File encryption method and device based on quantum encryption, equipment and medium

Abstract

The embodiment of the invention provides a file encryption method and device based on quantum encryption, equipment and a medium, and the method comprises the steps: obtaining a first working key and corresponding key information when an encryption operation of a user for a first target file is detected, and encrypting the file; sending the encrypted first target file, the key information and the corresponding file information to an electronic file security management platform; when a decryption operation of a user for a second target file is detected, sending a file viewing request to an electronic file security management platform, the file viewing request comprising file information corresponding to the file; and receiving key information which is sent by the platform and corresponds to the second target file, further obtaining the second working key, and decrypting the second target file. The electronic file security management platform is used as a medium to distribute the quantum key and the file, so that multiple users can safely and reliably distribute the shared quantum key, and the security of the electronic file and the convenience of decryption operation after the encrypted file is transmitted are improved.

Description

Technical Field

[0001] The present invention relates to the field of quantum encryption technology, and in particular to a file encryption method based on quantum encryption, a file encryption device based on quantum encryption, an electronic device and a corresponding computer-readable storage medium. Background Art

[0002] With the advent of the era of comprehensive informatization of enterprises, people are increasingly using information means represented by advanced technologies such as computers and the Internet to realize the business and management processes of enterprises online. All business data is processed by the system to quickly form the business intelligence required by the management. In this way, electronic files have become the main storage method for enterprise information and an important carrier for information exchange between the inside and outside of the enterprise. How to achieve the safe transmission and storage of electronic files, as an important content in the field of information security, has received more and more attention.

[0003] The file encryption and decryption method based on quantum random numbers is to use a quantum random number generator to generate a random number of a specified length as a key, use the key to encrypt the file to be encrypted, and store the key locally. Then, according to the specific identifier of the encrypted file, the locally stored key is found for decryption operation to achieve secure encryption and decryption operations during file data transmission. However, the file encryption and decryption method based on quantum random numbers focuses more on the encryption and decryption operations of a single client, and cannot achieve secure transmission of file data between multiple clients and decryption of files after distribution. Summary of the invention

[0004] In view of the above problems, embodiments of the present invention are proposed to provide a file encryption method based on quantum encryption, a file encryption device based on quantum encryption, an electronic device and a corresponding computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0005] In a first aspect, an embodiment of the present invention discloses a file encryption method based on quantum encryption, which is applied to a client, and the method includes:

[0006] When an encryption operation of the user on the first target file is detected, a first working key and corresponding key information are obtained;

[0007] Encrypting the first target file using the first working key;

[0008] Sending the encrypted first target file, the key information, and file information corresponding to the first target file to the electronic file security management platform;

[0009] When a decryption operation of the user on the second target file is detected, a file viewing request is sent to the electronic file security management platform; the file viewing request includes file information corresponding to the second target file;

[0010] Receiving key information corresponding to the second target file sent by the electronic file security management platform;

[0011] A second working key is obtained according to the key information corresponding to the second target file, and the second target file is decrypted according to the second working key.

[0012] Optionally, the client includes a quantum key injection medium;

[0013] The obtaining of the first working key and the corresponding key information includes:

[0014] Send a request to the quantum cryptography service platform to obtain the working key;

[0015] Receiving a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform;

[0016] The first working key ciphertext is decrypted by using the injection key in the quantum key injection medium to obtain the first working key.

[0017] Optionally, before sending the file viewing request to the electronic file security management platform, the method further includes:

[0018] Determining whether the user has viewing authority for the second target file;

[0019] The sending of a file viewing request to the electronic file security management platform includes:

[0020] If the user has viewing authority for the second target file, a file viewing request is sent to the electronic file security management platform.

[0021] Optionally, the key information corresponding to the second target file is sent by the electronic file security management platform after determining that the user has viewing authority for the second target file.

[0022] In a second aspect, an embodiment of the present invention provides a file encryption method based on quantum encryption, which is applied to an electronic file security management platform. The method includes:

[0023] Receive the encrypted first target file, key information, and file information corresponding to the first target file sent by the client;

[0024] Establishing an association relationship between file information and key information corresponding to the first target file;

[0025] receiving a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file;

[0026] According to the file information corresponding to the second target file, searching for the key information corresponding to the second target file;

[0027] Sending key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file, and decrypts the second target file according to the second working key.

[0028] Optionally, the file viewing request includes user information and identification information of the quantum key injection medium of the client;

[0029] The method further comprises:

[0030] Acquire pre-established identity association information, wherein the identity association information includes an association relationship between user information and identification information of a quantum key injection medium;

[0031] Determining whether the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information;

[0032] The searching for key information corresponding to the second target file according to the file information corresponding to the second target file includes:

[0033] If the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information, the key information corresponding to the second target file is searched according to the file information corresponding to the second target file.

[0034] Optionally, it also includes:

[0035] Determining whether the user has viewing authority for the second target file;

[0036] The searching for key information corresponding to the second target file according to the file information corresponding to the second target file includes:

[0037] If the user has the viewing authority for the second target file, the key information corresponding to the second target file is searched according to the file information corresponding to the second target file.

[0038] In a third aspect, an embodiment of the present invention provides a file encryption system based on quantum encryption, including a client and an electronic file security management platform;

[0039] The client is used to obtain a first working key and corresponding key information when detecting a user's encryption operation on a first target file; encrypt the first target file using the first working key; send the encrypted first target file, the key information and the file information corresponding to the first target file to an electronic file security management platform; send a file viewing request to the electronic file security management platform when detecting a user's decryption operation on a second target file; the file viewing request includes the file information corresponding to the second target file; receive the key information corresponding to the second target file sent by the electronic file security management platform; obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key;

[0040] The electronic document security management platform is used to receive the encrypted first target file, key information and file information corresponding to the first target file sent by the client; establish an association relationship between the file information corresponding to the first target file and the key information; receive a file viewing request for a second target file sent by the client, the file viewing request including the file information corresponding to the second target file; search for the key information corresponding to the second target file based on the file information corresponding to the second target file; and send the key information corresponding to the second target file to the client, so that the client obtains a second working key based on the key information corresponding to the second target file, and decrypts the second target file based on the second working key.

[0041] Optionally, it is characterized by further comprising: a quantum cryptography service platform; the client comprises a quantum key filling medium;

[0042] The client is used to send a working key acquisition request to the quantum cryptography service platform; receive a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform; and decrypt the first working key ciphertext using the injection key in the quantum key injection medium to obtain a first working key.

[0043] Optionally, the client is used to determine whether the user has viewing permission for the second target file before sending a file viewing request to the electronic file security management platform; if the user has viewing permission for the second target file, sending a file viewing request to the electronic file security management platform.

[0044] Optionally, the file viewing request includes user information and identification information of the quantum key injection medium of the client;

[0045] The electronic file security management platform is used to obtain pre-established identity association information, where the identity association information includes an association relationship between user information and identification information of a quantum key-filled medium; determine whether the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information; if the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information, search for key information corresponding to the second target file according to the file information corresponding to the second target file.

[0046] Optionally, the electronic document security management platform is used to determine whether the user has viewing permission for the second target file; if the user has viewing permission for the second target file, searching for key information corresponding to the second target file based on file information corresponding to the second target file.

[0047] In a fourth aspect, an embodiment of the present invention discloses a file encryption device based on quantum encryption, the device is applied to a client, and the device includes:

[0048] An acquisition module, configured to acquire a first working key and corresponding key information when an encryption operation of a user on a first target file is detected;

[0049] An encryption module, used to encrypt the first target file using the first working key;

[0050] A first sending module, used for sending the encrypted first target file, the key information and the file information corresponding to the first target file to the electronic file security management platform;

[0051] A second sending module is used to send a file viewing request to the electronic file security management platform when a decryption operation of the user on the second target file is detected; the file viewing request includes file information corresponding to the second target file;

[0052] A first receiving module, used to receive key information corresponding to the second target file sent by the electronic file security management platform;

[0053] A decryption module is used to obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key.

[0054] Optionally, the client includes a quantum key injection medium, and the acquisition module includes:

[0055] The first sending submodule is used to send a working key acquisition request to the quantum cryptographic service platform;

[0056] A first receiving submodule, used to receive a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform;

[0057] The first decryption submodule is used to decrypt the first working key ciphertext by using the injection key in the quantum key injection medium to obtain a first working key.

[0058] Optionally, it also includes:

[0059] A first determination module, used to determine whether the user has viewing authority for the second target file;

[0060] The second sending module includes:

[0061] The second sending submodule is used to send a file viewing request to the electronic file security management platform if the user has viewing authority for the second target file.

[0062] Optionally, the key information corresponding to the second target file is sent by the electronic file security management platform after determining that the user has viewing authority for the second target file.

[0063] In a fifth aspect, an embodiment of the present invention discloses a file encryption device based on quantum encryption, the device is applied to an electronic file security management platform, and the device includes:

[0064] A second receiving module, used for receiving the encrypted first target file, key information and file information corresponding to the first target file sent by the client;

[0065] A relationship establishing module, used to establish an association relationship between the file information corresponding to the first target file and the key information;

[0066] A third receiving module, configured to receive a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file;

[0067] A search module, used for searching key information corresponding to the second target file according to the file information corresponding to the second target file;

[0068] The third sending module is used to send key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file and decrypts the second target file according to the second working key.

[0069] Optionally, the file viewing request includes user information and identification information of the quantum key injection medium of the client;

[0070] The third receiving module comprises:

[0071] A first acquisition submodule is used to acquire pre-established identity association information, wherein the identity association information includes an association relationship between user information and identification information of a quantum key injection medium;

[0072] A second determination submodule is used to determine whether the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information;

[0073] The search module includes:

[0074] A search submodule is used to search for key information corresponding to the second target file according to the file information corresponding to the second target file if the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information.

[0075] Optionally, it also includes:

[0076] A third determination submodule, used to determine whether the user has viewing authority for the second target file;

[0077] The search submodule includes:

[0078] A searching unit is used to search for key information corresponding to the second target file according to file information corresponding to the second target file if the user has viewing authority for the second target file.

[0079] In a sixth aspect, an embodiment of the present invention discloses an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the file encryption method based on quantum encryption as described above are implemented.

[0080] In a seventh aspect, an embodiment of the present invention discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the file encryption method based on quantum encryption as described above are implemented.

[0081] The embodiments of the present invention include the following advantages:

[0082] The present invention introduces a quantum encrypted file encryption method, device, equipment and medium, including: when a user's encryption operation for a first target file is detected, a first working key and corresponding key information are obtained to encrypt the first target file; the encrypted first target file, key information and corresponding file information are sent to an electronic file security management platform; when a user's decryption operation for a second target file is detected, a file viewing request is sent to the electronic file security management platform, including file information corresponding to the file; the key information corresponding to the second target file sent by the receiving platform is further obtained, and the second working key is decrypted. The method effectively distributes quantum keys, uses the electronic file security management platform as an intermediary to distribute quantum keys and files, is no longer limited to file transfers between one-to-one users, ensures that multiple users can safely and reliably distribute to shared quantum keys, improves the security of electronic files, and improves the convenience of decryption operations after encrypted file transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0083] Figure 1 is a flowchart of a file encryption method based on quantum encryption provided by an embodiment of the present invention;

[0084] Figure 2 is a flowchart of another file encryption method based on quantum encryption provided by an embodiment of the present invention;

[0085] Figure 3 is a system schematic diagram of a file encryption method based on quantum encryption provided by an embodiment of the present invention;

[0086] Figure 4 It is a quantum key injection flow chart of a file encryption method based on quantum encryption provided by an embodiment of the present invention;

[0087] Figure 5 This is a flowchart of a working key application for a file encryption method based on quantum encryption provided by an embodiment of the present invention;

[0088] Figure 6 It is a structural block diagram of a file encryption device based on quantum encryption provided by an embodiment of the present invention;

[0089] Figure 7 It is a structural block diagram of another file encryption device based on quantum encryption provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0090] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0091] Quantum encryption technology refers to the use of quantum principles to perform a series of encryption techniques for file data transmission, including key generation, plaintext obfuscation encryption, and anti-eavesdropping.

[0092] One of the core concepts of the embodiment of the present invention is a file encryption system based on quantum encryption, including an electronic file security management platform, a quantum cryptography service platform, a client, and a quantum key charging medium. A user logs in to the client, the client binds the identity with the quantum key charging medium, uses the quantum key charging medium to obtain the charging key and the working key from the quantum cryptography service platform, uses the charging key to encrypt and protect the working key, and then encrypts the file on the client to implement the file encryption operation. Another user submits a file viewing request, and the authority policy module of the electronic file security management platform is used to detect the user's decryption authority and obtain the working key information corresponding to the file. The quantum key charging medium corresponding to the user finds the corresponding working key from the quantum cryptography service platform according to the working key information to implement the file decryption operation, thereby facilitating file transfer and distribution operations between multiple users.

[0093] Reference Figure 1 , shows a flowchart of a file encryption method based on quantum encryption provided by an embodiment of the present invention, and the method may specifically include the following steps:

[0094] Step 101, when an encryption operation of a user on a first target file is detected, a first working key and corresponding key information are obtained;

[0095] In this embodiment, the working key is a pair of symmetric keys provided by the quantum cryptography service platform, which is used to encrypt files and protect the confidentiality and integrity of file data. The first working key here refers to the working key that the sender of the file encrypts the target file through the encryption and decryption client, and the key information refers to the filling key and other related information required to decrypt the working key. In one embodiment, the working key can be generated by a quantum random number generator (Quantum Random Number Generator, QRNG), which is a device that generates true random numbers using the principles of quantum mechanics. Unlike traditional pseudo-random number generators (PRNGs), the random numbers generated by QRNGs are based on physical processes and are therefore more unpredictable and secure.

[0096] The client includes a quantum key charging medium; the quantum key charging medium refers to a secure medium with a built-in secure zone storage area, and the area can only be read and written normally after the identity authentication of the password is passed. Utilizing the characteristics of the secure storage area, management operations such as charging, encrypting, writing, and reading of quantum keys are realized. Charging key: A symmetric key, provided by the quantum cryptography service platform, written into the key space of the secure medium (key charging). The charging key is used as the terminal master key for terminal identity authentication between the secure medium and the quantum cryptography service platform, encrypted distribution of the working key, and encrypted protection of the working key. In this embodiment, the quantum key charging medium can be a quantum security Ukey, which can be inserted into a PC (personal computer) to read the charging key therein.

[0097] In one embodiment, step 101 may include the following sub-steps:

[0098] Sub-step S11, sending a working key acquisition request to the quantum cryptography service platform;

[0099] The quantum cryptography service platform is used to provide full life cycle management of quantum keys, including key generation, key storage, key injection, key use, key destruction, etc. If the client wants to encrypt and decrypt files, it must first apply for a key through the quantum cryptography service platform.

[0100] Sub-step S12, receiving the first working key ciphertext and corresponding key information sent by the quantum cryptography service platform;

[0101] After the client sends a key application to the quantum cryptography service platform, the quantum cryptography service platform responds to the request, and the client receives the working key for encrypting the target file from the quantum cryptography service platform, as well as the injection key and key identity information corresponding to the decryption of the working key ciphertext, in order to decrypt the corresponding working key.

[0102] Sub-step S13, decrypting the first working key ciphertext using the injection key in the quantum key injection medium to obtain a first working key.

[0103] Before obtaining the working key to encrypt and decrypt the target file, in order to ensure the secure transmission of the file and the authentication of the identities of both parties from being attacked by a man-in-the-middle, it is necessary to protect the working key required for subsequent encryption and decryption through the charging key. When the charging key is issued, it is encapsulated in a digital envelope to protect the transmission and storage security of the charging key. Before transmitting the file, the charging key can be obtained through the quantum key charging medium to protect the working key. The user confirms his identity through the charging key and user identity information, and decrypts the first working key ciphertext to obtain the working key plaintext, thereby improving the overall security of the system.

[0104] Step 102, encrypting the first target file using the first working key;

[0105] The target file to be transmitted is encrypted using the first working key obtained from the quantum cryptography service platform, and the subsequent recipient decrypts the target file using the second working key that is symmetric to the first working key, thereby achieving secure transmission of the target file.

[0106] Step 103, sending the encrypted first target file, the key information, and file information corresponding to the first target file to the electronic file security management platform;

[0107] In addition to sending the target file to be transmitted to the electronic document security management platform, the client also needs to send the key information and file information corresponding to the decryption of the target file, so that the recipient can accurately find the file to be received and the corresponding decryption key. The key information refers to the ID (Identification, usually refers to the unique identification code on the network such as ID card, user name, account number, etc.) of the working key and the corresponding charging key ID. The file information corresponding to the first target file refers to the file ID of the encrypted target file.

[0108] Step 104: when a decryption operation of the user on the second target file is detected, a file viewing request is sent to the electronic file security management platform; the file viewing request includes file information corresponding to the second target file;

[0109] When the target file and related file information and key information are sent to the file security management platform, anyone who meets the requirements and has the authority to pass the verification can apply to the file security management platform to view and receive files. The file viewing here not only refers to the target file itself, but also its corresponding file ID. The file security management platform can manage multiple files, and with the help of the file ID, it can accurately find the required target file, thereby improving the efficiency and accuracy of file transmission between multiple users.

[0110] Before sending a file viewing request to the electronic file security management platform, the method further includes:

[0111] In one embodiment, step 104 may include the following sub-steps:

[0112] Sub-step S21, determining whether the user has viewing authority for the second target file;

[0113] In order to improve the security of file transmission and prevent someone from accidentally picking up a quantum security Ukey and reading the charged key, which may lead to file leakage, the electronic file security management platform also needs to verify the user's identity information to determine whether the user has the permission to view the target file. The electronic file security management platform has a permission policy management module to verify the user's document decryption permission and verify the user. Only after the verification is successful can the subsequent receiving of working keys and viewing of files be continued.

[0114] Sub-step S22: If the user has viewing authority for the second target file, a file viewing request is sent to the electronic file security management platform.

[0115] The electronic document management platform establishes user groups. Users in the same user group have the same permissions. For example, user A and user B are in the same group, and users A and B can view each other's files. Users who are not in the same group need to manually assign permissions. For example, user C and user A are not in the same group. User C needs to view A's encrypted files, and the electronic document management platform needs to manually assign permissions. After the assignment, user C is assigned the permission to view the encrypted documents generated by user A. User C has the permission to view the encrypted documents generated by user A. The permission policy can be stored on the platform server or sent to each encryption and decryption client.

[0116] After the user passes the verification of the electronic document security management platform and is confirmed to have viewing authority, he / she sends a file viewing request to the electronic document security management platform, requesting to view the target file, as well as the corresponding file ID and key information, so as to subsequently decrypt the target file and receive it.

[0117] Step 105, receiving key information corresponding to the second target file sent by the electronic file security management platform;

[0118] Receive and send a request to view a file to the electronic document security management system (if the permission policy is on the client side at this time, there is no need to check the permission on the server side, and the permission can be checked on the recipient's client side); the electronic document security management system needs to detect whether the recipient has the decryption permission for the file (if the permission policy is on the client side, the client can also check it by itself); if the recipient has the decryption permission for the file, the electronic document management platform will send the work key ID corresponding to the file to the recipient.

[0119] In one embodiment, the key information corresponding to the second target file is sent by the electronic file security management platform after determining that the user has viewing authority for the second target file.

[0120] Step 106: Obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key.

[0121] After the receiving user obtains the file ciphertext, he logs in to the encryption and decryption client through the user ID and inserts the quantum security Ukey bound to the user on the PC; the quantum security Ukey decrypts the working key ciphertext corresponding to the working key ID received from the quantum cryptography service platform with the injection key to obtain the working key plaintext; the client uses the working key plaintext of the quantum security Ukey to complete the file decryption operation.

[0122] The embodiment of the present invention is applied to the client. When a user's encryption operation for a first target file is detected, the first working key and the corresponding key information are obtained to encrypt the first target file; the encrypted first target file, key information and corresponding file information are sent to the electronic file security management platform; when a user's decryption operation for a second target file is detected, a file viewing request is sent to the electronic file security management platform, including the file information corresponding to the file; the key information corresponding to the second target file sent by the receiving platform is further obtained, and the second working key is decrypted. The method effectively distributes quantum keys, uses the electronic file security management platform as an intermediary to distribute quantum keys and files, is no longer limited to file transfers between one-to-one users, ensures that multiple users can safely and reliably distribute to shared quantum keys, improves the security of electronic files, and improves the convenience of decryption operations after encrypted file transmission.

[0123] Reference Figure 2 , shows a flowchart of another file encryption method based on quantum encryption provided by an embodiment of the present invention, the method may specifically include the following steps:

[0124] Step 201, receiving an encrypted first target file, key information, and file information corresponding to the first target file sent by a client;

[0125] Generally, the key for encrypting and decrypting files based on quantum keys is stored locally, and then the locally stored key is found according to the specific identifier of the encrypted file for decryption operation, so as to realize secure encryption and decryption operation during file data transmission. However, this file encryption and decryption method based on quantum random numbers focuses more on the encryption and decryption operations of a single client, and cannot realize the secure transmission of file data between multiple clients and the decryption of files after distribution.

[0126] The embodiment of the present invention sends the key information, target file and file information to the electronic file security management platform for processing. In this way, as long as the corresponding working key can be applied for through identity authentication, the file can be applied for on the file management platform first, thereby realizing convenient and secure transmission of files between multiple users.

[0127] Step 202, establishing an association relationship between file information and key information corresponding to the first target file;

[0128] The file information corresponding to the first target file is the file ID of the file, and the key information is the key ID corresponding to the working key. The sender quantum security Ukey applies for the working key from the quantum cryptography service platform through the built-in charging key, and the quantum cryptography service platform returns the key ID and the working key ciphertext; the sender encryption client sends the encrypted document ID and the corresponding working key ID to the electronic file security management platform; the electronic file security management platform establishes the association relationship between the target file ID and the working key ID, and maintains the association relationship data table, which can facilitate the electronic file security management platform to verify the authority of the receiving user, and also enable the recipient to accurately find the target file, thereby improving the security and convenience of file transmission.

[0129] Step 203, receiving a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file;

[0130] In one embodiment, the file viewing request includes user information and identification information of the quantum key injection medium of the client;

[0131] The electronic document security management platform is responsible for the management of multiple groups of files. If the recipient wants to receive the target file, he needs to obtain the file information of the target file, that is, the file ID, and the working key to decrypt the file. The working key is protected by the injection key for transmission. Therefore, the recipient also needs to apply to view the quantum key injection medium, that is, the injection key carried by the quantum security Ukey. For security reasons, the identity of the client's quantum security Ukey needs to be verified.

[0132] The step 203 may include the following sub-steps:

[0133] Sub-step S31, obtaining pre-established identity association information, wherein the identity association information includes an association relationship between user information and identification information of a quantum key injection medium;

[0134] In the file encryption process, the electronic file security management platform establishes an association between user information and the identification information of the quantum key injection medium, that is, the identity association information between the encrypted client user ID and the quantum security Ukey.

[0135] Sub-step S32, determining whether the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information;

[0136] The recipient logs in to the encryption client through the user ID and inserts the quantum security Ukey on the PC. Only when the recipient's user ID and the inserted quantum security Ukey are bound, the identification information of the client's quantum key injection medium matches the identity association information and passes the verification; otherwise, it does not match and the viewing request cannot be passed.

[0137] Step 204, searching for key information corresponding to the second target file according to the file information corresponding to the second target file;

[0138] Since the file ID and key ID have been linked in the electronic file security management platform, the user obtains the working key ID corresponding to the target file based on the received target file ID, and decrypts the working key ciphertext through the injection key in the quantum security Uke to obtain the working key ciphertext that can decrypt the target file.

[0139] In one embodiment, step 204 may include the following sub-steps:

[0140] If the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information, the key information corresponding to the second target file is searched according to the file information corresponding to the second target file.

[0141] If the user's client ID and quantum security Ukey are bound and associated with the identity, then if the information matches, the corresponding key ID and working key ciphertext can be found according to the second target file information that needs to be received.

[0142] In another embodiment, the step 204 may further include the following sub-steps:

[0143] Sub-step S41, determining whether the user has viewing authority for the second target file;

[0144] If the receiving user and the sending user are in the same group and both have the same permissions, the receiving user in the same group does not need to go through the permission verification of the electronic document security management platform, and can directly pass the file viewing request, receive the target file and decrypt it. Or users who are not in the same group can manually assign permissions. For example, user C and user A are not in the same group. User C needs to view A's encrypted file. The electronic document management platform needs to manually assign permissions. After the assignment, user C is assigned the permission to view the encrypted document generated by user A. User C has the permission to view the encrypted document generated by user A.

[0145] Sub-step S42: if the user has the viewing authority for the second target file, searching for key information corresponding to the second target file according to the file information corresponding to the second target file.

[0146] Receive and send a request to view a file to the electronic document security management system (if the permission policy is on the client side at this time, there is no need to check the permission on the server side, and the permission can be checked on the recipient's client side); the electronic document security management system needs to detect whether the recipient has the decryption permission for the file (if the permission policy is on the client side, the client can also check it by itself); if the recipient has the decryption permission for the file, the electronic document management platform will send the work key ID corresponding to the file to the recipient.

[0147] Step 205: Send key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file, and decrypts the second target file according to the second working key.

[0148] The quantum cryptography service platform returns the ciphertext of the working key corresponding to the ID of the working key. The quantum security Ukey uses the charging key to decrypt and obtain the plaintext of the working key. The decryption client uses the working key of the quantum security Ukey to complete the decryption operation of the file.

[0149] The embodiment of the present invention is applied to an electronic file security management platform, receiving an encrypted first target file, key information, and file information corresponding to the first target file sent by a client; establishing an association relationship between the file information corresponding to the first target file and the key information; receiving a file viewing request for a second target file sent by a client, including the file information corresponding to the second target file; searching for the key information corresponding to the second target file according to the file information corresponding to the second target file; sending the key information corresponding to the second target file to the client, so that the client obtains the second working key according to the key information corresponding to the second target file, and decrypts the second target file according to the second working key. This method effectively distributes quantum keys, uses the electronic file security management platform as an intermediary to distribute quantum keys and files, is no longer limited to file transfers between one-to-one users, ensures that multiple users can safely and reliably distribute to shared quantum keys, improves the security of electronic files, and improves the convenience of decryption operations after encrypted file transfer.

[0150] The embodiment of the present invention also discloses a file encryption system based on quantum encryption, which is characterized by comprising a client and an electronic file security management platform;

[0151] The client is used to obtain a first working key and corresponding key information when detecting a user's encryption operation on a first target file; encrypt the first target file using the first working key; send the encrypted first target file, the key information and the file information corresponding to the first target file to an electronic file security management platform; send a file viewing request to the electronic file security management platform when detecting a user's decryption operation on a second target file; the file viewing request includes the file information corresponding to the second target file; receive the key information corresponding to the second target file sent by the electronic file security management platform; obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key;

[0152] The electronic document security management platform is used to receive the encrypted first target file, key information and file information corresponding to the first target file sent by the client; establish an association relationship between the file information corresponding to the first target file and the key information; receive a file viewing request for a second target file sent by the client, the file viewing request including the file information corresponding to the second target file; search for the key information corresponding to the second target file based on the file information corresponding to the second target file; and send the key information corresponding to the second target file to the client, so that the client obtains a second working key based on the key information corresponding to the second target file, and decrypts the second target file based on the second working key.

[0153] Furthermore, the client is used to determine whether the user has viewing permission for the second target file before sending a file viewing request to the electronic file security management platform; if the user has viewing permission for the second target file, sending a file viewing request to the electronic file security management platform.

[0154] In one embodiment of the present invention, the file viewing request includes user information and identification information of the quantum key injection medium of the client;

[0155] The electronic file security management platform is used to obtain pre-established identity association information, where the identity association information includes an association relationship between user information and identification information of a quantum key-filled medium; determine whether the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information; if the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information, search for key information corresponding to the second target file according to the file information corresponding to the second target file.

[0156] Furthermore, the electronic document security management platform is used to determine whether the user has viewing authority for the second target file; if the user has viewing authority for the second target file, the key information corresponding to the second target file is searched based on the file information corresponding to the second target file.

[0157] In one embodiment of the present invention, it also includes: a quantum cryptography service platform; the client includes a quantum key injection medium;

[0158] The client is used to send a working key acquisition request to the quantum cryptography service platform; receive a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform; and decrypt the first working key ciphertext using the injection key in the quantum key injection medium to obtain a first working key.

[0159] The present invention discloses a quantum encrypted file encryption system, which includes a client and an electronic file security management platform. When a user's encryption operation for a first target file is detected, a first working key and corresponding key information are obtained to encrypt the first target file; the encrypted first target file, key information and corresponding file information are sent to the electronic file security management platform; when a user's decryption operation for a second target file is detected, a file viewing request is sent to the electronic file security management platform, including file information corresponding to the file; the key information corresponding to the second target file sent by the receiving platform is further obtained, and the second working key is decrypted. The method can effectively distribute quantum keys, ensure that multiple users can safely and reliably distribute to shared quantum keys, and use the quantum keys distributed by the method to encrypt and decrypt files, which not only effectively improves the security of electronic files, but also significantly improves the convenience of decryption operations after encrypted file transmission, thereby bringing significant security and operational efficiency advantages to the field of electronic file management.

[0160] Reference Figure 3 , shows a system architecture diagram of a quantum encryption file encryption method provided by an embodiment of the present invention, and the method may specifically include the following steps:

[0161] The quantum security Ukey applies for a charging key from the quantum cryptography service platform. When the charging key is issued, it is encapsulated in a digital envelope to protect the transmission and storage security of the charging key. The electronic document security management platform establishes the identity association information between the client user ID and the quantum security Ukey. The sender logs in to the encryption client through the user ID, inserts the quantum security Ukey bound to the user on the PC, and selects a file to encrypt. The sender's quantum security Ukey applies for a working key from the quantum cryptography service platform through the built-in charging key. The quantum cryptography service platform returns the key ID and the working key ciphertext. The quantum security Ukey uses the charging key to decrypt and obtain the working key plaintext. The encryption client uses the working key of the quantum security Ukey to complete the file encryption operation. The client sends the encrypted document ID and the corresponding key ID to the electronic document security management platform, and the electronic document security management platform establishes an association between the document ID and the working key.

[0162] After the receiving user obtains the file ciphertext, he logs in to the encryption client with the user ID, inserts the quantum security Ukey bound to the user on the PC, and sends a file viewing request to the electronic document security management platform; the permission policy management module of the electronic document security management platform verifies the user's document viewing authority. If the verification is successful, the recipient obtains the working key ID corresponding to the document; the recipient's quantum security Ukey applies for the working key from the quantum cryptography service platform through the built-in charging key and working key ID. The quantum cryptography service platform returns the working key ciphertext corresponding to the working key ID. The quantum security Ukey uses the charging key to decrypt and obtain the working key plaintext. The encryption client uses the working key of the quantum security Ukey to complete the file decryption operation.

[0163] Reference Figure 4 , shows a quantum key injection flow chart of a file encryption method based on quantum encryption provided by an embodiment of the present invention, which is specifically described as follows:

[0164] The quantum security Ukey is inserted into the charging terminal, and the quantum cryptography service platform checks the registration information of the charging terminal to prevent it from being used by illegal devices. After the identity authentication is passed, the charging terminal initiates the charging key application. When the charging key is issued, it is encapsulated in a digital envelope to protect the transmission security and storage security of the charging key; the charging key is written to the quantum security Ukey secure storage area.

[0165] Reference Figure 5 , shows a working key application flow chart of a file encryption method based on quantum encryption provided by an embodiment of the present invention, which is specifically described as follows:

[0166] The electronic document security management platform establishes the identity association information between the encryption client user ID and the quantum security Ukey; the sender logs in to the encryption client through the user ID, inserts the quantum security Ukey bound to the user on the PC, and selects a file for encryption; the sender's quantum security Ukey applies for the working key from the quantum cryptography service platform through the built-in injection key, and the quantum cryptography service platform returns the key ID and the working key ciphertext. The quantum security Ukey uses the injection key to decrypt and obtain the working key plaintext; the encryption client uses the quantum security Ukey's working key to complete the file encryption operation.

[0167] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0168] Reference Figure 6 , shows a structural block diagram of a file encryption device based on quantum encryption provided by an embodiment of the present invention, which may specifically include the following modules:

[0169] An acquisition module 601 is used to acquire a first working key and corresponding key information when an encryption operation of a user on a first target file is detected;

[0170] An encryption module 602, configured to encrypt the first target file using the first working key;

[0171] A first sending module 603 is used to send the encrypted first target file, the key information and the file information corresponding to the first target file to the electronic file security management platform;

[0172] The second sending module 604 is used to send a file viewing request to the electronic file security management platform when a decryption operation of the user on the second target file is detected; the file viewing request includes file information corresponding to the second target file;

[0173] A first receiving module 605 is used to receive key information corresponding to the second target file sent by the electronic file security management platform;

[0174] The decryption module 606 is used to obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key.

[0175] In an embodiment of the present invention, the client includes a quantum key injection medium, and the acquisition module includes:

[0176] The first sending submodule is used to send a working key acquisition request to the quantum cryptographic service platform;

[0177] A first receiving submodule, used to receive a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform;

[0178] The first decryption submodule is used to decrypt the first working key ciphertext by using the injection key in the quantum key injection medium to obtain a first working key.

[0179] In the embodiment of the present invention, it also includes:

[0180] A first determination module, used to determine whether the user has viewing authority for the second target file;

[0181] The second sending module includes:

[0182] The second sending submodule is used to send a file viewing request to the electronic file security management platform if the user has viewing authority for the second target file.

[0183] In an embodiment of the present invention, the key information corresponding to the second target file is sent by the electronic file security management platform after determining that the user has the viewing authority for the second target file.

[0184] The present invention discloses a quantum encrypted file encryption device. When a user's encryption operation for a first target file is detected, a first working key and corresponding key information are obtained to encrypt the first target file; the encrypted first target file, key information and corresponding file information are sent to an electronic file security management platform; when a user's decryption operation for a second target file is detected, a file viewing request is sent to the electronic file security management platform, including file information corresponding to the file; the key information corresponding to the second target file sent by the receiving platform is further obtained, and the second working key is decrypted. The method can effectively distribute quantum keys, ensure that multiple users can safely and reliably distribute to shared quantum keys, and use the method to encrypt and decrypt files through quantum keys allocated by the electronic file security management platform, which not only effectively improves the security of electronic files, but also significantly improves the convenience of decryption operations after encrypted file transmission, thereby bringing significant security and operational efficiency advantages to the field of electronic file management.

[0185] Reference Figure 7, shows a structural block diagram of another file encryption device based on quantum encryption provided by an embodiment of the present invention, which may specifically include the following modules:

[0186] The second receiving module 701 is used to receive the encrypted first target file, key information and file information corresponding to the first target file sent by the client;

[0187] A relationship establishing module 702, used to establish an association relationship between the file information corresponding to the first target file and the key information;

[0188] A third receiving module 703 is used to receive a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file;

[0189] A search module 704, configured to search for key information corresponding to the second target file according to the file information corresponding to the second target file;

[0190] The third sending module 705 is used to send key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file and decrypts the second target file according to the second working key.

[0191] In an embodiment of the present invention, the file viewing request includes user information and identification information of the quantum key injection medium of the client; the third receiving module includes:

[0192] A first acquisition submodule is used to acquire pre-established identity association information, wherein the identity association information includes an association relationship between user information and identification information of a quantum key injection medium;

[0193] A second determination submodule is used to determine whether the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information;

[0194] In an embodiment of the present invention, the search module includes:

[0195] A search submodule is used to search for key information corresponding to the second target file according to the file information corresponding to the second target file if the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information.

[0196] In the embodiment of the present invention, it also includes:

[0197] A third determination submodule, used to determine whether the user has viewing authority for the second target file;

[0198] The search submodules include:

[0199] A searching unit is used to search for key information corresponding to the second target file according to file information corresponding to the second target file if the user has viewing authority for the second target file.

[0200] The present invention discloses a quantum encrypted file encryption device, which receives an encrypted first target file, key information, and file information corresponding to the first target file sent by a client; establishes an association relationship between the file information corresponding to the first target file and the key information; receives a file viewing request for a second target file sent by a client, including the file information corresponding to the second target file; searches for the key information corresponding to the second target file according to the file information corresponding to the second target file; sends the key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file, and decrypts the second target file according to the second working key. The method can effectively distribute quantum keys, ensure that multiple users can safely and reliably distribute to shared quantum keys, and use the method to encrypt and decrypt files using quantum keys distributed by an electronic file security management platform, which not only effectively improves the security of electronic files, but also significantly improves the convenience of decryption operations after encrypted file transmission, thereby bringing significant security and operational efficiency advantages to the field of electronic file management.

[0201] As for the system and device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0202] An embodiment of the present invention further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned file encryption method embodiment based on quantum encryption are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0203] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned file encryption method embodiment based on quantum encryption are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0204] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0205] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0206] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0207] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0208] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0209] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0210] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0211] The above is a detailed introduction to a file encryption method based on quantum encryption, a file encryption device, system, equipment and medium based on quantum encryption provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A file encryption method based on quantum encryption, characterized in that: Applied to a client, the method comprises: When an encryption operation of the user on the first target file is detected, a first working key and corresponding key information are obtained; Encrypting the first target file using the first working key; Sending the encrypted first target file, the key information, and file information corresponding to the first target file to the electronic file security management platform; When a decryption operation of the user on the second target file is detected, a file viewing request is sent to the electronic file security management platform; the file viewing request includes file information corresponding to the second target file; Receiving key information corresponding to the second target file sent by the electronic file security management platform; A second working key is obtained according to the key information corresponding to the second target file, and the second target file is decrypted according to the second working key.

2. The method according to claim 1, characterized in that The client includes a quantum key injection medium; The obtaining of the first working key and the corresponding key information includes: Send a request to the quantum cryptography service platform to obtain the working key; Receiving a first working key ciphertext and corresponding key information sent by the quantum cryptography service platform; The first working key ciphertext is decrypted by using the injection key in the quantum key injection medium to obtain the first working key.

3. The method according to claim 1, characterized in that Before sending a file viewing request to the electronic file security management platform, the method further includes: Determining whether the user has viewing authority for the second target file; The sending of a file viewing request to the electronic file security management platform includes: If the user has viewing authority for the second target file, a file viewing request is sent to the electronic file security management platform.

4. The method according to claim 1, characterized in that: The key information corresponding to the second target file is sent by the electronic file security management platform after determining that the user has the viewing authority for the second target file.

5. A file encryption method based on quantum encryption, characterized in that: Applied to an electronic document security management platform, the method comprises: Receive the encrypted first target file, key information, and file information corresponding to the first target file sent by the client; Establishing an association relationship between file information and key information corresponding to the first target file; receiving a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file; According to the file information corresponding to the second target file, searching for the key information corresponding to the second target file; Sending key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file, and decrypts the second target file according to the second working key.

6. The method according to claim 5, characterized in that The file viewing request includes user information and identification information of the quantum key injection medium of the client; The method further comprises: Acquire pre-established identity association information, wherein the identity association information includes an association relationship between user information and identification information of a quantum key injection medium; Determining whether the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information; The searching for key information corresponding to the second target file according to the file information corresponding to the second target file includes: If the user information in the file viewing request and the identification information of the quantum key injection medium of the client match the identity association information, the key information corresponding to the second target file is searched according to the file information corresponding to the second target file.

7. The method according to claim 5, characterized in that Also includes: Determining whether the user has viewing authority for the second target file; The searching for key information corresponding to the second target file according to the file information corresponding to the second target file includes: If the user has the viewing authority for the second target file, the key information corresponding to the second target file is searched according to the file information corresponding to the second target file.

8. A file encryption system based on quantum encryption, characterized in that: Includes client and electronic document security management platform; The client is used to obtain a first working key and corresponding key information when detecting an encryption operation of a user on a first target file; and encrypt the first target file using the first working key; Sending the encrypted first target file, the key information, and the file information corresponding to the first target file to an electronic file security management platform; when detecting a user's decryption operation on a second target file, sending a file viewing request to the electronic file security management platform; the file viewing request includes the file information corresponding to the second target file; receiving the key information corresponding to the second target file sent by the electronic file security management platform; obtaining a second working key according to the key information corresponding to the second target file, and decrypting the second target file according to the second working key; The electronic document security management platform is used to receive the encrypted first target file, key information and file information corresponding to the first target file sent by the client; establish an association relationship between the file information corresponding to the first target file and the key information; receive a file viewing request for a second target file sent by the client, the file viewing request including the file information corresponding to the second target file; search for the key information corresponding to the second target file based on the file information corresponding to the second target file; and send the key information corresponding to the second target file to the client, so that the client obtains a second working key based on the key information corresponding to the second target file, and decrypts the second target file based on the second working key.

9. The system according to claim 8, characterized in that Also includes: Quantum cryptography service platform; the client includes a quantum key filling medium; The client is used to send a working key acquisition request to the quantum cryptography service platform; Receive the first working key ciphertext and corresponding key information sent by the quantum cryptography service platform; decrypt the first working key ciphertext by using the injection key in the quantum key injection medium to obtain the first working key.

10. The system according to claim 8, characterized in that The client is used to determine whether the user has viewing authority for the second target file before sending a file viewing request to the electronic file security management platform; if the user has viewing authority for the second target file, send a file viewing request to the electronic file security management platform.

11. The system according to claim 8, characterized in that The file viewing request includes user information and identification information of the quantum key injection medium of the client; The electronic file security management platform is used to obtain pre-established identity association information, where the identity association information includes an association relationship between user information and identification information of a quantum key-filled medium; determine whether the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information; if the user information in the file viewing request and the identification information of the quantum key-filled medium of the client match the identity association information, search for key information corresponding to the second target file according to the file information corresponding to the second target file.

12. The system according to claim 8, characterized in that The electronic file security management platform is used to determine whether the user has viewing authority for the second target file; if the user has viewing authority for the second target file, the key information corresponding to the second target file is searched based on the file information corresponding to the second target file.

13. A file encryption device based on quantum encryption, characterized in that: The device is applied to a client, and comprises: An acquisition module, configured to acquire a first working key and corresponding key information when an encryption operation of a user on a first target file is detected; An encryption module, used to encrypt the first target file using the first working key; A first sending module, used for sending the encrypted first target file, the key information and the file information corresponding to the first target file to the electronic file security management platform; A second sending module is used to send a file viewing request to the electronic file security management platform when a decryption operation of the user on the second target file is detected; the file viewing request includes file information corresponding to the second target file; A first receiving module, used to receive key information corresponding to the second target file sent by the electronic file security management platform; A decryption module is used to obtain a second working key according to the key information corresponding to the second target file, and decrypt the second target file according to the second working key.

14. A file encryption device based on quantum encryption, characterized in that: The device is applied to an electronic document security management platform, and the device comprises: A second receiving module, used for receiving the encrypted first target file, key information and file information corresponding to the first target file sent by the client; A relationship establishing module, used to establish an association relationship between the file information corresponding to the first target file and the key information; A third receiving module, configured to receive a file viewing request for a second target file sent by the client, wherein the file viewing request includes file information corresponding to the second target file; A search module, used for searching key information corresponding to the second target file according to the file information corresponding to the second target file; The third sending module is used to send key information corresponding to the second target file to the client, so that the client obtains a second working key according to the key information corresponding to the second target file and decrypts the second target file according to the second working key.

15. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the file encryption method based on quantum encryption as described in any one of claims 1 to 4 are implemented.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the file encryption method based on quantum encryption as described in any one of claims 1 to 4 are implemented.

Images