Point-to-point transmission method of new energy vehicle operation data based on quantum encryption

Abstract

The present invention discloses a point-to-point transmission method for new energy vehicle operation data based on quantum encryption, which relates to the technical field of data security transmission. The method includes: a supervision platform is built with a quantum service cluster, and a pre-placed quantum security gateway is deployed at the communication exits of the supervision platform and the vehicle enterprise platform; the vehicle enterprise platform initiates a connection request to the supervision platform, and the supervision platform returns a certificate and a public key; the vehicle enterprise platform verifies the validity of the certificate and the public key to confirm the identity information of the supervision platform; the vehicle enterprise platform and the supervision platform re-establish a secure communication link based on quantum encryption through their respective pre-placed quantum security gateways. The present invention uses an arbitration scheduling mode to maintain the intercommunication of three-party information in an independent and secure link environment; at the same time, the quantum security gateway uses its own communication protocol based on quantum encryption built on TCP for data exchange, and automatically downgrades to the traditional TLS mode for secure data transmission in an environment where it is not available.

Description

Technical Field

[0001] The present invention relates to the technical field of secure data transmission, and in particular to a point-to-point transmission method for new energy vehicle operating data based on quantum encryption. Background Art

[0002] The operation data of new energy vehicles includes various information such as the real-time location, speed, battery status, etc. After these data are reported back to the car enterprise data platform through the on-board terminal, they need to be forwarded to the supervision platform of the local supervision department through synchronous forwarding on the car enterprise platform. The forwarding process adopts TCP-based data transparent transmission.

[0003] At present, the data transmission from platform to platform adopts symmetric encryption technology for data transmission and sharing. For example, Chinese invention patent CN115225672B discloses an end-to-end data transmission method, device and medium, including generating a seed key and signature information of the seed key; splicing the signature information, the seed key and the current timestamp information to obtain a first splicing information; encrypting the first splicing information based on the mobile terminal identification code provided by the user to obtain an encrypted seed key; generating an identification code corresponding to the encrypted seed key so that after the mobile terminal scans the identification code, the mobile terminal identification code is used to process the encrypted seed key to obtain the seed key. During the conversation with the vehicle end, at least one tag information corresponding to the session data is obtained; according to at least one of the tag information and the seed key, a key derivation algorithm is used to generate a derived key of a preset length; extracting a target derived key corresponding to the session data from the derived key of the preset length; processing the session data using the target derived key to obtain the target data; responding to the target data, or sending the target data to the vehicle end. The target derived key includes a one-time encryption key used for symmetric encryption.

[0004] Although symmetric encryption technology has the advantage of fast encryption speed, it cannot identify the identity of the other party of data transmission, making it difficult to issue keys. After a network attack, there is a high risk of data leakage and tampering. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides a point-to-point transmission method for new energy vehicle operation data based on quantum encryption, and the method comprises the following steps:

[0006] The regulatory platform builds a quantum service cluster, and deploys a pre-installed quantum security gateway at the communication exits of the regulatory platform and the vehicle enterprise platform. The quantum service cluster communicates with the quantum security gateway;

[0007] The vehicle enterprise platform initiates a connection request to the regulatory platform, and the regulatory platform returns a certificate and a public key;

[0008] The automobile enterprise platform verifies the validity of the certificate and the public key to confirm the identity information of the regulatory platform;

[0009] After the automobile enterprise platform verifies the legal identity of the regulatory platform, the automobile enterprise platform and the regulatory platform re-establish a secure communication link based on quantum encryption through their respective front-end quantum security gateways; wherein, the automobile enterprise platform initiates a TCP connection request to the regulatory platform, and the TCP connection request is intercepted by the quantum security gateway in front of the automobile enterprise platform, and the quantum security gateway in front of the automobile enterprise platform extracts an unused quantum key from its quantum key pool to encrypt the TCP connection request data to form quantum encrypted proprietary data; the quantum security gateways in front of the regulatory platform and the automobile enterprise platform can automatically identify the operating mode according to the environment of the communicating parties when establishing the mutual secure communication link, and the operating mode can be a self-built quantum communication mode or a TLS mode.

[0010] Furthermore, the vehicle enterprise platform and the regulatory platform re-establish a secure communication link based on quantum encryption through their respective front-end quantum security gateways, including:

[0011] The plain text of the protocol sent by the car enterprise platform is encrypted by its front-end quantum security gateway;

[0012] The encrypted plain text of the protocol is sent via a traditional channel to the quantum security gateway in front of the regulatory platform for decryption;

[0013] The decrypted protocol is sent to the supervision platform in plain text to complete the secure transmission of data.

[0014] Furthermore, the quantum security gateway and the quantum service cluster are deployed in an external manner.

[0015] Furthermore, the quantum service cluster communicates with the quantum security gateway, including:

[0016] The quantum security gateway stores multiple sets of preset exclusive quantum keys inside. After the quantum security gateway is started, it uses its own exclusive quantum keys to encrypt data and establish secure communication with the quantum service cluster;

[0017] The quantum service cluster is responsible for the management of quantum keys and the monitoring of quantum key applications.

[0018] Furthermore, the quantum service cluster is responsible for the management of quantum keys and the monitoring of quantum key applications, including:

[0019] The quantum service cluster uses the corresponding quantum key to decrypt the communication data according to the parameters of the quantum key carried by the data submitted by the quantum security gateway to obtain the communication data of both parties;

[0020] The quantum service cluster updates the quantum key pool according to the request of the quantum security gateway.

[0021] Furthermore, the method further comprises:

[0022] The quantum-encrypted proprietary data is captured by a quantum security gateway located in front of the regulatory platform;

[0023] The quantum security gateway in front of the regulatory platform extracts corresponding quantum encryption parameter information from the quantum encrypted proprietary data, and obtains the corresponding quantum key based on the quantum encryption parameter information;

[0024] The quantum security gateway in front of the regulatory platform verifies the encrypted content using the acquired quantum key to confirm the validity of the TCP connection request data;

[0025] The quantum security gateway in front of the regulatory platform uses the same quantum key to encrypt a piece of response data and feeds it back to the quantum security gateway in front of the automobile enterprise platform.

[0026] Furthermore, after receiving the response data, the quantum security gateway in front of the automobile enterprise platform uses the corresponding quantum key to verify the response data; wherein:

[0027] If the verification is successful, the regulatory platform and the car company platform will communicate securely based on the self-built quantum communication mode;

[0028] If the verification fails, the regulatory platform and the vehicle manufacturer platform re-establish a secure connection based on the TLS mode.

[0029] Compared with the prior art, the present invention has the following beneficial effects:

[0030] The present invention builds a quantum service cluster through a regulatory platform, and deploys a pre-placed quantum security gateway at the communication exit of the regulatory platform and the automobile enterprise platform. The quantum service cluster communicates with the pre-placed quantum security gateways of both parties, and adopts an arbitration scheduling mode to maintain the intercommunication of three-party information in an independent and secure link environment; at the same time, the quantum security gateway adopts its own quantum encryption-based communication protocol built on TCP for data exchange, and automatically downgrades to the traditional TLS mode for secure data transmission in an environment where it is not available. Quantum communication is based on the non-cloning and uncertainty principle of quantum mechanics, and provides an encryption method that cannot be cracked, thereby effectively protecting the security of the data transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 This is a flowchart of an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the technical scheme and technical effect of the present invention clearer, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments.

[0033] The present invention aims to provide a point-to-point transmission method for new energy vehicle operating data based on quantum encryption. Through quantum encryption technology, such as the non-cloning and uncertainty principle based on quantum mechanics, an encryption method that cannot be cracked is provided, thereby effectively protecting the security of the data transmission process.

[0034] refer to Figure 1 , the method mainly includes the following contents:

[0035] Step 1: The regulatory platform has a quantum service cluster, and pre-installed quantum security gateways are deployed at the communication exits of the regulatory platform and the vehicle enterprise platform.

[0036] In the further solution, the quantum security gateway and quantum service cluster are deployed in an external way. The advantage of this deployment is that it can integrate the original business architecture non-invasively, reducing the difficulty of implementing quantum encryption technology.

[0037] In a further solution, the quantum service cluster communicates with the quantum security gateways placed in front of both parties. The following is a detailed introduction to the quantum service cluster and the quantum security gateways placed in front of both parties:

[0038] The quantum security gateway stores multiple sets of preset exclusive quantum keys. The exclusive quantum keys are true random numbers generated by a quantum random number generator, that is, random numbers generated by the collapse of the quantum state. After the quantum security gateway is started, it uses its own exclusive quantum key to encrypt data and establish secure communication with the quantum service cluster.

[0039] The quantum service cluster uses the corresponding quantum key to decrypt the communication data according to the quantum key parameters carried in the data submitted by the quantum security gateway to obtain the communication data of both parties, and then updates the quantum key pool according to the request of the quantum security gateway; the quantum service cluster also needs to be able to accurately identify each quantum key and its related parameters to ensure that the correct quantum key is used to operate the data in the right place; another important responsibility of the quantum service cluster is the distribution of quantum keys to ensure that quantum keys can be safely and accurately transmitted to the service or device requesting the key; in summary, the quantum service cluster is responsible for the management of quantum keys and the monitoring of quantum key applications.

[0040] Step 2: The vehicle enterprise platform initiates a connection request to the regulatory platform, and the regulatory platform returns the certificate and public key.

[0041] The car company platform initiates a connection request to the regulatory platform, indicating that it wants to establish a secure communication channel. In response, the regulatory platform returns a certificate and public key issued by its digital certificate certification authority. This digital certificate contains detailed information about the regulatory platform and an encrypted signature by the digital certificate certification authority, which is used in the subsequent identity authentication process.

[0042] Step 3: The vehicle enterprise platform verifies the validity of the certificate and public key to confirm the identity information of the regulatory platform.

[0043] After receiving the certificate and public key, the car enterprise platform will perform a strict verification process. First, the car enterprise platform will verify the validity of the certificate, including the validity period of the certificate, the legality of the issuance, and whether the certificate has been revoked. This process usually involves querying the certificate revocation list or the online certificate status protocol server. Secondly, the car enterprise platform will use the public key of the digital certificate certification authority to decrypt the signature to confirm the authenticity of the certificate.

[0044] The certificate can be private, commercially encrypted, or based on national encryption, so as to achieve seamless integration with traditional secure communication technologies, reduce the technical threshold of the entire system and make full use of existing technologies.

[0045] Step 4: The vehicle manufacturer platform and the regulatory platform re-establish a secure communication link based on quantum encryption through their respective front-end quantum security gateways.

[0046] In a further solution, the car enterprise platform initiates a TCP connection request to the regulatory platform after verifying the legal identity of the regulatory platform; the TCP connection request is intercepted by the quantum security gateway in front of the car enterprise platform, and the quantum security gateway in front of the car enterprise platform extracts an unused quantum key from its quantum key pool to encrypt the TCP connection request data to form quantum-encrypted proprietary data.

[0047] The quantum-encrypted proprietary data is captured by the quantum security gateway in front of the regulatory platform; the quantum security gateway in front of the regulatory platform extracts the corresponding quantum encryption parameter information from the quantum-encrypted proprietary data, and obtains the corresponding quantum key based on the quantum encryption parameter information; the quantum security gateway in front of the regulatory platform uses the obtained quantum key to verify the encrypted content to confirm the validity of the TCP connection request data; the quantum security gateway in front of the regulatory platform uses the same quantum key to encrypt a piece of response data and feeds it back to the quantum security gateway in front of the vehicle enterprise platform.

[0048] After receiving the response data, the quantum security gateway in front of the vehicle enterprise platform uses the corresponding quantum key to verify the response data; if the verification passes, the regulatory platform and the vehicle enterprise platform communicate securely based on the self-built quantum communication mode; if the verification fails, the regulatory platform and the vehicle enterprise platform re-establish a secure connection based on the traditional TLS mode.

[0049] Those skilled in the art can explain that the quantum security gateways installed in front of the regulatory platform and the car enterprise platform can automatically identify the operating mode according to the environment of the two communicating parties when establishing a mutual secure communication link. The operating mode can be a self-built quantum communication mode or a traditional TLS mode. This is automatically identified when establishing a connection based on the environment of the two communicating parties, without manual intervention. The purpose of this design is to enhance the compatibility of the entire environment, so that the new and old modes can coexist and then be gradually updated.

[0050] Step 5: The protocol plaintext sent by the automobile enterprise platform is encrypted by the quantum security gateway in front of it; the encrypted protocol plaintext is sent to the quantum security gateway in front of the supervision platform through the traditional channel for decryption; the decrypted protocol plaintext is sent to the supervision platform to complete the secure transmission of data.

[0051] In order to apply quantum encryption technology on traditional communication links, this embodiment only needs to deploy a set of quantum security gateways at the exits of both communicating parties. The quantum security gateway communicates with the quantum service cluster and updates the quantum key pool built into the quantum security gateway as needed. This is to maintain the intercommunication of three-party information in an independent and secure link environment using an arbitration scheduling mode. The quantum security gateway uses its own quantum encryption-based communication protocol built on TCP for data exchange, and automatically downgrades in an environment without a quantum encryption communication protocol, and uses the traditional TLS secure socket mode for secure data transmission.

[0052] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A point-to-point transmission method for new energy vehicle operation data based on quantum encryption, characterized in that: The method comprises the following steps: The regulatory platform builds a quantum service cluster, and deploys a pre-installed quantum security gateway at the communication exits of the regulatory platform and the vehicle enterprise platform. The quantum service cluster communicates with the quantum security gateway; The vehicle enterprise platform initiates a connection request to the regulatory platform, and the regulatory platform returns a certificate and a public key; The automobile enterprise platform verifies the validity of the certificate and the public key to confirm the identity information of the regulatory platform; After the automobile enterprise platform verifies the legal identity of the regulatory platform, the automobile enterprise platform and the regulatory platform re-establish a secure communication link based on quantum encryption through their respective front-end quantum security gateways; wherein, the automobile enterprise platform initiates a TCP connection request to the regulatory platform, the TCP connection request is intercepted by the front-end quantum security gateway of the automobile enterprise platform, and the front-end quantum security gateway of the automobile enterprise platform extracts an unused quantum key from its quantum key pool to encrypt the TCP connection request data to form quantum encrypted proprietary data; the quantum encrypted proprietary data is captured by the front-end quantum security gateway of the regulatory platform; the front-end quantum security gateway of the regulatory platform extracts the corresponding quantum encryption parameter information from the quantum encrypted proprietary data, and obtains the corresponding quantum key based on the quantum encryption parameter information; the front-end quantum security gateway of the regulatory platform verifies the encrypted content using the obtained quantum key to confirm the validity of the TCP connection request data; the front-end quantum security gateway of the regulatory platform uses the same quantum key to encrypt a section of response data and feeds it back to the front-end quantum security gateway of the automobile enterprise platform; The quantum security gateways installed in front of the regulatory platform and the vehicle enterprise platform can automatically identify the operation mode according to the environment of the two communicating parties when establishing the mutual secure communication link. The operation mode can be a self-built quantum communication mode or a TLS mode; After receiving the response data, the quantum security gateway in front of the automobile enterprise platform uses the corresponding quantum key to verify the response data, wherein: If the verification is successful, the regulatory platform and the car company platform will communicate securely based on the self-built quantum communication mode; If the verification fails, the regulatory platform and the vehicle manufacturer platform re-establish a secure connection based on the TLS mode.

2. The point-to-point transmission method for new energy vehicle operation data based on quantum encryption according to claim 1 is characterized in that: The vehicle enterprise platform and the regulatory platform re-establish a secure communication link based on quantum encryption through their respective front-end quantum security gateways, including: The plain text of the protocol sent by the car enterprise platform is encrypted by its front-end quantum security gateway; The encrypted plain text of the protocol is sent via a traditional channel to the quantum security gateway in front of the regulatory platform for decryption; The decrypted protocol is sent to the supervision platform in plain text to complete the secure transmission of data.

3. The point-to-point transmission method for new energy vehicle operation data based on quantum encryption according to claim 1 is characterized in that: The quantum security gateway and the quantum service cluster are deployed in an external manner.

4. The point-to-point transmission method for new energy vehicle operation data based on quantum encryption according to claim 1 is characterized in that: The quantum service cluster communicates with the quantum security gateway, including: The quantum security gateway stores multiple sets of preset exclusive quantum keys inside. After the quantum security gateway is started, it uses its own exclusive quantum keys to encrypt data and establish secure communication with the quantum service cluster; The quantum service cluster is responsible for the management of quantum keys and the monitoring of quantum key applications.

5. The point-to-point transmission method for new energy vehicle operation data based on quantum encryption according to claim 4 is characterized in that: The quantum service cluster is responsible for the management of quantum keys and monitoring of quantum key applications, including: The quantum service cluster uses the corresponding quantum key to decrypt the communication data according to the parameters of the quantum key carried by the data submitted by the quantum security gateway to obtain the communication data of both parties; The quantum service cluster updates the quantum key pool according to the request of the quantum security gateway.

Images