Message transmission method, device and equipment

Abstract

The invention discloses a message transmission method, device and equipment. The method comprises the following steps: acquiring a to-be-sent target message; determining a target point corresponding to the text data contained in the target message on the elliptic curve, and encrypting the target point according to a quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; according to a quantum walk algorithm, generating a random matrix based on picture data contained in the target message, and determining an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; performing encryption processing on the picture data according to the encryption vector to obtain a second ciphertext, and determining an encrypted target message according to the first ciphertext and the second ciphertext; and the encrypted target message is sent to the terminal equipment, so that targeted encryption processing can be performed by adopting different encryption modes according to different types of data contained in the target message, and the encryption effect on the target message is improved.

Description

Technical Field

[0001] This document relates to the field of computer technology, and in particular to a message transmission method, device and equipment. Background Art

[0002] As society enters the era of comprehensive informatization, people pay more and more attention to their privacy data. In order to protect the security of message transmission, messages can be encrypted using keys determined by mathematical algorithms.

[0003] However, with the emergence of quantum computers, the security of keys determined by mathematical algorithms depends on the complexity of mathematical algorithms, so the method of encrypting messages with traditional keys cannot resist the risk of attacks from quantum computers. To this end, the embodiments of this specification provide a technical solution to improve the security of information transmission. Summary of the invention

[0004] The purpose of the embodiments of this specification is to provide a technical solution to improve the security of information transmission.

[0005] In order to implement the above technical solution, the embodiments of this specification are implemented as follows: A message transmission method provided by an embodiment of the present specification includes: obtaining a target message to be sent; determining a target point on an elliptic curve corresponding to text data contained in the target message, and encrypting the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext; generating a random matrix based on image data contained in the target message according to a quantum walk algorithm, and determining an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data; encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining the encrypted target message according to the first ciphertext and the second ciphertext; and sending the encrypted target message to the terminal device.

[0006] A message transmission device provided in an embodiment of the present specification includes: a message acquisition module, used to acquire a target message to be sent; a first encryption module, used to determine a target point on an elliptic curve corresponding to text data contained in the target message, and encrypt the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext; a vector determination module, used to generate a random matrix based on picture data contained in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; a second encryption module, used to encrypt the picture data according to the encryption vector to obtain a second ciphertext, and determine the encrypted target message according to the first ciphertext and the second ciphertext; a message sending module, used to send the encrypted target message to the terminal device.

[0007] A message transmission device provided in an embodiment of the present specification includes: a processor; and a memory arranged to store computer executable instructions, wherein when the executable instructions are executed, the processor: obtains a target message to be sent; determines a target point on an elliptic curve corresponding to text data contained in the target message, and encrypts the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext; generates a random matrix based on picture data contained in the target message according to a quantum walk algorithm, and determines an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; encrypts the picture data according to the encryption vector to obtain a second ciphertext, and determines the encrypted target message according to the first ciphertext and the second ciphertext; and sends the encrypted target message to the terminal device.

[0008] The embodiments of the present specification also provide a storage medium, which is used to store computer-executable instructions. When the executable instructions are executed by a processor, they implement the following process: obtaining a target message to be sent; determining a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypting the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext; generating a random matrix based on the picture data contained in the target message according to a quantum walk algorithm, and determining an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; encrypting the picture data according to the encryption vector to obtain a second ciphertext, and determining the encrypted target message according to the first ciphertext and the second ciphertext; and sending the encrypted target message to the terminal device.

[0009] The embodiments of the present specification also provide a computer program product, including a computer program, which implements the following process when executed by a processor: obtaining a target message to be sent; determining a target point on an elliptic curve corresponding to text data contained in the target message, and encrypting the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext; generating a random matrix based on image data contained in the target message according to a quantum walk algorithm, and determining an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data; encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining the encrypted target message according to the first ciphertext and the second ciphertext; and sending the encrypted target message to the terminal device. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of this specification or the prior art, the drawings required for use in the embodiments or the prior art description will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. Figure 1 This is an embodiment of a message transmission method of this specification; Figure 2 This is another message transmission method embodiment of the present specification; Figure 3 This is a schematic diagram of a key distribution process in this specification; Figure 4 This is a schematic diagram of a quantum security service platform application calling process in this specification; Figure 5 This is another message transmission method embodiment of the present specification; Figure 6 This is another message transmission method embodiment of the present specification; Figure 7 This is another message transmission method embodiment of the present specification; Figure 8 This is a schematic diagram of a picture data encryption process in this manual; Fig. 9 This is an embodiment of a message transmission device of this specification; Fig.10 This is an embodiment of a message transmission device in this specification. DETAILED DESCRIPTION

[0011] The embodiments of this specification provide a message transmission method, apparatus and device.

[0012] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this specification.

[0013] The embodiments of this specification provide a technical solution to improve the security of information transmission. Currently, as society enters an era of comprehensive informatization, people pay more and more attention to their privacy data. In order to protect the security of message transmission, messages can be encrypted using a key determined based on a mathematical algorithm.

[0014] However, with the emergence of quantum computers, since the security of keys determined by mathematical algorithms depends on the complexity of mathematical algorithms, the method of encrypting messages using traditional keys cannot resist the risk of attacks from quantum computers. To this end, the embodiments of this specification provide a technical solution to improve the security of information transmission. In this solution, different encryption methods can be used to perform targeted encryption processing according to different types of data contained in the target message to improve the encryption effect of the target message. For specific processing, please refer to the specific content in the following embodiments.

[0015] like Figure 1 As shown, the embodiment of this specification provides a message transmission method, the execution subject of the method can be a server, wherein the server can be an independent server, or a server cluster composed of multiple servers, etc. The server can be a background server for financial services or online shopping services, or a background server for an application, etc. This embodiment takes the execution subject as an example for detailed description. The method can specifically include the following steps: In step S102, the target message to be sent is obtained.

[0016] Among them, the target message can be a rich media message containing multiple different types of data, that is, the target message can contain multiple different types of data such as text data, picture data, video data, etc. For example, the target message can be a 5G message containing text data and picture data sent by the 5G business service platform to the terminal device.

[0017] In implementation, taking the server corresponding to the 5G business service platform as an example, the server can send 5G messages (i.e., target messages) containing various types of data such as text data and image data to user devices for 5G services to provide 5G business services to users.

[0018] In step S104, a target point on the elliptic curve corresponding to the text data contained in the target message is determined, and the target point is encrypted according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext.

[0019] The text data contained in the target message may be original text data in the target message, or text data obtained by performing text conversion processing on voice data in the target message, voice data contained in video data, etc.

[0020] In implementation, first, the server may perform initialization operations, for example, the server may determine elliptic curve parameters, determine the equation form of the elliptic curve, determine the modulus of the Galois field (or finite field), determine the base point on the elliptic curve and the order of the base point (used to generate the size of the cyclic subgroup).

[0021] For example, the equation of an elliptic curve can be of the form 2 =x 3 +ax+b, the modulus of the Galois field (or finite field) field can be a prime number p, the coordinates of the base point G on the elliptic curve can be expressed by (x, y), and the order of the base point G can be a large prime number n.

[0022] The server can map the text data contained in the target message onto the elliptic curve to obtain the target point.

[0023] In step S106, a random matrix is ​​generated based on the picture data included in the target message according to the quantum walk algorithm, and an encryption vector for encrypting the picture data is determined based on the random matrix and a matrix image corresponding to the picture data.

[0024] The picture data included in the target message may be original picture data included in the target message, or picture frame data in video data included in the target message.

[0025] In implementation, the server can generate a random matrix based on the image data contained in the target message by using an alternating quantum walk algorithm, starting from an initial state 0. .

[0026] In step S108, the image data is encrypted according to the encryption vector to obtain a second ciphertext, and the encrypted target message is determined according to the first ciphertext and the second ciphertext.

[0027] In implementation, the server may encrypt the image data according to the value in the encryption vector to obtain the second ciphertext.

[0028] The server may determine the first ciphertext and the second ciphertext as the encrypted target message, or the server may encrypt the first ciphertext and the second ciphertext according to a preset key to obtain the encrypted target message.

[0029] Among them, the preset key can be a key pre-generated according to the server identifier and the device identifier of the terminal device corresponding to the target message. The preset key can be a symmetric key pair or an encryption key in an asymmetric key pair.

[0030] In step S110, the encrypted target message is sent to the terminal device.

[0031] In implementation, the server may send the encrypted target message to the terminal device through a secure connection pre-established between the server and the terminal device.

[0032] After receiving the encrypted target message, the terminal device can decrypt the first ciphertext in the encrypted target message according to the quantum session key negotiated and determined with the server to obtain the target point, and then determine the text data contained in the target message according to the target point.

[0033] Similarly, the terminal device can also determine the image data contained in the target message according to the second ciphertext in the encrypted target message, and further determine the target message according to the text data and image data contained in the target message.

[0034] The embodiment of this specification provides a message transmission method, by obtaining a target message to be sent, determining a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypting the target point according to a quantum session key determined by negotiation with a terminal device, to obtain a first ciphertext, generating a random matrix based on the image data contained in the target message according to a quantum walk algorithm, and determining an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data, encrypting the image data according to the encryption vector, to obtain a second ciphertext, and determining the encrypted target message according to the first ciphertext and the second ciphertext, and sending the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying a quantum walk and a quantum session key, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0035] In practical applications, before the above step S104, the quantum session key can also be obtained through the quantum security service platform, such as Figure 2 As shown, the processing may specifically include the following steps S202 to S204.

[0036] In step 202, a session key application is sent to the quantum security service platform.

[0037] Among them, the quantum security service platform can be a quantum key management and service platform established with quantum key distribution (QKD) network, quantum random number generator, etc. as key sources. The quantum security service platform can provide users with cryptographic application services with enhanced quantum technology security based on quantum keys, combined with security protocols and algorithms. At the same time, the quantum security service platform can provide external services through SDK. Quantum enhanced security applications can integrate SDK and call the API application interface provided by SDK to implement cryptographic services such as session key negotiation, encryption and decryption based on quantum keys. For 5G terminal devices, the quantum security medium can be a super SIM card, and the 5G business service platform and 5G terminal devices can be the two ends of the application system that integrates the quantum security service SDK.

[0038] In step 204, the quantum session key returned by the quantum security service platform in response to the session key application and the key identifier of the quantum session key are received.

[0039] In step 206, the key identifier is sent to the terminal device.

[0040] Among them, the key identifier can be used to trigger the terminal device to obtain the quantum session key from the quantum security service platform through the key identifier.

[0041] In implementation, Figure 3 As shown, the server can send a session key application to the quantum security service platform, and the quantum security service platform can return the quantum session key and key identifier.

[0042] like Figure 4 As shown in the figure, the 5G business service platform (i.e., server) can be used as the initiator of quantum enhanced security applications, and the terminal device can be used as the passive party of quantum enhanced security applications. The server and terminal device need to be connected to the SDK of the quantum security service platform respectively, which mainly includes the following three steps: Step 1, initialization phase: The server and terminal device can initialize the environment and log in and authenticate the device. After the device login authentication is successful, the server can apply for a quantum session key (or group quantum session key). For example, the server can call the group quantum session key application function QSS_ApplyGroupSessionQKey and apply for a group quantum session key from the quantum security service platform through the SDK.

[0043] Step 2, key negotiation phase: Figure 4 Taking mode 1 in the example, the server can apply for a quantum session key from the quantum security server platform, and the quantum security service platform can return the quantum session key and key identifier to the server. The output parameter szKeyID[out] is the KeyID (i.e., key identifier) ​​of the quantum session key returned by the quantum security service platform. The KeyID can be generated, maintained, and returned to the server by the quantum security service platform. The server can send the KeyID to the terminal device to negotiate the quantum session key, where the server can transmit the quantum session key to the terminal device through the negotiated parameters.

[0044] Step 3, password service phase: Figure 3 As shown, the terminal device can obtain the quantum session key from the quantum security server platform through the key identifier. In this way, the server and the terminal device complete the quantum key synchronization process. Subsequently, the server and the terminal device can complete the content security distribution and parsing of the target message based on the quantum session key.

[0045] In practical applications, in the above step S104, a target point on the elliptic curve corresponding to the text data contained in the target message is determined, and the target point is encrypted according to the quantum session key determined by negotiation with the terminal device to obtain the first ciphertext. There are many specific processing methods. An optional processing method is provided below, such as Figure 5 As shown, the processing may specifically include the following steps S1042 to S1048.

[0046] In step S1042, based on a preset hash function, the text data contained in the target message is mapped onto an elliptic curve to obtain a target point.

[0047] In step S1044, a first ciphertext point is determined according to the quantum session key and a preset base point on the elliptic curve.

[0048] In step S1046, a second ciphertext point is determined according to the quantum session key, the target point, and a point on the elliptic curve corresponding to the target point.

[0049] In step S1048, a first ciphertext is determined according to the first ciphertext point and the second ciphertext point.

[0050] In implementation, the server may convert the text data in the target message (such as the card content in the 5G message) into a point M on the elliptic curve. The server may use a preset hash function to map the text data contained in the target message onto the elliptic curve to obtain the target point M, and the coordinates of M may be (x, y).

[0051] The server can use the quantum session key obtained from the quantum security service platform as the encryption key (k).

[0052] The server can determine the first ciphertext point C1 according to the quantum session key and the preset base point on the elliptic curve, that is, the first ciphertext point C1=k*G, where G is the base point on the elliptic curve.

[0053] The server can determine the second ciphertext point C2, C2 = M + k * Q, based on the quantum session key, the target point, and the point on the elliptic curve corresponding to the target point.

[0054] Among them, point Q is the point on the elliptic curve corresponding to the target point M. The addition of point M and point Q can be calculated by the operation rules on the elliptic curve, and the addition of points can be implemented by expanding the point multiplication on the elliptic curve.

[0055] The server may determine the first ciphertext point C1 and the second ciphertext point C2 as the first ciphertext.

[0056] The terminal device can use the quantum session key and the first ciphertext point C1 to perform elliptic curve point multiplication to calculate the shared key, and then use the shared key to perform point subtraction on the second ciphertext point C2 to obtain the point M on the elliptic curve. Then, the point M is converted into plaintext data, that is, the point M (x, y) on the elliptic curve is remapped to the original data, so that the target message sent by the server can be displayed on the terminal device (ie, the message application).

[0057] In practical applications, in the above step S106, according to the quantum walk algorithm, based on the picture data contained in the target message, a random matrix is ​​generated, and based on the random matrix and the matrix image corresponding to the picture data, the encryption vector used to encrypt the picture data is determined in various specific processing methods. The following is an optional processing method, such as Figure 6 As shown, the processing may specifically include the following steps S1062 to S10612.

[0058] In step 1062, the picture data is split into multiple components according to the color channel information contained in the picture data.

[0059] In step 1064, the plurality of components are rotated based on a preset rotation angle to obtain a plurality of rotated components.

[0060] In step 1066, a random matrix is ​​generated based on the plurality of rotated components according to a quantum walk algorithm.

[0061] In step 1068, the matrix image corresponding to each color channel is split to obtain a matrix sub-image.

[0062] The matrix image includes a matrix image corresponding to each color channel.

[0063] In step 10610, a pre-encrypted image is determined based on the random matrix and the matrix sub-image.

[0064] In practical applications, the specific processing method for determining the pre-encrypted image according to the random matrix and the matrix sub-image in the above step S10610 can be varied, and specifically can include the contents of the following steps A1 to A2.

[0065] Step A1, converting the random matrix into a target value within a preset range.

[0066] Step A2, performing bitwise XOR operation on the matrix image according to the target value to obtain a noise color component, and determining the pre-encrypted image according to the noise color component.

[0067] In step 10612, an encryption vector is determined based on the pre-encrypted image and the key matrix.

[0068] In practical applications, the specific processing method for determining the encryption vector according to the pre-encrypted image and the key matrix in the above step S10612 can be varied, and can specifically include the contents of the following steps B1 to B2.

[0069] Step B1, performing block processing on the pre-encrypted image to obtain a plurality of block vectors containing a predetermined number of pixel values.

[0070] Step B1, obtain the product of the block vector and the key matrix, and perform a preset modulus operation on the product to obtain an encryption vector.

[0071] In practical applications, the specific processing methods for encrypting the image data according to the encryption vector in the above step S108 to obtain the second ciphertext can be various. An optional processing method is provided below, such as Figure 7 As shown, the processing may specifically include the following steps S1082 to S1084.

[0072] In step S1082, the picture data is encrypted according to the encryption vector to obtain an encrypted image.

[0073] In step S1084, pixel rows and / or pixel columns of the encrypted image are scrambled based on a random sequence to obtain a second ciphertext.

[0074] In practical applications, the specific processing method for determining the encrypted target message according to the first ciphertext and the second ciphertext in the above step S108 can be varied. An optional processing method is provided below, such as Figure 7 As shown, the processing may specifically include the following steps S1086 to S1088.

[0075] In step S1086, the second ciphertext is encrypted according to the quantum session key to obtain a third ciphertext.

[0076] In step S1088, the encrypted target message is determined based on the first ciphertext and the third ciphertext.

[0077] In implementation, taking the example that the image data contains three color channels, the server can split the image data into three components according to the color channel information contained in the image data, that is, I(m,n,3)=[R(m,n),G(m,n),B(m,n)], where I(m,n,3) is the image data, m is the pixel value of the mth row, n is the pixel value of the nth column, R(m,n) is the component corresponding to the red channel, G(m,n) is the component corresponding to the green channel, and B(m,n) is the component corresponding to the blue channel.

[0078] The server can rotate the three components by 90°, that is, the preset rotation angle can be 90°, to obtain three rotated components. Then, the server can create a random matrix P based on the three rotated components by using an alternating quantum walk algorithm, starting from the initial state 0. B,A :

[0079] P B,A =∑| <b,a,0|U|S0| 2 +∑| <b,a,1|U|S0| 2 ,

[0080] Among them, (b, a) represents the position coordinates of the quantum walk process, also called the position state tensor, S0 represents the starting state of the quantum walk, and US0 represents the entire quantum state.

[0081] The server can select a single-channel image from the image data, and then the server can divide the single-channel image into six different parts to generate matrix sub-images, and these six matrix sub-images can be used as the front (B), back (E), top (A), bottom (D), left (F) and right (C) of the Rubik's Cube respectively:, that is, I = (B, E, A, D, F, C).

[0082] The server can extract a 3*3 pixel matrix from each of the six sub-matrices obtained by segmentation to create six different faces to form a 3-order cube based on the six faces. The surface of the cube contains 54 pixel values. In this way, the image data can be converted into a cube.

[0083] The server may convert the random matrix into a target value K within a preset range in the following manner.

[0084] K=fix(P B,A *10 16 )mod(256).

[0085] The server may perform a bitwise XOR operation on each matrix sub-image in the matrix image according to the target data K in the following manner to obtain a noise color component corresponding to each color channel information.

[0086]

[0087] Among them, N pre-red is the noise color component corresponding to the red channel information, N red is the matrix sub-image corresponding to the red channel information, N pre-green is the noise color component corresponding to the green channel information, N green is the matrix sub-image corresponding to the green channel information, N pre-blue is the noise color component corresponding to the blue channel information, N blue is the matrix sub-image corresponding to the blue channel information.

[0088] The server may determine the pre-encrypted image based on the noise color component in the following manner.

[0089] Assume that the key matrix can be S m : Among them, due to S 12 =IS 11 , S 21 =I+S 11 , S 11 +S 22 =0, so we can determine S 12 and S 21 The value of the key matrix S m The server may perform block processing on the pre-encrypted image to obtain a plurality of block vectors containing a predetermined number of pixel values. For example, the server may divide the pre-encrypted image into a plurality of block vectors with four pixel values ​​as a group. The size of each block vector may be expressed as 4*1(N pre1 , N pre2 , ..., N pren ). The server can obtain the product of the block vector and the key matrix, and perform a preset modulus (such as modulus 256) operation on the product to obtain the encryption vector (C pen1 , C pen2 , ..., C penn ).

[0090] Then, the server can encrypt the picture data according to the encryption vector to obtain an encrypted image.

[0091] The service area may scramble the pixel rows and / or pixel columns of the encrypted image based on a randomly generated random sequence to obtain a second ciphertext. Figure 8 As shown, the server can first scramble the pixel rows of the encrypted image based on the randomly generated random sequence, and then scramble the pixel columns of the encrypted image to obtain the second ciphertext.

[0092] In this way, by integrating quantum cryptography technology with 5G message service communications, 5G message applications can be interfaced with quantum security components, quantum security media, etc., and data of different card types in 5G messages can be specially encrypted. Specifically, for text cards (i.e. text data), elliptic curves combined with quantum keys can be used for encrypted transmission; for picture and video cards (i.e. picture data), special encryption of picture data such as pictures and videos can be achieved by applying DNA coding rules and quantum keys, thereby realizing quantum encryption protection for the transmission of 5G message text, pictures, videos and other content, and creating a 5G message service platform with a "meta-trust" security concept.

[0093] By using quantum key generation and quantum key distribution technologies, 5G message communications with quantum cryptography capabilities can be created. As an emerging secure communication paradigm, quantum cryptography has unique advantages. First, quantum cryptography uses the principles of quantum mechanics (such as quantum superposition and uncertainty principle) to transmit keys through the quantum state of quantum bits. This transmission method theoretically provides information-theoretic security and does not rely on solving mathematical problems.

[0094] Secondly, quantum cryptography can directly detect potential eavesdroppers because the measurement of quantum states affects their state, thus achieving real-time security verification. In addition, because quantum computer attacks may crack traditional cryptographic methods, quantum key distribution methods can cope with possible future quantum computer attacks.

[0095] Quantum encryption technology and the 5G messaging platform are integrated into terminals and use a deeply customized integration mechanism. Security capabilities are implemented in the background, and front-end users are unaware of the operations. They can maintain their original operating habits, ensuring the smooth implementation of relevant security technologies during the application and promotion process. At the same time, it also improves the ability of the original key system to resist cracking, increases data security protection capabilities, reduces data leakage incidents caused by the communication process, and better complies with relevant security regulations.

[0096] Therefore, compared with traditional non-quantum cryptography, quantum cryptography provides a higher level of security, especially in the face of future quantum computer threats. In addition, since 5G communications will bring large-scale Internet of Things, ultra-low latency, large-scale connections, etc., this also brings the need for a higher level of security. Therefore, quantum key distribution can better meet these future 5G communication needs and provide enterprises with more reliable communication guarantees.

[0097] The embodiment of this specification provides a message transmission method, by obtaining a target message to be sent, determining a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypting the target point according to a quantum session key determined by negotiation with a terminal device, to obtain a first ciphertext, generating a random matrix based on the image data contained in the target message according to a quantum walk algorithm, and determining an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data, encrypting the image data according to the encryption vector, to obtain a second ciphertext, and determining the encrypted target message according to the first ciphertext and the second ciphertext, and sending the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying a quantum walk and a quantum session key, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0098] The above is a message transmission method provided in the embodiment of this specification. Based on the same idea, the embodiment of this specification also provides a message transmission device, such as Fig. 9 shown.

[0099] The message transmission device includes: a message acquisition module 901, a first encryption module 902, a vector determination module 903, a second encryption module 904 and a message sending module 905, wherein: The message acquisition module 901 is used to acquire the target message to be sent; A first encryption module 902 is used to determine a target point on the elliptic curve corresponding to the text data contained in the target message, and encrypt the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; A vector determination module 903 is used to generate a random matrix based on the picture data included in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; A second encryption module 904 is used to encrypt the image data according to the encryption vector to obtain a second ciphertext, and determine an encrypted target message according to the first ciphertext and the second ciphertext; The message sending module 905 is used to send the encrypted target message to the terminal device.

[0100] In the embodiment of this specification, the vector determination module 903 is used to: Splitting the image data into multiple components according to color channel information contained in the image data; Based on a preset rotation angle, the multiple components are rotated to obtain multiple rotated components; Based on the plurality of rotated components, the random matrix is ​​generated according to the quantum walk algorithm.

[0101] In the embodiment of this specification, the matrix image includes a matrix image corresponding to each color channel. The vector determination module 903 is used to: Splitting the matrix image corresponding to each color channel to obtain a matrix sub-image; Determine a pre-encrypted image according to the random matrix and the matrix sub-image; The encryption vector is determined according to the pre-encrypted image and a key matrix.

[0102] In the embodiment of this specification, the vector determination module 903 is used to: Converting the random matrix into a target value within a preset range; According to the target value, the matrix image is subjected to bitwise XOR operation processing to obtain a noise color component, and the pre-encrypted image is determined according to the noise color component.

[0103] In the embodiment of this specification, the vector determination module 903 is used to: Performing block processing on the pre-encrypted image to obtain a plurality of block vectors containing a predetermined number of pixel values; The product of the block vector and the key matrix is ​​obtained, and a preset modulus operation is performed on the product to obtain the encryption vector.

[0104] In the embodiment of this specification, the encrypting the image data according to the encryption vector to obtain the second ciphertext includes: Encrypt the picture data according to the encryption vector to obtain an encrypted image; Based on a random sequence, pixel rows and / or pixel columns of the encrypted image are scrambled to obtain the second ciphertext.

[0105] In the embodiment of this specification, the first encryption module 902 is used to: Determining a first ciphertext point according to the quantum session key and a preset base point on the elliptic curve; Determine a second ciphertext point according to the quantum session key, the target point, and a point on the elliptic curve corresponding to the target point; The first ciphertext is determined according to the first ciphertext point and the second ciphertext point.

[0106] In the embodiment of this specification, the first encryption module 902 is used to: Based on a preset hash function, the text data contained in the target message is mapped onto an elliptic curve to obtain the target point.

[0107] In the embodiment of this specification, the second encryption module 904 is used to: Encrypting the second ciphertext according to the quantum session key to obtain a third ciphertext; The encrypted target message is determined according to the first ciphertext and the third ciphertext.

[0108] In the embodiment of this specification, the device further includes: An application sending module, used to send a session key application to the quantum security service platform; A key receiving module, used to receive the quantum session key returned by the quantum security service platform in response to the session key application, and a key identifier of the quantum session key; An identification sending module is used to send the key identification to the terminal device, and the key identification is used to trigger the terminal device to obtain the quantum session key from the quantum security service platform through the key identification.

[0109] The embodiment of the present specification provides a message transmission device, which obtains a target message to be sent, determines a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypts the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext, generates a random matrix based on the image data contained in the target message according to a quantum walk algorithm, and determines an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data, encrypts the image data according to the encryption vector to obtain a second ciphertext, and determines the encrypted target message according to the first ciphertext and the second ciphertext, and sends the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying a quantum walk and a quantum session key, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0110] The above is a message transmission device provided in the embodiment of this specification. Based on the same idea, the embodiment of this specification also provides a message transmission device, such as Fig.10 shown.

[0111] The message transmission device may provide a terminal device or a server, etc. for the above-mentioned embodiment.

[0112] The message transmission device may have relatively large differences due to different configurations or performances, and may include one or more processors 1001 and memory 1002, and the memory 1002 may store one or more storage applications or data. Among them, the memory 1002 may be a short-term storage or a persistent storage. The application stored in the memory 1002 may include one or more modules (not shown in the figure), and each module may include a series of computer executable instructions in the message transmission device. Furthermore, the processor 1001 may be configured to communicate with the memory 1002 and execute a series of computer executable instructions in the memory 1002 on the message transmission device. The message transmission device may also include one or more power supplies 1003, one or more wired or wireless network interfaces 1004, one or more input and output interfaces 1005, and one or more keyboards 1006.

[0113] Specifically in this embodiment, the message transmission device includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer executable instructions in the message transmission device, and the one or more programs are configured to be executed by one or more processors, including the following computer executable instructions: Get the target message to be sent; Determine a target point on the elliptic curve corresponding to the text data contained in the target message, and encrypt the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; Generate a random matrix based on the picture data included in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; Encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining an encrypted target message according to the first ciphertext and the second ciphertext; The encrypted target message is sent to the terminal device.

[0114] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the message transmission device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0115] The embodiment of the present specification provides a message transmission device, which obtains a target message to be sent, determines a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypts the target point according to a quantum session key determined by negotiation with a terminal device to obtain a first ciphertext, generates a random matrix based on the image data contained in the target message according to a quantum walk algorithm, and determines an encryption vector for encrypting the image data based on the random matrix and a matrix image corresponding to the image data, encrypts the image data according to the encryption vector to obtain a second ciphertext, and determines the encrypted target message according to the first ciphertext and the second ciphertext, and sends the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying a quantum walk and a quantum session key, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0116] Furthermore, based on the above Figures 1 to 8 In one embodiment, the present specification further provides a storage medium for storing computer executable instruction information. In a specific embodiment, the storage medium may be a USB flash drive, an optical disk, a hard disk, etc. When the computer executable instruction information stored in the storage medium is executed by the processor, the following process can be implemented: Get the target message to be sent; Determine a target point on the elliptic curve corresponding to the text data contained in the target message, and encrypt the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; Generate a random matrix based on the picture data included in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; Encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining an encrypted target message according to the first ciphertext and the second ciphertext; The encrypted target message is sent to the terminal device.

[0117] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the above-mentioned storage medium embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0118] The embodiment of this specification provides a storage medium, which obtains a target message to be sent, determines a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypts the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext, generates a random matrix based on the image data contained in the target message according to the quantum walk algorithm, and determines an encryption vector for encrypting the image data based on the random matrix and the matrix image corresponding to the image data, encrypts the image data according to the encryption vector, obtains a second ciphertext, and determines the encrypted target message according to the first ciphertext and the second ciphertext, and sends the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying quantum walks and quantum session keys, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0119] Furthermore, based on the above Figures 1 to 8 In one or more embodiments of the present specification, a computer program product is provided, including a computer program. When the computer program in the computer program product is executed by a processor, the following process can be implemented: Get the target message to be sent; Determine a target point on the elliptic curve corresponding to the text data contained in the target message, and encrypt the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; Generate a random matrix based on the picture data included in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; Encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining an encrypted target message according to the first ciphertext and the second ciphertext; The encrypted target message is sent to the terminal device.

[0120] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the above-mentioned computer program product embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0121] The embodiment of this specification provides a computer program product, which obtains a target message to be sent, determines a target point on an elliptic curve corresponding to the text data contained in the target message, and encrypts the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext, generates a random matrix based on the image data contained in the target message according to the quantum walk algorithm, and determines an encryption vector for encrypting the image data based on the random matrix and the matrix image corresponding to the image data, encrypts the image data according to the encryption vector to obtain a second ciphertext, and determines the encrypted target message according to the first ciphertext and the second ciphertext, and sends the encrypted target message to the terminal device. According to different types of data contained in the target message, targeted encryption processing is performed using different encryption methods, which can improve the encryption effect of the target message, that is, the text data is encrypted by using an elliptic curve combined with a quantum session key, which can ensure the encryption effect of the text data in the target message; the image data is encrypted by applying quantum walks and quantum session keys, which can ensure the encryption effect of the image data in the target message. In this way, the security of the encrypted target message during transmission can be improved.

[0122] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0123] In the 1990s, it was very clear whether the improvement of a technology was hardware improvement (for example, improvement of the circuit structure of diodes, transistors, switches, etc.) or software improvement (improvement of the method flow). However, with the development of technology, many improvements of the method flow today can be regarded as direct improvements of the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be implemented with a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming themselves, without having to ask chip manufacturers to design and make dedicated integrated circuit chips. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one kind of HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0124] The controller may be implemented in any suitable manner, for example, the controller may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) executable by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller may also be implemented as part of the control logic of the memory. It is also known to those skilled in the art that, in addition to implementing the controller in a purely computer-readable program code manner, the controller may be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, such a controller may be considered as a hardware component, and the devices for implementing various functions included therein may also be considered as structures within the hardware component. Or even, the devices for implementing various functions may be considered as both software modules for implementing the method and structures within the hardware component.

[0125] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0126] For the convenience of description, the above devices are described in terms of functions and are divided into various units. Of course, when implementing one or more embodiments of this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0127] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems, or computer program products. Therefore, one or more embodiments of this specification may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0128] The embodiments of this specification are described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable fraud case serial and parallel device to produce a machine, so that the instructions executed by the processor of the computer or other programmable fraud case serial and parallel device generate instructions for implementing the processes in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0129] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable fraud case serial and parallel device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0130] These computer program instructions may also be loaded onto a computer or other programmable device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0131] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0132] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0133] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined in this article, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0134] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0135] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems or computer program products. Therefore, one or more embodiments of this specification may be in the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Furthermore, one or more embodiments of this specification may be in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0136] One or more embodiments of the present specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of the present specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0137] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0138] The above description is only an embodiment of this specification and is not intended to limit this document. For those skilled in the art, this specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification should be included in the scope of the claims of this specification.

Claims

1. A message transmission method, characterized in that: The method comprises: Get the target message to be sent; Determine a target point on the elliptic curve corresponding to the text data contained in the target message, and encrypt the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext; Generate a random matrix based on the picture data included in the target message according to a quantum walk algorithm, and determine an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data; Encrypting the image data according to the encryption vector to obtain a second ciphertext, and determining an encrypted target message according to the first ciphertext and the second ciphertext; The encrypted target message is sent to the terminal device.

2. The method according to claim 1, characterized in that The step of generating a random matrix based on the image data contained in the target message according to the quantum walk algorithm includes: Splitting the image data into multiple components according to color channel information contained in the image data; Based on a preset rotation angle, the multiple components are rotated to obtain multiple rotated components; Based on the plurality of rotated components, the random matrix is ​​generated according to the quantum walk algorithm.

3. The method according to claim 2, characterized in that The matrix image includes a matrix image corresponding to each color channel, The step of determining an encryption vector for encrypting the picture data based on the random matrix and a matrix image corresponding to the picture data comprises: Splitting the matrix image corresponding to each color channel to obtain a matrix sub-image; Determine a pre-encrypted image according to the random matrix and the matrix sub-image; The encryption vector is determined according to the pre-encrypted image and a key matrix.

4. The method according to claim 3, characterized in that The step of determining the pre-encrypted image according to the random matrix and the matrix sub-image comprises: Converting the random matrix into a target value within a preset range; According to the target value, the matrix image is subjected to bitwise XOR operation processing to obtain a noise color component, and the pre-encrypted image is determined according to the noise color component.

5. The method according to claim 4, characterized in that The step of determining the encryption vector according to the pre-encrypted image and the key matrix comprises: Performing block processing on the pre-encrypted image to obtain a plurality of block vectors containing a predetermined number of pixel values; The product of the block vector and the key matrix is ​​obtained, and a preset modulus operation is performed on the product to obtain the encryption vector.

6. The method according to claim 5, characterized in that The step of encrypting the image data according to the encryption vector to obtain a second ciphertext includes: Encrypt the picture data according to the encryption vector to obtain an encrypted image; Based on a random sequence, pixel rows and / or pixel columns of the encrypted image are scrambled to obtain the second ciphertext.

7. The method according to claim 1, characterized in that The step of encrypting the target point according to the quantum session key determined by negotiation with the terminal device to obtain a first ciphertext includes: Determining a first ciphertext point according to the quantum session key and a preset base point on the elliptic curve; Determine a second ciphertext point according to the quantum session key, the target point, and a point on the elliptic curve corresponding to the target point; The first ciphertext is determined according to the first ciphertext point and the second ciphertext point.

8. The method according to claim 1, characterized in that The step of determining the encrypted target message according to the first ciphertext and the second ciphertext includes: encrypting the second ciphertext according to the quantum session key to obtain a third ciphertext; The encrypted target message is determined according to the first ciphertext and the third ciphertext.

9. The method according to claim 1, characterized in that: Before encrypting the target point according to the quantum session key determined by negotiation with the terminal device to obtain the first ciphertext, the method further includes: Send a session key request to the quantum security service platform; Receiving the quantum session key and the key identifier of the quantum session key returned by the quantum security service platform in response to the session key application; The key identifier is sent to the terminal device, where the key identifier is used to trigger the terminal device to obtain the quantum session key from the quantum security service platform through the key identifier.

10. A computer program product, characterized in that The invention comprises a computer program, which, when executed by a processor, implements the steps of the message transmission method according to any one of claims 1 to 9.

Images