component generates a key pair, it distributes the public key to the client through the 5G core network module, while retaining the private key for subsequent decryption operations;

[0081] Step S3: Data encryption and transmission

[0082] Data encryption: The client uses the received public key to encrypt sensitive data and generate encrypted data;

[0083] Data transmission: Encrypted data is transmitted to the target recipient through the 5G core network module. During the transmission process, the data remains encrypted to ensure confidentiality;

[0084] Step S4: Data decryption and storage

[0085] Data reception: After receiving the encrypted data through the 5G core network module, the target recipient initiates a decryption request to the quantum encryption component;

[0086] Decryption operation: The quantum encryption component uses the private key to decrypt the encrypted data and restore the original data;

[0087] Data storage: The decrypted data is stored in the database as required; the database may encrypt the data again during the storage process to ensure the security of the data in a static storage state;

[0088] Step S5: System monitoring and maintenance

[0089] Performance monitoring: The virtualized network function management module monitors the system's performance indicators in real time, such as network latency and throughput, to ensure stable system operation;

[0090] Security audit: The system records and audits all user operations to track potential security threats and abnormal behaviors;

[0091] Key management: Quantum encryption components regularly update and rotate key pairs to prevent security risks caused by key leakage and expiration;

[0092] Fault recovery: When a system failure or abnormality occurs, the system can automatically recover from the fault or notify the administrator for manual intervention.

[0093] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention. The scope of the present invention is defined by the appended claims and their equivalents, and all should be included in the scope of protection of the present invention.

Claims

1. A quantum cryptographic security system based on 5GC-MANO, characterized in that: The system includes a client, a quantum encryption component, a 5G core network module, a virtualized network function management module, and a database; The client is used to share a randomly generated quantum key through a quantum channel to obtain sensitive data to be encrypted; The quantum encryption component is used to automatically encrypt and decrypt sensitive data to be encrypted, ensuring the security of the data during storage and transmission; The 5G core network module is responsible for providing high-speed, low-latency, and high-reliability network services; The virtualized network function management module is used to manage and orchestrate the life cycle of virtual network functions and coordinate the resources and services of the entire NFV infrastructure; The database is used to store data using quantum encryption technology.

2. According to claim 1, a quantum cryptographic security system based on 5GC-MANO is characterized in that: The client establishes a connection with the 5G core network module through a secure communication protocol for data transmission in a 5G network environment; The client interacts with the quantum encryption component, requests the generation and distribution of quantum keys, and uses these keys to encrypt and decrypt data; The client also interacts with the database directly or through an intermediate layer to perform data query and storage.

3. According to claim 2, a quantum cryptographic security system based on 5GC-MANO is characterized in that: The quantum encryption component is integrated with the 5G core network module to achieve the distribution of quantum keys and the establishment of encrypted communications through the 5G network; The quantum encryption component cooperates with the virtualized network function management module to ensure flexible deployment and dynamic adjustment of quantum encryption functions; The quantum encryption component is connected to the database for interaction to protect sensitive data in the database from unauthorized access and tampering.

4. According to claim 3, a quantum cryptographic security system based on 5GC-MANO is characterized in that: The 5G core network module establishes a connection with the client to provide high-speed, low-latency communication services; The 5G core network module is tightly integrated with the quantum encryption component to ensure quantum encryption communication in the 5G network environment; The 5G core network module is connected to the virtualized network function management module to support the virtualization and flexible deployment of network functions.

5. According to claim 1, a quantum cryptographic security system based on 5GC-MANO is characterized in that: The virtualized network function management module is connected to the 5G core network module and is used to dynamically deploy and adjust network functions according to business needs; The virtualized network function management module is interactively connected with the quantum encryption component to ensure flexible deployment and efficient operation of the quantum encryption function; The virtualized network function management module is interactively connected to a database.

6. A method comprising a 5GC-MANO-based quantum cryptographic security system as claimed in any one of claims 1 to 5, characterized in that: The following steps are involved: Step S1: System initialization and configuration System startup: First, the 5G core network module, virtualized network function management module, quantum encryption component and database are started in sequence, and self-check and initialized; Network configuration: The 5G core network module configures network parameters, establishes a communication link with the client, and prepares to accept user connections; Virtualized resource deployment: The virtualized network function management module dynamically deploys necessary virtualized network functions, such as firewalls and load balancers, according to system requirements to ensure network security and efficiency; Quantum encryption component initialization: The quantum encryption component generates an initial quantum key pair and prepares for key distribution and encryption operations; Database preparation: The database loads necessary user information, system configuration and other data, and is ready to accept query and storage requests from clients; Step S2: User authentication and key distribution User authentication: The client initiates a connection request to the system through the 5G core network module and submits user authentication information; after the 5G core network module verifies the user's identity, it allows the client to access the system; Key request: The client initiates a key request to the quantum encryption component to request the generation of a new quantum key pair; Key distribution: After the quantum encryption component generates a key pair, it distributes the public key to the client through the 5G core network module, while retaining the private key for subsequent decryption operations; Step S3: Data encryption and transmission Data encryption: The client uses the received public key to encrypt sensitive data and generate encrypted data; Data transmission: Encrypted data is transmitted to the target recipient through the 5G core network module. During the transmission process, the data remains encrypted to ensure confidentiality; Step S4: Data decryption and storage Data reception: After receiving the encrypted data through the 5G core network module, the target recipient initiates a decryption request to the quantum encryption component; Decryption operation: The quantum encryption component uses the private key to decrypt the encrypted data and restore the original data; Data storage: The decrypted data is stored in the database according to the requirements; The database may encrypt the data again during storage to ensure the security of the data in static storage state; Step S5: System monitoring and maintenance Performance monitoring: The virtualized network function management module monitors the system's performance indicators in real time, such as network latency and throughput, to ensure stable system operation; Security audit: The system records and audits all user operations to track potential security threats and abnormal behaviors; Key management: Quantum encryption components regularly update and rotate key pairs to prevent security risks caused by key leakage and expiration; Fault recovery: When a system failure or abnormality occurs, the system can automatically recover from the fault or notify the administrator for manual intervention.

Images