Key charging method and device, electronic equipment and storage medium

Abstract

The invention provides a key charging method and device, electronic equipment and a storage medium, and the method comprises the steps: controlling a target charging medium to send an online quantum key charging request to a password service platform when the remaining length of a first quantum key block in the target charging medium is detected to be smaller than a target preset value, controlling the password service platform to generate a second quantum key block, encrypting the second quantum key block, transmitting the encrypted second quantum key block to a target filling medium, performing target processing on the received encrypted second quantum key block, and sending a starting notification about the second quantum key block to the password service platform, and controlling the password service platform to start the second quantum key block through the start notification, sending a start result to the target charging medium, and determining start control of the target charging medium on the second quantum key block through the start result. According to the embodiment of the invention, manpower and resource cost are saved.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication technology, and in particular to a key injection method, device, electronic equipment and storage medium. Background Art

[0002] At present, a charging machine is usually directly connected to a quantum key management system or a cryptographic machine to securely charge quantum keys into a security chip or a special carrier. For example, a quantum key charging method for a communication terminal is disclosed in the related art, which establishes a connection relationship between a charging terminal, a quantum random number generator, an exchange cryptographic machine, and a cryptographic service platform, and uses an exchange cryptographic machine to replace a quantum key distribution device. The exchange cryptographic machine generates quantum keys based on quantum random numbers, and uses quantum key generation to charge quantum key pairs.

[0003] However, the above method is only applicable to quantum key charging in the scenario where the charged device, charging terminal, and cryptographic service platform / system are in the same physical location. In practical applications, there are also remote charging scenarios where the security of quantum keys needs to be ensured. For this scenario, the prior art discloses a key security charging method based on quantum key distribution, and the implementation steps include: the charging machine sends a first charging key request to the key management system on behalf of the security chip, and receives the charging information returned by the key management system; the charging machine sends the charging information to the first key manager, and the first key manager establishes a key distribution link with the second key manager via the QKDN (Quantum Key Distribution Network) controller; the charging machine sends a second charging key request to the first key manager, and charges the obtained charging key pair to the security chip; the key management system sends a third charging key request to the second key manager, and charges the obtained charging key pair to the server cryptographic machine. This enables quantum key charging in different location scenarios for the charging machine and the terminal being charged. However, the above charging process requires the use of a charging machine, multiple quantum key management systems in different scenarios, and a QKDN controller, which is costly and complex to control. In addition, it does not respond to abnormal situations in key charging and has poor robustness. Summary of the invention

[0004] In view of this, the present invention aims to propose a key injection method, device, electronic device and storage medium to solve the current remote injection scenario to ensure the security of quantum keys, which is costly and complex to control, and does not respond to abnormal situations of quantum key injection, and has poor robustness. The specific technical solution is as follows:

[0005] According to a first aspect of the present invention, a key injection method is provided, which is applied to a quantum key injection system, including a target injection medium and a cryptographic service platform, wherein the target injection medium and the cryptographic service platform establish a presentation layer state transfer Restful connection, and the method includes:

[0006] When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection;

[0007] Control the cryptographic service platform to generate a second quantum key block through the online quantum key filling request, and encrypt the second quantum key block and transmit it to the target filling medium;

[0008] After the received encrypted second quantum key block is subjected to target processing through the target filling medium, an activation notification of the second quantum key block is sent to the cryptographic service platform;

[0009] Controlling the cryptographic service platform to enable the second quantum key block through the activation notification, and sending the activation result to the target filling medium;

[0010] The enabling control of the second quantum key block by the target filling medium is determined according to the enabling result.

[0011] Optionally, the quantum key filling system further includes a filling machine, which, before controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection when detecting that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, further includes:

[0012] Controlling the filling machine to obtain the identity of the target filling medium;

[0013] Determining a first length of a first quantum key block to be applied for;

[0014] Sending a quantum key acquisition application to the cryptographic service platform through the charging machine, wherein the quantum key acquisition application carries the identity identifier and the first length;

[0015] Generate a first quantum key block of corresponding length according to the first length;

[0016] The first quantum key block is transmitted to the filling machine, so that the filling machine fills the target filling medium with the first quantum key block.

[0017] Optionally, before controlling the filling machine to obtain the identity of the target filling medium, the method further includes:

[0018] Pre-setting the association relationship between the cryptographic service platform and the target filling medium in a configuration file in the cryptographic service platform;

[0019] Configuring target security authentication information for the target filling medium through the association relationship, and storing the target security authentication information in the security authentication information record table of the cryptographic service platform;

[0020] Controlling the target filling medium to send a security authentication request to the cryptographic service platform through the Restful connection, wherein the security authentication request carries the target security authentication information and the identity identifier;

[0021] Retrieving the target security authentication information from the security authentication information record table;

[0022] If the retrieval is successful, a security token related to the identity identifier is obtained.

[0023] Optionally, when it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection includes:

[0024] When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, randomly selecting a first quantum key from the remaining first quantum key blocks;

[0025] Acquire first carried information of the online quantum key filling request, where the first carried information includes a quantum key sequence number of the first quantum key, an identity of the target filling medium, a second length of a second quantum key block to be applied for, and the security token;

[0026] Control the target filling medium to send an online quantum key filling request and the first carried information to the cryptographic service platform through the Restful connection.

[0027] Optionally, the step of controlling the cryptographic service platform to generate a second quantum key block through the online quantum key filling request, and encrypting the second quantum key block and transmitting it to the target filling medium includes:

[0028] Determining the validity of the online quantum key injection request through the identity identifier in the first carried information and the security token;

[0029] If it is determined that the online quantum key injection request is valid, generating a second quantum key block of corresponding length according to the second length in the first carried information;

[0030] Obtaining a second quantum key from the cryptographic service platform using the quantum key serial number in the first carried information, wherein the first quantum key and the second quantum key are the same quantum keys stored in different devices;

[0031] encrypting the second quantum key block by using the second quantum key;

[0032] The encrypted second quantum key block is transmitted to the target filling medium.

[0033] Optionally, after the encrypted second quantum key block is received through the target filling medium and subjected to target processing, sending an activation notification about the second quantum key block to the cryptographic service platform includes:

[0034] Decrypting the received encrypted second quantum key block using the first quantum key in the target filling medium;

[0035] Setting the decrypted second quantum key block to a pre-enabling mode;

[0036] Acquire second carried information of the activation notification, where the second carried information includes a quantum key block identifier of the second quantum key block, an identity identifier of the target filling medium, and the security token;

[0037] Sending an activation notification about the second quantum key block and the second carried information to the cryptographic service platform.

[0038] Optionally, the step of controlling the cryptographic service platform to enable the second quantum key block through the enabling notification and sending the enabling result to the target filling medium includes:

[0039] Controlling the cryptographic service platform to delete the first quantum key block and enable the second quantum key block through the activation notification;

[0040] Acquire an enabling state of enabling the second quantum key block;

[0041] If the activation is successful, sending a notification of successful activation to the target filling medium, so that the target filling medium activates the second quantum key block;

[0042] If the activation fails, an alarm prompt is sent and a notification of activation failure is sent to the target filling medium, so that the target filling medium temporarily stops activating the second quantum key block.

[0043] According to a second aspect of the present invention, a key injection device is provided, which is applied to a quantum key injection system, including a target injection medium and a cryptographic service platform, wherein the target injection medium and the cryptographic service platform establish a presentation layer state transfer RESTful connection, and the device includes:

[0044] A first sending module is used to control the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection when detecting that the remaining length of the first quantum key block in the target filling medium is less than a target preset value;

[0045] A first transmission module, configured to control the cryptographic service platform to generate a second quantum key block through the online quantum key injection request, and encrypt the second quantum key block and transmit it to the target injection medium;

[0046] A second sending module is used to send an activation notification of the second quantum key block to the cryptographic service platform after the received encrypted second quantum key block is subjected to target processing through the target filling medium;

[0047] A third sending module, configured to control the cryptographic service platform to enable the second quantum key block through the activation notification, and send the activation result to a target filling medium;

[0048] A first determining module is used to determine the enabling control of the second quantum key block by the target filling medium according to the enabling result.

[0049] According to another aspect of the present invention, there is also provided an electronic device, comprising:

[0050] processor;

[0051] a memory for storing instructions executable by the processor;

[0052] The processor is configured to execute the instructions to implement the key injection method as described above.

[0053] According to another aspect of the present invention, a readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the key injection method described above are implemented.

[0054] The key filling method provided by the embodiment of the present invention is applied to the quantum key filling system, including a target filling medium and a cryptographic service platform. The target filling medium and the cryptographic service platform establish a presentation layer state transfer Restful connection. When it is detected that the remaining length of the first quantum key block in the target filling medium is less than the target preset value, the target filling medium is controlled to send an online quantum key filling request to the cryptographic service platform through the Restful connection. The cryptographic service platform is controlled to generate a second quantum key block through the online quantum key filling request, and the second quantum key block is encrypted and transmitted to the target filling medium. The quantum key block is obtained online through the Restful connection, which can not only realize remote filling, but also reduce the amount of The increase of external equipment saves manpower and resource costs. In addition, the use of quantum key encryption makes the entire charging process quantum safe. The encrypted second quantum key block received is processed by the target charging medium, and an activation notification about the second quantum key block is sent to the cryptographic service platform; the cryptographic service platform is controlled to activate the second quantum key block through the activation notification, and the activation result is sent to the target charging medium; the activation control of the second quantum key block by the target charging medium is determined through the activation result, and a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously, so as to avoid the problem that the new quantum key has not been completed due to abnormalities in the online charging process and the old quantum key has been abandoned, thereby improving robustness. The embodiment of the present invention obtains the quantum key block online through the Restful connection, which can not only realize remote charging, but also reduce the addition of additional equipment, save manpower and resource costs. At the same time, the quantum key block in the online charging process uses quantum key encryption, so that the entire charging process has quantum security. In addition, in order to solve the problem that the new quantum key has not been fully charged and the old quantum key has been abandoned due to an abnormality in the online charging process, a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously. Finally, the target preset value and the length of the quantum key block can be freely set, which can be flexibly applied to different business scenarios.

[0055] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0057] Figure 1is a flowchart of a key injection method provided by an embodiment of the present invention;

[0058] Figure 2 It is a schematic diagram of an application scenario of a key injection method provided by an embodiment of the present invention;

[0059] Figure 3 yes Figure 2 The flowchart of step 101 in a key injection method provided by an embodiment of the present invention is shown;

[0060] Figure 4 yes Figure 2 The flowchart of step 102 in a key injection method provided by an embodiment of the present invention is shown;

[0061] Figure 5 yes Figure 2 The flowchart of step 103 in a key injection method provided by an embodiment of the present invention is shown;

[0062] Figure 6 It is a structural schematic diagram of a key charging device provided by an embodiment of the present invention;

[0063] Figure 7 It is a structural schematic diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0064] To make the purpose, technical scheme and advantages of the embodiments of the present invention clearer, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. However, it will be appreciated by those skilled in the art that in the embodiments of the present invention, many technical details are proposed in order to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can be implemented. The division of the following embodiments is for the convenience of description, and should not constitute any limitation on the specific implementation of the present invention. The various embodiments can be combined and referenced with each other without contradiction.

[0065] The embodiment of the present invention is applied to a quantum key filling system, including a filling machine, a target filling medium and a cryptographic service platform, such as Figure 1As shown, the charging machine establishes connections with the target charging medium and the cryptographic service platform respectively, and the target charging medium and the cryptographic service platform establish a presentation layer state transfer RESTful connection. Before the target charging medium and the cryptographic service platform establish the presentation layer state transfer RESTful connection, the charging machine pre-charges a batch of quantum key blocks for the target charging medium. At this time, the charging machine obtains a batch of quantum keys from the cryptographic service platform in advance, and then charges them into the target charging medium. After that, when it is detected that the length of the pre-charged quantum key block is less than the preset value, the online quantum key charging is triggered. At this time, the target charging medium and the cryptographic service platform establish a presentation layer state transfer RESTful connection , the target charging medium sends an online quantum key charging request to the cryptographic service platform through the online charging module. The cryptographic service platform generates the target quantum key block through the online charging key block generation module according to the online quantum key charging request, encrypts it and returns it to the target charging medium. After receiving the target quantum key block, the target charging medium sends a quantum key activation notification to the cryptographic service platform by enabling the target quantum key block. After receiving the quantum key activation notification, the cryptographic service platform formally activates the target quantum key block and returns the activation result to the target charging medium by enabling the target quantum key block. The target charging medium determines whether to formally activate the target quantum key block according to the activation result. It can be seen that in the pre-charging stage, the charging machine serves as a bridge for the transmission of data (pre-charged quantum key block) between the target charging medium and the cryptographic service platform. In the online key charging stage, after the target charging medium and the cryptographic service platform establish a presentation layer state transfer Restful connection, the target charging medium and the cryptographic service platform directly transmit data (target quantum key block)).

[0066] Reference Figure 2 , shows a flowchart of the steps of a key injection method provided by an embodiment of the present invention, the method may include:

[0067] Step 101, when it is detected that the remaining length of the first quantum key block in the target filling medium is less than a first preset value, the target filling medium is controlled to send an online quantum key filling request to the cryptographic service platform through a Restful connection.

[0068] In the embodiments of the present invention, the filling medium does not refer to physical material filling, but refers to the quantum state transmitted during the quantum key distribution process. In QKD (Quantum Key Distribution), the filling medium usually refers to the quantum bits (qubits) that carry quantum key information. These quantum bits can be realized through different physical carriers, such as photons, atoms or electrons, etc., and are transmitted from the sender (usually called Alice) to the receiver (usually called Bob) through a quantum channel. This process needs to ensure the integrity and security of the quantum state to prevent an eavesdropper (usually called Eve) from obtaining quantum key information.

[0069] It should be noted that the cryptographic service platform pre-fills a batch of quantum keys for the filling medium through the filling machine before it is put into business use. In order to achieve this purpose, the filling machine needs to first identify or obtain the unique identity of the target filling medium. This identity may be the serial number, network address or other unique identification information of the device, which is not specifically limited in the present invention. The length of the pre-filled batch of quantum keys is then determined, and then the filling machine sends a quantum key acquisition application to the cryptographic service platform. The application carries the identity of the target filling medium and the length information of the required quantum key block. After receiving the quantum key acquisition application, the cryptographic service platform generates a quantum key block of corresponding length according to the length specified in the application. This quantum key block is randomly generated to ensure its security. The cryptographic service platform sends the generated quantum key block back to the filling machine. The filling machine then injects this quantum key block into the target filling medium to complete the quantum key distribution process. The specific steps include:

[0070] Controlling the filling machine to obtain the identity of the target filling medium;

[0071] Determining a first length of a first quantum key block to be applied for;

[0072] Sending a quantum key acquisition application to the cryptographic service platform through the charging machine, wherein the quantum key acquisition application carries an identity identifier and a first length;

[0073] Generate a first quantum key block of corresponding length according to the first length;

[0074] The first quantum key block is transmitted to the charging machine so that the charging machine charges the target charging medium with the first quantum key block.

[0075] In the above steps, the number of quantum keys in the quantum key block can be determined by the first length. For example, if the length of a quantum key is predefined as 128 bits (bits), and the first length is set to 512 bits, then the number of quantum keys contained in the quantum key block is: 512÷128=4, which means that the quantum key block contains 4 128-bit quantum keys. In practical applications, the length of the quantum key and the size of the quantum key block may vary according to different business requirements, scenarios and system designs. It is important to ensure that the length of the quantum key is long enough to provide sufficient security, and the size of the quantum key block should also be moderate to facilitate management and distribution. The present invention does not make specific limitations here.

[0076] In addition, before the target charging medium sends an online quantum key charging request through the Restful connection, the charging medium is required to initiate a security authentication to the cryptographic service platform. To achieve this purpose, the association relationship of the target charging medium will be pre-configured in the cryptographic service platform, which usually involves defining the identity and other related information of the target charging medium in the configuration file. According to the pre-configured association relationship, security authentication information (such as certificates, network access signals, mobile phone numbers, etc.) is generated or allocated for the target charging medium, and this information is stored in the security authentication information record table of the cryptographic service platform. The target charging medium sends a security authentication request to the cryptographic service platform through the Restful connection (a communication method based on HTTP). This request contains the security authentication information and identity of the target charging medium for verification by the cryptographic service platform. After receiving the security authentication request, the cryptographic service platform will retrieve the security authentication information of the target charging medium in the security authentication information record table to verify the legitimacy of the request. If the retrieval is successful, that is, the cryptographic service platform finds the matching security authentication information, it will generate a security token, which can be used for subsequent communication and operation authentication. The specific steps include:

[0077] Pre-setting the association relationship between the cryptographic service platform and the target charging medium in a configuration file in the cryptographic service platform;

[0078] Configure target security authentication information for the target filling medium through the association relationship, and store the target security authentication information in the security authentication information record table of the cryptographic service platform;

[0079] Control the target filling medium to send a security authentication request to the cryptographic service platform through a Restful connection, wherein the security authentication request carries the target security authentication information and identity;

[0080] Retrieve the target security authentication information from the security authentication information record table;

[0081] If the retrieval is successful, a security token related to the identity is obtained.

[0082] The above steps ensure the security authentication between the target filling medium and the cryptographic service platform, and provide a basis for the subsequent quantum key distribution and management. In practical applications, this process may need to follow strict security protocols and authentication mechanisms to prevent security information from being intercepted or tampered with during transmission.

[0083] Further, step 101, such as Figure 3 As shown:

[0084] Step 1011: When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a first preset value, the first quantum key is randomly selected from the remaining first quantum key blocks.

[0085] In the embodiment of the present invention, the use of the first quantum key block in the target filling medium is monitored according to a preset period or in real time. When it is detected that the remaining length of the first quantum key block (that is, the number of unused quantum key bits) is less than a preset security threshold (first preset value) (since the length of a quantum key is predefined, the number of remaining quantum keys can be determined according to the remaining length, so it can also be set here that the number of remaining quantum keys in the target filling medium is less than the preset security threshold), a quantum key (first quantum key) is randomly selected from the remaining first quantum key blocks, and this quantum key is used for subsequent encryption and decryption.

[0086] Step 1012, obtaining first carried information of the online quantum key injection request, the first carried information including the quantum key serial number of the first quantum key, the identity of the target injection medium, the second length of the second quantum key block to be applied for, and the security token.

[0087] In the embodiment of the present invention, the quantum key serial number is a unique identifier of the quantum key and is used to determine the identity information of the quantum key. Therefore, the quantum key serial number of the first quantum key can be used to subsequently search and determine the first quantum key.

[0088] Step 1013, control the target filling medium to send an online quantum key filling request and the first carried information to the cryptographic service platform through a Restful connection.

[0089] The first carried information in the embodiment of the present invention is the information carried in the online quantum key injection request, and this carried information will be sent together when the online quantum key injection request is sent.

[0090] The above steps ensure that when the quantum key block is about to be exhausted, a new quantum key block can be applied for in time, thereby ensuring the continued safe operation of the system.

[0091] Step 102: Control the cryptographic service platform to generate a second quantum key block through an online quantum key filling request, and encrypt the second quantum key block and transmit it to the target filling medium.

[0092] In the embodiment of the present invention, after receiving the online quantum key charging request, the cryptographic service platform generates a second quantum key block according to the first carried information carried by the online quantum key charging request. In order to ensure the security of transmission, the embodiment of the present invention finds the second quantum key through the quantum key sequence number of the first quantum key (because the first quantum key block is also generated from the cryptographic service platform and charged to the target charging medium, the quantum key sequence number of the first quantum key obtained from the target charging medium can also find the corresponding first quantum key in the cryptographic service platform. In order to distinguish, the first quantum key found by the cryptographic service platform is called the second quantum key), and then the second quantum key block is encrypted by the second quantum key and transmitted to the target charging medium. It should be noted that during the online quantum key charging, only the cryptographic service platform and the target charging medium participate in the online charging of the quantum key, so the second quantum key block is generated on the cryptographic service platform, and after it is encrypted, it can be directly transmitted to the target charging medium, specifically, the storage medium stored in the target charging medium, wherein the storage medium can be a device disk, a SIM card, etc., which is not specifically limited in the present invention.

[0093] Further, step 102, such as Figure 4 As shown:

[0094] Step 1021, determine the validity of the online quantum key injection request through the identity identifier and security token in the first carried information.

[0095] In this step, the cryptographic service platform verifies the validity of the online quantum key injection request. By checking the identity and security token in the first carried information, the cryptographic service platform can confirm whether the request comes from a legitimate target injection medium and whether the request has been properly authenticated.

[0096] Step 1022: When it is determined that the online quantum key injection request is valid, a second quantum key block of corresponding length is generated using the second length in the first carried information.

[0097] If the online quantum key injection request is confirmed to be valid, the cryptographic service platform will generate a new quantum key block (second quantum key block) according to the second length in the first carried information. The length of this quantum key block matches the second length specified in the request.

[0098] Step 1023, obtaining a second quantum key from the cryptographic service platform through the quantum key serial number in the first carried information, wherein the first quantum key and the second quantum key are the same quantum keys stored in different devices.

[0099] The cryptographic service platform will obtain the second quantum key based on the quantum key serial number in the first carried information. It is worth noting that the first quantum key and the second quantum key are the same quantum key, but they are stored in different devices. (The first quantum key is stored in the target filling medium, and the second quantum key is stored in the cryptographic service platform)

[0100] Step 1024, encrypting the second quantum key block using the second quantum key.

[0101] After obtaining the second quantum key, the cryptographic service platform will use this quantum key to encrypt the newly generated second quantum key block. The purpose of this is to protect the security of the quantum key block during transmission and prevent the quantum key information from being obtained by unauthorized third parties.

[0102] Step 1025, transmitting the encrypted second quantum key block to the target filling medium.

[0103] The cryptographic service platform will send the encrypted second quantum key block directly to the target filling medium. It can be seen that the online filling process of the present application only requires the participation of the target filling medium and the cryptographic service platform, which greatly reduces the cost.

[0104] Step 103, after the received encrypted second quantum key block is subjected to target processing through the target filling medium, an activation notification of the second quantum key block is sent to the cryptographic service platform.

[0105] The target processing in the embodiment of the present invention includes decrypting the received encrypted second quantum key block and setting the new quantum key block as a pre-enabled quantum key block (it can also be considered that the second quantum key block is adjusted to a pre-enabled mode). At this time, the quantum key block cannot be enabled. When sending an activation notification about the second quantum key block, in order to ensure that the cryptographic service platform can clearly find the corresponding quantum key block, the quantum key block identifier of the second quantum key block will be sent together.

[0106] Further, step 103, such as Figure 5 As shown:

[0107] Step 1031, decrypt the received encrypted second quantum key block using the first quantum key in the target filling medium.

[0108] Because the second quantum key block is encrypted by the second quantum key stored in the cryptographic service platform, and the second quantum key and the first quantum key are the same quantum keys stored in different devices, the received encrypted second quantum key block can be decrypted by the first quantum key.

[0109] Step 1032, setting the decrypted second quantum key block to a pre-enabling mode.

[0110] The decrypted second quantum key block is set to pre-enabling mode, which means that the second quantum key block is ready for use, but has not yet been officially activated and cannot be used at this time. The pre-enabling mode is usually used to ensure that the quantum key block will not be accidentally used before it is officially enabled, thereby providing additional security.

[0111] Step 1033, obtaining the second carried information of the activation notification, where the second carried information includes the quantum key block identifier of the second quantum key block, the identity identifier of the target filling medium, and the security token.

[0112] The quantum key block identifier of the second quantum key block is used to uniquely identify the second quantum key block. The security token is used to verify the legitimacy of the request.

[0113] Step 1034, sending an activation notification about the second quantum key block and the second carried information to the cryptographic service platform.

[0114] The second carried information in the embodiment of the present invention is the information carried in the activation notification about the second quantum key block, and this carried information will be sent together when the activation notification about the second quantum key block is sent.

[0115] Step 104, enabling the second quantum key block by controlling the cryptographic service platform through an enabling notification, and sending the enabling result to the target filling medium.

[0116] In the embodiment of the present invention, because the cryptographic service platform can only store the quantum key block of one target filling medium at a time, the cryptographic service platform will delete the remaining first quantum key block after receiving the activation notification, and then activate the new second quantum key block. However, the activation may fail due to some factors, so it is also necessary to monitor the activation status of the second quantum key block. If the activation status of the second quantum key block is displayed as successful, the cryptographic service platform will send a notification of successful activation to the target filling medium. After receiving this notification, the target filling medium will formally activate the second quantum key block and start using the new quantum key for encryption operations. If the activation status of the second quantum key block is displayed as failed, the cryptographic service platform will send an alarm prompt and send a notification of failed activation to the target filling medium at the same time. After receiving this notification, the target filling medium will suspend the activation of the second quantum key block and continue to use the first quantum key block. The specific steps include:

[0117] Controlling the cryptographic service platform to delete the first quantum key block and enable the second quantum key block through the activation notification;

[0118] Acquire an enabling state of enabling the second quantum key block;

[0119] If the activation is successful, sending a notification of successful activation to the target filling medium, so that the target filling medium activates the second quantum key block;

[0120] If the activation fails, an alarm prompt is sent and a notification of activation failure is sent to the target filling medium, so that the target filling medium temporarily stops activating the second quantum key block.

[0121] The above steps ensure the smooth replacement of quantum key blocks and that any potential problems can be discovered and addressed in a timely manner during the activation process.

[0122] Step 105: Determine the activation control of the target filling medium on the second quantum key block through the activation result.

[0123] In the embodiment of the present invention, the activation result may include two types: activation success and activation failure. When the activation is successful, the target filling medium synchronously activates the second quantum key block. When the activation fails, the target filling medium will continue to use the first quantum key block and will not activate the second quantum key block temporarily.

[0124] The key filling method provided by the embodiment of the present invention is applied to the quantum key filling system, including a target filling medium and a cryptographic service platform. The target filling medium and the cryptographic service platform establish a presentation layer state transfer Restful connection. When it is detected that the remaining length of the first quantum key block in the target filling medium is less than the target preset value, the target filling medium is controlled to send an online quantum key filling request to the cryptographic service platform through the Restful connection. The cryptographic service platform is controlled to generate a second quantum key block through the online quantum key filling request, and the second quantum key block is encrypted and transmitted to the target filling medium. The quantum key block is obtained online through the Restful connection, which can not only realize remote filling, but also reduce the amount of The increase of external equipment saves manpower and resource costs. In addition, the use of quantum key encryption makes the entire charging process quantum safe. The encrypted second quantum key block received is processed by the target charging medium, and an activation notification about the second quantum key block is sent to the cryptographic service platform; the cryptographic service platform is controlled to activate the second quantum key block through the activation notification, and the activation result is sent to the target charging medium; the activation control of the second quantum key block by the target charging medium is determined through the activation result, and a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously, so as to avoid the problem that the new quantum key has not been completed due to abnormalities in the online charging process and the old quantum key has been abandoned, thereby improving robustness. The embodiment of the present invention obtains the quantum key block online through the Restful connection, which can not only realize remote charging, but also reduce the addition of additional equipment, save manpower and resource costs. At the same time, the quantum key block in the online charging process uses quantum key encryption, so that the entire charging process has quantum security. In addition, in order to solve the problem that the new quantum key has not been fully charged and the old quantum key has been abandoned due to an abnormality in the online charging process, a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously. Finally, the target preset value and the length of the quantum key block can be freely set, which can be flexibly applied to different business scenarios.

[0125] Reference Figure 6 , shows a schematic diagram of the structure of a key injection device provided by an embodiment of the present invention, which is applied to a quantum key injection system, including a target injection medium and a cryptographic service platform, wherein the target injection medium and the cryptographic service platform establish a presentation layer state transfer Restful connection, and the device includes:

[0126] The first sending module 201 is used to control the target filling medium to send an online quantum key filling request to the cryptographic service platform through a Restful connection when it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value.

[0127] The first transmission module 202 is used to control the cryptographic service platform to generate a second quantum key block through an online quantum key injection request, and encrypt the second quantum key block and transmit it to a target injection medium.

[0128] The second sending module 203 is used to send an activation notification of the second quantum key block to the cryptographic service platform after the received encrypted second quantum key block is subjected to target processing through the target filling medium.

[0129] The third sending module 204 is used to control the cryptographic service platform to enable the second quantum key block through an enabling notification, and send the enabling result to the target filling medium.

[0130] The first determining module 205 is used to determine the enabling control of the second quantum key block by the target filling medium according to the enabling result.

[0131] Optionally, the quantum key filling system further includes a filling machine, and the key filling device further includes:

[0132] The first control module is used to control the filling machine to obtain the identity of the target filling medium.

[0133] The second determining module is used to determine the first length of the first quantum key block to be applied for.

[0134] The fourth sending module is used to send a quantum key acquisition application to the cryptographic service platform through the charging machine, where the quantum key acquisition application carries an identity identifier and a first length.

[0135] A generating module is used to generate a first quantum key block of corresponding length according to the first length.

[0136] The second transmission module is used to transmit the first quantum key block to the filling machine, so that the filling machine fills the target filling medium with the first quantum key block.

[0137] The setting module is used to pre-set the association relationship between the cryptographic service platform and the target charging medium in the configuration file in the cryptographic service platform.

[0138] The storage module is used to configure target security authentication information for the target filling medium through an association relationship, and store the target security authentication information in a security authentication information record table of the cryptographic service platform.

[0139] The second control module is used to control the target filling medium to send a security authentication request to the cryptographic service platform through a Restful connection, wherein the security authentication request carries target security authentication information and an identity.

[0140] The retrieval module is used to retrieve the target security authentication information in the security authentication information record table.

[0141] The acquisition module is used to obtain a security token related to the identity if the retrieval is successful.

[0142] Optionally, the first sending module 201 specifically includes:

[0143] The screening submodule is used to randomly screen out the first quantum key from the remaining first quantum key blocks when it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value.

[0144] The first acquisition submodule is used to obtain first carried information of the online quantum key injection request, where the first carried information includes the quantum key sequence number of the first quantum key, the identity of the target injection medium, the second length of the second quantum key block to be applied for, and the security token.

[0145] The first sending submodule is used to control the target filling medium to send an online quantum key filling request and first carry information to the cryptographic service platform through a Restful connection.

[0146] Optionally, the first transmission module 202 specifically includes:

[0147] The first determination submodule is used to determine the validity of the online quantum key injection request through the identity identifier and the security token in the first carried information.

[0148] The first generating submodule is used to generate a second quantum key block of corresponding length according to the second length in the first carried information when it is determined that the online quantum key injection request is valid.

[0149] The second acquisition submodule is used to obtain a second quantum key from the cryptographic service platform through the quantum key serial number in the first carried information, wherein the first quantum key and the second quantum key are the same quantum keys stored in different devices.

[0150] The encryption submodule is used to encrypt the second quantum key block using the second quantum key.

[0151] The transmission submodule is used to transmit the encrypted second quantum key block to the target filling medium.

[0152] Optionally, the second sending module 203 specifically includes:

[0153] The decryption submodule is used to decrypt the received encrypted second quantum key block using the first quantum key in the target filling medium.

[0154] The mode setting submodule is used to set the decrypted second quantum key block to a pre-enabling mode.

[0155] The third acquisition submodule is used to acquire second carried information of the activation notification, where the second carried information includes the quantum key block identifier of the second quantum key block, the identity identifier of the target filling medium, and the security token.

[0156] The second sending submodule is used to send an activation notification about the second quantum key block and the second carried information to the cryptographic service platform.

[0157] Optionally, the third sending module 204 specifically includes:

[0158] The enabling submodule is used to control the cryptographic service platform to delete the first quantum key block and enable the second quantum key block through enabling notification.

[0159] The fourth acquisition submodule is used to obtain the enabling state of enabling the second quantum key block.

[0160] The third sending submodule is used to send a notification of successful activation to the target filling medium if the activation is successful, so that the target filling medium activates the second quantum key block.

[0161] The fourth sending submodule is used to send an alarm prompt and a notification of activation failure to the target filling medium if the activation fails, so that the target filling medium temporarily stops activating the second quantum key block.

[0162] The key filling method provided by the embodiment of the present invention is applied to the quantum key filling system, including a target filling medium and a cryptographic service platform. The target filling medium and the cryptographic service platform establish a presentation layer state transfer Restful connection. When it is detected that the remaining length of the first quantum key block in the target filling medium is less than the target preset value, the target filling medium is controlled to send an online quantum key filling request to the cryptographic service platform through the Restful connection. The cryptographic service platform is controlled to generate a second quantum key block through the online quantum key filling request, and the second quantum key block is encrypted and transmitted to the target filling medium. The quantum key block is obtained online through the Restful connection, which can not only realize remote filling, but also reduce the amount of The increase of external equipment saves manpower and resource costs. In addition, the use of quantum key encryption makes the entire charging process quantum safe. The encrypted second quantum key block received is processed by the target charging medium, and an activation notification about the second quantum key block is sent to the cryptographic service platform; the cryptographic service platform is controlled to activate the second quantum key block through the activation notification, and the activation result is sent to the target charging medium; the activation control of the second quantum key block by the target charging medium is determined through the activation result, and a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously, so as to avoid the problem that the new quantum key has not been completed due to abnormalities in the online charging process and the old quantum key has been abandoned, thereby improving robustness. The embodiment of the present invention obtains the quantum key block online through the Restful connection, which can not only realize remote charging, but also reduce the addition of additional equipment, save manpower and resource costs. At the same time, the quantum key block in the online charging process uses quantum key encryption, so that the entire charging process has quantum security. In addition, in order to solve the problem that the new quantum key has not been fully charged and the old quantum key has been abandoned due to an abnormality in the online charging process, a two-way confirmation mechanism is adopted to ensure that the charging medium and the cryptographic service platform start the new quantum key synchronously. Finally, the target preset value and the length of the quantum key block can be freely set, which can be flexibly applied to different business scenarios.

[0163] Reference Figure 7 , shows an electronic device provided by an embodiment of the present invention, comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to execute the instructions to implement any key injection method.

[0164] Figure 7 1 is a block diagram of an electronic device 300 according to an exemplary embodiment. For example, the electronic device 300 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0165] Reference Figure 7, the electronic device 300 may include one or more of the following components: a processing component 302 , a memory 304 , a power component 306 , a multimedia component 308 , an audio component 310 , an input / output interface 312 , a sensor component 314 , and a communication component 316 .

[0166] The processing component 302 generally controls the overall operation of the device 300, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 302 may include one or more processors 320 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 302 may include one or more modules to facilitate the interaction between the processing component 302 and other components. For example, the processing component 302 may include a multimedia module to facilitate the interaction between the multimedia component 308 and the processing component 302.

[0167] The memory 304 is configured to store various types of data to support operations on the device 300. Examples of such data include instructions for any application or method operating on the device 300, contact data, phone book data, messages, pictures, videos, etc. The memory 304 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0168] The power supply component 306 provides power to the various components of the electronic device 300. The power supply component 306 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the electronic device 300.

[0169] The multimedia component 308 includes a screen that provides an output interface between the electronic device 300 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 308 includes a front camera and / or a rear camera. When the electronic device 300 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0170] The audio component 310 is configured to output and / or input audio signals. For example, the audio component 310 includes a microphone (MIC), and when the electronic device 300 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 304 or sent via the communication component 316. In some embodiments, the audio component 310 also includes a speaker for outputting audio signals.

[0171] The input / output interface 312 provides an interface between the processing component 302 and the peripheral interface modules, which may be keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: a home button, a volume button, a start button, and a lock button.

[0172] The sensor assembly 314 includes one or more sensors for providing various aspects of status assessment for the electronic device 300. For example, the sensor assembly 314 can detect the open / closed state of the electronic device 300, the relative positioning of components, such as the display and keypad of the electronic device 300, and the sensor assembly 314 can also detect the position change of the electronic device 300 or a component of the electronic device 300, the presence or absence of user contact with the electronic device 300, the orientation or acceleration / deceleration of the electronic device 300, and the temperature change of the electronic device 300. The sensor assembly 314 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 314 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 314 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0173] The communication component 316 is configured to facilitate wired or wireless communication between the electronic device 300 and other devices. The electronic device 300 can access a wireless network based on a communication standard, such as WiFi, a carrier network (such as 2G, 3G, 4G or 5G), or a combination thereof. In an exemplary embodiment, the communication component 316 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 316 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0174] In an exemplary embodiment, the electronic device 300 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above methods.

[0175] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 304 including instructions, and the instructions can be executed by a processor 320 of an electronic device 300 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0176] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk Solid State Disk (SSD)), etc.

[0177] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0178] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0179] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A key filling method, characterized in that: Applied to a quantum key filling system, comprising a target filling medium and a cryptographic service platform, wherein the target filling medium and the cryptographic service platform establish a presentation layer state transfer RESTful connection, and the method comprises: When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection; Control the cryptographic service platform to generate a second quantum key block through the online quantum key injection request, and encrypt the second quantum key block and transmit it to the target injection medium; After the received encrypted second quantum key block is subjected to target processing through the target filling medium, an activation notification of the second quantum key block is sent to the cryptographic service platform; Controlling the cryptographic service platform to enable the second quantum key block through the activation notification, and sending the activation result to the target filling medium; The enabling control of the second quantum key block by the target filling medium is determined according to the enabling result.

2. The method according to claim 1, characterized in that: The quantum key filling system also includes a filling machine, which, before controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection when detecting that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, further includes: Controlling the filling machine to obtain the identity of the target filling medium; Determining a first length of a first quantum key block to be applied for; Sending a quantum key acquisition application to the cryptographic service platform through the charging machine, wherein the quantum key acquisition application carries the identity identifier and the first length; Generate a first quantum key block of corresponding length according to the first length; The first quantum key block is transmitted to the filling machine, so that the filling machine fills the target filling medium with the first quantum key block.

3. The method according to claim 2, characterized in that Before controlling the filling machine to obtain the identity of the target filling medium, the method further includes: Pre-setting the association relationship between the cryptographic service platform and the target filling medium in a configuration file in the cryptographic service platform; Configuring target security authentication information for the target filling medium through the association relationship, and storing the target security authentication information in the security authentication information record table of the cryptographic service platform; Controlling the target filling medium to send a security authentication request to the cryptographic service platform through the Restful connection, wherein the security authentication request carries the target security authentication information and the identity identifier; Retrieving the target security authentication information from the security authentication information record table; If the retrieval is successful, a security token related to the identity identifier is obtained.

4. The method according to claim 3, characterized in that When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, controlling the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection includes: When it is detected that the remaining length of the first quantum key block in the target filling medium is less than a target preset value, randomly selecting a first quantum key from the remaining first quantum key blocks; Acquire first carried information of the online quantum key filling request, where the first carried information includes a quantum key sequence number of the first quantum key, an identity of the target filling medium, a second length of a second quantum key block to be applied for, and the security token; Control the target filling medium to send an online quantum key filling request and the first carried information to the cryptographic service platform through the Restful connection.

5. The method according to claim 4, characterized in that The step of controlling the cryptographic service platform to generate a second quantum key block through the online quantum key filling request, and encrypting the second quantum key block and transmitting it to the target filling medium comprises: Determining the validity of the online quantum key injection request through the identity identifier in the first carried information and the security token; If it is determined that the online quantum key injection request is valid, generating a second quantum key block of corresponding length according to the second length in the first carried information; Obtaining a second quantum key from the cryptographic service platform using the quantum key serial number in the first carried information, wherein the first quantum key and the second quantum key are the same quantum keys stored in different devices; encrypting the second quantum key block by using the second quantum key; The encrypted second quantum key block is transmitted to the target filling medium.

6. The method according to claim 4, characterized in that After the encrypted second quantum key block is received through the target filling medium and subjected to target processing, an activation notification of the second quantum key block is sent to the cryptographic service platform, including: Decrypting the received encrypted second quantum key block using the first quantum key in the target filling medium; Setting the decrypted second quantum key block to a pre-enabling mode; Acquire second carried information of the activation notification, where the second carried information includes a quantum key block identifier of the second quantum key block, an identity identifier of the target filling medium, and the security token; Sending an activation notification about the second quantum key block and the second carried information to the cryptographic service platform.

7. The method according to claim 1, characterized in that The step of controlling the cryptographic service platform to enable the second quantum key block through the activation notification and sending the activation result to the target filling medium includes: Controlling the cryptographic service platform to delete the first quantum key block and enable the second quantum key block through the activation notification; Acquire an enabling state of enabling the second quantum key block; If the activation is successful, sending a notification of successful activation to the target filling medium, so that the target filling medium activates the second quantum key block; If the activation fails, an alarm prompt is sent and a notification of activation failure is sent to the target filling medium, so that the target filling medium temporarily stops activating the second quantum key block.

8. A key filling device, characterized in that: Applied to a quantum key filling system, including a target filling medium and a cryptographic service platform, the target filling medium and the cryptographic service platform establish a presentation layer state transfer RESTful connection, and the device includes: A first sending module is used to control the target filling medium to send an online quantum key filling request to the cryptographic service platform through the Restful connection when detecting that the remaining length of the first quantum key block in the target filling medium is less than a target preset value; A first transmission module, configured to control the cryptographic service platform to generate a second quantum key block through the online quantum key injection request, and encrypt the second quantum key block and transmit it to the target injection medium; A second sending module is used to send an activation notification of the second quantum key block to the cryptographic service platform after the received encrypted second quantum key block is subjected to target processing through the target filling medium; A third sending module, configured to control the cryptographic service platform to enable the second quantum key block through the activation notification, and send the activation result to a target filling medium; A first determining module is used to determine the enabling control of the second quantum key block by the target filling medium according to the enabling result.

9. An electronic device, characterized in that: include: processor; a memory for storing processor-executable instructions; The processor is configured to execute the instructions to implement the key injection method according to any one of claims 1 to 7.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the key injection method according to any one of claims 1 to 7 is implemented.

Images