Sensitive data transmission protection system and method based on quantum key distribution

Abstract

The invention provides a sensitive data transmission protection system and method based on a quantum key distribution technology, and aims to safely distribute keys through quantum channels and transmit sensitive data in combination with classic channel encryption, thereby realizing high security of data transmission. The system comprises a sending end, a receiving end, a quantum key distribution module, an encryption module and a decryption module. The sending end generates sensitive data, generates a quantum key by using a quantum key distribution module, and transmits the quantum key to the receiving end through a quantum channel. And the encryption module encrypts data by using the key, and then sends the encrypted data to a receiving end through a classic channel. And the receiving end decrypts the received data by using the same quantum key and recovers the original information. The method is characterized in that absolute security of the secret key is ensured by using the quantum mechanics principle, the integrity and confidentiality of data can be kept even in the face of complex network attacks, and the method is suitable for data transmission scenes needing extremely high security levels.

Description

Technical Field

[0001] The present invention belongs to the field of data security technology, and in particular refers to a sensitive data transmission protection system and method implemented by using quantum key distribution technology. Background Art

[0002] In the field of data security, with the rapid development of Internet technology and the explosive growth of data volume, data transmission security has become a global focus. Traditional data encryption technologies, such as symmetric encryption algorithms (such as AES) and asymmetric encryption algorithms (such as RSA), have played an important role in protecting data transmission security, but they rely on computational complexity to ensure security and are at risk of being cracked by increasingly powerful computing power. In addition, the security of key management and distribution is also an important challenge facing traditional encryption technologies.

[0003] In recent years, the rapid development of quantum computing indicates that traditional encryption algorithms may face the risk of being easily cracked by quantum computers. Therefore, it is particularly urgent to research and develop a new generation of data transmission protection technology. Quantum key distribution (QKD) technology came into being. It is based on the basic principles of quantum mechanics, such as the quantum no-cloning theorem and the uncertainty principle, and provides a theoretically secure method for key distribution that cannot be eavesdropped.

[0004] Although QKD technology has significant advantages in theory, its practical application still faces many challenges, including the stability of quantum channels, the efficiency of quantum key generation and distribution, and compatibility with existing classical communication systems. In addition, how to effectively apply quantum keys to data encryption and decryption processes, and how to achieve end-to-end data security transmission in practical systems, are still key issues in this field. The present invention is proposed in this technical context, aiming to address the deficiencies in the prior art and provide an innovative solution to enhance the security of sensitive data transmission. Summary of the invention

[0005] The technical solution of the present invention describes in detail a sensitive data transmission protection system based on quantum key distribution (QKD) technology and its working method. The solution combines quantum communication and classical encryption technology to achieve high security protection of sensitive data during transmission. The following is the specific content of the technical solution:

[0006] The system composition achieves high-security transmission of sensitive data through a carefully designed modular structure. The following is a detailed description of each component. The core responsibility of the transmitter is to generate sensitive data to be transmitted and start the quantum key distribution process. It contains a quantum key distribution module, which uses quantum key distribution (QKD) protocols such as BB84 or E91 to generate and distribute quantum keys. These quantum keys are randomly generated, ensuring the unpredictability and security of the keys. The transmitter also contains an encryption module, which uses the quantum key obtained from the quantum key distribution module to encrypt sensitive data to form an encrypted data packet. The receiver: The function of the receiver is to receive the quantum key transmitted through the quantum channel and the encrypted data transmitted through the classical channel, and perform decryption operations. It contains a decryption module that uses the same quantum key as the transmitter to decrypt the encrypted data and restore the original data. The receiver is also responsible for verifying the integrity and consistency of the quantum key to ensure that the key has not been tampered with during transmission. Quantum key distribution module: The quantum key distribution module located at the transmitter is a key part of the entire system. It uses the quantum channel interface to securely transmit the generated quantum key to the receiver in the form of a quantum state. The physical properties of quantum channels, such as quantum entanglement and quantum non-cloning, provide additional security for key transmission. Encryption and decryption modules: The encryption module at the sender and the decryption module at the receiver jointly ensure the security of data during transmission. The encryption module receives the quantum key provided by the quantum key distribution module and encrypts sensitive data. The decryption module uses the same quantum key to decrypt the encrypted data and restore the original sensitive data. Quantum channel and classical channel interface: The quantum channel interface is responsible for the physical connection between the sender and the quantum channel and the transmission of quantum information. It ensures the security of quantum keys during transmission and prevents any unauthorized access or tampering. The classical channel interface is responsible for the physical connection between the sender and the classical channel and the transmission of classical information, and transmits encrypted data. Security monitoring module: The security monitoring module exists at both the sender and the receiver, and is responsible for real-time monitoring of the security of the entire transmission process. It not only monitors potential security threats during quantum key distribution, but also ensures the integrity and correctness of data during transmission through the classical channel. Through the data integrity verification mechanism, the security monitoring module verifies the consistency of the data fingerprint, thereby ensuring that the data has not been tampered with during transmission. Through the collaborative work of these modules, the system composition of the present invention not only provides a highly secure solution for sensitive data transmission, but also ensures the transparency and controllability of the entire transmission process, meeting the high standards for secure data transmission in the era of quantum computing.

[0007] Preferably, the workflow is:

[0008] Step 1: Generation and transmission of quantum keys. In the system of the present invention, the transmitter first starts the quantum key generator. The generator generates a random quantum key based on the quantum key distribution (QKD) protocol, such as BB84 or E91. This key is randomly generated, ensuring its unpredictability. The generated quantum key is sent to the quantum channel through the quantum channel interface. The quantum channel uses quantum mechanical principles, such as quantum entanglement and quantum non-cloning, to ensure the security of the key transmission process. Any attempt to intercept or copy the quantum key will be detected immediately, thereby ensuring the absolute security of the key.

[0009] Step 2: Receiving and verifying the quantum key. The receiving end receives the quantum key from the sending end through its quantum channel interface. The quantum channel interface uses the characteristics of the quantum channel to ensure that the key is not eavesdropped or tampered with during the transmission process. After receiving the quantum key, the receiving end will perform a series of security verifications, such as verifying whether the key has been intercepted during the transmission process by detecting changes in the quantum state. This step ensures that the key received by the receiving end is secure and has not been tampered with.

[0010] Step 3: Encryption of sensitive data. After the sender generates the quantum key and ensures its secure transmission, it uses the encryption module to encrypt the sensitive data. The encryption module receives the quantum key from the quantum key generator and uses it as the key of the encryption algorithm to symmetrically encrypt the sensitive data. This process takes advantage of the randomness and unpredictability of the quantum key to ensure the security of the encrypted data. The encrypted data is called an encrypted data packet and is ready to be transmitted through a classical channel.

[0011] Step 4: Transmission of encrypted data, the sender transmits the encrypted data packet to the classical channel through the classical channel interface. The classical channel interface is responsible for transmitting the encrypted data packet from the sender to the receiver. This process does not involve quantum channels and therefore does not rely on the principles of quantum mechanics. The transmission of encrypted data packets over classical channels is fast and efficient, but the security is completely dependent on the previous quantum key encryption process.

[0012] Step 5: Decryption of encrypted data. After the receiving end receives the encrypted data packet transmitted through the classical channel, it uses the decryption module to decrypt it. The decryption module uses the same quantum key as the sending end to symmetrically decrypt the encrypted data packet and restore the original sensitive data. This step is a key link in the data transmission process, ensuring the confidentiality and integrity of the data.

[0013] Step 6: Data integrity verification. In order to ensure the integrity and correctness of the data during transmission, both the sender and the receiver use data integrity verification modules. Before and after data transmission, the sender performs hash processing on the original sensitive data, generates a data fingerprint, and sends it to the receiver through the classic channel. After decryption, the receiver performs the same hash processing on the recovered original data and compares it with the data fingerprint provided by the sender. This process verifies that the data has not been tampered with during transmission, ensuring the integrity and correctness of the data.

[0014] Preferably, the security feature combines the quantum no-cloning theorem and quantum entanglement characteristics to ensure the security of quantum keys during transmission. The quantum no-cloning theorem ensures that once the quantum key is measured without authorization, it will change, and this change can be detected immediately, thereby effectively preventing the illegal copying or interception of the key. At the same time, by utilizing the characteristics of quantum entanglement, the system establishes a special connection between the sender and the receiver, so that the generation and distribution process of the quantum key is enhanced in security. During the quantum key distribution process, any interference with the quantum state in the quantum channel will be immediately detected by the detection mechanism at both ends, ensuring the confidentiality and integrity of the key. In addition, the system also combines error detection and privacy amplification technology to further enhance the security of the key. This end-to-end security guarantee mechanism not only provides strong protection in theory, but also shows extremely high practicality and reliability in practice, and can ensure the security of sensitive data transmission even in the face of complex network attacks and eavesdropping.

[0015] Optimally, compatibility and scalability, through carefully designed interfaces and protocols, ensure that the new system can be seamlessly integrated into the existing data transmission architecture without the need for large-scale transformation or replacement of the existing infrastructure. This design not only reduces the cost of upgrading, but also reduces the potential risks during the technological transformation. At the same time, the system's architecture and modular design provide excellent scalability, allowing the system to be flexibly adjusted and upgraded according to different application scenarios and data transmission requirements. Whether it is financial transactions, government communications, enterprise data exchange or personal privacy protection, this system can add new functional modules or optimize existing processes as needed to adapt to the ever-changing technological environment and market needs. This forward-looking design concept makes this solution not only have broad application prospects in the current technological context, but also lays a solid foundation for future technological development and innovation.

[0016] Through the above technical solution, the present invention provides an innovative method for protecting sensitive data transmission, which effectively improves the security of data transmission and combats the security challenges in the era of quantum computing.

[0017] The above technical solution mainly brings the following three specific technical effects:

[0018] 1. Improved quantum-level data security: This technical solution achieves key generation and distribution through quantum key distribution (QKD) technology. These keys are based on the uncertainty principle of quantum mechanics and the quantum non-cloning theorem, ensuring the absolute security of the keys. Any unauthorized attempt to intercept the key will be detected immediately because the quantum state will change when it is measured. This quantum-level security is unmatched by traditional encryption technology and provides an unprecedented level of protection for sensitive data.

[0019] 2. End-to-end data integrity verification: The data integrity verification module in the technical solution generates data fingerprints before and after data transmission through a hash algorithm, ensuring the integrity of the data during transmission. The sender performs hash processing on sensitive data before data encryption to generate a data fingerprint; the receiver performs hash processing again after decryption and compares the result with the data fingerprint provided by the sender. This process verifies that the data has not been tampered with or damaged during transmission, thereby ensuring the accuracy and reliability of the data.

[0020] 3. High system compatibility and flexibility: The technical solution of the present invention is designed with full consideration of compatibility with existing communication infrastructure, allowing the quantum key distribution function to be implemented through software upgrades or the addition of a small amount of hardware without replacing existing hardware. This design not only reduces the cost of system upgrades, but also improves deployment flexibility. In addition, the system design allows adjustments based on different application requirements and security levels. Whether it is financial transactions, government communications or personal data transmission, it can be flexibly configured according to actual needs to meet the data security transmission requirements in different scenarios.

[0021] Through these three key technical effects, the present invention not only provides a highly secure data transmission solution, but also ensures the integrity of data transmission and the compatibility of the system, meeting the needs for data security protection in the era of quantum computing. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 A schematic diagram of the system composition of the present invention

[0023] Figure 2 Flow chart of the method for using the system of the present invention DETAILED DESCRIPTION

[0024] The following will be combined with the attached embodiment of the present invention Figure 1 and Figure 2, the technical solutions in the embodiments of the present invention are clearly and completely described. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0025] The specific implementation of the present invention describes in detail how to use quantum key distribution (QKD) technology to achieve high-security transmission of sensitive data. The following are the specific implementation steps

[0026] Generation of quantum keys: In an embodiment of the present invention, the quantum key generator utilizes the BB84 quantum key distribution protocol to generate quantum bit pairs at a generation rate of 1 Mbps, and strictly controls the noise level of the quantum channel to be less than 1%, so as to ensure that the generated 256-bit quantum key has high randomness and low error rate (no more than 0.1%), providing a basis for subsequent encryption of sensitive data.

[0027] Transmission of quantum keys: The generated quantum keys are transmitted through a 100-kilometer-long quantum channel with a channel loss controlled within 0.3dB / km. Environmental factors such as temperature fluctuations and vibrations are taken into account to ensure the stability and security of the quantum keys during transmission, ultimately achieving accurate transmission of the quantum keys with an error rate below 0.1%.

[0028] Receiving and verifying quantum keys: The quantum channel interface at the receiving end performs high-precision measurements of the received quantum keys (99.9% measurement accuracy) and uses a verification algorithm with O(n) complexity to confirm the integrity and consistency of the quantum keys with a 99% verification pass rate, ensuring that the quantum keys have not been tampered with during transmission.

[0029] Encryption of sensitive data: The encryption module at the sending end uses the AES-256 algorithm to encrypt 1GB of sensitive data using the generated 256-bit quantum key. The computational complexity of the encryption process is set to medium to achieve an encryption speed of 100Mbps, generate encrypted data packets, and prepare for transmission through classical channels.

[0030] Transmission of encrypted data: Encrypted data packets are transmitted through classic channels with a bandwidth of 1Gbps. The transmission rate is optimized to 90% of the maximum bandwidth, and the network delay is controlled within 10 milliseconds, ensuring the complete transmission of data packets without data loss and achieving the expected transmission rate.

[0031] Decryption of encrypted data: The decryption module at the receiving end uses the same AES-256 algorithm and 256-bit quantum key as the encryption module to decrypt the encrypted data packet. The decryption speed matches the encryption speed, reaching 100Mbps, ensuring 100% accuracy in data consistency verification and accurately restoring the original sensitive data.

[0032] Data integrity verification: The data integrity verification module uses the SHA-256 hash algorithm to perform hash processing on sensitive data before and after data transmission within a comparison time of less than 1 second, generate a data fingerprint and perform a comparison to ensure the integrity of the data during transmission. The data fingerprint consistency verification result shows that the data has not been tampered with.

[0033] Security monitoring: The security monitoring module analyzes data transmission activities in real time at a monitoring frequency of once per second. The false alarm rate of the abnormal behavior detection algorithm is controlled below 0.01%, and the alarm response time is set within 5 seconds. It successfully identifies and responds to abnormal behaviors to ensure data transmission security.

[0034] System compatibility and scalability test: The system is compatible with the existing communication system interface in more than 95% of the test environments, and the expansion modules are compatible on different operating systems and hardware platforms. In particular, in simulated financial transactions and government communication scenarios, the system was successfully integrated and ran, and the expansion modules were compatible on all test platforms to meet the needs of different application scenarios.

[0035] Through these specific implementation steps, the system of the present invention not only provides a highly secure solution for sensitive data transmission, but also ensures the compatibility and scalability of the system, meeting the high standards for secure data transmission in the era of quantum computing.

[0036] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited by the above embodiments. The above embodiments and descriptions are only preferred examples of the present invention and are not intended to limit the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A sensitive data transmission protection system, characterized in that: include: The transmitting end is configured to generate sensitive data to be transmitted and generate and distribute quantum keys using quantum key distribution (QKD) technology; the receiving end is configured to receive quantum keys and use the quantum keys to decrypt encrypted sensitive data received through the classical channel; the quantum channel is used to securely transmit quantum keys, and its quantum characteristics ensure the security of key transmission; the classical channel is used to transmit encrypted sensitive data; The encryption module is configured at the sending end to encrypt sensitive data using the quantum key to ensure the security of the data during transmission; the decryption module is configured at the receiving end to decrypt the encrypted sensitive data using the quantum key to restore the original data; in the technical solution of the present invention, after the sending end generates sensitive data, it uses the quantum key distribution (QKD) module to safely generate and transmit the quantum key to the receiving end using the quantum channel. This process is based on the principle of quantum mechanics and ensures the security of the key; at the same time, the encryption module at the sending end receives the quantum key provided by the QKD module, encrypts the sensitive data, forms an encrypted data packet, and sends it to the classical channel through the classical channel interface; the receiving end receives the quantum key through the quantum channel interface, and the decryption module uses the key to decrypt the encrypted data packet received by the classical channel to restore the original sensitive data. Both the sending end and the receiving end are equipped with a security monitoring module to monitor the data transmission process in real time, and generate and compare data fingerprints before and after data transmission through a data integrity verification module to ensure the integrity and correctness of the data; this collaborative work and hierarchical connection method between modules realizes full-process security protection from data generation, encryption, transmission to decryption, and ensures the security and reliability of data throughout its entire life cycle.

2. The system according to claim 1, characterized in that The transmitting end and the receiving end include: a quantum key generator for generating a quantum key based on the principle of quantum mechanics; a quantum channel interface for physically connecting to a quantum channel and transmitting data; and a classical channel interface for physically connecting to a classical channel and transmitting data.

3. The system according to claim 1, characterized in that The quantum key distribution module adopts any of the following protocols: BB84 quantum key distribution protocol; E91 quantum key distribution protocol; other quantum key distribution protocols based on the principles of quantum mechanics.

4. The system according to claim 1, characterized in that The encryption module uses quantum keys to perform symmetric encryption of any of the following encryption algorithms: Advanced Encryption Standard (AES); customized symmetric encryption algorithm based on quantum keys.

5. The system according to claim 1, wherein: The decryption module uses a decryption algorithm corresponding to the encryption module to ensure accurate restoration of data.

6. The system according to claim 1, wherein: It also includes a security monitoring module, which is used to: monitor potential security threats during data transmission in real time; detect any anomalies in the quantum key distribution process to ensure the security of the key.

7. The system according to claim 1, characterized in that The system also includes a data integrity verification module for verifying data integrity and correctness before and after data transmission.

8. A method for protecting sensitive data transmission using the system according to any one of claims 1 to 7, characterized in that: The following steps are involved: Step 1: The quantum key generator at the sending end generates a quantum key; Step 2: securely transmit the quantum key to the receiving end through the quantum channel interface and quantum channel; Step 3: The encryption module at the sending end encrypts the sensitive data using the quantum key; Step 4: Transmit the encrypted sensitive data to the receiving end through the classical channel interface and the classical channel; Step 5: The decryption module at the receiving end uses the quantum key to decrypt the encrypted sensitive data and restore the original sensitive data.

9. The method according to claim 8, characterized in that In step 2, the transmission of quantum keys uses the quantum no-cloning theorem and quantum entanglement characteristics to ensure security, and any unauthorized key interception will be detected immediately.

10. The method according to claim 8, characterized in that The following steps are also included: Before data transmission, the data integrity check module is used to hash the sensitive data and generate a data fingerprint; After the data is transmitted, the receiving end uses the same hash algorithm to process the decrypted data, verify the consistency of the data fingerprint, and ensure that the data has not been tampered with during transmission. The above claims describe in detail the system composition, working principle, operation process and detailed steps of security monitoring and data integrity verification of the present invention, ensuring the security, integrity and correctness of sensitive data during transmission.

Images