Wireless bluetooth encryption communication method, system and device based on quantum cryptography service platform

Abstract

The application provides a wireless Bluetooth encryption communication method and system based on a quantum cryptography service platform and a wireless Bluetooth device, which realizes the security of the quantum key distribution process by means of the digital envelope mechanism of the asymmetric algorithm, allows the quantum key encryption transmission process to have the simple and light characteristics, and allows the wireless Bluetooth device to be directly used. The security module built in the wireless Bluetooth device can apply the key from the quantum cryptography service platform for the current communication in time, and is safer. The key used for the encryption communication has true randomness, and a high-security end-to-end voice encryption transmission system can be realized. The user voice data is encrypted in the wireless Bluetooth device at the local end, is decrypted in the wireless Bluetooth device at the opposite end, and is in the ciphertext in the communication device and the intermediate transmission link, so that even if an illegal person listens and intercepts information in the middle, only the ciphertext can be obtained, and therefore the security of the communication is greatly improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of secure communication, in particular to a wireless Bluetooth encrypted communication method and system based on a quantum cryptography service platform, and a corresponding wireless Bluetooth device. BACKGROUND

[0002] Wireless Bluetooth devices can greatly optimize the use experience of smart devices by being able to break away from wired connections with smart devices, but Bluetooth is an open wireless communication network and is extremely insecure. For example, data information such as making / calling a phone achieved through a wireless Bluetooth device is easily intercepted and listened to by illegal third parties, and if some sensitive information such as business secrets is leaked, it will cause incalculable losses. Therefore, in order to solve the above problems, a wireless Bluetooth device communication method for end-to-end voice encryption is urgently needed.

[0003] In the Chinese patent application No. 202210619582.6, in order to ensure the security of the voice, after the encrypted headset collects the voice, the internal key generation module and the voice encryption module are used to encrypt the audio signal. The key generation module includes a key factor one generation submodule, a key factor two generation submodule, and a key generation submodule. The key factor one generation submodule generates a key factor one according to the password input by the user, the key factor two generation submodule generates a group of key combinations as the key factor two according to the pre-stored massive random key, and then the key generation submodule performs XOR operation on the key factor one and the key factor two, and takes the result as the key of the final encrypted voice data. However, in this scheme, the generation mechanism of the key factor one is a software algorithm generation mechanism, and the massive random key of the key factor two is a fixed static key pool, and the entire key generation process has the security risk of relying on software algorithm and low key freshness. After receiving the encrypted voice ciphertext of the calling party, the voice decryption module generates a decryption key using the same method, but according to the requirement of the symmetric encryption and decryption algorithm, if the key generated by the listening party according to the same key generation mechanism is consistent with the key generated by the sending party, the source keys of both parties need to be consistent, which is extremely unreasonable and unsafe, and there is a risk of breaking and exposing in the key generation and exchange; the user needs to set a password as the generation parameter of the key factor one, which undoubtedly requires the user to remember his own password, which on the one hand increases the user's use burden, and on the other hand the headset body or charging compartment needs to increase the password input module and display screen, which increases the production difficulty and cost.

[0004] In Chinese invention patent application No. 201510386918.9, voice data is also encrypted and decrypted by adding an encryption and decryption unit to a Bluetooth headset. Both communicating parties use a Bluetooth headset and a smartphone. The Bluetooth headset has an encryption and decryption unit for encryption and decryption. This unit transmits encrypted voice data to the smartphone and decrypts encrypted voice data from the smartphone. The decrypted voice data is then output through a speaker. Both communicating parties' phones have a dialer application installed. Its main functions include reading the address book stored in the phone, sending the phone holder's access code to the Bluetooth headset when pinging it, pinging the other party, selecting whether to enable encrypted communication, and issuing warning messages to the phone holder when either Bluetooth headset detects an abnormal access code. However, before dialing, the scheme requires users to manually set an ASCII code consisting of 8 to 16 digits and English letters, increasing the burden on users. The hybrid parameter encryption method and time slot variable code method used are calculated based on the user-set access code, time code, headphone product serial number, check code pre-synchronization code, and check code encryption method. The parameters are just different permutations and combinations, and these parameters are repeatedly transmitted between the two parties during the communication process, which greatly increases the risk of being intercepted and cracked. The corresponding decryption method is calculated based on the check code, parameter encryption method / time slot constant declaration, etc. That is, its encryption / decryption keys and parameters are all calculated based on mathematical formulas. After obtaining enough transmission parameter data, a third party can decrypt it on its own. In practical applications, users often set an extremely simple and unchanging combination of numbers and letters as the pass code for ease of use. The time slot unit is also a fixed integer value after leaving the factory. The synchronization code is also a fixed combination of 3 bytes. The pseudo-random number addition has regularity under a certain capacity. The parameter combination results seem to be many, but in fact they are just deductions of mathematical theory and do not achieve actual high security protection. Summary of the Invention

[0005] To address the aforementioned problems in existing technologies, this invention proposes a wireless Bluetooth encrypted communication method, system, and wireless Bluetooth device based on a quantum cryptography service platform. The method utilizes an asymmetric algorithm-based digital envelope mechanism to ensure the security of the quantum key distribution process. This allows the entire encrypted transmission process to be simple, lightweight, easy to control and implement, and enables the direct use of any wireless Bluetooth device that supports interfaces conforming to, for example, the GM / T 0016 national cryptographic industry standard, without requiring any modifications to the firmware, drivers, or interfaces of the security module within the wireless Bluetooth device to achieve quantum key loading. This significantly enhances its applicability. Furthermore, a security module is incorporated within the wireless Bluetooth device. During each encrypted call, a new communication voice key, obtained from a quantum cryptography service platform, is used to encrypt the voice data. Keys are generated on demand, ensuring high immediacy and frequent updates, thus enhancing security. Both the newly acquired communication voice key and the key pre-loaded into the security module originate from quantum random number generators or quantum key distribution (QKD) devices, possessing true randomness. Combined with national cryptographic standard algorithms, this achieves a highly secure end-to-end voice encryption transmission system. The user's voice data is encrypted on their own wireless Bluetooth device and decrypted on the other end, remaining encrypted throughout the communication devices and intermediate transmission links. The entire data transmission operates in an end-to-end encrypted mode, with no sensitive information such as keys involved in the intermediate links. Even if malicious actors eavesdrop or intercept information, they can only obtain the encrypted text, significantly improving communication security.

[0006] Specifically, the first aspect of the present invention relates to a wireless Bluetooth encrypted communication method based on a quantum cryptography service platform, which includes a quantum key injection step and a voice encrypted communication step.

[0007] The quantum key injection process includes an injection preparation step and an injection step;

[0008] In the charging preparation step, the cryptographic service platform generates a key charging token (Token) and issues it to the exchange cryptographic machine and the key charging terminal. The wireless Bluetooth device generates a signature public-private key pair (Ksign), the exchange cryptographic machine generates an encrypted public-private key pair (K) and sends it to the key charging terminal in the form of a digital envelope using the signature public key (Ksign-pub). The key charging terminal then generates an encrypted key pair protection structure (Blob) and imports the encrypted key pair protection structure (Blob) into the wireless Bluetooth device as an interface parameter.

[0009] In the charging step, after the exchange cryptographic machine authenticates the identity of the key charging terminal and the wireless Bluetooth device according to the key charging token Token, it writes the quantum key Km into the wireless Bluetooth device in the form of a digital envelope using the cryptographic public key K-pub;

[0010] The voice encryption communication steps include a voice encryption and transmission step and a voice decryption and playback step.

[0011] In the voice encryption transmission step, the wireless Bluetooth device generates encrypted digital voice data based on the collected analog voice signal and transmits it outward by means of encryption processing.

[0012] In the voice decryption and playback step, the wireless Bluetooth device uses decryption processing to recover the analog voice signal from the received encrypted digital voice data for playback.

[0013] Furthermore, the voice encryption transmission step includes a voice input step, a voice encryption step, a voice-like modulation step, and a voice data transmission step;

[0014] The voice input step is used to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream;

[0015] The voice encryption step is used to encrypt the voice data stream to generate a ciphertext voice data stream:

[0016] The speech-like modulation step is used to modulate the speech ciphertext data stream into a speech-like signal;

[0017] The voice data transmission step is used to send out voice-like signals.

[0018] Furthermore, the voice decryption and playback steps include a voice receiving step, a voice-like demodulation step, a voice decryption step, and a playback step:

[0019] The voice receiving step is used to receive voice signals;

[0020] The speech demodulation step is used to demodulate the speech signal into a speech ciphertext data stream.

[0021] The voice decryption step is used to decrypt the voice ciphertext data stream to generate a voice data stream;

[0022] The playback step is used to recover the analog voice signal based on the voice data stream for playback.

[0023] Furthermore, the charging preparation step includes a quantum key generation step, a charging token issuance step, and a Blob generation step;

[0024] In the quantum key generation step, the exchange cryptographic machine responds to the request to generate a charging key, obtains and stores the quantum key Km from the quantum key source;

[0025] In the key recharge token issuance step, the cryptographic service platform generates the key recharge token and issues it to the cryptographic exchange machine and the key recharge terminal.

[0026] In the Blob generation step, the exchange cryptographic machine generates the encrypted public-private key pair K and the session key Ka, and forms ciphertext E(Ka, K) and ciphertext E(Ksign-pub, Ka); the key filling terminal uses the ciphertext E(Ka, K) and E(Ksign-pub, Ka) to generate the encrypted key pair protection structure Blob.

[0027] Furthermore, after identifying a wireless Bluetooth device, the key injection terminal causes it to generate the signature public-private key pair Ksign, extracts the device information and the signature public key Ksign-pub from it, and sends them to the cryptographic service platform; and / or,

[0028] The signature public key Ksign-pub is sent to the cryptographic exchange machine via the cryptographic service platform; and / or

[0029] The quantum key Km is stored in the exchange cipher in an encrypted manner.

[0030] Furthermore, in the filling step:

[0031] After successful authentication, the cryptographic exchange machine generates a session key Kb, and then uses the session key Kb with the public key K-pub and the quantum key Km to generate ciphertexts E(K-pub, Kb) and E(Kb, Km), respectively; and,

[0032] The key injection terminal writes the ciphertext E(K-pub, Kb) and E(Kb, Km) into the wireless Bluetooth device in the form of files.

[0033] Furthermore, the wireless Bluetooth encrypted communication method also includes a key preparation step, wherein: the wireless Bluetooth device calls a file reading interface to read the ciphertext E(K-pub, Kb) and E(Kb, Km); using the ciphertext E(K-pub, Kb) as a parameter, the session key Kb is obtained by calling an import session key interface; and using the session key Kb and the ciphertext E(Kb, Km) as parameters, the quantum key Km is obtained by calling a data decryption interface.

[0034] Optionally, the encrypted public-private key pair K is an ECC encrypted public-private key pair Kecc or an RSA encrypted public-private key pair Krasa.

[0035] Optionally, the wireless Bluetooth device supports an interface conforming to the GM / T 0016 national cryptographic industry standard, and / or the switching cryptographic machine integrates a commercial encryption card conforming to the GM / T 0018 national cryptographic industry standard.

[0036] A second aspect of the present invention relates to a wireless Bluetooth encrypted communication system based on a quantum cryptography service platform, comprising a cryptographic service platform, a cryptographic exchange machine, a quantum key source, a key filling terminal, and a wireless Bluetooth device; wherein,

[0037] The wireless Bluetooth device is configured to allow the generation of a public-private key pair Ksign after being identified by a key-filled terminal;

[0038] The quantum key source is configured to generate and send a quantum key Km to the exchange cipher machine upon request;

[0039] The cryptographic service platform is configured to generate and issue key filling tokens to the cryptographic exchange machine and the key filling terminal.

[0040] The cryptographic exchange machine is configured to generate an encrypted public-private key pair K upon request, and encrypt the encrypted public-private key pair K in the form of a digital envelope using the signature public key Ksign-pub; and to store the quantum key Km, and after authenticating the identity of the key filling terminal and the wireless Bluetooth device according to the key filling token Token, to distribute the quantum key Km to the key filling terminal in the form of a digital envelope using the encrypted public key K-pub;

[0041] The key filling terminal is configured to generate an encrypted key pair protection structure Blob based on an encrypted public-private key pair K encrypted in the form of a digital envelope, and import it as an interface parameter into a wireless Bluetooth device; and to write a quantum key Km encrypted in the form of a digital envelope into the wireless Bluetooth device.

[0042] The wireless Bluetooth device is configured to generate and transmit encrypted digital voice data based on the acquired analog voice signal using encryption processing, and to recover the analog voice signal from the received encrypted digital voice data for playback using decryption processing.

[0043] Furthermore, the wireless Bluetooth device includes a microphone voice input module, a voice encryption module, a voice modulation module, a voice data transmission module, a voice data reception module, a voice demodulation module, a voice decryption module, a speaker voice output module, and a security module;

[0044] The microphone voice input module is configured to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream;

[0045] The voice encryption module is configured to encrypt the voice data stream to generate a voice ciphertext data stream.

[0046] The speech-like modulation module is configured to modulate the speech ciphertext data stream into a speech-like signal.

[0047] The voice data transmission module is configured to transmit voice-like signals externally based on a data channel or a Bluetooth channel.

[0048] The voice data receiving module is configured to receive voice signals.

[0049] The speech demodulation module is configured to demodulate the received speech signal into a speech ciphertext data stream.

[0050] The voice decryption module is configured to decrypt the ciphertext voice data stream to generate a voice data stream.

[0051] The speaker voice output module is configured to generate analog voice signals based on the voice data stream for playback.

[0052] The security module is configured to provide an interactive interface for quantum key operations to the outside world, as well as to store the quantum key Km.

[0053] Furthermore, the exchange cipher machine is further configured to generate a session key Ka when generating the encrypted public-private key pair K, and to form ciphertext E(Ka, K) and ciphertext E(Ksign-pub, Ka); and,

[0054] The key injection terminal is further configured to generate the encryption key pair protection structure Blob based on the ciphertext E(Ka, K) and E(Ksign-pub, Ka).

[0055] Furthermore, the exchange cipher machine is further configured to generate a session key Kb after authentication, and form ciphertexts E(K-pub, Kb) and E(Kb, Km); and,

[0056] The key injection terminal is further configured to write the ciphertext E(K-pub, Kb) and E(Kb, Km) into a wireless Bluetooth device in the form of a file.

[0057] Furthermore, the wireless Bluetooth device is configured to allow the interface to be invoked to obtain the quantum key Km using the ciphertexts E(K-pub, Kb) and E(Kb, Km).

[0058] Preferably, the quantum key source is a quantum random number generator or a quantum key distribution network; and / or, the encrypted public-private key pair K is an ECC encrypted public-private key pair Kecc or an RSA encrypted public-private key pair Krasa; and / or, the wireless Bluetooth device supports an interface conforming to the GM / T 0016 national cryptographic industry standard.

[0059] A third aspect of the present invention relates to a wireless Bluetooth device, which includes a voice encryption transmission unit, a voice decryption playback unit, and a security module;

[0060] The security module is configured to allow the key-filling terminal to call the interface to generate a signature public-private key pair Ksign, and to form an encrypted key pair protection structure Blob, wherein the encrypted key pair protection structure Blob is generated by the key-filling terminal based on the encrypted public-private key pair K encrypted in the form of a digital envelope and imported in the form of interface parameters; and to store a quantum key Km encrypted in the form of a digital envelope, and to allow the interface to be called to decrypt and obtain the quantum key Km;

[0061] The voice encryption sending unit is configured to generate encrypted digital voice data based on the collected analog voice signal for external transmission by means of encryption processing;

[0062] The voice decryption and playback unit is configured to recover analog voice signals from received encrypted digital voice data for playback using decryption processing.

[0063] Furthermore, the quantum key Km is stored in the form of ciphertexts E(K-pub, Kb) and E(Kb, Km), which are generated by a switching cipher machine.

[0064] Furthermore, the security module includes a key storage module and an interaction interface module;

[0065] The key storage module is configured to store the quantum key Km;

[0066] The interactive interface module is configured to provide an interactive interface for quantum key operations to external parties in accordance with the GM / T 0016 national cryptography industry standard.

[0067] Furthermore, the voice encryption transmission unit includes a microphone voice input module, a voice encryption module, a voice-like modulation module, and a voice data transmission module;

[0068] The microphone voice input module is configured to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream;

[0069] The voice encryption module is configured to encrypt the voice data stream to generate a voice ciphertext data stream.

[0070] The speech-like modulation module is configured to modulate the speech ciphertext data stream into a speech-like signal.

[0071] The voice data transmission module is configured to transmit voice signals externally based on a data channel or a Bluetooth channel.

[0072] Furthermore, the voice decryption and playback unit includes a voice data receiving module, a voice demodulation module, a voice decryption module, and a speaker voice output module;

[0073] The voice data receiving module is configured to receive voice signals.

[0074] The speech demodulation module is configured to demodulate the speech signal into a speech ciphertext data stream.

[0075] The voice decryption module is configured to decrypt the ciphertext voice data stream to generate a voice data stream.

[0076] The speaker voice output module is configured to generate analog voice signals based on the voice data stream for playback.

[0077] Furthermore, the wireless Bluetooth device can be configured with a Bluetooth communication protocol library and a cryptographic algorithm library;

[0078] The Bluetooth communication protocol library is configured to support at least one of the following: service discovery protocol, telephony control protocol, baseband protocol, link management protocol, and logical link control and adaptation protocol.

[0079] The cryptographic algorithm library is configured to provide an interface for encryption and decryption algorithms.

[0080] Preferably, the wireless Bluetooth device is used in the wireless Bluetooth encrypted communication system of the present invention. Attached Figure Description

[0081] The specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0082] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0083] Figure 1A wireless Bluetooth encrypted communication system based on a quantum cryptography service platform according to the present invention is illustrated schematically.

[0084] Figure 2 A wireless Bluetooth device according to the present invention is illustrated schematically;

[0085] Figure 3 An example of the charging preparation steps of the wireless Bluetooth encrypted communication method based on the quantum cryptography service platform according to the present invention is shown;

[0086] Figure 4 An example of the charging steps of the wireless Bluetooth encrypted communication method based on a quantum cryptography service platform according to the present invention is shown. Detailed Implementation

[0087] In the following description, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example in order to fully convey the spirit of the invention to those skilled in the art. Therefore, the invention is not limited to the embodiments disclosed herein.

[0088] Figure 1 The diagram illustrates a wireless Bluetooth encrypted communication system based on a quantum cryptography service platform according to the present invention.

[0089] As shown in the figure, the wireless Bluetooth encrypted communication system based on the quantum cryptography service platform may include a cryptography service platform, a cryptographic exchange machine, a quantum key source, a key filling terminal, and a wireless Bluetooth device.

[0090] The key filling terminal can establish an interactive interface with wireless Bluetooth devices according to the national cryptographic standard 0016 interface standard (the national cryptographic industry standard "GM / T 0016-2012 Smart Cryptographic Key Cryptographic Application Interface Specification") for key operations. It also has a near-end connection to a quantum key exchange machine to fill the wireless Bluetooth devices with quantum keys. Each quantum key exchange machine is connected to a corresponding quantum key source to obtain and encrypt the quantum key from the source.

[0091] A quantum key source can generate a quantum key Km upon request and send it to the corresponding exchange cipher. As an example, a quantum key source can be a quantum random number generator or a quantum key distribution network.

[0092] Figure 2 A wireless Bluetooth device according to the present invention is shown, which may include a voice encryption transmission unit, a voice decryption playback unit, and a security module.

[0093] The security module allows the key-injecting terminal to call an interface to generate a signature public-private key pair Ksign, forming an encrypted key pair protection structure Blob. This Blob can be generated by the key-injecting terminal based on the encrypted public-private key pair K encrypted in digital envelope form and imported as an interface parameter. Furthermore, the security module can also store a quantum key Km encrypted in digital envelope form and allows decryption to obtain the quantum key Km via the interface.

[0094] As an example, such as Figure 2 As shown, the security module may include a key storage module and an interaction interface module.

[0095] The key storage module stores the quantum key Km. In this invention, the quantum key is pre-filled into the security module according to a certain encapsulation format (or encapsulation structure) in the cryptographic service platform. Each key in the key ciphertext portion of the encapsulation structure has its own key serial number (in actual use, the length of the encapsulation structure header is omitted, and the key serial number is used to indicate a key at a specific location). These pre-filled keys are the same as the keys in the cryptographic service platform. Since the quantum keys in the cryptographic service platform are generated by quantum random number generators or quantum key distribution network (QKD) devices, they have true randomness. Therefore, each pre-filled key is different, which means that the pre-filled keys stored in the security module of each wireless Bluetooth device are different, increasing the difficulty of deciphering encrypted communication.

[0096] The interactive interface module can, for example, provide an interactive interface for quantum key operations to the outside world according to the GM / T 0016 national cryptographic industry standard. Therefore, after being recognized by the key injection terminal, the wireless Bluetooth device can call, for example, the interface for generating a signature public-private key pair to generate a signature public-private key pair Ksign, and export the signature public key Ksign-pub to the key injection terminal.

[0097] In the wireless Bluetooth device of the present invention, the voice encryption transmission unit is used to generate encrypted digital voice data based on the collected analog voice signal by means of encryption processing, so as to transmit it outward through a wireless or Bluetooth channel.

[0098] See also Figure 2 The voice encryption transmission unit may include a microphone voice input module, a voice encryption module, a voice modulation module, and a voice data transmission module.

[0099] In this invention, the microphone voice input module can collect the user's voice signal, i.e., the analog voice signal, and generate a voice data stream after performing analog-to-digital conversion and encoding on the analog voice signal.

[0100] The voice encryption module can encrypt the voice data stream, for example, in an encrypted call mode, to generate a ciphertext voice data stream. As an example, the voice encryption module can use block encryption in SM4CTR mode (counter mode).

[0101] The speech-like modulation module can modulate the ciphertext data stream into a speech-like signal, enabling it to be compressed and correctly encoded by the link vocoder.

[0102] The voice data transmission module can transmit the processed encrypted digital voice data, i.e., voice-like signals, to connected communication devices (such as mobile phones) via a data channel or Bluetooth channel.

[0103] In the wireless Bluetooth device of the present invention, the voice decryption and playback unit is used to recover the analog voice signal from the received voice encrypted digital data (speech-like signal) by means of decryption processing, so as to allow the playback of the voice information of the communication.

[0104] See also Figure 2 The voice decryption and playback unit may include a voice data receiving module, a voice demodulation module, a voice decryption module, and a speaker voice output module.

[0105] In this invention, the voice data receiving module can receive voice-like signals sent by the communication counterpart from the connected communication device via a data channel or a Bluetooth channel.

[0106] The speech demodulation module can demodulate the received speech-like signal based on a speech parameter model and extract the original speech ciphertext data stream.

[0107] The voice decryption module can decrypt the encrypted voice data stream to recover the original voice data stream, i.e., the plaintext voice data. As an example, the voice decryption module can use block decryption in SM4 CTR mode.

[0108] The speaker voice output module can integrate, amplify, and perform digital-to-analog conversion on the recovered voice data stream to generate an analog voice signal for output playback.

[0109] It should be noted that the above-mentioned encryption and decryption of voice data can be performed in various ways. For example, based on the quantum key pre-loaded into the security module, the required communication voice key can be obtained from the cryptographic service platform during each encrypted call (i.e., the cryptographic service platform and the wireless Bluetooth device use the quantum key pre-loaded into the security module to achieve encrypted transmission of the communication voice key). The obtained communication voice key is then used to perform encryption and decryption of the voice data. This communication voice key is also a quantum key generated by a quantum random number generator or a quantum key distribution network (QKD) device. Alternatively, if the quantum key pre-loaded into the security modules of a pair of wireless Bluetooth devices is the same, the quantum key pre-loaded into the security module can be used directly to perform encryption and decryption of the voice data between the pair of wireless Bluetooth devices.

[0110] See also Figure 2 In the wireless Bluetooth device of the present invention, a Bluetooth communication protocol library can also be set, which includes various basic protocols required by the Bluetooth technology system, mainly involving service discovery protocol, telephony control protocol, baseband protocol, link management protocol, logical link control and adaptation protocol, etc., to provide support for the connection between Bluetooth devices.

[0111] The wireless Bluetooth device can also include a cryptographic algorithm library to provide the necessary algorithm interfaces for data encryption / decryption, signature verification, and other functions. For example, the cryptographic algorithm library may include national cryptographic standard algorithms such as SM2, SM3, and SM4.

[0112] In addition, wireless Bluetooth devices may also include other firmware modules such as message forwarding modules, call status management modules, and log management modules.

[0113] See also Figure 1 In this invention, the cryptographic service platform can connect to one or more cryptographic exchange machines and key injection terminals to control them, thereby managing the key injection process.

[0114] For example, when the key filling terminal recognizes the wireless Bluetooth device and requests the filling of quantum keys, the cryptographic service platform can control the exchange cryptographic machine to generate an encrypted public-private key pair K. Using the signature public key Ksign-pub, the key filling terminal can send the encrypted public-private key pair K to the key filling terminal in the form of a digital envelope and finally import it into the wireless Bluetooth device. In this way, an encrypted public-private key pair K is negotiated between the exchange cryptographic machine and the wireless Bluetooth device.

[0115] In addition, the cryptographic service platform can issue key filling tokens as identity identifiers to the exchange cryptographic machine and the key filling terminal, thereby allowing the exchange cryptographic machine to authenticate the key filling terminal and the wireless Bluetooth device during quantum key filling.

[0116] As an example, the encrypted public-private key pair K can be either the ECC encrypted public-private key pair Kecc or the RSA encrypted public-private key pair Krasa.

[0117] Therefore, during key filling, the key filling terminal can submit a key filling token as an identity identifier to the exchange cryptography machine it is connected to, while sending the amount of quantum key required for a single transaction.

[0118] After the cipher machine authenticates the key filling terminal and the wireless Bluetooth device using the key filling token, it can distribute the corresponding quantum key Km to the key filling terminal in the form of a digital envelope using the encrypted public key K-pub.

[0119] As an example, the cipher machine can be integrated with a commercial encryption card, which, for example, conforms to the GM / T0018 national cryptographic industry standard, thus allowing the generation of encryption public and private keys, session keys, etc., and the performance of encryption operations to achieve encryption forms such as digital envelopes.

[0120] After receiving an encrypted public-private key pair K encrypted in the form of a digital envelope, the key filling terminal can generate an encrypted key pair protection structure Blob based on the encrypted public-private key pair K in this form, and import it as an interface parameter into the wireless Bluetooth device.

[0121] In addition, after receiving the quantum key Km encrypted in the form of a digital envelope, the key filling terminal can also write the encrypted quantum key Km into the wireless Bluetooth device in the form of a file, thereby realizing the filling of the quantum key Km in an encrypted manner.

[0122] When in use, wireless Bluetooth devices can call the corresponding interface to read the encrypted quantum key Km and decrypt it to obtain the plaintext quantum key Km.

[0123] To better understand the structure, function, and working principle of each component module in the wireless Bluetooth encrypted communication system of this invention, further details will be provided below. Figure 3 and 4 The present invention describes a wireless Bluetooth encrypted communication method, particularly a quantum key injection process for wireless Bluetooth devices.

[0124] In this invention, to achieve encrypted communication, a quantum key injection step is required to inject a quantum key Km into the wireless Bluetooth device, thereby enabling encrypted wireless Bluetooth communication via a voice encryption communication step.

[0125] The quantum key injection process of this invention mainly includes an injection preparation step and an injection step.

[0126] In the key filling preparation step, the cryptographic service platform generates a key filling token (Token) and distributes it to the exchange cryptographic machine and the key filling terminal. The wireless Bluetooth device then generates a signature public-private key pair (Ksign). The exchange cryptographic machine generates an encrypted public-private key pair (K) and sends it to the key filling terminal in digital envelope form using the signature public key (Ksign-pub). The key filling terminal then generates an encrypted key pair protection structure (Blob) and imports the encrypted key pair protection structure (Blob) into the wireless Bluetooth device as an interface parameter.

[0127] During the charging step, the exchange cryptographic machine can authenticate the key charging terminal and the wireless Bluetooth device based on the key charging token, and after successful authentication, write the quantum key Km into the wireless Bluetooth device in the form of a digital envelope.

[0128] Figure 3 An example of the filling preparation steps according to the present invention is shown.

[0129] like Figure 3 As shown, after the key injection terminal identifies the wireless Bluetooth device, it can read the device information of the wireless Bluetooth device, call the interface to generate a signature public-private key pair Ksign in the wireless Bluetooth device, and export the signature public key Ksign-pub. Then, it sends the current wireless Bluetooth device's device information and the signature public key Ksign-pub to the cryptographic service platform and requests the injection of quantum keys.

[0130] In response to the request, the cryptographic service platform sends the signing public key Ksign-pub to the cryptographic exchange machine, requesting the exchange machine to generate an encryption public-private key pair K, such as the ECC encryption public-private key pair Kecc. Figure 3 As shown.

[0131] In response to the request, the cryptographic exchange machine calls the corresponding interface to generate an encryption public-private key pair K, and then calls the corresponding interface to generate a session key Ka. Based on this, the cryptographic exchange machine calls the encryption interface to generate ciphertext E(Ksign-pub, Ka) through encryption operations using the signature public key Ksign-pub and the session key Ka, and generates ciphertext E(Ka, K) (e.g., E(Ka, Kecc)) through encryption operations using the session key Ka and the encryption public-private key pair K, and returns ciphertext E(Ksign-pub, Ka) and E(Ka, K) to the cryptographic service platform.

[0132] The cryptographic service platform requests the generation of a charging key from the cryptographic exchange machine. In response, the cryptographic exchange machine requests a quantum key (e.g., a quantum random number) from a quantum key source (e.g., a random number generator), encrypts and stores the received quantum key as the charging key K1-Kn, and returns a response to the cryptographic service platform. That is, the quantum key generation step is implemented.

[0133] Based on the response, the cryptographic service platform generates a key filling token and sends it to the cryptographic exchange machine and the key filling terminal for storage. This completes the token issuance process.

[0134] In addition, the cryptographic service platform also sends the ciphertexts E(Ksign-pub, Ka) and E(Ka, K) to the key injection terminal.

[0135] Accordingly, the key injection terminal can combine ciphertexts such as E(Ksign-pub, Ka) and E(Ka, K) to form an encrypted key pair protection structure Blob (e.g., an ECC encrypted key pair protection structure), and call the import encrypted key pair interface (e.g., the ECC encrypted key pair interface) to import the Blob as an interface parameter into the wireless Bluetooth device. This completes the Blob generation step.

[0136] After completing the charging preparation steps, the charging steps can be performed as needed to charge the quantum key K1-Kn stored in the exchange cipher machine into the wireless Bluetooth device.

[0137] Figure 4 An example of the filling procedure according to the present invention is shown.

[0138] like Figure 4 As shown, when a certain number of quantum keys need to be added to a wireless Bluetooth device, the key addition terminal can send the key addition token and the amount of quantum keys required for a single operation to the exchange cipher machine.

[0139] The cryptographic exchange authenticates the key injection token (Token) to verify the identity of both the key injection terminal and the wireless Bluetooth device. After successful authentication, the exchange can call the relevant interface to generate a session key Kb, which serves as the encryption key. This key is then encrypted using the public key K-pub (e.g., the ECC public key Kecc-pub) to form ciphertext E(K-pub, Kb) (e.g., E(Kecc-pub, Kb)). The quantum key Km is then encrypted using the session key Kb to form ciphertext E(Kb, Km). Finally, the resulting ciphertexts E(K-pub, Kb) and E(Kb, Km) are returned to the key injection terminal. This allows for the secure transmission of the quantum key Km between the exchange and the key injection terminal in the form of a digital envelope.

[0140] After receiving the ciphertexts E(K-pub, Kb) and E(Kb, Km), the key-filling terminal writes them into the wireless Bluetooth device as files.

[0141] After repeatedly filling the wireless Bluetooth device with the required number of quantum keys (e.g., K1-Kn) through the above filling process, the key filling terminal can send a filling completion notification to the cryptographic service platform. Upon receiving this notification, the cryptographic service platform can close the key filling loop. Furthermore, the key filling terminal can indicate that filling is complete.

[0142] Those skilled in the art will understand that, to ensure the security of the quantum key, the quantum key Km is typically filled and stored in a wireless Bluetooth device in encrypted form. Therefore, when the quantum key Km needs to be used, the plaintext of the quantum key can also be obtained through the key usage preparation steps.

[0143] In the key preparation step, the wireless Bluetooth device can directly call the file reading interface in the national cryptographic industry standard GM / T 0016 to read the ciphertext E(K-pub, Kb) and E(Kb, Km) from its storage file. Then, using the ciphertext E(K-pub, Kb) as a parameter, it calls the import session key interface to import Kb into the container, obtaining the Kb handle. Finally, it calls the data decryption related interface to use the Kb handle and the ciphertext E(Kb, Km) as parameters to decrypt E(Kb, Km) using Kb, thereby obtaining the quantum key Km, which allows for further applications of quantum keys.

[0144] After the quantum key Km is charged into the wireless Bluetooth device through the quantum key charging step, voice encrypted communication can be carried out using the voice encrypted communication step.

[0145] In this invention, the voice encryption communication step may include a voice encryption sending step and a voice decryption playback step, wherein: the voice encryption sending step is used by the wireless Bluetooth device to generate voice encryption digital data based on the collected analog voice signal for external transmission through encryption processing; the voice decryption playback step is used by the wireless Bluetooth device to recover the analog voice signal from the received voice encryption digital data for playback through decryption processing.

[0146] Specifically, the voice encryption transmission step may include a voice input step, a voice encryption step, a voice-like modulation step, and a voice data transmission step.

[0147] The voice input step is used to collect the user's voice signal, i.e., the analog voice signal, and generate a voice data stream after analog-to-digital conversion and encoding of the analog voice signal.

[0148] The voice encryption step is used to encrypt the voice data stream in encrypted call mode, generating a ciphertext voice data stream.

[0149] The speech-like modulation step is used to modulate the speech ciphertext data stream into a speech-like signal, enabling it to be compressed and correctly encoded by the link vocoder.

[0150] The voice data transmission step is used to send the processed encrypted digital voice data, i.e., voice-like signals, to a connected communication device (such as a mobile phone) via a data channel or Bluetooth channel.

[0151] The voice decryption and playback steps may include voice reception, voice demodulation, voice decryption, and playback.

[0152] The voice receiving step is used to receive voice-like signals sent by a communication partner from a connected communication device via a data channel or Bluetooth channel.

[0153] The speech-like demodulation step is used to demodulate the received speech-like signal based on the speech parameter model and extract the original speech ciphertext data stream.

[0154] The voice decryption step is used to decrypt the encrypted voice data stream and recover the original voice data stream, i.e., the plaintext voice data.

[0155] The playback step is used to integrate, amplify, and perform digital-to-analog conversion on the recovered audio data stream to generate an analog audio signal for output playback.

[0156] As can be seen from the above, in the wireless Bluetooth encrypted communication method, system, and wireless Bluetooth device based on the quantum cryptography service platform proposed in this invention, the security of the quantum key distribution process is achieved by using a digital envelope mechanism based on an asymmetric algorithm. This allows the entire encrypted transmission process to be simple and lightweight, easy to control and implement, and allows the direct use of any wireless Bluetooth device that supports an interface conforming to, for example, the GM / T 0016 national cryptographic industry standard, without any modification to the firmware, driver, and interface of the security module within the wireless Bluetooth device to achieve quantum key injection, thereby greatly improving its applicability. Furthermore, a security module is incorporated within the wireless Bluetooth device. During each encrypted call, a new communication voice key, obtained from a quantum cryptography service platform, is used to encrypt the voice data. Keys are generated on demand, ensuring high immediacy and frequent updates, thus enhancing security. Both the newly acquired communication voice key and the key pre-loaded into the security module originate from quantum random number generators or QKD devices, possessing true randomness. Combined with national cryptographic standard algorithms, this achieves a highly secure end-to-end voice encryption transmission system. The user's voice data is encrypted on their own wireless Bluetooth device and decrypted on the other end, remaining encrypted throughout the communication devices and intermediate transmission links. The entire data transmission operates in an end-to-end encrypted mode, with no sensitive information such as keys involved in the intermediate links. Even if malicious actors eavesdrop or intercept information, they can only obtain the encrypted text, significantly improving communication security.

[0157] Although the present invention has been described above with reference to the accompanying drawings and specific embodiments, those skilled in the art will readily recognize that the above embodiments are merely exemplary and used to illustrate the principles of the present invention. They do not limit the scope of the present invention. Those skilled in the art can make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A wireless Bluetooth encrypted communication method based on a quantum cryptography service platform, comprising a quantum key injection step and a voice encrypted communication step; The quantum key injection process includes an injection preparation step and an injection step; In the charging preparation step, the cryptographic service platform generates a key charging token (Token) and issues it to the exchange cryptographic machine and the key charging terminal. The wireless Bluetooth device generates a signature public-private key pair (Ksign), the exchange cryptographic machine generates an encrypted public-private key pair (K) and sends it to the key charging terminal in the form of a digital envelope using the signature public key (Ksign-pub). The key charging terminal then generates an encrypted key pair protection structure (Blob) and imports the encrypted key pair protection structure (Blob) into the wireless Bluetooth device as an interface parameter. In the charging step, after the exchange cryptographic machine authenticates the identity of the key charging terminal and the wireless Bluetooth device according to the key charging token Token, it writes the quantum key Km into the wireless Bluetooth device in the form of a digital envelope using the cryptographic public key K-pub; The voice encryption communication steps include a voice encryption and transmission step and a voice decryption and playback step. In the voice encryption transmission step, a communication voice key is obtained with the help of a quantum key Km or the quantum key Km is used as a communication voice key. The wireless Bluetooth device uses encryption processing and the communication voice key to generate encrypted voice digital data based on the collected analog voice signal for transmission. In the voice decryption and playback step, a communication voice key is obtained with the help of a quantum key Km or the quantum key Km is used as a communication voice key. The wireless Bluetooth device then uses the communication voice key to recover the analog voice signal from the received encrypted digital voice data for playback.

2. The wireless Bluetooth encrypted communication method as described in claim 1, wherein, The voice encryption and transmission steps include a voice input step, a voice encryption step, a voice-like modulation step, and a voice data transmission step. The voice input step is used to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream; The voice encryption step is used to encrypt the voice data stream to generate a voice ciphertext data stream; The speech-like modulation step is used to modulate the speech ciphertext data stream into a speech-like signal; The voice data transmission step is used to send out voice-like signals.

3. The wireless Bluetooth encrypted communication method as described in claim 2, wherein, The voice decryption and playback steps include a voice receiving step, a voice-like demodulation step, a voice decryption step, and a playback step; The voice receiving step is used to receive voice signals; The speech demodulation step is used to demodulate the speech signal into a speech ciphertext data stream. The voice decryption step is used to decrypt the voice ciphertext data stream to generate a voice data stream; The playback step is used to recover the analog voice signal based on the voice data stream for playback.

4. The wireless Bluetooth encrypted communication method as described in claim 1, wherein, The charging preparation steps include a quantum key generation step, a charging token issuance step, and a Blob generation step; In the quantum key generation step, the exchange cryptographic machine responds to the request to generate a charging key, obtains and stores the quantum key Km from the quantum key source; In the key recharge token issuance step, the cryptographic service platform generates the key recharge token and issues it to the cryptographic exchange machine and the key recharge terminal. In the Blob generation step, the exchange cryptographic machine generates the encrypted public-private key pair K and the session key Ka, and forms ciphertext E(Ka, K) and ciphertext E(Ksign-pub, Ka); the key filling terminal uses the ciphertext E(Ka, K) and E(Ksign-pub, Ka) to generate the encrypted key pair protection structure Blob.

5. The wireless Bluetooth encrypted communication method as described in claim 4, wherein, After identifying a wireless Bluetooth device, the key injection terminal generates the signature public-private key pair Ksign, extracts the device information and the signature public key Ksign-pub from it, and sends them to the cryptographic service platform; and / or, The signature public key Ksign-pub is sent to the cryptographic exchange machine via the cryptographic service platform; and / or The quantum key Km is stored in the exchange cipher in an encrypted manner.

6. The wireless Bluetooth encrypted communication method as described in claim 1, wherein, In the filling step: After successful authentication, the cryptographic exchange machine generates a session key Kb, and then uses the session key Kb with the public key K-pub and the quantum key Km to generate ciphertexts E(K-pub, Kb) and E(Kb, Km), respectively; and... The key injection terminal writes the ciphertext E(K-pub, Kb) and E(Kb, Km) into the wireless Bluetooth device in file form.

7. The wireless Bluetooth encrypted communication method as described in claim 6, further comprising a key preparation step, wherein: The wireless Bluetooth device is instructed to read the ciphertext E(K-pub, Kb) and E(Kb, Km) by calling the file reading interface; the session key Kb is obtained by calling the import session key interface using the ciphertext E(K-pub, Kb) as a parameter; and the quantum key Km is obtained by calling the data decryption interface using the session key Kb and the ciphertext E(Kb, Km) as parameters.

8. The wireless Bluetooth encrypted communication method as described in claim 1, wherein, The encrypted public-private key pair K is either an ECC encrypted public-private key pair Kecc or an RSA encrypted public-private key pair Krasa.

9. The wireless Bluetooth encrypted communication method according to any one of claims 1-8, wherein, The wireless Bluetooth device supports an interface conforming to the GM / T 0016 national cryptographic industry standard, and / or the switching cryptographic machine integrates a commercial encryption card conforming to the GM / T0018 national cryptographic industry standard.

10. A wireless Bluetooth encrypted communication system based on a quantum cryptography service platform, comprising a cryptographic service platform, a cryptographic exchange machine, a quantum key source, a key filling terminal, and a wireless Bluetooth device; wherein, The wireless Bluetooth device is configured to allow the generation of a public-private key pair Ksign after being identified by a key-filled terminal; The quantum key source is configured to generate and send a quantum key Km to the exchange cipher machine upon request; The cryptographic service platform is configured to generate and issue key filling tokens to the cryptographic exchange machine and the key filling terminal. The cryptographic exchange machine is configured to generate an encrypted public-private key pair K upon request, and encrypt the encrypted public-private key pair K in the form of a digital envelope using the signature public key Ksign-pub; and to store the quantum key Km, and after authenticating the identity of the key filling terminal and the wireless Bluetooth device according to the key filling token Token, to distribute the quantum key Km to the key filling terminal in the form of a digital envelope using the encrypted public key K-pub; The key filling terminal is configured to generate an encrypted key pair protection structure Blob based on an encrypted public-private key pair K encrypted in the form of a digital envelope, and import it as an interface parameter into a wireless Bluetooth device; and to write a quantum key Km encrypted in the form of a digital envelope into the wireless Bluetooth device. The wireless Bluetooth device is configured to obtain a communication voice key using a quantum key Km or to use the quantum key Km as a communication voice key, generate and send encrypted digital voice data based on the acquired analog voice signal using encryption processing, and recover the analog voice signal from the received encrypted digital voice data using decryption processing for playback.

11. The wireless Bluetooth encrypted communication system as described in claim 10, wherein, The wireless Bluetooth device includes a microphone voice input module, a voice encryption module, a voice modulation module, a voice data transmission module, a voice data reception module, a voice demodulation module, a voice decryption module, a speaker voice output module, and a security module. The microphone voice input module is configured to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream; The voice encryption module is configured to encrypt the voice data stream to generate a voice ciphertext data stream. The speech-like modulation module is configured to modulate the speech ciphertext data stream into a speech-like signal. The voice data transmission module is configured to transmit voice-like signals externally based on a data channel or a Bluetooth channel. The voice data receiving module is configured to receive voice signals. The speech demodulation module is configured to demodulate the received speech signal into a speech ciphertext data stream. The voice decryption module is configured to decrypt the ciphertext voice data stream to generate a voice data stream. The speaker voice output module is configured to generate analog voice signals based on the voice data stream for playback. The security module is configured to provide an interactive interface for quantum key operations to the outside world, as well as to store the quantum key Km.

12. The wireless Bluetooth encrypted communication system as described in claim 10, wherein, The cryptographic exchange machine is further configured to generate a session key Ka when generating the encrypted public-private key pair K, and to form ciphertext E(Ka, K) and ciphertext E(Ksign-pub, Ka); and, The key injection terminal is further configured to generate the encryption key pair protection structure Blob based on the ciphertext E(Ka, K) and E(Ksign-pub, Ka).

13. The wireless Bluetooth encrypted communication system as described in claim 10, wherein, The exchange cipher machine is further configured to generate a session key Kb after authentication, and to form ciphertexts E(K-pub, Kb) and E(Kb, Km); and, The key injection terminal is further configured to write the ciphertext E(K-pub, Kb) and E(Kb, Km) into a wireless Bluetooth device in the form of a file.

14. The wireless Bluetooth encrypted communication system as described in claim 13, wherein, The wireless Bluetooth device is further configured to allow the interface to be invoked to obtain the quantum key Km using the ciphertexts E(K-pub, Kb) and E(Kb, Km).

15. The wireless Bluetooth encrypted communication system as described in any one of claims 10-14, wherein: The quantum key source is a quantum random number generator or a quantum key distribution network; and / or... The encrypted public-private key pair K is either an ECC encrypted public-private key pair Kecc or an RSA encrypted public-private key pair Krasa; and / or The wireless Bluetooth device supports interfaces that comply with the GM / T 0016 national cryptographic industry standard.

16. A wireless Bluetooth device, comprising a voice encryption transmission unit, a voice decryption playback unit, and a security module; The security module is configured to allow key-filled terminals to call the interface to generate a signature public-private key pair Ksign, and to form a Blob structure protected by an encrypted key pair. The encryption key pair protection structure Blob is generated by the key filling terminal based on the encryption public and private key pair K encrypted in the form of a digital envelope and imported in the form of interface parameters; and stores the quantum key Km encrypted in the form of a digital envelope, and allows the interface to be called to decrypt and obtain the quantum key Km; The voice encryption sending unit is configured to obtain a communication voice key using a quantum key Km or to use the quantum key Km as a communication voice key, and to generate encrypted voice digital data based on the collected analog voice signal using encryption processing to send it outward. The voice decryption and playback unit is configured to obtain a communication voice key using a quantum key Km or to use the quantum key Km as a communication voice key, and to recover the analog voice signal from the received encrypted digital voice data using the communication voice key through decryption processing for playback.

17. The wireless Bluetooth device as described in claim 16, wherein, The quantum key Km is stored in the form of ciphertexts E(K-pub, Kb) and E(Kb, Km), which are generated by a switching cipher machine.

18. The wireless Bluetooth device as described in claim 16, wherein, The security module includes a key storage module and an interaction interface module; The key storage module is configured to store the quantum key Km; The interactive interface module is configured to provide an interactive interface for quantum key operations to external parties in accordance with the GM / T 0016 national cryptography industry standard.

19. The wireless Bluetooth device as claimed in claim 16, wherein, The voice encryption transmission unit includes a microphone voice input module, a voice encryption module, a voice modulation module, and a voice data transmission module; The microphone voice input module is configured to acquire analog voice signals, perform analog-to-digital conversion and encoding on the analog voice signals to generate a voice data stream; The voice encryption module is configured to encrypt the voice data stream to generate a voice ciphertext data stream. The speech-like modulation module is configured to modulate the speech ciphertext data stream into a speech-like signal. The voice data transmission module is configured to transmit voice signals externally based on a data channel or a Bluetooth channel.

20. The wireless Bluetooth device as claimed in claim 19, wherein, The voice decryption and playback unit includes a voice data receiving module, a voice demodulation module, a voice decryption module, and a speaker voice output module; The voice data receiving module is configured to receive voice signals. The speech demodulation module is configured to demodulate the speech signal into a speech ciphertext data stream. The voice decryption module is configured to decrypt the ciphertext voice data stream to generate a voice data stream. The speaker voice output module is configured to generate analog voice signals based on the voice data stream for playback.

21. The wireless Bluetooth device as described in claim 16, wherein a Bluetooth communication protocol library and a cryptographic algorithm library are provided; The Bluetooth communication protocol library is configured to support at least one of the following: service discovery protocol, telephony control protocol, baseband protocol, link management protocol, and logical link control and adaptation protocol. The cryptographic algorithm library is configured to provide an interface for encryption and decryption algorithms.

22. The wireless Bluetooth device of claim 16, used in any one of the wireless Bluetooth encrypted communication systems of claims 10-15.

Images