A method and system for encrypted transmission of data in a station area based on quantum communication

Abstract

The present invention provides a method for encrypted transmission of substation area data in quantum communication technology, including step S1: establishing a communication channel between node A and node B and verifying the channel security; step S2: mutually authenticating the identities between node A and node B; step S3: performing information transmission by adopting a dynamic encryption method based on a quantum key. The method of the present invention realizes the secure and efficient transmission of substation area data through quantum superposition states and entanglement effects.

Description

Technical Field

[0001] The present invention relates to communication technologies, and more particularly, to a method for encrypted transmission of substation area data based on quantum communication. Background Art

[0002] With the rapid development of the Internet, the security of data transmission has attracted increasing attention. Although traditional encryption methods such as symmetric encryption algorithms and public key encryption algorithms ensure the security of data transmission to a certain extent, they still face the risk of being cracked. Quantum communication, based on the principles of uncertainty, measurement collapse, and no-cloning in quantum mechanics, provides absolute security guarantees that cannot be wiretapped or computationally cracked.

[0003] At present, significant progress has been made in quantum communication technologies such as quantum key distribution (QKD) and quantum teleportation, but further exploration is needed for their application in encrypted transmission of substation area data. The data of the distribution network substation area includes data for secure operation control, fault alarm, power consumption, etc. of the distribution network. These data are characterized by a large number of nodes, wide distribution, and high security requirements. An efficient and reliable communication method is the basis for the operation of the distribution network substation area.

[0004] Currently, the data communication of the distribution network substation area mainly transmits through wired networks (cables, optical fibers), wireless networks (using technologies such as 2G, 4G, 5G, etc.), and satellite communication technologies are also used in some areas. These transmission methods all have deficiencies such as information leakage, being tampered with, and inability to verify the node status. The present invention introduces quantum communication methods into the substation area data transmission to ensure efficient and reliable communication, while having good economy and practicability. Summary of the Invention

[0005] The purpose of the present invention is to solve the problems existing in the above-mentioned prior art, and provide a method for encrypted transmission of substation area data combined with quantum communication technology, aiming to achieve secure and efficient transmission of substation area data through quantum superposition states and entanglement effects.

[0006] To achieve the above purpose, the present invention provides a method for encrypted transmission of substation area data using quantum communication technology, including:

[0007] Step S1: Establish a communication channel between node A and node B and verify the security of the channel;

[0008] Step S2: Mutually authenticate the identities between node A and node B;

[0009] Step S3: Perform information transmission using dynamic encryption based on quantum keys.

[0010] Preferably, before the step S1, the following steps are further included:

[0011] Share a bit string matrix K among communication nodes AB As a secret key matrix and a basic encryption matrix, this matrix can be updated regularly

[0012]

[0013] Meanwhile, share a one-way hash function H: {0, 1} * →{0, 1} d to output a hash value of length d for the data string;

[0014] The quantum key server sends a set of quantum keys to the node A and the node B through the quantum channel. After the node A and the node B measure according to the agreed measurement method, the obtained quantum secrets are respectively

[0015] Preferably, the step S1 further includes:

[0016] Step S1.1: Randomly generate a channel check string and determine the encryption key;

[0017] The node A randomly generates a string S = [s1, s 2, …, s L , with a length of L. The node A selects an encryption key from the secret key matrix to encrypt this string;

[0018] The encryption method is determined from the first r bits of the quantum key, where r < M, that is, by determining the selected encryption key;

[0019] The selected secret key serial number value is ind, ind ∈ {1, 2, …, V}, and the calculation method is as follows:

[0020]

[0021] In the formula, the Val(·) function represents the value of the string, and the mod(·) function represents taking the remainder; V represents the number of secrets in the shared secret key matrix; represents rounding down. Generally, when the string value is 0, the secret key sequence value is usually selected as 1, but there is a risk of leakage. Therefore, the middle secret key is selected in this article, and this value is related to the total number of secret keys.

[0022] Preferably, the step S1 further includes:

[0023] Step S1.2: Send encrypted verification data;

[0024] Merge the quantum key Q (A) and the random string S to form a new string Calculate the hash value H = [h1, h2, …, h d of the string using a hash function;

[0025] Encrypt S = [s1, s ind,B = [k ind,1 , k ind,2, …, k ind,N using the selected secret key K 2, …, s L , and denote the encrypted string as

[0026] Through the traditional channel, the node A transmits the hash value H and the encrypted string S * to the node B.

[0027] Preferably, the step S1 further includes:

[0028] Step S1.3 Encryption data verification;

[0029] The node B receives the hash value H and the encrypted string S * , and according to its own quantum secret key Based on the quantum characteristics of the entangled state, it is judged that The selected serial number is ind and the secret key K ind,B = [k ind,1 , k ind,2, …, k ind,N is determined by the method of step S1.1;

[0030] After determining the encryption secret key, decrypt the encrypted string S * to obtain the random string S = [s1, s 2, …, s L sent by the node A;

[0031] Combine the calculated and the decrypted random string, that is Locally calculate its hash value H1. If the hash value H received through the traditional channel is exactly the same as the locally calculated hash value H1, then merge its own quantum secret key with the random string S to obtain Calculate its hash value H2, and send H2 to the node A through the traditional channel. After receiving it, the node A compares the locally calculated hash value. If the two are the same, the two establish a communication connection;

[0032] If the information verification of both parties fails, it means that the communication channel is not secure and no communication is carried out.

[0033] Preferably, the step S2 further includes:

[0034] Encode and encrypt the identity node information. Let the identity information encoding be To ensure the secure transmission of node identity information, combine the node information with the quantum secret key Perform an "AND" operation to obtain the identity encoding sequence ID (A)0 ;

[0035] If the length of the identity information encoding is greater than the quantum secret key value, repeat the quantum secret key, that is Until the length meets the requirements;

[0036] For ID (A)0 Calculate its d-bit hash value H (A)0 (such as MD5 code), and transmit it to node B through the traditional channel. Node B determines according to the quantum secret key Determine According to the node data dictionary to be communicated, look up the identity information encoding of node A as Then perform an "AND" operation with Q (A) And calculate the hash value H of the obtained sequence (A)1 , if the two are consistent, it means that the identity of node A is authenticated by node B;

[0037] Node B uses the same method to send information for authentication by node A. After mutual authentication, the node identity authentication is passed.

[0038] Preferably, step S3 further includes:

[0039] Step S3.1: Let the data to be transmitted from node A to node B be X = {x1, x2,..., x G} and communicate based on the secret key matrix KAB. KAB is dynamically updated according to the set rules. Let the secret key matrix at the current time node be as follows,

[0040]

[0041] The quantum secrets distributed by the quantum secret key server are respectively

[0042] Preferably, step S3 further includes:

[0043] Step S3.2: Divide the data X = {x1, x2,..., x G} into T equal-length segments, and fill the last row with the default value 0 if the length is insufficient;

[0044]

[0045] For the data X in the i-th rowi = [x i1 , x i2 , …, x iE as an example, first calculate the selected secret key ind. The calculation is similar to the previous one. First, take the remainder of i divided by the quantum secret key length M to get f, where f = mod(i, V);

[0046] Select an r - bit encryption key In the formula, if the subscripts f + 1, f + 2, …, f + r - 1 are greater than M, then start cycling from 1. That is, the first bit of the quantum secret key is M + 1, the second bit is M + 2, and so on. Then the specific method of the data encryption key based on the quantum secret key is as follows,

[0047]

[0048] In the formula, the Val(·) function represents the value of the string, the mod(·) function represents taking the remainder, and V represents the number of secret keys in the shared secret key matrix, represents rounding down. Then the encryption key selected for the i - th row of data is

[0049] K ind,B = [k ind,1 , k ind,2 , …, k ind,N ;

[0050] Encrypt the data. Insert at the position of mod(ind, E) in X i = [x i1 , x i2, …, x iE . Then the sequence to be transmitted is denoted as The position is after mod(ind, E), and the sequence to be transmitted is denoted as

[0051] Preferably, the step S3 further includes:

[0052] Step S3.3: Data encryption and transmission;

[0053] The sequence to be transmitted is denoted as Encrypt through the secret key K ind,B = [k ind,1 , k ind,2 , …, k ind,N to obtain the sequence X' i *, and transmit it through the traditional channel;

[0054] Step S3.4: Data decryption and verification;

[0055] After node B receives the sequence X' i *, determine the quantum secret key of node A according to its own quantum encryption key Determine the selected encryption key K according to the method in step S3.2 ind,B =[k ind,1 ,k ind,2, …,k ind,N , and the position of the inserted quantum key mod(ind, E);

[0056] Decrypt the obtained sequence X′ i * to obtain Judge the in the data and perform verification with the value judged according to its own quantum key. If they are consistent, it means that the transmission is safe and reliable, and then extract [x ,x i1 ,x i2, …,x iE from

[0057] Perform in the above manner until all data is completely transmitted.

[0058] On the other hand, the present invention provides a substation area data encryption transmission system for quantum communication technology to execute the above method.

[0059] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0060] 1) By combining quantum communication and traditional channel communication, the advantages of high security of quantum communication and low cost and convenience of traditional encryption are fully utilized to improve the efficiency of secure communication of substation area data in the distribution network;

[0061] 2) The method of the present invention not only verifies the channel security, but also mutually verifies the communication nodes to prevent the occurrence of situations such as forged node identities, ensuring the absolute security of substation area data transmission in the distribution network.

[0062] 3) The method of the present invention only requires one quantum key distribution to achieve quantum encrypted secure communication between two nodes, with high cost-effectiveness and strong practicability.

[0063] 4) During the channel security detection and identity authentication processes, the quantum key information and other important information are not transmitted in the channel, ensuring that the quantum key information can be used multiple times during channel detection and identity authentication without information leakage and identity tampering.

[0064] 5) During the information transmission process, a dynamic key mechanism is adopted, encrypting and transmitting in segments, and verifying the data content to prevent key cracking, as well as transmission risks such as information deception and forgery during the communication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 It is a schematic diagram of quantum key distribution of the present invention.

[0066] Figure 2 Schematic diagram of the method for encrypted transmission of substation area data combining quantum communication technology in the embodiment of the present invention. Detailed implementation manners

[0067] The present invention will be further described in detail below with reference to the accompanying drawings:

[0068] To better understand the present invention, the implementation manners of the present invention will be explained in detail below with reference to the accompanying drawings.

[0069] Appendix Figure 1 A schematic diagram of quantum key distribution is provided. In quantum encrypted communication, data transmission is mainly based on traditional channels, and the quantum channel is mainly used for key transmission. Generally, quantum key distribution has the inherent properties of being non-stealable and non-tamperable. However, when transmitting between two nodes, a third party may steal the key through other means. For example, forging the node identity and tricking the power grid control center into sending incorrect control instructions, thereby disrupting the operation of the power grid. Therefore, although the quantum key transmission process has extremely high security, a method still needs to be designed to continuously verify whether there are situations such as secret stealing and tampering during the communication process.

[0070] Appendix Figure 2 It is the method for encrypted transmission of substation area data combining quantum communication technology in the embodiment of the present invention.

[0071] Specifically, taking the data communication between substation area nodes A and B as an example, the quantum encrypted communication method is described as follows:

[0072] A bit string matrix K is shared between communication nodes AB As the key matrix and the basic encryption matrix, this matrix can be updated regularly:

[0073]

[0074] At the same time, a one-way hash function H: {0, 1} * →{0, 1} d is shared, which can output a hash value with a length of d for the data string.

[0075] The quantum key server sends a group of quantum keys to nodes A and B through the quantum channel. After nodes A and B measure according to the agreed measurement method, the quantum keys obtained can be respectively According to the self-property of the entangled state quantum, when node A obtains the key Q (A)After that, the secret key information of node B can be automatically inferred, and vice versa. When communicating between nodes in a distribution network substation area, both the security of the communication channel and the security of the node identity need to be ensured. To prevent the identity of the communication node from being imitated and then confidential information being stolen, it is necessary to authenticate the node identity. Since the secret key is distributed between the secret key server and the responding communication node through a quantum channel, the quantum secret key channel has high security, and identity authentication is carried out based on this.

[0076] Step S1: Establish a communication channel between nodes A and B and verify the channel security.

[0077] Step S1.1 Randomly generate a channel verification string and determine the encryption secret key;

[0078] A randomly generates a string S = [s1, s 2, …, s L , with a length of L. A selects an encryption secret key from the secret key matrix to encrypt this string.

[0079] The encryption method is determined from the first r bits of the quantum secret key, where r < M, that is, by to further determine the selected encryption secret key.

[0080] The selected secret key serial number value is ind, ind ∈ {1, 2, …, V}, and the calculation method is as follows:

[0081]

[0082] In the formula, the Val(·) function represents the value of the string, and the mod(·) function represents taking the remainder. V represents the number of secret keys in the shared secret key matrix. represents rounding down. Generally, when the string value is 0, the secret key sequence value is usually selected as 1, but there is a risk of leakage. Therefore, in this paper, the middle secret key is selected, and this value is related to the total number of secret keys.

[0083] Step S1.2 Send the encrypted verification data.

[0084] Combine the quantum secret key Q (A) and the random string S to form a new string Use the hash function to calculate the hash value H = [h1, h 2, …, h d of this string. Then, use the selected secret key K ind,B = [k ind,1 , k ind,2, …, k ind,N to encrypt S = [s1, s 2, …, s L , and record the encrypted string as

[0085] Through the traditional channel, Node A transmits the hash value H and the encrypted string S * to Node B.

[0086] Step S1.3 Encrypted data verification.

[0087] Node B receives the hash value H and the encrypted string S * , and according to its own quantum key , based on the quantum characteristics of the entangled state, it is determined that the selected serial number is ind and the key K ind,B =[k ind,1 , k ind,2, …, k ind,N by the method of Step S1.1. After determining the encryption key, decrypt the encrypted string S * to obtain the random string S = [s1, s 2, …, s L sent by A. Then combine the calculated and the decrypted random string, that is locally calculate its hash value H1. If the hash value H received through the traditional channel is exactly the same as the locally calculated hash value H1, then combine its own quantum key with the random string S to obtain calculate its hash value H2, and send H2 to Node A through the traditional channel. After Node A receives it, compare the hash value calculated by the local machine . If the two are the same, the two establish a communication connection. If the information verification of both parties fails, it means that the communication channel is not secure and communication is not recommended.

[0088] In the above process, the information transmitted through the traditional channel is only the hash value and the randomly generated string, without the transmission of additional valuable information, ensuring no information leakage risk during the communication process.

[0089] Step S2: Mutually authenticate the identities between Nodes A and B.

[0090] After determining the security of the communication channel, it is also necessary to ensure the security of the communication node identities. Encrypt the encoded identity node information. Let the encoded identity information be To ensure the secure transmission of the node identity information, perform an "AND" operation on the node information and the quantum key to obtain the identity coding sequence ID (A)0 . If the length of the identity information encoding is greater than the quantum key value, repeat the quantum key, that is until the length meets the requirements.

[0091] Transmit ID(A)0 Calculate its d-bit hash value H (A)0 (such as MD5 code), and transmit it to node B through the traditional channel. Node B determines it according to the quantum secret key Determine According to the node data dictionary to be communicated, look up the identity information encoding of node A as Then perform an "AND" operation with Q (A) And calculate the hash value H of the sequence (A)1 . If the two are compared and consistent, it means that the identity of node A is authenticated by node B. Node B sends information in the same way for authentication by node A. After mutual authentication, the node identity authentication is passed.

[0092] Step S3: Perform information transmission in a dynamic encryption manner based on the quantum secret key.

[0093] Performing dynamic encryption based on the quantum secret key can give full play to the security advantages of quantum encryption under the condition of limited quantum secret keys, and reduce the communication cost through encrypted transmission on the traditional channel. After the communication channel and node identity information are authenticated, data transmission is carried out.

[0094] Step S3.1 Suppose the data to be transmitted from node A to node B is X = {x1, x2,..., x G}, communicate based on the secret key matrix KAB, and KAB is dynamically updated according to the set rules. Suppose the secret key matrix at the current time node is as follows.

[0095]

[0096] The quantum secrets distributed by the quantum secret key server are respectively

[0097] Step S3.2 Divide the data X = {x1, x2,..., x G} into T segments of equal length, and fill the last line with the default value 0 if the length is insufficient.

[0098]

[0099] Taking the data X i of the i-th row as an example = [x i1 , x i2, …, x iE , first calculate the selected secret key ind. The calculation is similar to the previous one. First, take the remainder of i divided by the quantum secret key length M to get f, f = mod(i, V). Select the r-bit encryption secret key In the formula, if the subscripts f+1, f+2, …, f+r-1 are greater than M, they are cyclically selected starting from 1, that is, the first bit of the quantum secret key is M+1, the second bit is M+2, and so on. Then the specific method for the data encryption key based on the quantum secret key is as follows:

[0100]

[0101] In the formula, the Val(·) function represents the value of a string, and the mod(·) function represents taking the remainder. V represents the number of keys in the shared secret key matrix. represents rounding down. Then the encryption key selected for the i-th row of data is K ind,B =[k ind,1 , k ind,2, …, k ind,N . Encrypt the data. After inserting at the position of mod(ind, E) in X i =[x i1 , x i2, …, x iE , the sequence to be transmitted is denoted as After the position of mod(ind, E), the sequence to be transmitted is denoted as

[0102] Step S3.3: Data encryption and transmission.

[0103] The sequence to be transmitted is denoted as Encrypt through the secret key K ind,B =[k ind,1 , k ind,2, …, k ind,N to obtain the sequence X′ i *, and transmit it through the traditional channel.

[0104] Step S3.4: Data decryption and verification.

[0105] After node B receives the sequence X′ i *, determine the quantum secret key of node A according to its own quantum encryption secret key Determine the selected encryption key K according to the method in step S3.2 ind,B =[k ind,1 , k ind,2 , …, k ind,N , and the position of the inserted quantum secret key mod(ind, E). Decrypt the obtained sequence X′ i * to obtain Judge the in in the data and verify it with the value judged according to its own quantum secret key. If they are consistent, it means that the transmission is secure and reliable. Then extract [x from i1 , x i2,…, x iE .

[0106] In the above manner, until all the data is completely transmitted.

[0107] In the description of the present invention, it should be noted that unless otherwise clearly specified and defined, the terms "connected" and "connected to" should be understood in a broad sense. For example, it may be a fixed connection, a detachable connection, or an integral connection; it may be a mechanical connection or an electrical connection; it may be directly connected or indirectly connected through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0108] In the description of the present invention, unless otherwise specified, the orientation or positional relationship indicated by the terms "upper", "lower", "left", "right", "inner", "outer", etc. is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be construed as a limitation on the present invention.

[0109] Finally, it should be noted that the above technical solution is only one implementation manner of the present invention. For those skilled in the art, on the basis of the application methods and principles disclosed in the present invention, various types of improvements or deformations can be easily made, and are not limited to the methods described in the above specific implementation manners of the present invention. Therefore, the manner described above is only preferred and does not have a restrictive meaning.

Claims

1. A method for encrypted transmission of substation area data in quantum communication technology, characterized in that: Step S1: Establish a communication channel between node A and node B and verify the channel security; Step S2: Mutually authenticate the identities between node A and node B; Step S3: Perform information transmission using dynamic encryption based on quantum keys; Before step S1, the following steps are further included: Share a bit string matrix between communication nodes As a secret key matrix and as a basic encryption matrix, this matrix is updated regularly ， Share a single - way hash function simultaneously , and output a hash value of length d for the data string; The quantum key server distributes a set of quantum keys to the node A and the node B via a quantum channel. After the node A and the node B measure according to the agreed measurement method, the obtained quantum keys are respectively , ; Step S1 further includes: Step S1.1: Randomly generate a channel check string and determine an encryption key; The node A randomly generates a string , with a length of L. The node A selects an encryption key from the secret key matrix to encrypt this string; The encryption method is determined from the first r bits of the quantum key, where r < M, that is, through , the selected encryption key is determined; The selected secret key serial number value is ind, , and the calculation method is as follows: ， In the formula, The function represents the value of the string, The function represents taking the remainder; V represents the number of keys in the shared secret key matrix; Represents rounding down; Step S1 further includes: Step S1.2: Send encrypted verification data; Combine the quantum key and the random string to form a new string , and calculate the hash value of this string using a hash function ; Using the selected secret key , encrypt , and denote the encrypted string as ; Through the traditional channel, the node A transmits the hash value H and the encrypted string to the node B; Step S1 further includes: Step S1.3: Encrypted data verification; The node B receives the hash value H and the encrypted string , according to its own quantum key , and determines, based on the quantum characteristics of the entangled state , that the selected serial number is the ind key determined by the method of the step S1.1 ; After determining the encryption key, decrypt the encrypted string to obtain the random string sent by Node A ; Combine the calculated and the decrypted random string, that is . Locally calculate its hash value H1. If the hash value H received through the traditional channel is exactly the same as the locally calculated hash value H1, then merge its own quantum key with the random string S to obtain . Calculate its hash value H2 and send H2 to the node A through the traditional channel. After receiving it, the node A compares the hash value calculated locally. If the two are the same, they establish a communication connection; If the information verification of both parties fails, it means that the communication channel is not secure and communication is not carried out; Step S2 further includes: Encode the identity node information for encryption. Let the identity information encoding be , to ensure the secure transmission of node identity information, perform a logical AND operation on the node information and the quantum secret key to obtain the identity encoding sequence ; If the length of the identity information code is greater than the quantum secret key value, the quantum secret key is repeated, that is , until the length meets the requirements; Will Calculate its d-bit hash value , and transmit it to node B through a traditional channel. Node B determines according to the quantum secret key Determine , look up the identity information encoding of node A according to the node data dictionary to be communicated , and then perform a logical AND operation with , and calculate the hash value of the sequence . If the two are compared and consistent, it means that the identity of node A is authenticated by node B; Node B sends information for authentication by node A in the same way. After mutual authentication, the node identity authentication is passed; Step S3 further includes: Step S3.1: Assume that the data to be transmitted from node A to node B is , communicate based on the secret key matrix KAB, and KAB is dynamically updated according to the set rules. Assume that the secret key matrix at the current time node is as follows, ； The quantum secrets distributed by the quantum key server are respectively , ; Step S3 further includes: Step S3.2: Divide the data into T segments of equal length. If the length of the last line is insufficient, pad it with the default value 0. ， For the data of the i-th row , first, i is divided by the quantum secret key length M to obtain the remainder , ; Select an r-bit encryption key , where the subscripts f + 1, f + 2, …, f + r - 1, if greater than M, are cyclically selected starting from 1. That is, the first bit of the quantum key is M + 1, the second bit is M + 2, and so on. The specific calculation method of the data encryption key based on the quantum key is as follows ； In the formula, The function represents the value of the string, The function represents taking the remainder, V represents the number of keys in the shared key matrix, Indicates rounding down, then the encryption key selected for the data in the i-th row is ; Encrypt the data and insert it into Insert , , at the position After that, the sequence to be transmitted is denoted as ; Step S3 further includes: Step S3.3: Encrypted data transmission; The sequence to be transmitted is denoted as Through the secret key Perform encryption to obtain the sequence , and transmit it through the traditional channel; Step S3.4: Data decryption and verification; Node B receives the sequence and then determines the quantum key of Node A according to its own quantum encryption key , determines the selected encryption key according to the method in step S3.2 , as well as the quantum key , and the inserted position ; Decrypt the obtained sequence to obtain , and judge the in the data against the value determined according to its own quantum secret key. If they are consistent, it indicates that the transmission is secure and reliable; In the above manner, until all data is completely transmitted.

2. A data encryption and transmission system for a substation area in quantum communication technology, characterized in that For executing the method according to claim 1.

Images